# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=141

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 142

---

## [How to get a series aggregation in Lens?](https://discuss.elastic.co/t/how-to-get-a-series-aggregation-in-lens/326438)

<div class="topic-metadata">

**Author:** [@Rick\_V](https://discuss.elastic.co/u/Rick_V)\
**Replies:** 0\
**Last updated:** [February 24, 2023, 1:00pm UTC](https://discuss.elastic.co/t/how-to-get-a-series-aggregation-in-lens/326438 "2023-02-24T13:00:31Z")

</div>

Hi, Currently i am using a TSVB visualization with a series aggregation like described in this post to visualize apm data, it shows the duration of a series of transactions. The aggregation first takes the average of t…

---

## [Ingest Pipeline with filebeat not working](https://discuss.elastic.co/t/ingest-pipeline-with-filebeat-not-working/326357)

<div class="topic-metadata">

**Author:** [@heisenberg93](https://discuss.elastic.co/u/heisenberg93)\
**Replies:** 4\
**Last updated:** [February 24, 2023, 2:28pm UTC](https://discuss.elastic.co/t/ingest-pipeline-with-filebeat-not-working/326357 "2023-02-24T14:28:07Z")

</div>

Hi, We have a few Linux hosts which monitor each other with Pacemaker. Here we would like to evaluate the pacemaker.log for this. With Filebeat the log arrives, but the message is not yet analyzable. Therefore I thought…

---

## [Display a simple ratio](https://discuss.elastic.co/t/display-a-simple-ratio/326345)

<div class="topic-metadata">

**Author:** [@lamdba](https://discuss.elastic.co/u/lamdba)\
**Replies:** 3\
**Last updated:** [February 24, 2023, 1:28pm UTC](https://discuss.elastic.co/t/display-a-simple-ratio/326345 "2023-02-24T13:28:38Z")

</div>

Hello there, Driving me crazy, I'm trying to show a small indicator with all the data I've in my dataset. logically, it seems extremely easy to produce, but I can't figure how it can be done in Kibana. { "\_index": "m…

---

## [Control filter in kibana doesnt work properly](https://discuss.elastic.co/t/control-filter-in-kibana-doesnt-work-properly/326160)

<div class="topic-metadata">

**Author:** [@Apoorva\_Shandilya](https://discuss.elastic.co/u/Apoorva_Shandilya)\
**Replies:** 7\
**Last updated:** [February 24, 2023, 9:15am UTC](https://discuss.elastic.co/t/control-filter-in-kibana-doesnt-work-properly/326160 "2023-02-24T09:15:41Z")

</div>

Hi I am a beginner here . Currently, we use Control Filter in Kibana Dashboards, but this filter doesn't work as we expected, so that it can't recommend us what are the available values for each field. which are the o…

---

## [Where to find the generated CSV report](https://discuss.elastic.co/t/where-to-find-the-generated-csv-report/326395)

<div class="topic-metadata">

**Author:** [@ashd](https://discuss.elastic.co/u/ashd)\
**Replies:** 1\
**Last updated:** [February 24, 2023, 9:09am UTC](https://discuss.elastic.co/t/where-to-find-the-generated-csv-report/326395 "2023-02-24T09:09:43Z")

</div>

How can I access the CSV reports that were generated? What are the step to access them?!

---

## [Use Elastic GET script output in Lens (or TSVB) panel](https://discuss.elastic.co/t/use-elastic-get-script-output-in-lens-or-tsvb-panel/326349)

<div class="topic-metadata">

**Author:** [@ivh](https://discuss.elastic.co/u/ivh)\
**Replies:** 5\
**Last updated:** [February 24, 2023, 8:37am UTC](https://discuss.elastic.co/t/use-elastic-get-script-output-in-lens-or-tsvb-panel/326349 "2023-02-24T08:37:50Z")

</div>

Hello! Tried solving this via an Elastic Support case, got nowhere ... hoping the community can help. I have a working GET script that successfully retrieves a single document (from an entire index) that contains the ma…

