# Kibana **URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=1093 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1094 --- ## ["null\_pointer\_exception" encountered in latest ES/Marvel](https://discuss.elastic.co/t/null-pointer-exception-encountered-in-latest-es-marvel/35491)
**Author:** [@tguan](https://discuss.elastic.co/u/tguan)\ **Replies:** 7\ **Last updated:** [December 4, 2015, 7:53pm UTC](https://discuss.elastic.co/t/null-pointer-exception-encountered-in-latest-es-marvel/35491 "2015-12-04T19:53:19Z")
I have just installed latest Elasticsearch 2.0.0, Kibana-4.2.1, and then downloaded the latest Marvel plugin. Even put following line in elasticsearch.yml ( is this needed?) echo 'marvel.agent.enabled: false' \>\> ./config… --- ## [Find first occurrence and last occurrence of an id](https://discuss.elastic.co/t/find-first-occurrence-and-last-occurrence-of-an-id/36307)
**Author:** [@DK\_3](https://discuss.elastic.co/u/DK_3)\ **Replies:** 3\ **Last updated:** [December 4, 2015, 6:29pm UTC](https://discuss.elastic.co/t/find-first-occurrence-and-last-occurrence-of-an-id/36307 "2015-12-04T18:29:06Z")
Hi, Is there a way to find the first occurrence of a field and the last occurrence of a field? My requirement is this: Get the timestamp of the first occurance of id field '123' Get the timestamp of the last occur… --- ## [Kibana: Unable to check for Kibana index ""](https://discuss.elastic.co/t/kibana-unable-to-check-for-kibana-index/35382)
**Author:** [@Prateek\_Kshtriya](https://discuss.elastic.co/u/Prateek_Kshtriya)\ **Replies:** 3\ **Last updated:** [December 4, 2015, 10:23am UTC](https://discuss.elastic.co/t/kibana-unable-to-check-for-kibana-index/35382 "2015-12-04T10:23:30Z")
Hi, I am getting below error when trying to access kibana with elasticsearch service started. Kibana URL:-http://127.0.0.1:5601/#/discover?\_g=() Error: Unable to check for Kibana index "" TypeError: Unable to build a… --- ## [Mean support in kibana4.x](https://discuss.elastic.co/t/mean-support-in-kibana4-x/35860)
**Author:** [@Phani\_Nadiminti](https://discuss.elastic.co/u/Phani_Nadiminti)\ **Replies:** 4\ **Last updated:** [December 4, 2015, 7:13am UTC](https://discuss.elastic.co/t/mean-support-in-kibana4-x/35860 "2015-12-04T07:13:06Z")
Hi All I worked on kibana 3 it has means support there but coming to kibana 4 we have lack of functions that kibana 3 supporting that is mean,variance etc.. can these possible in kibana 4 is there any other way to ac… --- ## [Kibana4: geopoint visualization does not work](https://discuss.elastic.co/t/kibana4-geopoint-visualization-does-not-work/29500)
**Author:** [@florianlenz](https://discuss.elastic.co/u/florianlenz)\ **Replies:** 10\ **Last updated:** [December 4, 2015, 3:09am UTC](https://discuss.elastic.co/t/kibana4-geopoint-visualization-does-not-work/29500 "2015-12-04T03:09:42Z")
Hello, I am a Kibana newbie and i try to visualize my webserver-logs with geoip Information. I have a filter, which is creating the geoip Information, so I have a field geoip.location of type geo\_point. But in the disc… --- ## [Kibana is late showing results from some hosts](https://discuss.elastic.co/t/kibana-is-late-showing-results-from-some-hosts/36106)
**Author:** [@MikeC](https://discuss.elastic.co/u/MikeC)\ **Replies:** 6\ **Last updated:** [December 3, 2015, 8:18pm UTC](https://discuss.elastic.co/t/kibana-is-late-showing-results-from-some-hosts/36106 "2015-12-03T20:18:02Z")
Hi, i have an elastic cloud with 4 hosts and one dummy node (that is not a data nor a master node, as advised here. my logstash config sends data in a round robin way, elasticsearch { hosts =\> \['m003', 'm004', 'm0… --- ## [ELK behind ELB](https://discuss.elastic.co/t/elk-behind-elb/35143)
