# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=127

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 128

---

## [How to create a heatmap chart?](https://discuss.elastic.co/t/how-to-create-a-heatmap-chart/329427)

<div class="topic-metadata">

**Author:** [@OlegG](https://discuss.elastic.co/u/OlegG)\
**Replies:** 2\
**Last updated:** [April 7, 2023, 6:05am UTC](https://discuss.elastic.co/t/how-to-create-a-heatmap-chart/329427 "2023-04-07T06:05:21Z")

</div>

The vertical axis is days (not configured, but this is my desire), the horizontal is the hours of one day (not configured, but this is my desire), the resulting squares from their intersection are the counter of what …

---

## [How to send data to the index node](https://discuss.elastic.co/t/how-to-send-data-to-the-index-node/330318)

<div class="topic-metadata">

**Author:** [@Joel\_Goncalves2](https://discuss.elastic.co/u/Joel_Goncalves2)\
**Replies:** 4\
**Last updated:** [April 21, 2023, 9:19am UTC](https://discuss.elastic.co/t/how-to-send-data-to-the-index-node/330318 "2023-04-21T09:19:47Z")

</div>

Hello, I wanted to set up a cluster with some nodes and I wanted to install packetbeat on each node so I could monitor the network and then send all the data to the node's packetbeat index.x . It was possible? What would…

---

## [Reduce Dashboard Loading Time](https://discuss.elastic.co/t/reduce-dashboard-loading-time/330491)

<div class="topic-metadata">

**Author:** [@akansha.agarwal1](https://discuss.elastic.co/u/akansha.agarwal1)\
**Replies:** 2\
**Last updated:** [April 21, 2023, 7:22am UTC](https://discuss.elastic.co/t/reduce-dashboard-loading-time/330491 "2023-04-21T07:22:04Z")

</div>

I have a kibana dashboard which contains 7 vega lite visualisations & 2 kibana lens visualisations. Version used: 8.6.2 The dashboard takes around 13-14 sec to load. Most of the time is spent in loading Kibana. HOW TO …

---

## [Accessing kibana detections](https://discuss.elastic.co/t/accessing-kibana-detections/330493)

<div class="topic-metadata">

**Author:** [@hobbyist](https://discuss.elastic.co/u/hobbyist)\
**Replies:** 1\
**Last updated:** [April 21, 2023, 3:53am UTC](https://discuss.elastic.co/t/accessing-kibana-detections/330493 "2023-04-21T03:53:10Z")

</div>

Is it possible to access/modify detection rules in Kibana via CLI? If version matters, I am using version 7.10.2 on linux.

---

## [How to remove extra unnecessary details from kibana anonymous user public dashboard](https://discuss.elastic.co/t/how-to-remove-extra-unnecessary-details-from-kibana-anonymous-user-public-dashboard/330289)

<div class="topic-metadata">

**Author:** [@aman\_giri](https://discuss.elastic.co/u/aman_giri)\
**Replies:** 1\
**Last updated:** [April 20, 2023, 11:35pm UTC](https://discuss.elastic.co/t/how-to-remove-extra-unnecessary-details-from-kibana-anonymous-user-public-dashboard/330289 "2023-04-20T23:35:59Z")

</div>

I have created an anonymous user in kibana.yml using that configuration no credentials are required to access the public dashboard with url i.e http://xx.xxx.xx.xx:5601/s/adv\_public/app/dashboards#/view/bc58c7d6-9073-4a…

---

## [Index rotation hour increases](https://discuss.elastic.co/t/index-rotation-hour-increases/330376)

<div class="topic-metadata">

**Author:** [@nunex\_17](https://discuss.elastic.co/u/nunex_17)\
**Replies:** 2\
**Last updated:** [April 20, 2023, 11:12pm UTC](https://discuss.elastic.co/t/index-rotation-hour-increases/330376 "2023-04-20T23:12:31Z")

</div>

Hi, I am using ILM to rollover my indexes after a maximum age of 1 day. After some debug I noticed a strange pattern with this: 1 - first index is rotated at 2:34am 2 - second index is rotated at 2:44am 3 - third ind…

