# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=1103

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1104

---

## [Match Partial word in search in Kibana 4 UI](https://discuss.elastic.co/t/match-partial-word-in-search-in-kibana-4-ui/31480)

<div class="topic-metadata">

**Author:** [@SureshSala](https://discuss.elastic.co/u/SureshSala)\
**Replies:** 1\
**Last updated:** [October 6, 2015, 7:38pm UTC](https://discuss.elastic.co/t/match-partial-word-in-search-in-kibana-4-ui/31480 "2015-10-06T19:38:55Z")

</div>

Message: LIST:onefour:VjAxIzQ1ZWFlZDVi is the the message and i have this also VjAxIzQ1ZWFlZDVi When i search with "VjAxIzQ1ZWFlZDVi" second part is highlighting, I want first part to be also highlighted how to do thi…

---

## [Kibana upgrade from 4.0.3 to 4.1.1 very slow](https://discuss.elastic.co/t/kibana-upgrade-from-4-0-3-to-4-1-1-very-slow/29575)

<div class="topic-metadata">

**Author:** [@CraigFoote](https://discuss.elastic.co/u/CraigFoote)\
**Replies:** 5\
**Last updated:** [October 6, 2015, 3:19pm UTC](https://discuss.elastic.co/t/kibana-upgrade-from-4-0-3-to-4-1-1-very-slow/29575 "2015-10-06T15:19:14Z")

</div>

We were running Kibana 4.0.3 with good performance but after upgrading to Kibana 4.1.1 the browser seems to hang, sometimes reporting slow script warning. It eventually completes whatever action I started but it can take…

---

## [Search syntax](https://discuss.elastic.co/t/search-syntax/31653)

<div class="topic-metadata">

**Author:** [@scaarup](https://discuss.elastic.co/u/scaarup)\
**Replies:** 6\
**Last updated:** [October 6, 2015, 2:03pm UTC](https://discuss.elastic.co/t/search-syntax/31653 "2015-10-06T14:03:06Z")

</div>

In Discover I am searching like this: event:"auth". I thought that would ONLY match the string auth in the event field, since I have quoted the string. But it also results in hits where auth is included in other fields. …

---

## [Clearing counters - using ELK stack](https://discuss.elastic.co/t/clearing-counters-using-elk-stack/31643)

<div class="topic-metadata">

**Author:** [@Russell\_Heaney](https://discuss.elastic.co/u/Russell_Heaney)\
**Replies:** 2\
**Last updated:** [October 6, 2015, 1:17pm UTC](https://discuss.elastic.co/t/clearing-counters-using-elk-stack/31643 "2015-10-06T13:17:11Z")

</div>

Hi, I am pretty new to ELK. I had seen some of it at my previous company but it was someone else who was carrying out the development of it. I thought it looked pretty cool and I think it could be useful at my new comp…

---

## [Aggregate Values from Different Fields](https://discuss.elastic.co/t/aggregate-values-from-different-fields/31527)

<div class="topic-metadata">

**Author:** [@coderlol](https://discuss.elastic.co/u/coderlol)\
**Replies:** 1\
**Last updated:** [October 6, 2015, 5:08am UTC](https://discuss.elastic.co/t/aggregate-values-from-different-fields/31527 "2015-10-06T05:08:17Z")

</div>

Suppose I have the following fields in different do, cuments / log events: mydomain.mylevel1.counter: 1 mydomain.mylevel2.counter: 2 mydomain.mylevel3.counter: 4 How could I treat all 3 fields as the same field? and…

---

## [Current date on Script Field](https://discuss.elastic.co/t/current-date-on-script-field/31510)

<div class="topic-metadata">

**Author:** [@nmgnr](https://discuss.elastic.co/u/nmgnr)\
**Replies:** 1\
**Last updated:** [October 6, 2015, 5:04am UTC](https://discuss.elastic.co/t/current-date-on-script-field/31510 "2015-10-06T05:04:56Z")

</div>

I'm trying to generate a script field in Kibana 4 and I need to compute the difference between a date field and the current date: (current\_date - doc\['startDate'\].value) I would also like to know if there is a way I …