---

## [How to create readonly public API Key?](https://discuss.elastic.co/t/how-to-create-readonly-public-api-key/326270)

<div class="topic-metadata">

**Author:** [@indicozy](https://discuss.elastic.co/u/indicozy)\
**Replies:** 1\
**Last updated:** [February 24, 2023, 2:15am UTC](https://discuss.elastic.co/t/how-to-create-readonly-public-api-key/326270 "2023-02-24T02:15:20Z")

</div>

I'm trying to create an API Key for users to search on my frontend, however, I cannot find configuration example for readonly users to specific indices. Could you please share your config for this setting?

---

## [Error when trying to install Fleet Server to a centralized host](https://discuss.elastic.co/t/error-when-trying-to-install-fleet-server-to-a-centralized-host/326387)

<div class="topic-metadata">

**Author:** [@Stephen\_Johnston](https://discuss.elastic.co/u/Stephen_Johnston)\
**Replies:** 0\
**Last updated:** [February 24, 2023, 1:18am UTC](https://discuss.elastic.co/t/error-when-trying-to-install-fleet-server-to-a-centralized-host/326387 "2023-02-24T01:18:00Z")

</div>

Hi, I'm trying to add a new fleet server in kibana. When I try to install the Fleet Server Agent on a centralized host, I'm getting errors after I input the following code: curl -L -O https://artifacts.elastic.co/downlo…

---

## [Runtime Field Convert String to Number](https://discuss.elastic.co/t/runtime-field-convert-string-to-number/326370)

<div class="topic-metadata">

**Author:** [@sparker22](https://discuss.elastic.co/u/sparker22)\
**Replies:** 1\
**Last updated:** [February 23, 2023, 10:49pm UTC](https://discuss.elastic.co/t/runtime-field-convert-string-to-number/326370 "2023-02-23T22:49:05Z")

</div>

Is there a way to convert string / text to a number in a runtime field script? We have data that is getting ingested into Elastic as keyword / text fields, but I need to convert that data at runtime from a string to numb…

---

## [DakMode in kibana spaces](https://discuss.elastic.co/t/dakmode-in-kibana-spaces/326343)

<div class="topic-metadata">

**Author:** [@thomas4](https://discuss.elastic.co/u/thomas4)\
**Replies:** 8\
**Last updated:** [February 23, 2023, 8:38pm UTC](https://discuss.elastic.co/t/dakmode-in-kibana-spaces/326343 "2023-02-23T20:38:14Z")

</div>

Hi all, new to Kibana and setting up new spaces, but i want them in darkMode but can't figure out how to do it, any help would be appreciated. I'm using Kibana 7.6.1

---

## [Logs reflecting late in kibana](https://discuss.elastic.co/t/logs-reflecting-late-in-kibana/326291)

<div class="topic-metadata">

**Author:** [@Haneesha](https://discuss.elastic.co/u/Haneesha)\
**Replies:** 1\
**Last updated:** [February 23, 2023, 6:39pm UTC](https://discuss.elastic.co/t/logs-reflecting-late-in-kibana/326291 "2023-02-23T18:39:42Z")

</div>

Hi Team, Logs are reflecting after 20 min after the generation for a particular service. How can I sort this out.

---

## [Kibana Search on field endTime not working](https://discuss.elastic.co/t/kibana-search-on-field-endtime-not-working/326318)

<div class="topic-metadata">

**Author:** [@garmy](https://discuss.elastic.co/u/garmy)\
**Replies:** 1\
**Last updated:** [February 23, 2023, 6:04pm UTC](https://discuss.elastic.co/t/kibana-search-on-field-endtime-not-working/326318 "2023-02-23T18:04:56Z")

</div>

Hi gang, Trying to identify documents that have a time field called "endTime" \>= future times..... since this field is a UTC Time field, some may, and do have 'Future' dates and those are what I want to see (as well as …

