# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=1109

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1110

---

## [Kibana is displaying a previous month instead of the month available in the field](https://discuss.elastic.co/t/kibana-is-displaying-a-previous-month-instead-of-the-month-available-in-the-field/27537)

<div class="topic-metadata">

**Author:** [@Fabio\_Batalha](https://discuss.elastic.co/u/Fabio_Batalha)\
**Replies:** 7\
**Last updated:** [August 20, 2015, 4:35am UTC](https://discuss.elastic.co/t/kibana-is-displaying-a-previous-month-instead-of-the-month-available-in-the-field/27537 "2015-08-20T04:35:47Z")

</div>

Hello Fellows, I'm facing a strange situation with Kibana when dealing with datefields with just year and month (YYYY-MM). The labels in a Chart our List are displaying a datefield with value 2015-07 as "June 30th 2015…

---

## [Specify field you want to sort by in asc or desc order](https://discuss.elastic.co/t/specify-field-you-want-to-sort-by-in-asc-or-desc-order/27587)

<div class="topic-metadata">

**Author:** [@DK\_3](https://discuss.elastic.co/u/DK_3)\
**Replies:** 1\
**Last updated:** [August 20, 2015, 4:33am UTC](https://discuss.elastic.co/t/specify-field-you-want-to-sort-by-in-asc-or-desc-order/27587 "2015-08-20T04:33:57Z")

</div>

Is it possible to specify the column you wish to sort by in the search field under the Kibana Discover page? I'd like to specify the column to sort in the query rather than having to click in the column manually.

---

## [Kibana 3.1: Wildcard Lucene query not handling @ symbol](https://discuss.elastic.co/t/kibana-3-1-wildcard-lucene-query-not-handling-symbol/27586)

<div class="topic-metadata">

**Author:** [@Alex\_6](https://discuss.elastic.co/u/Alex_6)\
**Replies:** 1\
**Last updated:** [August 20, 2015, 4:32am UTC](https://discuss.elastic.co/t/kibana-3-1-wildcard-lucene-query-not-handling-symbol/27586 "2015-08-20T04:32:38Z")

</div>

Kibana 3.1, Lucene query. So I'm doing wildcard queries in the form of entName:treeb\* Which will return documents with treebeard and treebark as values for entName. I also have a field treeMail, which is set to be…

---

## [How to find the difference of two metric aggregations in kibana](https://discuss.elastic.co/t/how-to-find-the-difference-of-two-metric-aggregations-in-kibana/27579)

<div class="topic-metadata">

**Author:** [@ardian1](https://discuss.elastic.co/u/ardian1)\
**Replies:** 1\
**Last updated:** [August 18, 2015, 11:34pm UTC](https://discuss.elastic.co/t/how-to-find-the-difference-of-two-metric-aggregations-in-kibana/27579 "2015-08-18T23:34:13Z")

</div>

If I have metric C which is the sum of metric A and metric B. I created metric C with search query "id1:0210" and give the total of 42,187 I created metric A with search query "id1:0200" and give the total of 35,343 H…

---

## [Time filter as X-Axis?](https://discuss.elastic.co/t/time-filter-as-x-axis/27588)

<div class="topic-metadata">

**Author:** [@Jakauppila](https://discuss.elastic.co/u/Jakauppila)\
**Replies:** 1\
**Last updated:** [August 18, 2015, 6:30pm UTC](https://discuss.elastic.co/t/time-filter-as-x-axis/27588 "2015-08-18T18:30:31Z")

</div>

Currently on Kibana 4.1.1, I am attempting to visualize some ticket data. I have an opened date and a closed date. I want to have a bar graph that shows the number of open and closed tickets for a particular date. Is it …

---

## [Embedding into web without](https://discuss.elastic.co/t/embedding-into-web-without/27516)

<div class="topic-metadata">

**Author:** [@DC64](https://discuss.elastic.co/u/DC64)\
**Replies:** 1\
**Last updated:** [August 18, 2015, 4:01pm UTC](https://discuss.elastic.co/t/embedding-into-web-without/27516 "2015-08-18T16:01:22Z")

