# Kibana **URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=123 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 124 --- ## [Difference duration calculation between start and end time to show in table](https://discuss.elastic.co/t/difference-duration-calculation-between-start-and-end-time-to-show-in-table/330137)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 1\ **Last updated:** [May 14, 2023, 4:34am UTC](https://discuss.elastic.co/t/difference-duration-calculation-between-start-and-end-time-to-show-in-table/330137 "2023-05-14T04:34:03Z")
Hello All, I'd like to know how can I calculate the duration difference between start execution-end execution(Date format) and only get the duration to show in third column. How can this be done?,backend only provides … --- ## [Kibana in a Docker container](https://discuss.elastic.co/t/kibana-in-a-docker-container/333295)
**Author:** [@GrigoryPtashko](https://discuss.elastic.co/u/GrigoryPtashko)\ **Replies:** 1\ **Last updated:** [May 13, 2023, 5:04pm UTC](https://discuss.elastic.co/t/kibana-in-a-docker-container/333295 "2023-05-13T17:04:51Z")
Hello. I'm setting up the ELK stack in Docker containers. Elasticsearch, Kibana, Filebeats, Logstash all in their own containers. One thing I cannot understand is whether I have to make a persistent volume for Kibana? F… --- ## [Increase heap size of Elastic Cluster in dev tools](https://discuss.elastic.co/t/increase-heap-size-of-elastic-cluster-in-dev-tools/333165)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [May 13, 2023, 4:56am UTC](https://discuss.elastic.co/t/increase-heap-size-of-elastic-cluster-in-dev-tools/333165 "2023-05-13T04:56:25Z")
Hi all, I'm trying to increase Elastic RAM alloted to Elastic. I know i have to change -Xmx=1G -Xms=1G in jvm options file. But I have access only to elastic and kibana. Is there a way to increase in dev tools or a… --- ## [Tema integration message formatting for alert](https://discuss.elastic.co/t/tema-integration-message-formatting-for-alert/333321)
**Author:** [@Gaston\_Beltramelli](https://discuss.elastic.co/u/Gaston_Beltramelli)\ **Replies:** 1\ **Last updated:** [May 12, 2023, 6:04pm UTC](https://discuss.elastic.co/t/tema-integration-message-formatting-for-alert/333321 "2023-05-12T18:04:06Z")
Hello everyone! I need help for formatting an alert to TEAMS integration, i've been trying to add a new line in the message but i couldn´t find much info about t in kibana i set up this Alerta para {{context.group}} {… --- ## [After add xpack.security.enabled,my kibana does not work](https://discuss.elastic.co/t/after-add-xpack-security-enabled-my-kibana-does-not-work/333253)
**Author:** [@Dadaguai](https://discuss.elastic.co/u/Dadaguai)\ **Replies:** 8\ **Last updated:** [May 12, 2023, 1:48pm UTC](https://discuss.elastic.co/t/after-add-xpack-security-enabled-my-kibana-does-not-work/333253 "2023-05-12T13:48:22Z")
my elasticsearch.yml as follows: http.host: 0.0.0.0 http.cors.enabled: true http.cors.allow-origin: "\*" network.host: 172.17.0.9 discovery.type: single-node http.port: 9200 action.auto\_create\_index: true http.cors.allow… --- ## [Upgrade Elastic and Kibana from 7.17 to 8.7 - S](https://discuss.elastic.co/t/upgrade-elastic-and-kibana-from-7-17-to-8-7-s/333036)