**Author:** [@jkumar\_99](https://discuss.elastic.co/u/jkumar_99)\ **Replies:** 3\ **Last updated:** [December 3, 2015, 6:15pm UTC](https://discuss.elastic.co/t/elk-behind-elb/35143 "2015-12-03T18:15:47Z")
HI, I just upgraded my ELK stack to use ES 2.0 and KIbana 4.2.1. Now I am getting blank page while accessing Kibana . When Kibana is working on one node, I can see everything, but when I start Kibana on more than one… --- ## [Kibana vs Elastic Search](https://discuss.elastic.co/t/kibana-vs-elastic-search/36298)
**Author:** [@chsotr](https://discuss.elastic.co/u/chsotr)\ **Replies:** 10\ **Last updated:** [December 3, 2015, 4:57pm UTC](https://discuss.elastic.co/t/kibana-vs-elastic-search/36298 "2015-12-03T16:57:03Z")
We do know that whenever we want to search anything related to Kibana it takes us to Elastic Search page, but since I don't perform searches using Elastic Search that is not helpful at all. What I am actually looking… --- ## [Relation between two fields](https://discuss.elastic.co/t/relation-between-two-fields/36132)
**Author:** [@henil\_shah](https://discuss.elastic.co/u/henil_shah)\ **Replies:** 3\ **Last updated:** [December 3, 2015, 6:46am UTC](https://discuss.elastic.co/t/relation-between-two-fields/36132 "2015-12-03T06:46:34Z")
I have a health data where the fields are Population and Infected. Now for example the population of California is 38,802,500 and total infected are 50,000. Now I want to show how many are infected per 100,000 populatio… --- ## [Is there any kibana version that works with all elasticsearch 2.x version ? i mean with es 2.0 and 2.1 both?](https://discuss.elastic.co/t/is-there-any-kibana-version-that-works-with-all-elasticsearch-2-x-version-i-mean-with-es-2-0-and-2-1-both/36170)
**Author:** [@tejus](https://discuss.elastic.co/u/tejus)\ **Replies:** 1\ **Last updated:** [December 3, 2015, 5:21am UTC](https://discuss.elastic.co/t/is-there-any-kibana-version-that-works-with-all-elasticsearch-2-x-version-i-mean-with-es-2-0-and-2-1-both/36170 "2015-12-03T05:21:13Z")
is there any kibana version that works with all elasticsearch 2.x version ?? i mean with es 2.0 and 2.1 both ?? does kibana 4.2 work with es 2.0 and 2.1 ?? --- ## [Kibana settings page causes CPU to spike on elasticsearch daemon](https://discuss.elastic.co/t/kibana-settings-page-causes-cpu-to-spike-on-elasticsearch-daemon/36235)
**Author:** [@aethos](https://discuss.elastic.co/u/aethos)\ **Replies:** 1\ **Last updated:** [December 3, 2015, 4:40am UTC](https://discuss.elastic.co/t/kibana-settings-page-causes-cpu-to-spike-on-elasticsearch-daemon/36235 "2015-12-03T04:40:16Z")
Hey all. Seems I'm running into an issue no one has seen before or my search skills are failing. Every time I click on the Settings tab in Kibana the elasticsearch daemon shoots up to 100% CPU and stays there. All quer… --- ## [.marvel-es-YYYY.MM.DD index deleted HOW-TO create it again](https://discuss.elastic.co/t/marvel-es-yyyy-mm-dd-index-deleted-how-to-create-it-again/33959)
