# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=132

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 133

---

## [Today Avg value vs Moving AVG (14 days) value to trigger an alert based on DSL query](https://discuss.elastic.co/t/today-avg-value-vs-moving-avg-14-days-value-to-trigger-an-alert-based-on-dsl-query/328527)

<div class="topic-metadata">

**Author:** [@cpu](https://discuss.elastic.co/u/cpu)\
**Replies:** 9\
**Last updated:** [April 1, 2023, 9:38am UTC](https://discuss.elastic.co/t/today-avg-value-vs-moving-avg-14-days-value-to-trigger-an-alert-based-on-dsl-query/328527 "2023-04-01T09:38:23Z")

</div>

Hi All, I'm trying to setup an alert (in Stack Management --\> Rules and Connectors -- Rules) to track when the "today" AVG value on a field is lower than the moving AVG (14 days) value for the same field. This check sh…

---

## [How to link to entries triggering a rule](https://discuss.elastic.co/t/how-to-link-to-entries-triggering-a-rule/327334)

<div class="topic-metadata">

**Author:** [@blindahl](https://discuss.elastic.co/u/blindahl)\
**Replies:** 6\
**Last updated:** [March 31, 2023, 9:19pm UTC](https://discuss.elastic.co/t/how-to-link-to-entries-triggering-a-rule/327334 "2023-03-31T21:19:26Z")

</div>

We have setup some Rules and Alerts that should trigger if we get error in our logs. In the mail that is sent when a rule is triggered it feels natural to include a link to Discover view with some filters setup and with …

---

## [How to apply a filter to a control visualization](https://discuss.elastic.co/t/how-to-apply-a-filter-to-a-control-visualization/328968)

<div class="topic-metadata">

**Author:** [@richfish](https://discuss.elastic.co/u/richfish)\
**Replies:** 3\
**Last updated:** [March 31, 2023, 2:52pm UTC](https://discuss.elastic.co/t/how-to-apply-a-filter-to-a-control-visualization/328968 "2023-03-31T14:52:45Z")

</div>

In Kibana 7.10.1, I have a dashboard with multiple visualizations, each with its own filter based on the same property on the same index. I added a dropdown control that will allow the user to filter by one of those valu…

---

## [Python code in Kibana](https://discuss.elastic.co/t/python-code-in-kibana/329044)

<div class="topic-metadata">

**Author:** [@ANUBHAV\_GUPTA](https://discuss.elastic.co/u/ANUBHAV_GUPTA)\
**Replies:** 1\
**Last updated:** [March 31, 2023, 2:01pm UTC](https://discuss.elastic.co/t/python-code-in-kibana/329044 "2023-03-31T14:01:54Z")

</div>

Can we run python functions in Kibana in order to perform some transformation on the index data?

---

## [Python UDF in Kibana](https://discuss.elastic.co/t/python-udf-in-kibana/328933)

<div class="topic-metadata">

**Author:** [@ANUBHAV\_GUPTA](https://discuss.elastic.co/u/ANUBHAV_GUPTA)\
**Replies:** 2\
**Last updated:** [March 31, 2023, 1:27pm UTC](https://discuss.elastic.co/t/python-udf-in-kibana/328933 "2023-03-31T13:27:26Z")

</div>

Can we build python UDF or any other language's UDF to transform data queried from Kibana dev-tools console?

---

## [Trying to export data reports using Kibana discover but could not be able to export large no. of data](https://discuss.elastic.co/t/trying-to-export-data-reports-using-kibana-discover-but-could-not-be-able-to-export-large-no-of-data/329018)

<div class="topic-metadata">

**Author:** [@Mangesh\_Mathe](https://discuss.elastic.co/u/Mangesh_Mathe)\
**Replies:** 6\
**Last updated:** [March 31, 2023, 12:28pm UTC](https://discuss.elastic.co/t/trying-to-export-data-reports-using-kibana-discover-but-could-not-be-able-to-export-large-no-of-data/329018 "2023-03-31T12:28:37Z")

</div>

Hello Team, I'm trying to download discover search data with some of my filters. However, When I download I see that document limit in CSV is at 10,000 documents. Any way or setting to increase document download limit…