---

## [Working hours on the visualization](https://discuss.elastic.co/t/working-hours-on-the-visualization/330405)

<div class="topic-metadata">

**Author:** [@b2ron](https://discuss.elastic.co/u/b2ron)\
**Replies:** 0\
**Last updated:** [April 20, 2023, 4:07pm UTC](https://discuss.elastic.co/t/working-hours-on-the-visualization/330405 "2023-04-20T16:07:30Z")

</div>

Is it possible to show working hours on the visualization? I have a dashboard, but I want to see the working hours on it. ideal case if I can choose working hours from a list (different countries, time zones...) chart…

---

## [Istio annotation not working](https://discuss.elastic.co/t/istio-annotation-not-working/330385)

<div class="topic-metadata">

**Author:** [@arun\_udaiyar](https://discuss.elastic.co/u/arun_udaiyar)\
**Replies:** 1\
**Last updated:** [April 20, 2023, 10:46am UTC](https://discuss.elastic.co/t/istio-annotation-not-working/330385 "2023-04-20T10:46:19Z")

</div>

Hi All, I am trying to deploy Elasticsearch(8.5) and Kibana using helm chart. Elasticsearch works fine with (3 master, 2 data), but when i deploy Kibana its keep on failing, Finally found that Istio is the culprit. So…

---

## [Error in one alert rule object crashes the rule list](https://discuss.elastic.co/t/error-in-one-alert-rule-object-crashes-the-rule-list/329533)

<div class="topic-metadata">

**Author:** [@upcfrost](https://discuss.elastic.co/u/upcfrost)\
**Replies:** 2\
**Last updated:** [April 20, 2023, 9:38am UTC](https://discuss.elastic.co/t/error-in-one-alert-rule-object-crashes-the-rule-list/329533 "2023-04-20T09:38:23Z")

</div>

Hi, After playing around with alerting and browser monitors in uptime, my alert rules page got completely broken. On every request it raises an error similar to: Could not find reference for kibanaSavedObjectMeta.searc…

---

## [Integration of a dashboard to custom application](https://discuss.elastic.co/t/integration-of-a-dashboard-to-custom-application/330355)

<div class="topic-metadata">

**Author:** [@Sugunakar](https://discuss.elastic.co/u/Sugunakar)\
**Replies:** 1\
**Last updated:** [April 20, 2023, 6:36am UTC](https://discuss.elastic.co/t/integration-of-a-dashboard-to-custom-application/330355 "2023-04-20T06:36:37Z")

</div>

Hi, I want to integrate a dashboard or a visual to a custom application. The data source is of any database. If the data in the database got updated like any new data is added or deleted the visual in the application mu…

---

## [EuiTable and In memory table doesn't have scroll](https://discuss.elastic.co/t/euitable-and-in-memory-table-doesnt-have-scroll/329622)

<div class="topic-metadata">

**Author:** [@Sheereen](https://discuss.elastic.co/u/Sheereen)\
**Replies:** 11\
**Last updated:** [April 19, 2023, 9:59pm UTC](https://discuss.elastic.co/t/euitable-and-in-memory-table-doesnt-have-scroll/329622 "2023-04-19T21:59:56Z")

</div>

Hi, I am using both EuiTable and in-memory tables Is there a scroll functionally for the same? I couldn't find any. When the no of columns is like 10-15, the table just keeps getting compressed, rather than having a h…

---

## [Alerting API for v7.10](https://discuss.elastic.co/t/alerting-api-for-v7-10/330294)

<div class="topic-metadata">

**Author:** [@Ewen\_Field](https://discuss.elastic.co/u/Ewen_Field)\
**Replies:** 3\
**Last updated:** [April 19, 2023, 9:56pm UTC](https://discuss.elastic.co/t/alerting-api-for-v7-10/330294 "2023-04-19T21:56:43Z")

</div>

Hey! Is there a way to collect Alert Rules and a history of Alerts via the API from ELK version 7.10 ? In the documentation the Alerting API is available only since the 7.13 version. Is there a way to get this data on t…

---

## [Metricbeat Default Dashboards TSVB and Histogram Display Issues after Upgrade from 7.17 to 8.7](https://discuss.elastic.co/t/metricbeat-default-dashboards-tsvb-and-histogram-display-issues-after-upgrade-from-7-17-to-8-7/329492)