**Author:** [@charlot\_Attard](https://discuss.elastic.co/u/charlot_Attard)\ **Replies:** 6\ **Last updated:** [May 12, 2023, 2:32pm UTC](https://discuss.elastic.co/t/upgrade-elastic-and-kibana-from-7-17-to-8-7-s/333036 "2023-05-12T14:32:53Z")
Hello, We are in the process of migrating our Elasticsearch and Kibana from 7.17 to 8.7. We are facing an issue where after upgrading Elasticsearch works out fine but when starting Kibana we are seeing these errors. "A… --- ## [Using Contains string or "wildcard" in filter button](https://discuss.elastic.co/t/using-contains-string-or-wildcard-in-filter-button/333247)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 1\ **Last updated:** [May 12, 2023, 11:28am UTC](https://discuss.elastic.co/t/using-contains-string-or-wildcard-in-filter-button/333247 "2023-05-12T11:28:25Z")
Hi all, I'm trying to use "wildcard" option in filter as shown below i.e location.keyword : \*PASO\* show me any string that contains PASO string anywhere in the word. I know I can use in KQL in search bar or DSL quer… --- ## [Can't access connect to Fleet Server](https://discuss.elastic.co/t/cant-access-connect-to-fleet-server/333248)
**Author:** [@vanhaiit90](https://discuss.elastic.co/u/vanhaiit90)\ **Replies:** 1\ **Last updated:** [May 12, 2023, 8:20am UTC](https://discuss.elastic.co/t/cant-access-connect-to-fleet-server/333248 "2023-05-12T08:20:10Z")
Last day I completed configure cluster elasticsearch and I access to kibana is ok but I only cannot access Fleet. And Here is the error picture and details from the log https-in/1: SSL handshake failure message":"F… --- ## [Kibana visualization](https://discuss.elastic.co/t/kibana-visualization/333217)
**Author:** [@sai\_ravi\_shankar](https://discuss.elastic.co/u/sai_ravi_shankar)\ **Replies:** 1\ **Last updated:** [May 12, 2023, 7:48am UTC](https://discuss.elastic.co/t/kibana-visualization/333217 "2023-05-12T07:48:38Z")
Hi I am trying to build a visualization. Here is the scenario. i have two coulmns, lets say company\_name and cost\_paid\_by\_company. i need to show the cost\_paid\_by\_company which is higher and lower than the threshold in… --- ## [How to add buckets in horizontal bars chart in lens?](https://discuss.elastic.co/t/how-to-add-buckets-in-horizontal-bars-chart-in-lens/330667)
**Author:** [@Yves\_Frerot](https://discuss.elastic.co/u/Yves_Frerot)\ **Replies:** 2\ **Last updated:** [May 12, 2023, 7:41am UTC](https://discuss.elastic.co/t/how-to-add-buckets-in-horizontal-bars-chart-in-lens/330667 "2023-05-12T07:41:14Z")
I have a chart with a formula as metric. I succeed in a lens horizontal bar graph. But I want to do it for all values of a field with 4 values. I understand the option that consists in repeating the same graph with 4 fil… --- ## [Index Pattern might be treated as substring of other Index Pattern](https://discuss.elastic.co/t/index-pattern-might-be-treated-as-substring-of-other-index-pattern/333220)
**Author:** [@paolovalladolid](https://discuss.elastic.co/u/paolovalladolid)\ **Replies:** 1\ **Last updated:** [May 11, 2023, 7:51pm UTC](https://discuss.elastic.co/t/index-pattern-might-be-treated-as-substring-of-other-index-pattern/333220 "2023-05-11T19:51:51Z")
We have 2 servers running Winlogbeat. Server 1 Winlogbeat has this index pattern configured: developer-portal-%{+yyyyMMdd} Server 2 Winlogbeat has this index pattern configured: developer-portal-hydrator-%{+yyyyMMdd} … --- ## [Unable to view docs in dataview (w/timestamp field) after doc update](https://discuss.elastic.co/t/unable-to-view-docs-in-dataview-w-timestamp-field-after-doc-update/333189)
