# Kibana **URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=137 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 138 --- ## [Canvas: timefilter being ignored](https://discuss.elastic.co/t/canvas-timefilter-being-ignored/327376)
**Author:** [@JeroenK](https://discuss.elastic.co/u/JeroenK)\ **Replies:** 2\ **Last updated:** [March 12, 2023, 9:28am UTC](https://discuss.elastic.co/t/canvas-timefilter-being-ignored/327376 "2023-03-12T09:28:26Z")
Ok, this used to work somewhere in release 8.5 or before (I did not get around posting this for some months, at that moment I fixed the issue with a workaround, but I'm still puzzled about it) timefilter column="timesta… --- ## [Scripted fields: text field returns null](https://discuss.elastic.co/t/scripted-fields-text-field-returns-null/327178)
**Author:** [@RonGros](https://discuss.elastic.co/u/RonGros)\ **Replies:** 5\ **Last updated:** [March 12, 2023, 6:54am UTC](https://discuss.elastic.co/t/scripted-fields-text-field-returns-null/327178 "2023-03-12T06:54:03Z")
Hi, I have an index with a lot of fields. I am trying to create a scripted field that will do some string manipulation on another field, but when I try to access it - I keep getting null What I've noticed is that if I t… --- ## [Waiting for all shards copies to be active](https://discuss.elastic.co/t/waiting-for-all-shards-copies-to-be-active/327360)
**Author:** [@Gaurav\_kr](https://discuss.elastic.co/u/Gaurav_kr)\ **Replies:** 1\ **Last updated:** [March 11, 2023, 4:33pm UTC](https://discuss.elastic.co/t/waiting-for-all-shards-copies-to-be-active/327360 "2023-03-11T16:33:36Z")
Hi Team, I am using basic license version 8.0.0 of ELK, which is setup using docker. We are using ILM for hot, warm and cold phase but after completing the hot phase it is waiting in warm phase with an action "Waiting … --- ## [Kibana Vega: simple text-label](https://discuss.elastic.co/t/kibana-vega-simple-text-label/327489)
**Author:** [@joerg55](https://discuss.elastic.co/u/joerg55)\ **Replies:** 0\ **Last updated:** [March 11, 2023, 7:05pm UTC](https://discuss.elastic.co/t/kibana-vega-simple-text-label/327489 "2023-03-11T19:05:11Z")
Hi community, I need a simple text in vertical orientation. I found this: https://vega.github.io/vega/docs/marks/text/ but I'm not very familiar with vega and this example is not to understand by me. Can somebody give… --- ## [How to make a time series of discrete events](https://discuss.elastic.co/t/how-to-make-a-time-series-of-discrete-events/327367)
**Author:** [@gyannea](https://discuss.elastic.co/u/gyannea)\ **Replies:** 4\ **Last updated:** [March 10, 2023, 9:15pm UTC](https://discuss.elastic.co/t/how-to-make-a-time-series-of-discrete-events/327367 "2023-03-10T21:15:44Z")
It seems I can only make time series (including with TSBV) of numerical values. What I have are gateways that send a finite set of event types. What I would like to do is plot in a time series which type event was sent.… --- ## [How can I force the order of labels?](https://discuss.elastic.co/t/how-can-i-force-the-order-of-labels/327424)
**Author:** [@Wpq](https://discuss.elastic.co/u/Wpq)\ **Replies:** 2\ **Last updated:** [March 10, 2023, 7:29pm UTC](https://discuss.elastic.co/t/how-can-i-force-the-order-of-labels/327424 "2023-03-10T19:29:22Z")
I have data with a label priority that I show on a heatmap: The order at the bottom is not the one I would like to have (which is CRITICAL, HIGH, ...) How can I instruct Kibana to use a specific order for the labels… --- ## [Using essql query results a second query against another index](https://discuss.elastic.co/t/using-essql-query-results-a-second-query-against-another-index/327396)