---

## [Can't log in Kibana when a specific elasticsearch node is not running](https://discuss.elastic.co/t/cant-log-in-kibana-when-a-specific-elasticsearch-node-is-not-running/328914)

<div class="topic-metadata">

**Author:** [@jgl75](https://discuss.elastic.co/u/jgl75)\
**Replies:** 5\
**Last updated:** [March 31, 2023, 11:52am UTC](https://discuss.elastic.co/t/cant-log-in-kibana-when-a-specific-elasticsearch-node-is-not-running/328914 "2023-03-31T11:52:03Z")

</div>

Hi everyone, First time poster here. I'm working with ELK since a few weeks, learning new things every day :slight\_smile: I've solved all my problems except one. I have a 3 nodes elasticsearch cluster and a separate …

---

## [How to hide rows in table without affecting search criteria](https://discuss.elastic.co/t/how-to-hide-rows-in-table-without-affecting-search-criteria/329033)

<div class="topic-metadata">

**Author:** [@abhardwaj](https://discuss.elastic.co/u/abhardwaj)\
**Replies:** 4\
**Last updated:** [March 31, 2023, 9:35am UTC](https://discuss.elastic.co/t/how-to-hide-rows-in-table-without-affecting-search-criteria/329033 "2023-03-31T09:35:36Z")

</div>

Hello, I am creating a kibana visualization table based on few test run results in my elasticsearch index. Following is the composition of value hits. Following is the output table having the results captured T…

---

## [Kibana URL template dynamic url generation](https://discuss.elastic.co/t/kibana-url-template-dynamic-url-generation/328951)

<div class="topic-metadata">

**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\
**Replies:** 0\
**Last updated:** [March 30, 2023, 2:50pm UTC](https://discuss.elastic.co/t/kibana-url-template-dynamic-url-generation/328951 "2023-03-30T14:50:20Z")

</div>

Hello All, I've a requrirement where in When I create index pattern under which I'd like to create url template that would dynamically update the host and port. ex: http://abc:8089/web-ui/#/login I'd like to know a w…

---

## [No support for nested math in formula?](https://discuss.elastic.co/t/no-support-for-nested-math-in-formula/327977)

<div class="topic-metadata">

**Author:** [@smchamberlin](https://discuss.elastic.co/u/smchamberlin)\
**Replies:** 2\
**Last updated:** [March 31, 2023, 1:49am UTC](https://discuss.elastic.co/t/no-support-for-nested-math-in-formula/327977 "2023-03-31T01:49:35Z")

</div>

Hello, I was able to get this working in python, but getting the following error when I try to nest math functions in an equation for a heat map lens: Is this not supported? Thank you.

---

## [Kibana Refused To connect on Browser after Installation (via RPM)](https://discuss.elastic.co/t/kibana-refused-to-connect-on-browser-after-installation-via-rpm/328873)

<div class="topic-metadata">

**Author:** [@abbyode](https://discuss.elastic.co/u/abbyode)\
**Replies:** 3\
**Last updated:** [March 30, 2023, 8:49pm UTC](https://discuss.elastic.co/t/kibana-refused-to-connect-on-browser-after-installation-via-rpm/328873 "2023-03-30T20:49:43Z")

</div>

I am having issues connecting to kibana via browser. The service started successfully via cli but I'm unable to connect on port 5601 - "refused connection". Kibana.yml file: For more configuration options see the confi…

---

## [Dataview with some columns excluded](https://discuss.elastic.co/t/dataview-with-some-columns-excluded/328942)

<div class="topic-metadata">

**Author:** [@joerg55](https://discuss.elastic.co/u/joerg55)\
**Replies:** 9\
**Last updated:** [March 30, 2023, 3:16pm UTC](https://discuss.elastic.co/t/dataview-with-some-columns-excluded/328942 "2023-03-30T15:16:35Z")

</div>

Hi community, I want to create a data view of an index without some columns. The background is that these columns lead to the display of 'no results' with certain filters. I only have this one index and I don't have the…

---

## [Trying to create tranform job which would not go through all documents](https://discuss.elastic.co/t/trying-to-create-tranform-job-which-would-not-go-through-all-documents/328905)