**Author:** [@petersedivec](https://discuss.elastic.co/u/petersedivec)\ **Replies:** 4\ **Last updated:** [May 11, 2023, 7:42pm UTC](https://discuss.elastic.co/t/unable-to-view-docs-in-dataview-w-timestamp-field-after-doc-update/333189 "2023-05-11T19:42:06Z")
I'm inserting docs to an index. There's a created\_at field that I use in the dataview for time filtering. After initial doc inserts I can see all the docs in Kibana in my data view. I'm then needing to update docs so … --- ## [Kibana showing windows\_eventlog but not sysmon](https://discuss.elastic.co/t/kibana-showing-windows-eventlog-but-not-sysmon/333104)
**Author:** [@iqworks](https://discuss.elastic.co/u/iqworks)\ **Replies:** 2\ **Last updated:** [May 11, 2023, 1:57pm UTC](https://discuss.elastic.co/t/kibana-showing-windows-eventlog-but-not-sysmon/333104 "2023-05-11T13:57:01Z")
Hi, I finally got windows data into security onion. But I dont see sysmon categories? But I do show windows\_events? are windows\_eventlogs the same as sysmon maybe? not sure. thanks for any suggestions or advice --- ## [Configuración formato metric count](https://discuss.elastic.co/t/configuracion-formato-metric-count/333031)
**Author:** [@Javier\_Garcia\_Alvare](https://discuss.elastic.co/u/Javier_Garcia_Alvare)\ **Replies:** 3\ **Last updated:** [May 11, 2023, 12:42pm UTC](https://discuss.elastic.co/t/configuracion-formato-metric-count/333031 "2023-05-11T12:42:23Z")
Buenos días, Es posible dar formato a una metrica en una visualización tipo tabla? Es decir, cuando creas una tabla y la metrica la configuras como "Sum Bucket" o "count" el número se alinea en la parte de la izquierda… --- ## [I want to get a status based on the date difference ersult](https://discuss.elastic.co/t/i-want-to-get-a-status-based-on-the-date-difference-ersult/333054)
**Author:** [@alig](https://discuss.elastic.co/u/alig)\ **Replies:** 1\ **Last updated:** [May 11, 2023, 11:41am UTC](https://discuss.elastic.co/t/i-want-to-get-a-status-based-on-the-date-difference-ersult/333054 "2023-05-11T11:41:32Z")
Hi there, This is what I am using in scripted fields def sorDate = new Date().getTime() - doc\['sor\_idate'\].value; if (sorDate \> 5){ return "crtical" }; The field is defined as below and I have an error and cannot f… --- ## [Can we use kibana without ES?](https://discuss.elastic.co/t/can-we-use-kibana-without-es/333151)
**Author:** [@j\_lim](https://discuss.elastic.co/u/j_lim)\ **Replies:** 2\ **Last updated:** [May 11, 2023, 6:53am UTC](https://discuss.elastic.co/t/can-we-use-kibana-without-es/333151 "2023-05-11T06:53:57Z")
is there any way use Kibana without ES? --- ## [Can we filter multiple values using kibanaAddFilter in Vega](https://discuss.elastic.co/t/can-we-filter-multiple-values-using-kibanaaddfilter-in-vega/332398)
**Author:** [@Fiza](https://discuss.elastic.co/u/Fiza)\ **Replies:** 7\ **Last updated:** [May 11, 2023, 6:05am UTC](https://discuss.elastic.co/t/can-we-filter-multiple-values-using-kibanaaddfilter-in-vega/332398 "2023-05-11T06:05:27Z")
Hello @everyone, I am using Vega to create my Visualization. I want to put kibanaAddFilter so that on click it filter out a field's multiple selected values. Like a field XYZ contains values( a,b,c,d,e,f,g). The filter… --- ## [Displaying realtime video on Kibana](https://discuss.elastic.co/t/displaying-realtime-video-on-kibana/333055)
**Author:** [@huynv1407](https://discuss.elastic.co/u/huynv1407)\ **Replies:** 1\ **Last updated:** [May 11, 2023, 3:13am UTC](https://discuss.elastic.co/t/displaying-realtime-video-on-kibana/333055 "2023-05-11T03:13:15Z")
I wants to know if displaying realtime video on kibana is possible or not. How can I do that?. --- ## [Visualization of parts of URL](https://discuss.elastic.co/t/visualization-of-parts-of-url/332858)