**Author:** [@dreynolds](https://discuss.elastic.co/u/dreynolds)\ **Replies:** 2\ **Last updated:** [March 10, 2023, 6:42pm UTC](https://discuss.elastic.co/t/using-essql-query-results-a-second-query-against-another-index/327396 "2023-03-10T18:42:26Z")
In Canvas I'm attempting to query an index, return the results of a specific column, and then query another index with the results of the original query. An example would be two indices: Index 1: login\_activity; two fi… --- ## [Disable enrolment-token requirement on initial startup of Elasticsearch and Kibana](https://discuss.elastic.co/t/disable-enrolment-token-requirement-on-initial-startup-of-elasticsearch-and-kibana/327399)
**Author:** [@Matt\_Johnston](https://discuss.elastic.co/u/Matt_Johnston)\ **Replies:** 6\ **Last updated:** [March 10, 2023, 6:08pm UTC](https://discuss.elastic.co/t/disable-enrolment-token-requirement-on-initial-startup-of-elasticsearch-and-kibana/327399 "2023-03-10T18:08:02Z")
Hello. I'm running Elasticsearch and Kibana via docker containers, whose images I'm building from the Dockerfiles from this repository: GitHub - elastic/dockerfiles: Dockerfiles for the official Elastic Stack images. On … --- ## [Time series line chart querying two different indexes](https://discuss.elastic.co/t/time-series-line-chart-querying-two-different-indexes/327233)
**Author:** [@Tom\_White](https://discuss.elastic.co/u/Tom_White)\ **Replies:** 2\ **Last updated:** [March 10, 2023, 4:58pm UTC](https://discuss.elastic.co/t/time-series-line-chart-querying-two-different-indexes/327233 "2023-03-10T16:58:48Z")
Hello, I would like to create a very simple time series line chart in Kibana. One line would be a filtered aggregation (count) from Index A, and the other line would be a filtered aggregation (count) from Index B. Is thi… --- ## [Search functionality in Elastic Stack fails with a proxy error](https://discuss.elastic.co/t/search-functionality-in-elastic-stack-fails-with-a-proxy-error/327372)
**Author:** [@Bhanuji\_paluri](https://discuss.elastic.co/u/Bhanuji_paluri)\ **Replies:** 1\ **Last updated:** [March 10, 2023, 4:24pm UTC](https://discuss.elastic.co/t/search-functionality-in-elastic-stack-fails-with-a-proxy-error/327372 "2023-03-10T16:24:07Z")
when the search is filtered with indices of large size and with more no of days ex: more than 7 days. Steps to reproduce: Login to Kibana service: https://docklin-efk-ks.sel .rnd.internal.com/ select index pattern d… --- ## [Dashboard filtering](https://discuss.elastic.co/t/dashboard-filtering/327437)
**Author:** [@Alice\_Ionescu](https://discuss.elastic.co/u/Alice_Ionescu)\ **Replies:** 2\ **Last updated:** [March 10, 2023, 4:17pm UTC](https://discuss.elastic.co/t/dashboard-filtering/327437 "2023-03-10T16:17:40Z")
Hello, I want to add a filter that eliminates the records with type Disconnect and have user admin. So only for user admin to eliminate the Disconnect events. I've tried this, but it is not ok { "query": { "boo… --- ## [SLM cron expression](https://discuss.elastic.co/t/slm-cron-expression/327357)
**Author:** [@Gaurav\_kr](https://discuss.elastic.co/u/Gaurav_kr)\ **Replies:** 1\ **Last updated:** [March 10, 2023, 12:55pm UTC](https://discuss.elastic.co/t/slm-cron-expression/327357 "2023-03-10T12:55:36Z")
Hi Team, I am using a slm policy and wanted to add the cron expression such that it run on every 26th day. e.g for 1st month jan it run on 26/01/2023 and then run on +26 days that is 21/02/2023 and so on. Can someone pl… --- ## [Boxplot, Title Y-axis](https://discuss.elastic.co/t/boxplot-title-y-axis/327441)