<div class="topic-metadata">

**Author:** [@Kiril\_Karamanolev](https://discuss.elastic.co/u/Kiril_Karamanolev)\
**Replies:** 3\
**Last updated:** [March 30, 2023, 3:14pm UTC](https://discuss.elastic.co/t/trying-to-create-tranform-job-which-would-not-go-through-all-documents/328905 "2023-03-30T15:14:14Z")

</div>

Hello, Started using transform but I am struggling to find how to look at only recent documents not from the beginning (because I have 1-year historical data) The JSON of the job is: { "id": "ops\_authrate\_1m", "au…

---

## [Scripted field for date + 12 months](https://discuss.elastic.co/t/scripted-field-for-date-12-months/328715)

<div class="topic-metadata">

**Author:** [@redfox](https://discuss.elastic.co/u/redfox)\
**Replies:** 2\
**Last updated:** [March 30, 2023, 12:30pm UTC](https://discuss.elastic.co/t/scripted-field-for-date-12-months/328715 "2023-03-30T12:30:44Z")

</div>

How would I create a scripted field in Kibana that adds 12 months to the value in existing date field in the index?

---

## [I have created a Kibana dashboard for Top 10 Process by CPU Usage , the data is not coming up for 15 or 30 minutes or even for 1 hour](https://discuss.elastic.co/t/i-have-created-a-kibana-dashboard-for-top-10-process-by-cpu-usage-the-data-is-not-coming-up-for-15-or-30-minutes-or-even-for-1-hour/328760)

<div class="topic-metadata">

**Author:** [@AKAM14](https://discuss.elastic.co/u/AKAM14)\
**Replies:** 3\
**Last updated:** [March 30, 2023, 12:30pm UTC](https://discuss.elastic.co/t/i-have-created-a-kibana-dashboard-for-top-10-process-by-cpu-usage-the-data-is-not-coming-up-for-15-or-30-minutes-or-even-for-1-hour/328760 "2023-03-30T12:30:41Z")

</div>

Kibana version -7.17.3, elk version 7.17.3 I have used the field - system.process.cpu.total.pct and aggregation is average... i dont see data coming up for 15 or 30 mints or even 1 hour interval time . I only get it f…

---

## [Kibana Dashboards giving 403 error in dashboards when more visualizations added in 8.6.2 version](https://discuss.elastic.co/t/kibana-dashboards-giving-403-error-in-dashboards-when-more-visualizations-added-in-8-6-2-version/328883)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 2\
**Last updated:** [March 30, 2023, 7:30am UTC](https://discuss.elastic.co/t/kibana-dashboards-giving-403-error-in-dashboards-when-more-visualizations-added-in-8-6-2-version/328883 "2023-03-30T07:30:28Z")

</div>

Hi all, I recently migrated my kibana dashboards from 7.9 to 7.17 and then to 8.6.2 However i'm getting an error in my dashboards as shown below. Apparently this error appears when there are approximately 20 visualiza…

---

## [Kibana not running as a service](https://discuss.elastic.co/t/kibana-not-running-as-a-service/328829)

<div class="topic-metadata">

**Author:** [@LilBaloche](https://discuss.elastic.co/u/LilBaloche)\
**Replies:** 12\
**Last updated:** [March 30, 2023, 8:35am UTC](https://discuss.elastic.co/t/kibana-not-running-as-a-service/328829 "2023-03-30T08:35:51Z")

</div>

Hello everyone, I've installed ELK stack on an Ubuntu Server 22.04. My problem is that I've start elasticsearch with "systemctl start elasticsearch.service" because bin/elasticsearch does not work, I always have an err…

---

## [Newbie question regarding maps](https://discuss.elastic.co/t/newbie-question-regarding-maps/328744)

<div class="topic-metadata">

**Author:** [@GKre](https://discuss.elastic.co/u/GKre)\
**Replies:** 3\
**Last updated:** [March 30, 2023, 8:11am UTC](https://discuss.elastic.co/t/newbie-question-regarding-maps/328744 "2023-03-30T08:11:24Z")

</div>

Hello community, i checked to find the answer searching but maybe the question is to easy :wink: how do i configure an overlay in a map so that every "point" where a network communication ended has a tooltip with the "…