<div class="topic-metadata">

**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\
**Replies:** 3\
**Last updated:** [April 19, 2023, 8:51pm UTC](https://discuss.elastic.co/t/metricbeat-default-dashboards-tsvb-and-histogram-display-issues-after-upgrade-from-7-17-to-8-7/329492 "2023-04-19T20:51:57Z")

</div>

Hello, I recently upgraded my Elastic Stack from version 7.17 to 8.7, and I am experiencing issues with the default Metricbeat dashboards. The TSVB and Histogram visualizations are not displaying data correctly. I have …

---

## [I am facing issue to open kibana url in iframe](https://discuss.elastic.co/t/i-am-facing-issue-to-open-kibana-url-in-iframe/330215)

<div class="topic-metadata">

**Author:** [@devdev7711](https://discuss.elastic.co/u/devdev7711)\
**Replies:** 1\
**Last updated:** [April 19, 2023, 8:25pm UTC](https://discuss.elastic.co/t/i-am-facing-issue-to-open-kibana-url-in-iframe/330215 "2023-04-19T20:25:14Z")

</div>

I have kibana setup in https and configuare previously. It is working fine for me. but when other user is login in webapplication they are getting errors. iframe src="https://1.2.111.111:8600/app/dashboards#/view/fe3f…

---

## [Can't see Kibana logs](https://discuss.elastic.co/t/cant-see-kibana-logs/330246)

<div class="topic-metadata">

**Author:** [@ishan.abhinit](https://discuss.elastic.co/u/ishan.abhinit)\
**Replies:** 7\
**Last updated:** [April 19, 2023, 7:15pm UTC](https://discuss.elastic.co/t/cant-see-kibana-logs/330246 "2023-04-19T19:15:40Z")

</div>

I had set up Elasticsearch and Kibana on Rocky Linux few months ago for a workshop. Everything worked fine then. I shut down the server after the workshop and restarted it last week. I don't see the logs appearing in Ki…

---

## [How to split data into spaces](https://discuss.elastic.co/t/how-to-split-data-into-spaces/330229)

<div class="topic-metadata">

**Author:** [@Joelgoncalves3000](https://discuss.elastic.co/u/Joelgoncalves3000)\
**Replies:** 9\
**Last updated:** [April 19, 2023, 5:15pm UTC](https://discuss.elastic.co/t/how-to-split-data-into-spaces/330229 "2023-04-19T17:15:50Z")

</div>

Hello, let's imagine that I have a cluster with 5 nodes and each node is a client, I want these 5 to divide the data from these clients into spaces, I would also like to install packebeat and filebeat on each node and se…

---

## [Curl: (7) Failed to connect to 10.x.x.x port 5601: Connection refused](https://discuss.elastic.co/t/curl-7-failed-to-connect-to-10-x-x-x-port-5601-connection-refused/330138)

<div class="topic-metadata">

**Author:** [@ram\_222](https://discuss.elastic.co/u/ram_222)\
**Replies:** 11\
**Last updated:** [April 19, 2023, 2:43pm UTC](https://discuss.elastic.co/t/curl-7-failed-to-connect-to-10-x-x-x-port-5601-connection-refused/330138 "2023-04-19T14:43:35Z")

</div>

Here, I provide the Procedure what I follow to setup a Elastic Search and Kibana on GCP Vm's: Created a 2 Vm's of Es and Kibana with Reserved Internal and External Ip's. Successfully Deployed Es and Kibana Debian packa…

---

## [Retrieval of data on the dashboard is done after hours](https://discuss.elastic.co/t/retrieval-of-data-on-the-dashboard-is-done-after-hours/330237)

<div class="topic-metadata">

**Author:** [@FTOR](https://discuss.elastic.co/u/FTOR)\
**Replies:** 5\
**Last updated:** [April 19, 2023, 12:28pm UTC](https://discuss.elastic.co/t/retrieval-of-data-on-the-dashboard-is-done-after-hours/330237 "2023-04-19T12:28:15Z")