---

## [How to analyse nested fields?](https://discuss.elastic.co/t/how-to-analyse-nested-fields/325944)

<div class="topic-metadata">

**Author:** [@Amine16](https://discuss.elastic.co/u/Amine16)\
**Replies:** 1\
**Last updated:** [February 23, 2023, 3:28pm UTC](https://discuss.elastic.co/t/how-to-analyse-nested-fields/325944 "2023-02-23T15:28:45Z")

</div>

I am working in e-health project and we have a lot of clinical data (JSON format) stored in our data base. We want to do some research in these data, that’s why we think that Elastic Search tool can help us in this proj…

---

## [Copy Dashboard th onther space](https://discuss.elastic.co/t/copy-dashboard-th-onther-space/326194)

<div class="topic-metadata">

**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\
**Replies:** 1\
**Last updated:** [February 23, 2023, 2:26pm UTC](https://discuss.elastic.co/t/copy-dashboard-th-onther-space/326194 "2023-02-23T14:26:36Z")

</div>

Hi, I copied a dashboard to another space, but I noticed that there are visualizations whose X axis is not the same For example : i copy this dashboard (original) But i get this

---

## [Kibana Visualizations](https://discuss.elastic.co/t/kibana-visualizations/326251)

<div class="topic-metadata">

**Author:** [@joelle\_umutoni](https://discuss.elastic.co/u/joelle_umutoni)\
**Replies:** 6\
**Last updated:** [February 23, 2023, 2:05pm UTC](https://discuss.elastic.co/t/kibana-visualizations/326251 "2023-02-23T14:05:29Z")

</div>

What to do when you click on visualization for filtering purpose but the other visualization does not update to show the data related to the one clicked.

---

## [Kibana Vega : Sum of field of latest unique values](https://discuss.elastic.co/t/kibana-vega-sum-of-field-of-latest-unique-values/326047)

<div class="topic-metadata">

**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\
**Replies:** 9\
**Last updated:** [February 23, 2023, 1:57pm UTC](https://discuss.elastic.co/t/kibana-vega-sum-of-field-of-latest-unique-values/326047 "2023-02-23T13:57:07Z")

</div>

Problem statement : I have written a Kibana Vega script to show sum of latest balanceusd field having a unique orgid. I am getting balance logs frequently and every latest log has the updated balance. There can be a numb…

---

## [Vega kibana tag cloud](https://discuss.elastic.co/t/vega-kibana-tag-cloud/326265)

<div class="topic-metadata">

**Author:** [@uae\_user](https://discuss.elastic.co/u/uae_user)\
**Replies:** 1\
**Last updated:** [February 23, 2023, 1:50pm UTC](https://discuss.elastic.co/t/vega-kibana-tag-cloud/326265 "2023-02-23T13:50:24Z")

</div>

Hi, I'm trying to build a tag cloud using custom visualization, I tried to follow Vega tag cloud format and replaced the value part with url , I'm sure about the query as I tried it on the dev tool and it worked. ' I'm…

---

## [Why Kibana not showing date when minimum interval is selected in minutes](https://discuss.elastic.co/t/why-kibana-not-showing-date-when-minimum-interval-is-selected-in-minutes/326319)

<div class="topic-metadata">

**Author:** [@Arshukla](https://discuss.elastic.co/u/Arshukla)\
**Replies:** 1\
**Last updated:** [February 23, 2023, 12:52pm UTC](https://discuss.elastic.co/t/why-kibana-not-showing-date-when-minimum-interval-is-selected-in-minutes/326319 "2023-02-23T12:52:45Z")

</div>

When I am selecting minimum interval as "Minutes", Kibana is not having dates in timestamp column. Whereas when i am selecting "Hour", it is working as per expectation. Screenshot -when minutes selected Screenshot -…

---

## [Controls feature is not working properly](https://discuss.elastic.co/t/controls-feature-is-not-working-properly/326201)