---

## [Kibana ssl certificate browser-server](https://discuss.elastic.co/t/kibana-ssl-certificate-browser-server/31471)

<div class="topic-metadata">

**Author:** [@fprincipe](https://discuss.elastic.co/u/fprincipe)\
**Replies:** 1\
**Last updated:** [October 6, 2015, 4:49am UTC](https://discuss.elastic.co/t/kibana-ssl-certificate-browser-server/31471 "2015-10-06T04:49:52Z")

</div>

Hi, we've installed kibana in production environment but my CA authority require that PEM certificate must have a passphrase. Can you help us? Regards

---

## [Kibana in JBoss](https://discuss.elastic.co/t/kibana-in-jboss/31467)

<div class="topic-metadata">

**Author:** [@rishen](https://discuss.elastic.co/u/rishen)\
**Replies:** 1\
**Last updated:** [October 6, 2015, 4:36am UTC](https://discuss.elastic.co/t/kibana-in-jboss/31467 "2015-10-06T04:36:09Z")

</div>

Is it technically possible to host Kibana in JBoss 7? If yes, can someone please help me with the installation steps?

---

## [Create a cumulative graph in Kibana by using the sum of the document count](https://discuss.elastic.co/t/create-a-cumulative-graph-in-kibana-by-using-the-sum-of-the-document-count/31418)

<div class="topic-metadata">

**Author:** [@hougvw](https://discuss.elastic.co/u/hougvw)\
**Replies:** 2\
**Last updated:** [October 6, 2015, 3:49am UTC](https://discuss.elastic.co/t/create-a-cumulative-graph-in-kibana-by-using-the-sum-of-the-document-count/31418 "2015-10-06T03:49:01Z")

</div>

Hi, Is it possible to create a cumulative line graph using the document count that is returned for a search. This is already aggregated by date so I was wondering if you can just sum up the count somehow and then creat…

---

## [Graph that fills in time in between events](https://discuss.elastic.co/t/graph-that-fills-in-time-in-between-events/28210)

<div class="topic-metadata">

**Author:** [@Tim\_Acorda](https://discuss.elastic.co/u/Tim_Acorda)\
**Replies:** 3\
**Last updated:** [October 6, 2015, 3:38am UTC](https://discuss.elastic.co/t/graph-that-fills-in-time-in-between-events/28210 "2015-10-06T03:38:07Z")

</div>

I have two separate events and would love a graph that gives me a bar as wide as the difference between the two events. Is this something achievable in kibana? The two events are "out of sync", and "re-sync", and this …

---

## [Can kibana point to 2 elasticsearch instances?](https://discuss.elastic.co/t/can-kibana-point-to-2-elasticsearch-instances/31660)

<div class="topic-metadata">

**Author:** [@michaellizhou](https://discuss.elastic.co/u/michaellizhou)\
**Replies:** 3\
**Last updated:** [October 5, 2015, 9:43pm UTC](https://discuss.elastic.co/t/can-kibana-point-to-2-elasticsearch-instances/31660 "2015-10-05T21:43:44Z")

</div>

Basically the title... can kibana point to 2 elasticsearch instances? What I have done is have 2 elasticsearch instances running but without a 3rd for load balancing if one does down kibana would not be able to query. So…

---

## [Enable Type Ahead functionality in Kibana Dashboard, search pannel](https://discuss.elastic.co/t/enable-type-ahead-functionality-in-kibana-dashboard-search-pannel/31585)

<div class="topic-metadata">

**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\
**Replies:** 1\
**Last updated:** [October 5, 2015, 1:44pm UTC](https://discuss.elastic.co/t/enable-type-ahead-functionality-in-kibana-dashboard-search-pannel/31585 "2015-10-05T13:44:44Z")

</div>

Hi All Is there a way i can Enable Type Ahead functionality in Kibana Dashboard, search pannel. This thing i want to do for all the string columns, so that user upfront knows what all data is available in the dashboa…

---

## [Tag List in Kibana](https://discuss.elastic.co/t/tag-list-in-kibana/31486)

<div class="topic-metadata">

**Author:** [@billy6](https://discuss.elastic.co/u/billy6)\
**Replies:** 2\
**Last updated:** [October 5, 2015, 1:12pm UTC](https://discuss.elastic.co/t/tag-list-in-kibana/31486 "2015-10-05T13:12:56Z")

</div>

Hello! I would like to know if there is a way to have a list of Tags in the Dashboard, similar to the Tag list that appears in the left side of the screen in the Discover Menu.