**Author:** [@khteh](https://discuss.elastic.co/u/khteh)\ **Replies:** 3\ **Last updated:** [May 11, 2023, 1:12am UTC](https://discuss.elastic.co/t/visualization-of-parts-of-url/332858 "2023-05-11T01:12:09Z")
How to reopen the closed issue Visualization of parts of URL ? @jughosta I just saw the reply. How to use the proposed solution to filter parts of the URL and show it in my pie chart? Thanks. --- ## [Legend of a map](https://discuss.elastic.co/t/legend-of-a-map/332999)
**Author:** [@Phildefer](https://discuss.elastic.co/u/Phildefer)\ **Replies:** 4\ **Last updated:** [May 11, 2023, 1:04am UTC](https://discuss.elastic.co/t/legend-of-a-map/332999 "2023-05-11T01:04:59Z")
Hi, Just a question : For the moment it's impossible to change the label in the legend of a map. Do you know if this feature is expected or not? t would be very useful because sometimes the legend is not very meaningfu… --- ## [Search rate of index is too high in Kibana, but no query in actually](https://discuss.elastic.co/t/search-rate-of-index-is-too-high-in-kibana-but-no-query-in-actually/332883)
**Author:** [@hongbo](https://discuss.elastic.co/u/hongbo)\ **Replies:** 1\ **Last updated:** [May 11, 2023, 12:57am UTC](https://discuss.elastic.co/t/search-rate-of-index-is-too-high-in-kibana-but-no-query-in-actually/332883 "2023-05-11T00:57:26Z")
search rate of index is too high in kibana stack-monitoring, but no query in actually. at the same time, with the primaries(number\_of\_shards) increase, the search rate value increase. for example, i have three index: m… --- ## [Aliases Error in Ingest pipeline Index](https://discuss.elastic.co/t/aliases-error-in-ingest-pipeline-index/332814)
**Author:** [@anushyaadam](https://discuss.elastic.co/u/anushyaadam)\ **Replies:** 1\ **Last updated:** [May 11, 2023, 12:54am UTC](https://discuss.elastic.co/t/aliases-error-in-ingest-pipeline-index/332814 "2023-05-11T00:54:29Z")
Hi Team, We are processing the logs using API key from below path. C# -\> ingest pipeline -\> Elasticsearch -\> kibana We ran the below template but Aliases not working, it shows none. Please find the snapshot attached. … --- ## [Vega Directed Graph Breaks w/ Input Sliders](https://discuss.elastic.co/t/vega-directed-graph-breaks-w-input-sliders/332589)
**Author:** [@ikiril01](https://discuss.elastic.co/u/ikiril01)\ **Replies:** 2\ **Last updated:** [May 10, 2023, 3:43pm UTC](https://discuss.elastic.co/t/vega-directed-graph-breaks-w-input-sliders/332589 "2023-05-10T15:43:34Z")
I'm trying to build a force-directed graph in Kibana (v8.3.3) using Vega. I've got the graph built out successfully, with the caveat that sometimes it can display quite a large amount of data, thus making it overwhelmin… --- ## [Kibana - Automatizar login acceso a kibana](https://discuss.elastic.co/t/kibana-automatizar-login-acceso-a-kibana/333032)
**Author:** [@Javier\_Garcia\_Alvare](https://discuss.elastic.co/u/Javier_Garcia_Alvare)\ **Replies:** 1\ **Last updated:** [May 10, 2023, 3:15pm UTC](https://discuss.elastic.co/t/kibana-automatizar-login-acceso-a-kibana/333032 "2023-05-10T15:15:55Z")
Buenos días, versión 6.8.3 Es posible el automatizar el login de acceso a kibana y en la url de acceso pasar las credenciales y que apunten a un dashboard. Gracias, un saludo Javier. --- ## [Cannot set custom data view for a bar chart in Kibana Lens](https://discuss.elastic.co/t/cannot-set-custom-data-view-for-a-bar-chart-in-kibana-lens/333086)