<div class="topic-metadata">

**Author:** [@Apoorva\_Shandilya](https://discuss.elastic.co/u/Apoorva_Shandilya)\
**Replies:** 0\
**Last updated:** [February 22, 2023, 4:17pm UTC](https://discuss.elastic.co/t/controls-feature-is-not-working-properly/326201 "2023-02-22T16:17:40Z")

</div>

Hi Control feature in kibana is not working for me Can you please help Below i have attached the screenshot where i am trying to filter the result . as you can see in first screenshot the list in the drop down …

---

## [Show export button in lens](https://discuss.elastic.co/t/show-export-button-in-lens/326224)

<div class="topic-metadata">

**Author:** [@karlanakamura](https://discuss.elastic.co/u/karlanakamura)\
**Replies:** 1\
**Last updated:** [February 23, 2023, 8:35am UTC](https://discuss.elastic.co/t/show-export-button-in-lens/326224 "2023-02-23T08:35:01Z")

</div>

Hello, I'm using version 8.6.0 in elastic cloud. I would like to know if it is possible to show the export button in lens table as well as in the data table in aggregation based (as shown in the figure below).

---

## [Alerting related queries](https://discuss.elastic.co/t/alerting-related-queries/326167)

<div class="topic-metadata">

**Author:** [@pranati](https://discuss.elastic.co/u/pranati)\
**Replies:** 1\
**Last updated:** [February 23, 2023, 7:56am UTC](https://discuss.elastic.co/t/alerting-related-queries/326167 "2023-02-23T07:56:48Z")

</div>

Hi All, I am new to kibana, I need some help in creating alert if some counts doesn't match between two files. so in elk , i can see alerting option but when i click on it , it goes to create monitor. there is some is…

---

## [Kibana visualization](https://discuss.elastic.co/t/kibana-visualization/326253)

<div class="topic-metadata">

**Author:** [@joelle\_umutoni](https://discuss.elastic.co/u/joelle_umutoni)\
**Replies:** 1\
**Last updated:** [February 23, 2023, 4:36am UTC](https://discuss.elastic.co/t/kibana-visualization/326253 "2023-02-23T04:36:39Z")

</div>

What to do when you click on visualization for filtering purpose but the other visualization does not update to show the data related to the one clicked

---

## [Kibana unable to authenticate user \[elastic\]](https://discuss.elastic.co/t/kibana-unable-to-authenticate-user-elastic/325678)

<div class="topic-metadata">

**Author:** [@chromus](https://discuss.elastic.co/u/chromus)\
**Replies:** 1\
**Last updated:** [February 22, 2023, 10:46pm UTC](https://discuss.elastic.co/t/kibana-unable-to-authenticate-user-elastic/325678 "2023-02-22T22:46:03Z")

</div>

Hello Team. I am running ELK using a docker multi-node deployment. My docker-compose.yml file is almost identical to the example one from the page (Install Elasticsearch with Docker | Elasticsearch Guide \[8.6\] | Elastic)…

---

## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/326196)

<div class="topic-metadata">

**Author:** [@Umbler\_Casel](https://discuss.elastic.co/u/Umbler_Casel)\
**Replies:** 2\
**Last updated:** [February 22, 2023, 10:14pm UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/326196 "2023-02-22T22:14:04Z")

</div>

Kibana Version: 8.6 Elastic Search Version: 8.6 Certificate Used: Rapid SSL SHA1 ( might be the problem, but im not sure ) OS: Ubuntu 22.04 Error: Kibana presents a message on UI with the following: "Kibana serve…

---

## ["Error: fleet-server failed: context canceled" error when trying to "Install Fleet Server to a centralized host"](https://discuss.elastic.co/t/error-fleet-server-failed-context-canceled-error-when-trying-to-install-fleet-server-to-a-centralized-host/326112)