**Author:** [@nskalis](https://discuss.elastic.co/u/nskalis)\ **Replies:** 29\ **Last updated:** [December 2, 2015, 10:44pm UTC](https://discuss.elastic.co/t/marvel-es-yyyy-mm-dd-index-deleted-how-to-create-it-again/33959 "2015-12-02T22:44:27Z")
Dear All, i recently installed Elasticsearch 2.0 and Marvel 2.0 i was experimenting with Curator and I accidentally delete the .marvel-es-YYY.MM.DD index health status index pri rep docs.count docs.deleted s… --- ## [Problem with raw field](https://discuss.elastic.co/t/problem-with-raw-field/28841)
**Author:** [@peterbergman](https://discuss.elastic.co/u/peterbergman)\ **Replies:** 12\ **Last updated:** [December 2, 2015, 3:05pm UTC](https://discuss.elastic.co/t/problem-with-raw-field/28841 "2015-12-02T15:05:02Z")
Hi, I have a problem using a raw field for term aggregation in a data table visualization. Whenever I try to view the data for a specific raw field used in a search through the visualization, I get no results. However,… --- ## [Dasboards with no config options](https://discuss.elastic.co/t/dasboards-with-no-config-options/35983)
**Author:** [@juerkan](https://discuss.elastic.co/u/juerkan)\ **Replies:** 3\ **Last updated:** [December 2, 2015, 2:25pm UTC](https://discuss.elastic.co/t/dasboards-with-no-config-options/35983 "2015-12-02T14:25:20Z")
Hi Our customer Service Agents want to use kibana dasboards. We don't want that a Agent can Chance Anything in the dashboard (except the 'time') Is this possible? Thx Juergen --- ## [SearchParseException\[Unknown key for a VALUE\_STRING](https://discuss.elastic.co/t/searchparseexception-unknown-key-for-a-value-string/36161)
**Author:** [@moncky](https://discuss.elastic.co/u/moncky)\ **Replies:** 2\ **Last updated:** [December 2, 2015, 1:57pm UTC](https://discuss.elastic.co/t/searchparseexception-unknown-key-for-a-value-string/36161 "2015-12-02T13:57:42Z")
Hi all, I am running Kibana 4.1.3 and ES 2.1.0 and feeding logs into ES with logstash. Everything was working fine till I upgraded yesterday. I removed the .kibana index and when configued the index pattern in the … --- ## [Using embedded Kibana dashboard iframe in html to replicate search functionality in my application as in kibana](https://discuss.elastic.co/t/using-embedded-kibana-dashboard-iframe-in-html-to-replicate-search-functionality-in-my-application-as-in-kibana/36178)
**Author:** [@ushadatt](https://discuss.elastic.co/u/ushadatt)\ **Replies:** 0\ **Last updated:** [December 2, 2015, 1:44pm UTC](https://discuss.elastic.co/t/using-embedded-kibana-dashboard-iframe-in-html-to-replicate-search-functionality-in-my-application-as-in-kibana/36178 "2015-12-02T13:44:43Z")
I have a search box and date picker. If I enter some value in search box and select time from date picker, the dashboard gets refreshed for time selected but not for the query Though the url shows search value in query… --- ## [How can I save a result of search?](https://discuss.elastic.co/t/how-can-i-save-a-result-of-search/36137)
**Author:** [@Young\_Heon\_Kim](https://discuss.elastic.co/u/Young_Heon_Kim)\ **Replies:** 1\ **Last updated:** [December 2, 2015, 10:57am UTC](https://discuss.elastic.co/t/how-can-i-save-a-result-of-search/36137 "2015-12-02T10:57:22Z")
Hi . I would like to save some results of search. It is not information of timestamp and count. I want a area of red box. How can I get this result? --- ## [Deleted .marvel-es-data](https://discuss.elastic.co/t/deleted-marvel-es-data/35445)
**Author:** [@tgdesrochers](https://discuss.elastic.co/u/tgdesrochers)\ **Replies:** 15\ **Last updated:** [December 2, 2015, 8:39am UTC](https://discuss.elastic.co/t/deleted-marvel-es-data/35445 "2015-12-02T08:39:21Z")
Elasticsearch 2.0 Marvel 2.0 Kibana 4.2.1 I set up collecting data from a cluster into a "monitoring" cluster. My exporter config on my ES nodes are: marvel.agent.exporters: id1: type: http host: \[ "10.1… --- ## [Average documents per customer field](https://discuss.elastic.co/t/average-documents-per-customer-field/35851)