**Author:** [@NotSoOld](https://discuss.elastic.co/u/NotSoOld)\ **Replies:** 2\ **Last updated:** [May 10, 2023, 1:32pm UTC](https://discuss.elastic.co/t/cannot-set-custom-data-view-for-a-bar-chart-in-kibana-lens/333086 "2023-05-10T13:32:50Z")
Hello. Seems like there is a bug in Kibana Lens when I try to set custom data view for the one of my dashboard components (a bar chart). Here are the steps to follow: Add bar chart to dashboard Bar chart will have some… --- ## [How to duplicate a rule?](https://discuss.elastic.co/t/how-to-duplicate-a-rule/331042)
**Author:** [@ppic](https://discuss.elastic.co/u/ppic)\ **Replies:** 7\ **Last updated:** [May 10, 2023, 12:40pm UTC](https://discuss.elastic.co/t/how-to-duplicate-a-rule/331042 "2023-05-10T12:40:13Z")
Hello, I have to create several rules-alerts that are very similar. Is there a way to duplicate (copy/paste) a rule ? Thank you. --- ## [Elastic 8.7\_\_enrollement-token\_\_"failed to establish trust with server "](https://discuss.elastic.co/t/elastic-8-7-enrollement-token-failed-to-establish-trust-with-server/330856)
**Author:** [@Julien069](https://discuss.elastic.co/u/Julien069)\ **Replies:** 6\ **Last updated:** [May 10, 2023, 12:06pm UTC](https://discuss.elastic.co/t/elastic-8-7-enrollement-token-failed-to-establish-trust-with-server/330856 "2023-05-10T12:06:09Z")
Hi , I have a kibana server and an elastic server with differents IP address . When I want to create a token for kibana with command : sudo bin/elasticsearch-create-enrollement-token -s kibana OR sudo bin/elasticse… --- ## [LEAD/LAG window function in elasticsearch](https://discuss.elastic.co/t/lead-lag-window-function-in-elasticsearch/332866)
**Author:** [@Sanjana\_Saswade](https://discuss.elastic.co/u/Sanjana_Saswade)\ **Replies:** 4\ **Last updated:** [May 9, 2023, 2:47pm UTC](https://discuss.elastic.co/t/lead-lag-window-function-in-elasticsearch/332866 "2023-05-09T14:47:33Z")
I need to use LEAD /LAG function in elasticsearch. i tried collapse in ELK but it's not working. How do I fix this? sql query for convert in Elasticsearch query: select name, LAG(salary) OVER(PARTITION BY department … --- ## [Conditionally change row colour in EuiInMemoryTable](https://discuss.elastic.co/t/conditionally-change-row-colour-in-euiinmemorytable/332515)
**Author:** [@Sheereen](https://discuss.elastic.co/u/Sheereen)\ **Replies:** 2\ **Last updated:** [May 10, 2023, 5:24am UTC](https://discuss.elastic.co/t/conditionally-change-row-colour-in-euiinmemorytable/332515 "2023-05-10T05:24:44Z")
Hi, How can I conditionally change the row colour in EuiInMemoryTable ? I have a column, say health. I want to change the entire row colour based on the value in the health column (of the corresponding row). Health -\> … --- ## [How to change timezone on painless script](https://discuss.elastic.co/t/how-to-change-timezone-on-painless-script/332871)
**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\ **Replies:** 2\ **Last updated:** [May 10, 2023, 3:30am UTC](https://discuss.elastic.co/t/how-to-change-timezone-on-painless-script/332871 "2023-05-10T03:30:59Z")
Hello everyone, i want to ask something about painless script. so i just made a painless script that look like this: but unfortunately the result of this script is still in utc and i want to change it to another time… [Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=122) [Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=124)