<div class="topic-metadata">

**Author:** [@Matt\_Johnston](https://discuss.elastic.co/u/Matt_Johnston)\
**Replies:** 4\
**Last updated:** [February 22, 2023, 9:30pm UTC](https://discuss.elastic.co/t/error-fleet-server-failed-context-canceled-error-when-trying-to-install-fleet-server-to-a-centralized-host/326112 "2023-02-22T21:30:09Z")

</div>

I am trying to "Add a Fleet Server" but am getting an error when I try to install the Elastic Agent. After running the following command as instructed: curl -L -O https://artifacts.elastic.co/downloads/beats/elastic…

---

## [Kibana upgrade from 7.16.1 to 7.17.8 using docker compose](https://discuss.elastic.co/t/kibana-upgrade-from-7-16-1-to-7-17-8-using-docker-compose/325609)

<div class="topic-metadata">

**Author:** [@Irshu786](https://discuss.elastic.co/u/Irshu786)\
**Replies:** 7\
**Last updated:** [February 22, 2023, 9:25pm UTC](https://discuss.elastic.co/t/kibana-upgrade-from-7-16-1-to-7-17-8-using-docker-compose/325609 "2023-02-22T21:25:20Z")

</div>

What is the procedure to perform kibana upgrade with zero downtime.

---

## [Create time series index from non-time series index](https://discuss.elastic.co/t/create-time-series-index-from-non-time-series-index/326221)

<div class="topic-metadata">

**Author:** [@butchkelley](https://discuss.elastic.co/u/butchkelley)\
**Replies:** 1\
**Last updated:** [February 22, 2023, 8:25pm UTC](https://discuss.elastic.co/t/create-time-series-index-from-non-time-series-index/326221 "2023-02-22T20:25:08Z")

</div>

Hello, I have a non-time series index that is updated on occasion however the data is typically very static. I would like to create a time series index from this data so I can track when it changes. I thought I could …

---

## [How to improve Kibana Dashboard loading Performance](https://discuss.elastic.co/t/how-to-improve-kibana-dashboard-loading-performance/325545)

<div class="topic-metadata">

**Author:** [@ysattvik](https://discuss.elastic.co/u/ysattvik)\
**Replies:** 1\
**Last updated:** [February 22, 2023, 5:59pm UTC](https://discuss.elastic.co/t/how-to-improve-kibana-dashboard-loading-performance/325545 "2023-02-22T17:59:15Z")

</div>

Hi Team, I am using Kibana 8.5.0 And I am using single cluster, single node and index size is also not so big, it is some kb but still while loading the Dashboard, it is taking more than 10 seconds of time. \*\*Is there …

---

## [Unable to restart Kibana after configuring CSV max size](https://discuss.elastic.co/t/unable-to-restart-kibana-after-configuring-csv-max-size/325494)

<div class="topic-metadata">

**Author:** [@maskrider1111](https://discuss.elastic.co/u/maskrider1111)\
**Replies:** 1\
**Last updated:** [February 22, 2023, 5:49pm UTC](https://discuss.elastic.co/t/unable-to-restart-kibana-after-configuring-csv-max-size/325494 "2023-02-22T17:49:52Z")

</div>

Hey guys, My Kibana failed to restart after i changed the CSV setting "maxSizeBytes" in kibana.yml. Its working well if i reverted back the settings. Please advise

---

## [Very big time gap when use wildcard field on one word search](https://discuss.elastic.co/t/very-big-time-gap-when-use-wildcard-field-on-one-word-search/325947)

<div class="topic-metadata">

**Author:** [@913043599](https://discuss.elastic.co/u/913043599)\
**Replies:** 3\
**Last updated:** [February 22, 2023, 3:48pm UTC](https://discuss.elastic.co/t/very-big-time-gap-when-use-wildcard-field-on-one-word-search/325947 "2023-02-22T15:48:19Z")

</div>

Hi, When I used the new field type - wildcard field - for some queries, I found that different query inputs had a significant time difference, even though the input length was always one character: You can see ther…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=140)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=142)