</div>

Currently to visualize data, I have to type into my search bar the IP of the VM that Kibana is running on. I would like to embed Kibana into my website, with some changes being made: - An alternate to iframes be used -…

---

## [Visualized precision doesn't match field precision](https://discuss.elastic.co/t/visualized-precision-doesnt-match-field-precision/27299)

<div class="topic-metadata">

**Author:** [@hughesm02](https://discuss.elastic.co/u/hughesm02)\
**Replies:** 6\
**Last updated:** [August 18, 2015, 3:58pm UTC](https://discuss.elastic.co/t/visualized-precision-doesnt-match-field-precision/27299 "2015-08-18T15:58:37Z")

</div>

I have a field that I'd like to visualize to 3 decimal points. In Settings\>Indices I set the format of the field to "Number" with the default format "0,0.\[000\]". In Discover I see the events to the expected precision …

---

## [Anchoring the legend's labels in visualizations](https://discuss.elastic.co/t/anchoring-the-legends-labels-in-visualizations/27466)

<div class="topic-metadata">

**Author:** [@LuudJanssen](https://discuss.elastic.co/u/LuudJanssen)\
**Replies:** 3\
**Last updated:** [August 18, 2015, 2:13pm UTC](https://discuss.elastic.co/t/anchoring-the-legends-labels-in-visualizations/27466 "2015-08-18T14:13:38Z")

</div>

Hey everyone, We'd like the labels in the legend to be clickable as well, not only the bars or pie pieces. Is there any way to make this work? Maybe through a dashboard script? Or was this maybe possible in Kibana 3? …

---

## [Convert seconds (float number) into a more legible datatype](https://discuss.elastic.co/t/convert-seconds-float-number-into-a-more-legible-datatype/27257)

<div class="topic-metadata">

**Author:** [@pjvv1](https://discuss.elastic.co/u/pjvv1)\
**Replies:** 8\
**Last updated:** [August 18, 2015, 7:36am UTC](https://discuss.elastic.co/t/convert-seconds-float-number-into-a-more-legible-datatype/27257 "2015-08-18T07:36:10Z")

</div>

Dear friends, We have an ELK to get information about the use of one of our software applications. We have a field for session duration which represent the duration (time) of a session in seconds. That is not very hu…

---

## [How can I subtract sum of two metrics visualization](https://discuss.elastic.co/t/how-can-i-subtract-sum-of-two-metrics-visualization/27550)

<div class="topic-metadata">

**Author:** [@ardian](https://discuss.elastic.co/u/ardian)\
**Replies:** 2\
**Last updated:** [August 18, 2015, 7:26am UTC](https://discuss.elastic.co/t/how-can-i-subtract-sum-of-two-metrics-visualization/27550 "2015-08-18T07:26:50Z")

</div>

Hello, I want to subtract the sum of two metrics in Kibana. C = A + B If I have metric C which is the sum of metric A and metric B. I created metric C with search query "id1:100 && id2:93" and give the total of 14,000,00…

---

## [How can i filter the deleted records from Kibana Dashboard](https://discuss.elastic.co/t/how-can-i-filter-the-deleted-records-from-kibana-dashboard/27500)

<div class="topic-metadata">

**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\
**Replies:** 3\
**Last updated:** [August 18, 2015, 4:35am UTC](https://discuss.elastic.co/t/how-can-i-filter-the-deleted-records-from-kibana-dashboard/27500 "2015-08-18T04:35:39Z")

</div>

Hi All I am using jdbc logstash plugin to post data to elastic. At this stage i have logstash ON and refresh every minute I am getting all the new records and the updated to ES/Kibana but the deleted record is showin…

---

## [How can i rename the legends available in x-axis and y-axis in Kibana Vertical charts?](https://discuss.elastic.co/t/how-can-i-rename-the-legends-available-in-x-axis-and-y-axis-in-kibana-vertical-charts/27503)

<div class="topic-metadata">

**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\
**Replies:** 1\
**Last updated:** [August 17, 2015, 10:20pm UTC](https://discuss.elastic.co/t/how-can-i-rename-the-legends-available-in-x-axis-and-y-axis-in-kibana-vertical-charts/27503 "2015-08-17T22:20:20Z")

