# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=174

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 175

---

## [Kibana 8.4.2 new Control does not show options for runtime field](https://discuss.elastic.co/t/kibana-8-4-2-new-control-does-not-show-options-for-runtime-field/315015)

<div class="topic-metadata">

**Author:** [@Jonas\_S](https://discuss.elastic.co/u/Jonas_S)\
**Replies:** 7\
**Last updated:** [October 24, 2022, 8:18am UTC](https://discuss.elastic.co/t/kibana-8-4-2-new-control-does-not-show-options-for-runtime-field/315015 "2022-10-24T08:18:44Z")

</div>

Hello, i upgraded to the newest Kibana version to use the new Controls. I have a runtime field in my Data View that gets a value from the indexname: It can be used in all visualizations without problems. I tried to …

---

## [Kibana JSON inpus](https://discuss.elastic.co/t/kibana-json-inpus/317276)

<div class="topic-metadata">

**Author:** [@ChristianOelsner](https://discuss.elastic.co/u/ChristianOelsner)\
**Replies:** 5\
**Last updated:** [October 24, 2022, 7:05am UTC](https://discuss.elastic.co/t/kibana-json-inpus/317276 "2022-10-24T07:05:43Z")

</div>

Hello forum, I am trying to present some metrics in byte or even better gigabytes in a Data table visualization. I am unable to edit the index-pattern, but i can see that it is mapped as a long. I am trying to have th…

---

## [REGION MAP VISUALIZATION DOES NOT LOADING INITIALLY](https://discuss.elastic.co/t/region-map-visualization-does-not-loading-initially/316787)

<div class="topic-metadata">

**Author:** [@Sinchana\_P](https://discuss.elastic.co/u/Sinchana_P)\
**Replies:** 2\
**Last updated:** [October 24, 2022, 1:21am UTC](https://discuss.elastic.co/t/region-map-visualization-does-not-loading-initially/316787 "2022-10-24T01:21:12Z")

</div>

The region map does not load fully in the initial view. Initially, the region map dashboard is shown grey without loading any data in it as shown in the image below: Once page is reloaded or refresh button is clicked…

---

## [Multiple kibana indices in recovered snapshot](https://discuss.elastic.co/t/multiple-kibana-indices-in-recovered-snapshot/317025)

<div class="topic-metadata">

**Author:** [@not\_correct](https://discuss.elastic.co/u/not_correct)\
**Replies:** 6\
**Last updated:** [October 22, 2022, 5:24pm UTC](https://discuss.elastic.co/t/multiple-kibana-indices-in-recovered-snapshot/317025 "2022-10-22T17:24:07Z")

</div>

Hi team, I have recovered a snapshot with multiple kibana indices, please see kibana dedicated indices in the snapshot summary, using GET \_snapshot/rep\_2/monthly-snapshot-2022.09.01?pretty { "feature\_name" :…

---

## [.kibana index failed](https://discuss.elastic.co/t/kibana-index-failed/316948)

<div class="topic-metadata">

**Author:** [@Harper\_S1](https://discuss.elastic.co/u/Harper_S1)\
**Replies:** 8\
**Last updated:** [October 21, 2022, 5:56pm UTC](https://discuss.elastic.co/t/kibana-index-failed/316948 "2022-10-21T17:56:42Z")

</div>

hi, could someone please advise on this. 2022-10-19T04:16:31.786+00:00\]\[INFO \]\[savedobjects-service\] Waiting until all Elasticsearch nodes are compatible with Kibana before starting saved objects migrations... \[2022-10…

---

## [Max number of Spaces and Roles in Kibana](https://discuss.elastic.co/t/max-number-of-spaces-and-roles-in-kibana/316933)

<div class="topic-metadata">

**Author:** [@tifty](https://discuss.elastic.co/u/tifty)\
**Replies:** 2\
**Last updated:** [October 21, 2022, 5:00pm UTC](https://discuss.elastic.co/t/max-number-of-spaces-and-roles-in-kibana/316933 "2022-10-21T17:00:22Z")