---

## [Way for implementing proxy server goint to elastic cluster](https://discuss.elastic.co/t/way-for-implementing-proxy-server-goint-to-elastic-cluster/328889)

<div class="topic-metadata">

**Author:** [@minkiyo](https://discuss.elastic.co/u/minkiyo)\
**Replies:** 0\
**Last updated:** [March 30, 2023, 6:46am UTC](https://discuss.elastic.co/t/way-for-implementing-proxy-server-goint-to-elastic-cluster/328889 "2023-03-30T06:46:09Z")

</div>

Hello I am suffuring now. I am implementing Proxy Server going to Elastic Cluster . Broswer --\> Elastic Proxy Server (Nginx(prot:8081) --\> Express(port:7081)) --\> Elastic Cluster(http://10.150.25.119:5601) When I t…

---

## [Space privilege](https://discuss.elastic.co/t/space-privilege/328796)

<div class="topic-metadata">

**Author:** [@\_Thomas](https://discuss.elastic.co/u/_Thomas)\
**Replies:** 5\
**Last updated:** [March 30, 2023, 6:23am UTC](https://discuss.elastic.co/t/space-privilege/328796 "2023-03-30T06:23:43Z")

</div>

Hi Guys, I'm trying to limit the Space to particular Users - this however, doesn't seem to work the way I'd expect. The Problem is as following: I did create a new Space called "SoC", created a new Role called "TestUs…

---

## [Canvas with background image and Map zoom click not working](https://discuss.elastic.co/t/canvas-with-background-image-and-map-zoom-click-not-working/328543)

<div class="topic-metadata">

**Author:** [@syed786](https://discuss.elastic.co/u/syed786)\
**Replies:** 3\
**Last updated:** [March 30, 2023, 4:53am UTC](https://discuss.elastic.co/t/canvas-with-background-image-and-map-zoom-click-not-working/328543 "2023-03-30T04:53:59Z")

</div>

Hello, I am using Kibana Canvas and I have added an image as a background. On top of the image, I have added a map element. However, when I try to click on the zoom button in the map, it does not work. Additionally, whe…

---

## [Aggregate by sum and avg in visualization](https://discuss.elastic.co/t/aggregate-by-sum-and-avg-in-visualization/328534)

<div class="topic-metadata">

**Author:** [@Toaster2-0](https://discuss.elastic.co/u/Toaster2-0)\
**Replies:** 8\
**Last updated:** [March 30, 2023, 12:28am UTC](https://discuss.elastic.co/t/aggregate-by-sum-and-avg-in-visualization/328534 "2023-03-30T00:28:14Z")

</div>

Hello, I am having multiple Docker compose projects of which I collect metrics. I want to see the CPU of the Projects over Time. That means I need to add the amount of cpu ticks of every document with the same docker.c…

---

## [How to set a filter to a map embedded in canvas](https://discuss.elastic.co/t/how-to-set-a-filter-to-a-map-embedded-in-canvas/328820)

<div class="topic-metadata">

**Author:** [@obelaisk](https://discuss.elastic.co/u/obelaisk)\
**Replies:** 1\
**Last updated:** [March 29, 2023, 9:45pm UTC](https://discuss.elastic.co/t/how-to-set-a-filter-to-a-map-embedded-in-canvas/328820 "2023-03-29T21:45:32Z")

</div>

Hi, Im new to canvas and i was trying to know if it's possible to set a filter values of a map based in a value that i get from the urlparam function, like this: var\_set name="var" value={urlparam param="parameter" defa…

---

## [How can we browse kibana url on https](https://discuss.elastic.co/t/how-can-we-browse-kibana-url-on-https/328712)

<div class="topic-metadata">

**Author:** [@devdev7711](https://discuss.elastic.co/u/devdev7711)\
**Replies:** 7\
**Last updated:** [March 29, 2023, 8:29pm UTC](https://discuss.elastic.co/t/how-can-we-browse-kibana-url-on-https/328712 "2023-03-29T20:29:45Z")

</div>

I need to browse kibana url on https I have create certificate using command ./bin/elasticsearch-certutil http I got cert file and kibana key I generated both I copied in kibana config folder server.port: 8600 serv…