</div>

I have a problem with the data recovery on the dashboard. It gets hours to get the data from Elasticsearch to the Dashboard. I get the right datas on the devTools, but I can not have a real time data on the dashboard. Do…

---

## [Hiding results in Data Table visualisation based on the count](https://discuss.elastic.co/t/hiding-results-in-data-table-visualisation-based-on-the-count/330303)

<div class="topic-metadata">

**Author:** [@Jakub\_J](https://discuss.elastic.co/u/Jakub_J)\
**Replies:** 0\
**Last updated:** [April 19, 2023, 12:17pm UTC](https://discuss.elastic.co/t/hiding-results-in-data-table-visualisation-based-on-the-count/330303 "2023-04-19T12:17:15Z")

</div>

Hello hive mind, After some time I reached a dead end, thus i'd like to ask you assistance from the gurus. here's what I try to achieve. I have an index pattern which includes (amongst others) ProductionID (String). I…

---

## [Help me in Vega Sorting using transform lookup joined field on encoding Y-axis](https://discuss.elastic.co/t/help-me-in-vega-sorting-using-transform-lookup-joined-field-on-encoding-y-axis/330298)

<div class="topic-metadata">

**Author:** [@Nabeel\_Ahmed\_NAK](https://discuss.elastic.co/u/Nabeel_Ahmed_NAK)\
**Replies:** 0\
**Last updated:** [April 19, 2023, 11:35am UTC](https://discuss.elastic.co/t/help-me-in-vega-sorting-using-transform-lookup-joined-field-on-encoding-y-axis/330298 "2023-04-19T11:35:23Z")

</div>

Hi I need help in dynamic sort of "asc" and "desc" based upon 3 fields which I need to select one by one from select option front. Currently I'm sorting on the basis of any particular field hardcoded given field. Proble…

---

## [Rollup Job - New data not Rolled Up](https://discuss.elastic.co/t/rollup-job-new-data-not-rolled-up/330006)

<div class="topic-metadata">

**Author:** [@Vitor\_Nilson](https://discuss.elastic.co/u/Vitor_Nilson)\
**Replies:** 3\
**Last updated:** [April 19, 2023, 11:17am UTC](https://discuss.elastic.co/t/rollup-job-new-data-not-rolled-up/330006 "2023-04-19T11:17:27Z")

</div>

Hello, I'm currently creating a rollup job to reduce storage costs in my company. The rollup job worked well, grouped by the fields that I specified. The problem is that only data older than 7 days is being rolled up t…

---

## [Get a substring of a string](https://discuss.elastic.co/t/get-a-substring-of-a-string/330278)

<div class="topic-metadata">

**Author:** [@obelaisk](https://discuss.elastic.co/u/obelaisk)\
**Replies:** 0\
**Last updated:** [April 19, 2023, 8:53am UTC](https://discuss.elastic.co/t/get-a-substring-of-a-string/330278 "2023-04-19T08:53:22Z")

</div>

Hi, im using canvas and i don't know if it's possible to get a substring of a given string in expression editor

---

## [Kibana Dashboard in slideshow Mode](https://discuss.elastic.co/t/kibana-dashboard-in-slideshow-mode/330263)

<div class="topic-metadata">

**Author:** [@Dipesh](https://discuss.elastic.co/u/Dipesh)\
**Replies:** 0\
**Last updated:** [April 19, 2023, 6:01am UTC](https://discuss.elastic.co/t/kibana-dashboard-in-slideshow-mode/330263 "2023-04-19T06:01:16Z")

</div>

Hi, I have some dashboards with multiple visualisation attached in it, since it has 30+ Visualize charts added in the dashboard, its doesn't look good and also unable to see in a single screen, so i am searching for som…

---

## [Possible Bug in Timeline: Fields containing "\\\\" string](https://discuss.elastic.co/t/possible-bug-in-timeline-fields-containing-string/330248)

<div class="topic-metadata">

**Author:** [@nemhods](https://discuss.elastic.co/u/nemhods)\
**Replies:** 0\
**Last updated:** [April 18, 2023, 8:10pm UTC](https://discuss.elastic.co/t/possible-bug-in-timeline-fields-containing-string/330248 "2023-04-18T20:10:42Z")