</div>

Hi everyone, Is there a max limit to consider for creating Spaces and Roles in Kibana. Moreover, should I worry about cluster performance if I keep increasing number of spaces. Thanks

---

## [Can we restrict Dashboard view for Kibana](https://discuss.elastic.co/t/can-we-restrict-dashboard-view-for-kibana/316989)

<div class="topic-metadata">

**Author:** [@Anil\_Alapati](https://discuss.elastic.co/u/Anil_Alapati)\
**Replies:** 3\
**Last updated:** [October 20, 2022, 5:42pm UTC](https://discuss.elastic.co/t/can-we-restrict-dashboard-view-for-kibana/316989 "2022-10-20T17:42:37Z")

</div>

Hi , i have kibana access, but I can see multiple dashboards, can we restrict the access on specific dashbard

---

## [Kibana - monitors .. which index is in use](https://discuss.elastic.co/t/kibana-monitors-which-index-is-in-use/317111)

<div class="topic-metadata">

**Author:** [@joannejackson](https://discuss.elastic.co/u/joannejackson)\
**Replies:** 0\
**Last updated:** [October 20, 2022, 12:51pm UTC](https://discuss.elastic.co/t/kibana-monitors-which-index-is-in-use/317111 "2022-10-20T12:51:54Z")

</div>

Hi - I'm new to kibana and we set up our first http monitor. My question -for visualization purposes .. what index does that monitor write to?

---

## [Can I use the values from the timepicker into aggregations?](https://discuss.elastic.co/t/can-i-use-the-values-from-the-timepicker-into-aggregations/317067)

<div class="topic-metadata">

**Author:** [@JimClark](https://discuss.elastic.co/u/JimClark)\
**Replies:** 2\
**Last updated:** [October 20, 2022, 12:19pm UTC](https://discuss.elastic.co/t/can-i-use-the-values-from-the-timepicker-into-aggregations/317067 "2022-10-20T12:19:47Z")

</div>

My usecase is as follows: I have a network resource that I need to track the usage of. Every usage of the resource is recorded into a separate document with the total usage @timestamp -\> End of usage @id -\> resour…

---

## [Export Kibana Dashboards from One server to another](https://discuss.elastic.co/t/export-kibana-dashboards-from-one-server-to-another/317101)

<div class="topic-metadata">

**Author:** [@stramzik](https://discuss.elastic.co/u/stramzik)\
**Replies:** 0\
**Last updated:** [October 20, 2022, 11:23am UTC](https://discuss.elastic.co/t/export-kibana-dashboards-from-one-server-to-another/317101 "2022-10-20T11:23:01Z")

</div>

Hello, I have a dashboard created on Kibana 7.8 version I am trying to export and import it onto a different server which is ruining Kibana 8.4 version based on this Saved Objects | Kibana Guide \[7.8\] | Elastic steps …

---

## [Kibana user profile with specific index?](https://discuss.elastic.co/t/kibana-user-profile-with-specific-index/317096)

<div class="topic-metadata">

**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\
**Replies:** 1\
**Last updated:** [October 20, 2022, 10:14am UTC](https://discuss.elastic.co/t/kibana-user-profile-with-specific-index/317096 "2022-10-20T10:14:50Z")

</div>

hello is possible create multi user with same user have a group of index and other is not visible for all? example have 3 index index1 =\>user1 index2 =\>user2 index3 =\>user3 now all index is visible

---

## [Kibana not respect order by date why?](https://discuss.elastic.co/t/kibana-not-respect-order-by-date-why/317046)

<div class="topic-metadata">

**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\
**Replies:** 2\
**Last updated:** [October 20, 2022, 9:47am UTC](https://discuss.elastic.co/t/kibana-not-respect-order-by-date-why/317046 "2022-10-20T09:47:48Z")

</div>

in my index have this "message": "2022-10-08 19:36:24,452 INFO \[org.springframework.web.servlet.DispatcherServlet\] (default task-1) Completed initialization in 15 ms", "@timestamp": "2022-10-19T19:07:49.010Z", …

---

## [Sum of last complete Bucket as a single metric](https://discuss.elastic.co/t/sum-of-last-complete-bucket-as-a-single-metric/314936)