---

## [Dashboard auto refresh memory usage](https://discuss.elastic.co/t/dashboard-auto-refresh-memory-usage/31426)

<div class="topic-metadata">

**Author:** [@procke](https://discuss.elastic.co/u/procke)\
**Replies:** 8\
**Last updated:** [October 5, 2015, 1:01pm UTC](https://discuss.elastic.co/t/dashboard-auto-refresh-memory-usage/31426 "2015-10-05T13:01:40Z")

</div>

When I turn on auto-refresh on any of my dashboards the memory usage just keeps growing. This happens in IE and Chrome and eventually things go bad. Is this a known problem, or is it something I am causing with the typ…

---

## [In Kibana 4.1.1 Unable to search the string with case sensitive](https://discuss.elastic.co/t/in-kibana-4-1-1-unable-to-search-the-string-with-case-sensitive/31395)

<div class="topic-metadata">

**Author:** [@SureshSala](https://discuss.elastic.co/u/SureshSala)\
**Replies:** 2\
**Last updated:** [October 5, 2015, 7:40am UTC](https://discuss.elastic.co/t/in-kibana-4-1-1-unable-to-search-the-string-with-case-sensitive/31395 "2015-10-05T07:40:53Z")

</div>

In the search tag, if I search for exception, results of both Exception and exception are displayed.

---

## [Kibana 4 - no default index pattern](https://discuss.elastic.co/t/kibana-4-no-default-index-pattern/31614)

<div class="topic-metadata">

**Author:** [@Nuard\_Harutyunyan](https://discuss.elastic.co/u/Nuard_Harutyunyan)\
**Replies:** 1\
**Last updated:** [October 5, 2015, 7:23am UTC](https://discuss.elastic.co/t/kibana-4-no-default-index-pattern/31614 "2015-10-05T07:23:47Z")

</div>

https://gyazo.com/d7db5c6dfe6b2a76ce03de36f309e3f4 I get this error , Any advice?

---

## [A little bit help with additional functionality](https://discuss.elastic.co/t/a-little-bit-help-with-additional-functionality/31530)

<div class="topic-metadata">

**Author:** [@pvn](https://discuss.elastic.co/u/pvn)\
**Replies:** 2\
**Last updated:** [October 3, 2015, 11:54pm UTC](https://discuss.elastic.co/t/a-little-bit-help-with-additional-functionality/31530 "2015-10-03T23:54:32Z")

</div>

Hello! First of all thanks for a great tool. Because accuracy of milliseconds is not enought, I'm adding one more collumn for a nanoseconds. And now want to set up time interval from discover table. I.e if we found e…

---

## [Create Tab Page within a Dashboard Page of Kibana](https://discuss.elastic.co/t/create-tab-page-within-a-dashboard-page-of-kibana/31575)

<div class="topic-metadata">

**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\
**Replies:** 2\
**Last updated:** [October 3, 2015, 11:35pm UTC](https://discuss.elastic.co/t/create-tab-page-within-a-dashboard-page-of-kibana/31575 "2015-10-03T23:35:02Z")

</div>

I have multiple analysis area within a Dashboard I want to split that analysis with tabs within a Dashboard page, so that user have full visibility what all stuff available in dashboard. Please let me know, is there an…

---

## [Superimposing line charts into one visualization](https://discuss.elastic.co/t/superimposing-line-charts-into-one-visualization/30040)