</div>

Hi All How can i rename the legends available in x-axis and y-axis in Kibana Vertical charts? This is a very basic feature, I hope this is available but i didn't found it. Please let me know Regards Ritesh

---

## [Kibana search](https://discuss.elastic.co/t/kibana-search/27479)

<div class="topic-metadata">

**Author:** [@varunu](https://discuss.elastic.co/u/varunu)\
**Replies:** 2\
**Last updated:** [August 17, 2015, 3:53pm UTC](https://discuss.elastic.co/t/kibana-search/27479 "2015-08-17T15:53:25Z")

</div>

I am using kibana4 for visualizing the elastic search results. The problem what i am facing is that i have a search query (drive OR exchange), which is resulting the matching hits correctly, but i am not sure how would i…

---

## [Marvel Refresh Rate](https://discuss.elastic.co/t/marvel-refresh-rate/25739)

<div class="topic-metadata">

**Author:** [@koka424](https://discuss.elastic.co/u/koka424)\
**Replies:** 8\
**Last updated:** [August 17, 2015, 12:26pm UTC](https://discuss.elastic.co/t/marvel-refresh-rate/25739 "2015-08-17T12:26:40Z")

</div>

I just got marvel up and running and everything looks good except the nodes and indices keep getting grayed out. A little ! symbol is next to the nodes and indices saying that it hasnt received an update in over 1 minute…

---

## [Domain name in hostname is treated as separate field](https://discuss.elastic.co/t/domain-name-in-hostname-is-treated-as-separate-field/27444)

<div class="topic-metadata">

**Author:** [@szemlyanoy](https://discuss.elastic.co/u/szemlyanoy)\
**Replies:** 4\
**Last updated:** [August 16, 2015, 9:00pm UTC](https://discuss.elastic.co/t/domain-name-in-hostname-is-treated-as-separate-field/27444 "2015-08-16T21:00:14Z")

</div>

Hi, I'm in position of migrating from former ELK stack to the latest one So I have 2 environments: Redis -\> Logstash(v1.4.2) -\> ES(v1.4.2) -\> Kibana(v3.1.0) Redis -\> Logstash(v1.5.2) -\> ES(v1.7.1) -\> Kibana(v4.0.2) S…

---

## [Field statistics - sampling](https://discuss.elastic.co/t/field-statistics-sampling/27343)

<div class="topic-metadata">

**Author:** [@secsubs](https://discuss.elastic.co/u/secsubs)\
**Replies:** 2\
**Last updated:** [August 14, 2015, 5:56pm UTC](https://discuss.elastic.co/t/field-statistics-sampling/27343 "2015-08-14T17:56:43Z")

</div>

Hi, As I understand, in Kibana4, the field statistics are done on the n records/documents that are returned to the browser (set under Advanced settings -\> sampleSize). If this is correct, then how does Kibana select n …

---

## [Is there any way to show legends on bar in Bar Chart?](https://discuss.elastic.co/t/is-there-any-way-to-show-legends-on-bar-in-bar-chart/27398)

<div class="topic-metadata">

**Author:** [@Saket\_Kumar](https://discuss.elastic.co/u/Saket_Kumar)\
**Replies:** 1\
**Last updated:** [August 14, 2015, 1:53pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-show-legends-on-bar-in-bar-chart/27398 "2015-08-14T13:53:24Z")

</div>

I am able to generate the graphs but once i mouse over then i could see the values. In this case if I have to share the graph with others they wont be able to understand this. Therefore is there any way to show those b…

---

## [Hunting for bad actors / searching for multiple IP addresses](https://discuss.elastic.co/t/hunting-for-bad-actors-searching-for-multiple-ip-addresses/27095)

<div class="topic-metadata">

**Author:** [@JimCheetham](https://discuss.elastic.co/u/JimCheetham)\
**Replies:** 2\
**Last updated:** [August 14, 2015, 2:37am UTC](https://discuss.elastic.co/t/hunting-for-bad-actors-searching-for-multiple-ip-addresses/27095 "2015-08-14T02:37:42Z")

</div>

I often go to my dashboard to identify something like a compromised user account, and when I identify them I get a set of different source addresses, all used by the attacker. I can't figure out an elegant way to turn …