<div class="topic-metadata">

**Author:** [@smueller](https://discuss.elastic.co/u/smueller)\
**Replies:** 3\
**Last updated:** [October 20, 2022, 9:41am UTC](https://discuss.elastic.co/t/sum-of-last-complete-bucket-as-a-single-metric/314936 "2022-10-20T09:41:16Z")

</div>

hi, im looking for a way to display the sum of all values from the last complete bucket of a timeseries. the idea is to display the current sum of all memory ,cores ,requests,disk space, etc. used for a server farm in …

---

## [How to do mathematical operations on 2 variables in tsvb markdown](https://discuss.elastic.co/t/how-to-do-mathematical-operations-on-2-variables-in-tsvb-markdown/317062)

<div class="topic-metadata">

**Author:** [@eleven\_e](https://discuss.elastic.co/u/eleven_e)\
**Replies:** 2\
**Last updated:** [October 20, 2022, 6:29am UTC](https://discuss.elastic.co/t/how-to-do-mathematical-operations-on-2-variables-in-tsvb-markdown/317062 "2022-10-20T06:29:39Z")

</div>

I have 2 variables 'a' and 'b' where i need to perform (b-a)/b operation, how should i achieve it in the markdown? thanks.

---

## [Max Function vs High Count](https://discuss.elastic.co/t/max-function-vs-high-count/316498)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 1\
**Last updated:** [October 20, 2022, 2:20am UTC](https://discuss.elastic.co/t/max-function-vs-high-count/316498 "2022-10-20T02:20:21Z")

</div>

Hi Community, The max function detect anomaly when it will max value for a particular field. For example average life of a person can be 60 and if we are applying max function on age and it detect anomaly age can be 90…

---

## [Kibana Elasticearch configuration](https://discuss.elastic.co/t/kibana-elasticearch-configuration/316915)

<div class="topic-metadata">

**Author:** [@not\_correct](https://discuss.elastic.co/u/not_correct)\
**Replies:** 8\
**Last updated:** [October 19, 2022, 2:45pm UTC](https://discuss.elastic.co/t/kibana-elasticearch-configuration/316915 "2022-10-19T14:45:01Z")

</div>

Hi, I am trying to configure the Kibana file to talk to ELasticsearch. It is deployed on single node EC2 instance on AWS. Here are my config files: kibana.yml # Kibana is served by a back end server. This setting spe…

---

## [How to Apply cross filtering only to plots that can be applied and avoid the remaining](https://discuss.elastic.co/t/how-to-apply-cross-filtering-only-to-plots-that-can-be-applied-and-avoid-the-remaining/316606)

<div class="topic-metadata">

**Author:** [@eleven\_e](https://discuss.elastic.co/u/eleven_e)\
**Replies:** 3\
**Last updated:** [October 18, 2022, 1:52pm UTC](https://discuss.elastic.co/t/how-to-apply-cross-filtering-only-to-plots-that-can-be-applied-and-avoid-the-remaining/316606 "2022-10-18T13:52:17Z")

</div>

I'm working on a dashboard and I have 2 indices with different structure and when i apply the cross filtering by clicking on a particular bar in a bar graph the data gets filtered and some plots turn to 'NO RESULTS FOUND…

---

## [Error 400 when using API to create index pattern](https://discuss.elastic.co/t/error-400-when-using-api-to-create-index-pattern/316791)

<div class="topic-metadata">

**Author:** [@JorisV](https://discuss.elastic.co/u/JorisV)\
**Replies:** 1\
**Last updated:** [October 18, 2022, 9:34am UTC](https://discuss.elastic.co/t/error-400-when-using-api-to-create-index-pattern/316791 "2022-10-18T09:34:52Z")

</div>

Hi, i'm trying to use Kibana API to create an index pattern with a specific ID. Here's my code var req0 = new XMLHttpRequest(); var req1 = new XMLHttpRequest(); req0.open("DELETE","https://my.server/kb/api/index\_patter…