**Author:** [@joerg55](https://discuss.elastic.co/u/joerg55)\ **Replies:** 0\ **Last updated:** [March 10, 2023, 10:57am UTC](https://discuss.elastic.co/t/boxplot-title-y-axis/327441 "2023-03-10T10:57:50Z")
Hi community, the Y-title of my boxplot should be 'Percent'. But the Chart shows the Title like this: The source of the chart is this: { "$schema": "https://vega.github.io/schema/vega-lite/v5.json", "title": "Re… --- ## [How to Add Another Host To Kibana On Different Device or Server](https://discuss.elastic.co/t/how-to-add-another-host-to-kibana-on-different-device-or-server/327250)
**Author:** [@Tw1cUser](https://discuss.elastic.co/u/Tw1cUser)\ **Replies:** 4\ **Last updated:** [March 10, 2023, 9:39am UTC](https://discuss.elastic.co/t/how-to-add-another-host-to-kibana-on-different-device-or-server/327250 "2023-03-10T09:39:40Z")
I want add more host to my kibana on windows server 2019, but i have no idea how to do it. Anyone can help me with that simple question? --- ## [How Exclude option in kibana tag cloud works?](https://discuss.elastic.co/t/how-exclude-option-in-kibana-tag-cloud-works/327365)
**Author:** [@Mehran\_Goodarzi](https://discuss.elastic.co/u/Mehran_Goodarzi)\ **Replies:** 0\ **Last updated:** [March 9, 2023, 1:40pm UTC](https://discuss.elastic.co/t/how-exclude-option-in-kibana-tag-cloud-works/327365 "2023-03-09T13:40:04Z")
Hi there, I have a field called "Ticket Text" that has fielddata enabled, the field contains paragraphs of text, when I use Exclude option to exclude words like : "at","in", "the" does it exclude only the word or the w… --- ## [Watches not writing to wacher history](https://discuss.elastic.co/t/watches-not-writing-to-wacher-history/327364)
**Author:** [@Sagi\_Bensimon](https://discuss.elastic.co/u/Sagi_Bensimon)\ **Replies:** 3\ **Last updated:** [March 9, 2023, 5:38pm UTC](https://discuss.elastic.co/t/watches-not-writing-to-wacher-history/327364 "2023-03-09T17:38:23Z")
.watcher-history indices aren't being created and are also missing. There aren't any errors and action.auto\_create\_index isn't set anywhere. --- ## [Statuscode-404-error-not-found-message-not-found](https://discuss.elastic.co/t/statuscode-404-error-not-found-message-not-found/327359)
**Author:** [@thomas4](https://discuss.elastic.co/u/thomas4)\ **Replies:** 1\ **Last updated:** [March 9, 2023, 4:13pm UTC](https://discuss.elastic.co/t/statuscode-404-error-not-found-message-not-found/327359 "2023-03-09T16:13:29Z")
Hi all, I created a space and when i try to login to it i get the message above, but if i sign in with the super user account and then sign out, and sign in with my new space account it works. Any help would be grateful. … --- ## [Static variables in Kibana discovery script](https://discuss.elastic.co/t/static-variables-in-kibana-discovery-script/327125)
**Author:** [@gyannea](https://discuss.elastic.co/u/gyannea)\ **Replies:** 6\ **Last updated:** [March 9, 2023, 3:41pm UTC](https://discuss.elastic.co/t/static-variables-in-kibana-discovery-script/327125 "2023-03-09T15:41:23Z")
What should be something very simple. I want to create a new field for a Kibana discovery and dashboard that simply counts the received document. So each document will have an index 0, 1, 2, ..., n. However, I do not se… --- ## [Integration Elastic Dashboard to Power BI Visualization](https://discuss.elastic.co/t/integration-elastic-dashboard-to-power-bi-visualization/327018)