---

## [Help visualizing simple data in a line chart](https://discuss.elastic.co/t/help-visualizing-simple-data-in-a-line-chart/27064)

<div class="topic-metadata">

**Author:** [@jjdepaul](https://discuss.elastic.co/u/jjdepaul)\
**Replies:** 7\
**Last updated:** [August 13, 2015, 7:20pm UTC](https://discuss.elastic.co/t/help-visualizing-simple-data-in-a-line-chart/27064 "2015-08-13T19:20:15Z")

</div>

I'm a novice to Kibana. I have just installed the product and I can access it from my browser. I have registered my index: sprint and I can see some of the data in the Discover tab in Kibana (4.1.1-Win). The data t…

---

## [Kibana architecture](https://discuss.elastic.co/t/kibana-architecture/27317)

<div class="topic-metadata">

**Author:** [@Anmol\_Gupta](https://discuss.elastic.co/u/Anmol_Gupta)\
**Replies:** 1\
**Last updated:** [August 13, 2015, 10:05am UTC](https://discuss.elastic.co/t/kibana-architecture/27317 "2015-08-13T10:05:20Z")

</div>

i want to know more about architecture of kibana .. how does it work at backend ? where can i find it

---

## [Are Ranges Inclusive?](https://discuss.elastic.co/t/are-ranges-inclusive/27269)

<div class="topic-metadata">

**Author:** [@LansK](https://discuss.elastic.co/u/LansK)\
**Replies:** 3\
**Last updated:** [August 13, 2015, 5:43am UTC](https://discuss.elastic.co/t/are-ranges-inclusive/27269 "2015-08-13T05:43:43Z")

</div>

Are ranges (such as in a pie chart) inclusive? In the Kibana tutorial (https://www.elastic.co/guide/en/kibana/4.1/tutorial-visualizing.html), ranges are specified between 1000 and 3000, and 3000 and 7000. Are both ranges…

---

## [How can I group a couple of terms behind one name?](https://discuss.elastic.co/t/how-can-i-group-a-couple-of-terms-behind-one-name/27027)

<div class="topic-metadata">

**Author:** [@faitlezen](https://discuss.elastic.co/u/faitlezen)\
**Replies:** 6\
**Last updated:** [August 13, 2015, 1:15am UTC](https://discuss.elastic.co/t/how-can-i-group-a-couple-of-terms-behind-one-name/27027 "2015-08-13T01:15:11Z")

</div>

I'm pretty sure, I once saw a demo of someone extracting all the user agent from some kind of web server log and through adding something in the JSON filed on his visualization widget was able to say "consider everything…

---

## [Kibana queries fail about 80% of the time. Server says upstream timed out](https://discuss.elastic.co/t/kibana-queries-fail-about-80-of-the-time-server-says-upstream-timed-out/1339)

<div class="topic-metadata">

**Author:** [@Jeff\_Silverman](https://discuss.elastic.co/u/Jeff_Silverman)\
**Replies:** 6\
**Last updated:** [August 12, 2015, 11:23pm UTC](https://discuss.elastic.co/t/kibana-queries-fail-about-80-of-the-time-server-says-upstream-timed-out/1339 "2015-08-12T23:23:23Z")

</div>

I inherited an ELK system, and I am not sure if it ever worked properly, but I know it is not working now. My system has 4 clusters, for 4 different customers. Each cluster is fronted by an F5 load balancer, so that d…

---

## [Kibana does not show nested fields for discover or visualization](https://discuss.elastic.co/t/kibana-does-not-show-nested-fields-for-discover-or-visualization/27004)

<div class="topic-metadata">

**Author:** [@pavan\_bkv](https://discuss.elastic.co/u/pavan_bkv)\
**Replies:** 3\
**Last updated:** [August 12, 2015, 9:52pm UTC](https://discuss.elastic.co/t/kibana-does-not-show-nested-fields-for-discover-or-visualization/27004 "2015-08-12T21:52:13Z")

</div>

I have gathered ES index and node stats using logstash EXEC input and outputting that to another ES cluster. My kibana is sitting on top of the cluster to monitor the stats. I see all the nested fields in Kibana but I ca…