**Author:** [@treehouse](https://discuss.elastic.co/u/treehouse)\ **Replies:** 3\ **Last updated:** [December 2, 2015, 7:33am UTC](https://discuss.elastic.co/t/average-documents-per-customer-field/35851 "2015-12-02T07:33:22Z")
I would like to find the average number of times a user has triggered a login event. Our data is organized with an event per login and each event has a user\_id field. All I want to do is take the "count" and divide it by… --- ## [Can we calculate in Kibana?](https://discuss.elastic.co/t/can-we-calculate-in-kibana/36007)
**Author:** [@Amit2015](https://discuss.elastic.co/u/Amit2015)\ **Replies:** 3\ **Last updated:** [December 2, 2015, 7:21am UTC](https://discuss.elastic.co/t/can-we-calculate-in-kibana/36007 "2015-12-02T07:21:11Z")
Hi Guys, I want to calculate field to get average time. Requirement is like I have request time and submitted time, two different field. I want to know how much it will take time, how can I calculate that average??? --- ## [Marvel menus don't work](https://discuss.elastic.co/t/marvel-menus-dont-work/36109)
**Author:** [@Florin\_Andrei](https://discuss.elastic.co/u/Florin_Andrei)\ **Replies:** 0\ **Last updated:** [December 2, 2015, 12:23am UTC](https://discuss.elastic.co/t/marvel-menus-dont-work/36109 "2015-12-02T00:23:38Z")
ES-2.0.0, Marvel-2.0.0, Kibana-4.2.1, Ubuntu-14.04 I've installed license, marvel-agent, and marvel per the docs. Went into Kibana, and switched to Marvel. In the Your Clusters table it shows one line with the main clu… --- ## [New Graph Feature?](https://discuss.elastic.co/t/new-graph-feature/35962)
**Author:** [@ryanbales](https://discuss.elastic.co/u/ryanbales)\ **Replies:** 4\ **Last updated:** [December 1, 2015, 10:18pm UTC](https://discuss.elastic.co/t/new-graph-feature/35962 "2015-12-01T22:18:05Z")
Trying to locate details or a possible demo of thew new Graph features in Kibana. Essentially, I'm looking for a way to leverage Kibana as API and use it from calls on my pages. Thanks for your help. Ryan --- ## [Staring kibana service not working](https://discuss.elastic.co/t/staring-kibana-service-not-working/36086)
**Author:** [@Jayshri\_Nikam](https://discuss.elastic.co/u/Jayshri_Nikam)\ **Replies:** 1\ **Last updated:** [December 1, 2015, 9:31pm UTC](https://discuss.elastic.co/t/staring-kibana-service-not-working/36086 "2015-12-01T21:31:26Z")
i get error \[:frowning:\] for enabling kibana service on centos7 - \[root@logstashserver bin\]# systemctl enable kibana The unit files have no \[Install\] section. They are not meant to be enabled using systemctl. Possible re… --- ## [HOW-TO: negate an aggregation](https://discuss.elastic.co/t/how-to-negate-an-aggregation/36054)
**Author:** [@nskalis](https://discuss.elastic.co/u/nskalis)\ **Replies:** 0\ **Last updated:** [December 1, 2015, 1:49pm UTC](https://discuss.elastic.co/t/how-to-negate-an-aggregation/36054 "2015-12-01T13:49:18Z")
hi guys, could you please advise on how to negate an aggregation ? for example, how can i find the documents that the next\_hop does not belong to the IP v4 range aggregation ? Nikos --- ## [Kibana 4.2 is getting crashed every fortnight while running as nohup](https://discuss.elastic.co/t/kibana-4-2-is-getting-crashed-every-fortnight-while-running-as-nohup/34027)