<div class="topic-metadata">

**Author:** [@Shailen](https://discuss.elastic.co/u/Shailen)\
**Replies:** 6\
**Last updated:** [October 3, 2015, 8:33am UTC](https://discuss.elastic.co/t/superimposing-line-charts-into-one-visualization/30040 "2015-10-03T08:33:43Z")

</div>

I have several real-time counters and have successfully created a visualization object for each of them. Is there a way to superimpose them into on object? I am fairly new to ELK. I don't see any documentation or example…

---

## [How to figure out memory usage by Kibana?](https://discuss.elastic.co/t/how-to-figure-out-memory-usage-by-kibana/31505)

<div class="topic-metadata">

**Author:** [@parthu](https://discuss.elastic.co/u/parthu)\
**Replies:** 4\
**Last updated:** [October 2, 2015, 6:05pm UTC](https://discuss.elastic.co/t/how-to-figure-out-memory-usage-by-kibana/31505 "2015-10-02T18:05:43Z")

</div>

My assignment right now is to keep track of CPU and Heap usage by Kibana. How do I accomplish this? Can I force Kibana to run on JMX ports and later monitor those ports? Or can I build a dashboard on Kibana that shows me…

---

## [\[ANN\] Kibana 4.2.0-beta2 is released](https://discuss.elastic.co/t/ann-kibana-4-2-0-beta2-is-released/30010)

<div class="topic-metadata">

**Author:** [@tbragin](https://discuss.elastic.co/u/tbragin)\
**Replies:** 5\
**Last updated:** [September 26, 2015, 5:23am UTC](https://discuss.elastic.co/t/ann-kibana-4-2-0-beta2-is-released/30010 "2015-09-26T05:23:44Z")

</div>

We are excited to announce the release of Kibana 4.2.0-beta2! This release brings additional enhancements and bug fixes on top of Kibana 4.2.0-beta1, including the dark theme, which was the highest-requested feature on G…

---

## [What is the query string format used to express filters, etc?](https://discuss.elastic.co/t/what-is-the-query-string-format-used-to-express-filters-etc/30101)

<div class="topic-metadata">

**Author:** [@djmcgreal](https://discuss.elastic.co/u/djmcgreal)\
**Replies:** 5\
**Last updated:** [October 1, 2015, 11:03am UTC](https://discuss.elastic.co/t/what-is-the-query-string-format-used-to-express-filters-etc/30101 "2015-10-01T11:03:29Z")

</div>

Hi Kibana experts, I need to parse the query string used to specify date ranges and filters within Kibana's state URLs. Is there a standard format this string follows? Best, Dan.

---

## [Launch Kibana in a Java VM as a Servlet](https://discuss.elastic.co/t/launch-kibana-in-a-java-vm-as-a-servlet/28253)

<div class="topic-metadata">

**Author:** [@Victor\_Ferrer](https://discuss.elastic.co/u/Victor_Ferrer)\
**Replies:** 4\
**Last updated:** [October 1, 2015, 10:35am UTC](https://discuss.elastic.co/t/launch-kibana-in-a-java-vm-as-a-servlet/28253 "2015-10-01T10:35:38Z")

</div>

Hi, I´d like to know whether is possible to launch Kibana inside a Java VM as a servlet (along with its servlet mapping) For instance, I have a Spring Boot application where I can register the H2 Console Servlet: @…

---

## [Maximum of values as data point in Kibana 4](https://discuss.elastic.co/t/maximum-of-values-as-data-point-in-kibana-4/31323)

<div class="topic-metadata">

**Author:** [@QuantumDamage](https://discuss.elastic.co/u/QuantumDamage)\
**Replies:** 1\
**Last updated:** [October 1, 2015, 7:56am UTC](https://discuss.elastic.co/t/maximum-of-values-as-data-point-in-kibana-4/31323 "2015-10-01T07:56:12Z")

</div>

Hi, I posted this problem on SO some time ago. Now I'm not even sure if it is solvable with Kibana. Here it is: I have area chart which is representing build time for various jobs from our Jenkins. There are some jobs…

---

## [Courier Fetch error in Discover, Visualisations work](https://discuss.elastic.co/t/courier-fetch-error-in-discover-visualisations-work/31402)