</div>

Hey, I just experienced a possible bug with timeline: I have found events in a timeline view. All events in my timeline have the field "winlog.event\_data.ShareName "="\\\*\\Archiv". So when I filter for this field, nothi…

---

## [Embedding kibana via fastly edge proxy](https://discuss.elastic.co/t/embedding-kibana-via-fastly-edge-proxy/330242)

<div class="topic-metadata">

**Author:** [@Shubham\_Pancholi](https://discuss.elastic.co/u/Shubham_Pancholi)\
**Replies:** 0\
**Last updated:** [April 18, 2023, 5:23pm UTC](https://discuss.elastic.co/t/embedding-kibana-via-fastly-edge-proxy/330242 "2023-04-18T17:23:33Z")

</div>

We are using Elasticsearch and kibana, we are using kibana to create dashboard which we will are embedding into our system. We don't want to use login in kibana from fontend so we are using our fastly compute edge to re…

---

## [Control visualisation issues](https://discuss.elastic.co/t/control-visualisation-issues/330170)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 3\
**Last updated:** [April 18, 2023, 5:15pm UTC](https://discuss.elastic.co/t/control-visualisation-issues/330170 "2023-04-18T17:15:03Z")

</div>

I have 8.5.3 and control is messed up there as well. it has white background and light color font, hard to see anything. it is fixed in next version, but I am not ready to upgrade . It seems control viz is not good eno…

---

## [Time difference between dashboard and devTools (ElasticSearch)](https://discuss.elastic.co/t/time-difference-between-dashboard-and-devtools-elasticsearch/330236)

<div class="topic-metadata">

**Author:** [@FTOR](https://discuss.elastic.co/u/FTOR)\
**Replies:** 3\
**Last updated:** [April 18, 2023, 5:02pm UTC](https://discuss.elastic.co/t/time-difference-between-dashboard-and-devtools-elasticsearch/330236 "2023-04-18T17:02:54Z")

</div>

Hello, I have a time difference of 2 hours between Elasticsearch and kibana's dashboard. For example, the dashboard shows this date as follow, but the real value is 2023-04-18 13:53:00.890 I changed the Time Zone …

---

## [Last value in painless script](https://discuss.elastic.co/t/last-value-in-painless-script/329298)

<div class="topic-metadata">

**Author:** [@martinsbleu](https://discuss.elastic.co/u/martinsbleu)\
**Replies:** 2\
**Last updated:** [April 18, 2023, 3:32pm UTC](https://discuss.elastic.co/t/last-value-in-painless-script/329298 "2023-04-18T15:32:56Z")

</div>

Hello Team, Like in the title, I am trying to get the last\_value of a field for the Return On Investment calculation. Normally, I can do this in Lens Formula (rf. below) on a monthly index. But I don't know how for a da…

---

## [Alerts in a cluster](https://discuss.elastic.co/t/alerts-in-a-cluster/330203)

<div class="topic-metadata">

**Author:** [@Joelgoncalves3000](https://discuss.elastic.co/u/Joelgoncalves3000)\
**Replies:** 19\
**Last updated:** [April 18, 2023, 2:36pm UTC](https://discuss.elastic.co/t/alerts-in-a-cluster/330203 "2023-04-18T14:36:08Z")

</div>

Is it possible to create a cluster and each node configure rules and when an alert is heard in a node, this alert is replicated to a master node? But I didn't want alerts from other nodes or master's alerts to be replica…

---

## [Possible to disable session timeout for users in Elastic Cloud?](https://discuss.elastic.co/t/possible-to-disable-session-timeout-for-users-in-elastic-cloud/330149)

<div class="topic-metadata">

**Author:** [@pocketcolin](https://discuss.elastic.co/u/pocketcolin)\
**Replies:** 2\
**Last updated:** [April 18, 2023, 2:27pm UTC](https://discuss.elastic.co/t/possible-to-disable-session-timeout-for-users-in-elastic-cloud/330149 "2023-04-18T14:27:24Z")

</div>

We have a dashboard that we display on a TV in the office 24/7 and it seems to get logged out after ~2 weeks. The dashboard graphs are setup to automatically refresh every 10 minutes. We'd prefer if it never logged out b…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=126)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=128)