---

## [Kibana Scripted Fields aggregation](https://discuss.elastic.co/t/kibana-scripted-fields-aggregation/328779)

<div class="topic-metadata">

**Author:** [@sam\_sawant](https://discuss.elastic.co/u/sam_sawant)\
**Replies:** 1\
**Last updated:** [March 29, 2023, 4:11pm UTC](https://discuss.elastic.co/t/kibana-scripted-fields-aggregation/328779 "2023-03-29T16:11:33Z")

</div>

I am new to kibana and trying to create dashboard. I have 4 scripted fields which are calculating dollar savings for specific process due to automation. i am trying to get sum of these 4 scripted fields to show total sav…

---

## [Data Table multiple fields](https://discuss.elastic.co/t/data-table-multiple-fields/328710)

<div class="topic-metadata">

**Author:** [@shayme](https://discuss.elastic.co/u/shayme)\
**Replies:** 2\
**Last updated:** [March 29, 2023, 3:19pm UTC](https://discuss.elastic.co/t/data-table-multiple-fields/328710 "2023-03-29T15:19:35Z")

</div>

I have data table with multiple fields. I'm trying to show only unique value of one of my fields. I red a lot about this problem and saw "bucket split" answers but I don't have this feature on my elastic 8.6.2 I w…

---

## [415 error when uploading ndjson to kibana](https://discuss.elastic.co/t/415-error-when-uploading-ndjson-to-kibana/328455)

<div class="topic-metadata">

**Author:** [@amesl](https://discuss.elastic.co/u/amesl)\
**Replies:** 10\
**Last updated:** [March 29, 2023, 3:00pm UTC](https://discuss.elastic.co/t/415-error-when-uploading-ndjson-to-kibana/328455 "2023-03-29T15:00:13Z")

</div>

I need to upload an ndjson dashboard file to the kibana endpoint in Java. The below command is successful with the ndjson files: curl -X POST api/saved\_objects/\_import?overwrite=true -H "kbn-xsrf: true" --form file=@fil…

---

## [I got diffirent result with same filter between unique\_count and list-group-terms in kibana](https://discuss.elastic.co/t/i-got-diffirent-result-with-same-filter-between-unique-count-and-list-group-terms-in-kibana/327721)

<div class="topic-metadata">

**Author:** [@hiteny](https://discuss.elastic.co/u/hiteny)\
**Replies:** 2\
**Last updated:** [March 29, 2023, 2:29pm UTC](https://discuss.elastic.co/t/i-got-diffirent-result-with-same-filter-between-unique-count-and-list-group-terms-in-kibana/327721 "2023-03-29T14:29:57Z")

</div>

In the black rectangle of the picture,I have the TERMS result:461, But,the CARDINALITY result is 460! They both have the same filter,I don't know what makes these result.

---

## [Probleme dashboard font size in visualization in kibana after migration from 7.10 to 7.17](https://discuss.elastic.co/t/probleme-dashboard-font-size-in-visualization-in-kibana-after-migration-from-7-10-to-7-17/328721)

<div class="topic-metadata">

**Author:** [@elaydi\_elagal](https://discuss.elastic.co/u/elaydi_elagal)\
**Replies:** 9\
**Last updated:** [March 29, 2023, 10:46am UTC](https://discuss.elastic.co/t/probleme-dashboard-font-size-in-visualization-in-kibana-after-migration-from-7-10-to-7-17/328721 "2023-03-29T10:46:23Z")

</div>

How can I change font size of labels in visualization in kibana 7.17 for all dashboard or kept my dashboards format in 7.10 without change in 7.17

---

## [Issue for connection from proxy server to kibana](https://discuss.elastic.co/t/issue-for-connection-from-proxy-server-to-kibana/328783)

<div class="topic-metadata">

**Author:** [@minkiyo](https://discuss.elastic.co/u/minkiyo)\
**Replies:** 2\
**Last updated:** [March 29, 2023, 9:10am UTC](https://discuss.elastic.co/t/issue-for-connection-from-proxy-server-to-kibana/328783 "2023-03-29T09:10:25Z")

</div>

Hello Nowadays, I am building proxy server in front of Elastic cluster(k List item ibana). Broswer --\> new proxy server (nginx --\> express) --\> Elastic cluster(kibana). All the Kibana url will be passing in new pr…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=131)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=133)