<div class="topic-metadata">

**Author:** [@jeroentbt](https://discuss.elastic.co/u/jeroentbt)\
**Replies:** 1\
**Last updated:** [September 30, 2015, 2:57pm UTC](https://discuss.elastic.co/t/courier-fetch-error-in-discover-visualisations-work/31402 "2015-09-30T14:57:40Z")

</div>

Hey, Backstory: We're using ELK to sift through logs. I copied (filesystem) the elastisearch data directory from a backup on a new server where I launched a container form the same image that created the data, which ru…

---

## [How can i display older results first](https://discuss.elastic.co/t/how-can-i-display-older-results-first/31396)

<div class="topic-metadata">

**Author:** [@SureshSala](https://discuss.elastic.co/u/SureshSala)\
**Replies:** 1\
**Last updated:** [September 30, 2015, 2:54pm UTC](https://discuss.elastic.co/t/how-can-i-display-older-results-first/31396 "2015-09-30T14:54:40Z")

</div>

When i search for a test, I want to display the older results(time based on timestamp) first and the recent results later.

---

## [Which web interface is used by Kibana, Logstash and Elasticsearch](https://discuss.elastic.co/t/which-web-interface-is-used-by-kibana-logstash-and-elasticsearch/30044)

<div class="topic-metadata">

**Author:** [@NiteshBarnwal](https://discuss.elastic.co/u/NiteshBarnwal)\
**Replies:** 12\
**Last updated:** [September 30, 2015, 1:47pm UTC](https://discuss.elastic.co/t/which-web-interface-is-used-by-kibana-logstash-and-elasticsearch/30044 "2015-09-30T13:47:17Z")

</div>

Hi, I have installed Kibana, logstash and elasticsearch in my linux server. Does kibana uses any web interface. How it works? I was searching in the document but didnt get that. Can anyone help ?

---

## [Exact field value on metric visualization](https://discuss.elastic.co/t/exact-field-value-on-metric-visualization/31300)

<div class="topic-metadata">

**Author:** [@aabed](https://discuss.elastic.co/u/aabed)\
**Replies:** 5\
**Last updated:** [September 30, 2015, 10:06am UTC](https://discuss.elastic.co/t/exact-field-value-on-metric-visualization/31300 "2015-09-30T10:06:40Z")

</div>

I have a question related to elastic search, I have a field returned CPUs=4 I want to create a metrics visualization for it,but the aggregations available are count,max,min ....etc I want it just to display the retu…

---

## [Data not shown for last 15 minutes](https://discuss.elastic.co/t/data-not-shown-for-last-15-minutes/31348)

<div class="topic-metadata">

**Author:** [@rsaeks](https://discuss.elastic.co/u/rsaeks)\
**Replies:** 1\
**Last updated:** [September 30, 2015, 9:34am UTC](https://discuss.elastic.co/t/data-not-shown-for-last-15-minutes/31348 "2015-09-30T09:34:32Z")

</div>

Good morning, I'm getting started with using the ELK platform for our syslog data collection and have setup devices to send their data to our machine. I'm noticing that when running visualizations and other reports the…

---

## [Getting " No cached mapping for this field " in KIBANA 4](https://discuss.elastic.co/t/getting-no-cached-mapping-for-this-field-in-kibana-4/31302)

<div class="topic-metadata">

**Author:** [@Bharath\_Paruchuri](https://discuss.elastic.co/u/Bharath_Paruchuri)\
**Replies:** 1\
**Last updated:** [September 29, 2015, 12:38pm UTC](https://discuss.elastic.co/t/getting-no-cached-mapping-for-this-field-in-kibana-4/31302 "2015-09-29T12:38:15Z")

</div>

Hi, I'm getting " No cached mapping for this field " for field Error\_Code. Sample Log entry ####\<Sep 29, 2015 12:45:03 AM EDT\> \<Workmanager: , Version: 0, Scheduled=false, Started=false, Wait time: 0 ms \> \<\> \<000…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=1102)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=1104)