**Author:** [@Prashant\_Agrawal](https://discuss.elastic.co/u/Prashant_Agrawal)\ **Replies:** 3\ **Last updated:** [December 1, 2015, 12:05pm UTC](https://discuss.elastic.co/t/kibana-4-2-is-getting-crashed-every-fortnight-while-running-as-nohup/34027 "2015-12-01T12:05:56Z")
Hi Team, I am running kibana 4.2 like below: Downloaded : https://download.elastic.co/kibana/kibana/kibana-4.2.0-linux-x64.tar.gz Extracted to kibana4.2 dir Run kibana in background as : nohup ./bin/kibana \> kibana… --- ## [How to set a not\_analyzed field with Kibana or Log4net -](https://discuss.elastic.co/t/how-to-set-a-not-analyzed-field-with-kibana-or-log4net/36015)
**Author:** [@ayasha88](https://discuss.elastic.co/u/ayasha88)\ **Replies:** 0\ **Last updated:** [December 1, 2015, 9:48am UTC](https://discuss.elastic.co/t/how-to-set-a-not-analyzed-field-with-kibana-or-log4net/36015 "2015-12-01T09:48:10Z")
I have the following setup: I log my logs with log4net and ElasticSearch and then I look for the logs and make all my searches with Kibana. In the webconfig I have: \ \ **Author:** [@Mohammed\_Abdul\_Khali](https://discuss.elastic.co/u/Mohammed_Abdul_Khali)\ **Replies:** 4\ **Last updated:** [December 1, 2015, 9:19am UTC](https://discuss.elastic.co/t/duplicate-an-existing-graph-chart-for-another-index/35989 "2015-12-01T09:19:01Z") Hi, I have created a dashboard in kibana which has around 10-15 graphs which uses an index1 say for enviornment1. I have another similar index2 for env2 and i want to create dashboard2 but this time pointing to the … --- ## [Change the default time filter](https://discuss.elastic.co/t/change-the-default-time-filter/36001)
**Author:** [@Mohammed\_Abdul\_Khali](https://discuss.elastic.co/u/Mohammed_Abdul_Khali)\ **Replies:** 3\ **Last updated:** [December 1, 2015, 8:34am UTC](https://discuss.elastic.co/t/change-the-default-time-filter/36001 "2015-12-01T08:34:37Z")
Hi, The default time filter in Kibana is "Last 15 minutes" How can i set the default value to an absolute time? Is this possible? Also can i set a default dashboard for Kibana? Regards, Abdul --- ## [Marvel dashboard won't show shards infos](https://discuss.elastic.co/t/marvel-dashboard-wont-show-shards-infos/35525)
**Author:** [@Vesnica](https://discuss.elastic.co/u/Vesnica)\ **Replies:** 7\ **Last updated:** [December 1, 2015, 8:21am UTC](https://discuss.elastic.co/t/marvel-dashboard-wont-show-shards-infos/35525 "2015-12-01T08:21:25Z")
Elasticsearch 2.1.0 + Kibana 4.3.0 + latest marvel plugins Sense give me this: GET \_cat/shards?v index shard prirep state docs store ip node .marvel-es-2015.11.25 0 r … --- ## [Complicated filter/aggregation based on an ID excluding CREARED from REVIEVED alerts](https://discuss.elastic.co/t/complicated-filter-aggregation-based-on-an-id-excluding-creared-from-revieved-alerts/35882)
**Author:** [@NilsBecker](https://discuss.elastic.co/u/NilsBecker)\ **Replies:** 3\ **Last updated:** [December 1, 2015, 7:44am UTC](https://discuss.elastic.co/t/complicated-filter-aggregation-based-on-an-id-excluding-creared-from-revieved-alerts/35882 "2015-12-01T07:44:39Z")
Hey, I have following issue: I recieve "alert-logs" from an monitoring-tool (Tibco Hawk) There are the fields: - event \[ALERT\_RECIEVED, ALERT\_CLEARED\] - alert\_id \[unique ID for every alert\] - more things like IP, Times… [Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=1092) [Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=1094)