---

## [Kibana 4.1 change the Primary\_Field from \_all to something else](https://discuss.elastic.co/t/kibana-4-1-change-the-primary-field-from--all-to-something-else/26587)

<div class="topic-metadata">

**Author:** [@netoben](https://discuss.elastic.co/u/netoben)\
**Replies:** 2\
**Last updated:** [August 12, 2015, 6:47pm UTC](https://discuss.elastic.co/t/kibana-4-1-change-the-primary-field-from--all-to-something-else/26587 "2015-08-12T18:47:22Z")

</div>

Hi Guys I want to disable the "\_all" field because it consumes too much space and I really don't have a use for it. However Kibana 4.1 seems to default to that field for Visualization queries. I found an old topic t…

---

## [Query based on date field](https://discuss.elastic.co/t/query-based-on-date-field/27126)

<div class="topic-metadata">

**Author:** [@141984](https://discuss.elastic.co/u/141984)\
**Replies:** 6\
**Last updated:** [August 12, 2015, 4:29pm UTC](https://discuss.elastic.co/t/query-based-on-date-field/27126 "2015-08-12T16:29:25Z")

</div>

Hi, I have a filed called "date" of map "date": { "type": "date", "format": "dateOptionalTime" }, Examples values of this field are July 31st 2015, 12:39:50.569 July 31st 2015, 1…

---

## [Kibana 4 behind reverse proxy with URL "directory" prefix](https://discuss.elastic.co/t/kibana-4-behind-reverse-proxy-with-url-directory-prefix/27227)

<div class="topic-metadata">

**Author:** [@ecweaver](https://discuss.elastic.co/u/ecweaver)\
**Replies:** 2\
**Last updated:** [August 12, 2015, 3:43pm UTC](https://discuss.elastic.co/t/kibana-4-behind-reverse-proxy-with-url-directory-prefix/27227 "2015-08-12T15:43:44Z")

</div>

We have to run Kibana 4 behind a reverse proxy, using Apache, due to Single-Sign-On requirements. I have set up a reverse-proxy for the prefix k4/ to proxy out to localhost:5601. The URLs come back without the prefix, …

---

## [Using pagination to divide chart](https://discuss.elastic.co/t/using-pagination-to-divide-chart/27184)

<div class="topic-metadata">

**Author:** [@rcazorla](https://discuss.elastic.co/u/rcazorla)\
**Replies:** 2\
**Last updated:** [August 12, 2015, 9:05am UTC](https://discuss.elastic.co/t/using-pagination-to-divide-chart/27184 "2015-08-12T09:05:47Z")

</div>

Hello, I'm currently working with a bunch of data and I would like to do pagined-like chart. To be more precise I would like, for example, my top 5 data on a first pie chart and the sixth to the tenth on another one. …

---

## [Kibana without elasticsearch?](https://discuss.elastic.co/t/kibana-without-elasticsearch/27236)

<div class="topic-metadata">

**Author:** [@Anmol\_Gupta](https://discuss.elastic.co/u/Anmol_Gupta)\
**Replies:** 3\
**Last updated:** [August 12, 2015, 6:25am UTC](https://discuss.elastic.co/t/kibana-without-elasticsearch/27236 "2015-08-12T06:25:32Z")

</div>

As we know elasticsearch stores, search and analyses data and then show it on kibana , But i ahve my data is already stored in postgresql and we have to deal with huge data then storing it in elasticsearch for seeing gra…

---

## [Issue with displaying nested ES object in Kibana](https://discuss.elastic.co/t/issue-with-displaying-nested-es-object-in-kibana/27198)

<div class="topic-metadata">

**Author:** [@tarunsapra](https://discuss.elastic.co/u/tarunsapra)\
**Replies:** 2\
**Last updated:** [August 11, 2015, 11:56pm UTC](https://discuss.elastic.co/t/issue-with-displaying-nested-es-object-in-kibana/27198 "2015-08-11T23:56:25Z")

</div>

Hi All, In my ES index I have the following field which I want to display in Kibana "tourOperator": \[ "wildlife", "India App" \], But while displaying it in Kib…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=1108)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=1110)