**Author:** [@aisyaharifin](https://discuss.elastic.co/u/aisyaharifin)\ **Replies:** 6\ **Last updated:** [March 9, 2023, 3:29pm UTC](https://discuss.elastic.co/t/integration-elastic-dashboard-to-power-bi-visualization/327018 "2023-03-09T15:29:07Z")
Hi, I would like to ask is there any way I could integrate my Elastic Dashboard to Power BI? I have a situation to export my Elastic Uptime Availability Dashboard to Power BI. Is there any way I could just drop the… --- ## ["Unable to completely restore the URL" when viewing results from osquery in discover](https://discuss.elastic.co/t/unable-to-completely-restore-the-url-when-viewing-results-from-osquery-in-discover/327231)
**Author:** [@nemhods](https://discuss.elastic.co/u/nemhods)\ **Replies:** 1\ **Last updated:** [March 9, 2023, 3:07pm UTC](https://discuss.elastic.co/t/unable-to-completely-restore-the-url-when-viewing-results-from-osquery-in-discover/327231 "2023-03-09T15:07:37Z")
Hey, When investigating the results from osquery, I want to use the "View in Discover" button: It leads me to discover, but applies no filters and shows an error popup with the message "Unable to completely restore … --- ## [Format a Scripted Date Field](https://discuss.elastic.co/t/format-a-scripted-date-field/327309)
**Author:** [@ashryver1995](https://discuss.elastic.co/u/ashryver1995)\ **Replies:** 1\ **Last updated:** [March 9, 2023, 2:55pm UTC](https://discuss.elastic.co/t/format-a-scripted-date-field/327309 "2023-03-09T14:55:54Z")
Hi, I have a scripted field using painless that is referencing from an existing field in my index. Below is the code snippet: if(doc\['market'\].value == 'SAMPLE'){ if (doc\['date field\].size()==0){ return ''… --- ## [Group input values in Bar Chart Aggregation](https://discuss.elastic.co/t/group-input-values-in-bar-chart-aggregation/327306)
**Author:** [@Miriam99](https://discuss.elastic.co/u/Miriam99)\ **Replies:** 1\ **Last updated:** [March 9, 2023, 2:22pm UTC](https://discuss.elastic.co/t/group-input-values-in-bar-chart-aggregation/327306 "2023-03-09T14:22:37Z")
If I have documents where value.keyword = A1, value.keyword = A2 ... A3, B1, B2, B3 How would I get all of the A values to group together and B values to group together instead of having 6 separate bars on my graph? Th… --- ## [The chart shows a time beyond what's actually in data](https://discuss.elastic.co/t/the-chart-shows-a-time-beyond-whats-actually-in-data/327292)
**Author:** [@SamuelSMendes](https://discuss.elastic.co/u/SamuelSMendes)\ **Replies:** 1\ **Last updated:** [March 9, 2023, 1:57pm UTC](https://discuss.elastic.co/t/the-chart-shows-a-time-beyond-whats-actually-in-data/327292 "2023-03-09T13:57:54Z")
So I'm making this chart to pick up some data cross time but the chart shows data that doesn't exist yet. In a time that is yet to come: Latest timestamp in preview: The chart: How can I make so the chart will fol… --- ## [Kibana Lens - Cannot cutomize timestamp on several months, weeks or years](https://discuss.elastic.co/t/kibana-lens-cannot-cutomize-timestamp-on-several-months-weeks-or-years/327156)
**Author:** [@xchess64](https://discuss.elastic.co/u/xchess64)\ **Replies:** 1\ **Last updated:** [March 9, 2023, 1:31pm UTC](https://discuss.elastic.co/t/kibana-lens-cannot-cutomize-timestamp-on-several-months-weeks-or-years/327156 "2023-03-09T13:31:15Z")
I am creating a Lens Visualization on Kibana 7.17 When I try to customize my timestamp to aggregate data on several days, I can do it easily However, when I try to aggregate my data on several weeks, months or years… --- ## [How to load CSV data to already created and existing Index in Kibana?](https://discuss.elastic.co/t/how-to-load-csv-data-to-already-created-and-existing-index-in-kibana/326979)
**Author:** [@hitnalli\_praveen](https://discuss.elastic.co/u/hitnalli_praveen)\ **Replies:** 8\ **Last updated:** [March 9, 2023, 11:55am UTC](https://discuss.elastic.co/t/how-to-load-csv-data-to-already-created-and-existing-index-in-kibana/326979 "2023-03-09T11:55:07Z")
I've a unique requirement and trying few new things. My main objective is to display scanned data from Tenable Nessus (showing total count of scanned vulnerabilities - Critical, High and Medium) on to Kibana Dashboard af… --- ## [Vega kibana tooltip](https://discuss.elastic.co/t/vega-kibana-tooltip/327093)
**Author:** [@Farah\_Bhr](https://discuss.elastic.co/u/Farah_Bhr)\ **Replies:** 2\ **Last updated:** [March 9, 2023, 11:12am UTC](https://discuss.elastic.co/t/vega-kibana-tooltip/327093 "2023-03-09T11:12:05Z")
Hello everyone, I want to adjust kibana vega tooltip, make it smaller and modify its fontsize, its position, etc Meaning that I want to modify the styling of the vega Kibana tooltip from this to something like this … --- ## [Elasticsearch Setup Custom Index and Write Issue](https://discuss.elastic.co/t/elasticsearch-setup-custom-index-and-write-issue/327332)
**Author:** [@elk-siwm](https://discuss.elastic.co/u/elk-siwm)\ **Replies:** 0\ **Last updated:** [March 9, 2023, 8:28am UTC](https://discuss.elastic.co/t/elasticsearch-setup-custom-index-and-write-issue/327332 "2023-03-09T08:28:45Z")
Elasticsearch get logs via filebeats shipper default settings. All custom index settings were configured on /etc/filebeats/filebeats.yml file. This is my configuration file: output.elasticsearch: # Array of hosts to c… --- ## [Sorting by ranges in old (not Lens) visualizations](https://discuss.elastic.co/t/sorting-by-ranges-in-old-not-lens-visualizations/327176)
**Author:** [@InesCM](https://discuss.elastic.co/u/InesCM)\ **Replies:** 2\ **Last updated:** [March 9, 2023, 8:12am UTC](https://discuss.elastic.co/t/sorting-by-ranges-in-old-not-lens-visualizations/327176 "2023-03-09T08:12:11Z")
Hi! I have a set of old visualizations in Kibana, built not in Lens but in the Legacy visualization tool. They are donut charts split in slices by some custom defined numerical ranges. The problem is that when I built … --- ## [Split a field value in a Visualization](https://discuss.elastic.co/t/split-a-field-value-in-a-visualization/327303)
**Author:** [@Jonathan\_Fernandez](https://discuss.elastic.co/u/Jonathan_Fernandez)\ **Replies:** 3\ **Last updated:** [March 9, 2023, 7:37am UTC](https://discuss.elastic.co/t/split-a-field-value-in-a-visualization/327303 "2023-03-09T07:37:53Z")
Hi everyone, Currently I am trying to split the value of a field (an email) by the '@' in an "Aggregation Based - Data Table" visualization at Kibana, so the expected output for an email field with value name@domain.com … --- ## [Monitoring Metricbeat On Kibana](https://discuss.elastic.co/t/monitoring-metricbeat-on-kibana/327244)
**Author:** [@Tw1cUser](https://discuss.elastic.co/u/Tw1cUser)\ **Replies:** 5\ **Last updated:** [March 9, 2023, 6:15am UTC](https://discuss.elastic.co/t/monitoring-metricbeat-on-kibana/327244 "2023-03-09T06:15:15Z")
Hi all, I use windows server 2019 to monitor my laptop's data system, but after I do the .\\metricbeat setup, after Index setup finished. Loading dashboards (Kibana must be running and reachable) Loaded dashboards I chec… [Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=136) [Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=138)