---

## [How to edit role descriptor for a service account](https://discuss.elastic.co/t/how-to-edit-role-descriptor-for-a-service-account/316379)

<div class="topic-metadata">

**Author:** [@CarlosD](https://discuss.elastic.co/u/CarlosD)\
**Replies:** 4\
**Last updated:** [October 17, 2022, 2:20pm UTC](https://discuss.elastic.co/t/how-to-edit-role-descriptor-for-a-service-account/316379 "2022-10-17T14:20:38Z")

</div>

I would like to edit the default role descriptor for service account elastic/kibana, however, I do not find a way to achieve this. Alternatively, I created a role with the privileges I want to have on service account el…

---

## [Exporting and visualizing with surrounding documents](https://discuss.elastic.co/t/exporting-and-visualizing-with-surrounding-documents/316753)

<div class="topic-metadata">

**Author:** [@Jose\_E](https://discuss.elastic.co/u/Jose_E)\
**Replies:** 2\
**Last updated:** [October 17, 2022, 10:28am UTC](https://discuss.elastic.co/t/exporting-and-visualizing-with-surrounding-documents/316753 "2022-10-17T10:28:20Z")

</div>

Hello, I've encountered a rather simple scenario that I don't know how to solve with Kibana. Our current deployment receives logs from all machines in the network, and our goal is to switch to Kibana as a way of debuggin…

---

## [Log file when running Kibana from source](https://discuss.elastic.co/t/log-file-when-running-kibana-from-source/316735)

<div class="topic-metadata">

**Author:** [@Sheereen](https://discuss.elastic.co/u/Sheereen)\
**Replies:** 1\
**Last updated:** [October 17, 2022, 8:38am UTC](https://discuss.elastic.co/t/log-file-when-running-kibana-from-source/316735 "2022-10-17T08:38:10Z")

</div>

Hi, I am running kibana from source. I am not getting the logs whatever be the file I specify in the kibana.yml file. The following is my yml file. server.port: 5600 server.host: \<host\_ip\> elasticsearch.hosts: http:/…

---

## [How to match text fields which ends with .s3.amazonaws.com using KQL?](https://discuss.elastic.co/t/how-to-match-text-fields-which-ends-with-s3-amazonaws-com-using-kql/316731)

<div class="topic-metadata">

**Author:** [@shi](https://discuss.elastic.co/u/shi)\
**Replies:** 2\
**Last updated:** [October 17, 2022, 7:36am UTC](https://discuss.elastic.co/t/how-to-match-text-fields-which-ends-with-s3-amazonaws-com-using-kql/316731 "2022-10-17T07:36:00Z")

</div>

We are trying to match s3.amazonaws.com from the following text field which is indexed. goto-desktop.s3.amazonaws.com We found that 1. DNSQuery : \*amazonaws\* matched amazonaws.com goto-desktop.s3.amazonaws.com 2. D…

---

## [Ho set size search?](https://discuss.elastic.co/t/ho-set-size-search/316666)

<div class="topic-metadata">

**Author:** [@Nikolas1306](https://discuss.elastic.co/u/Nikolas1306)\
**Replies:** 0\
**Last updated:** [October 14, 2022, 6:15pm UTC](https://discuss.elastic.co/t/ho-set-size-search/316666 "2022-10-14T18:15:03Z")

</div>

in kibana discovery search Can't store an async search response larger than \[10485760\] bytes. This limit can be set by changing the \[search.max\_async\_search\_response\_size\] setting.

---

## [Kibana index is not found](https://discuss.elastic.co/t/kibana-index-is-not-found/316612)

<div class="topic-metadata">

**Author:** [@not\_correct](https://discuss.elastic.co/u/not_correct)\
**Replies:** 2\
**Last updated:** [October 14, 2022, 5:07pm UTC](https://discuss.elastic.co/t/kibana-index-is-not-found/316612 "2022-10-14T17:07:41Z")

</div>

Hi, I have Elasticsearch cluster in production set by another person. I need to be able to find and store kibana index. However when I list all the indeces (xxx:9200/\_cat/indices) Kibana related is not there. Is there …

---

## [Unable to export csv](https://discuss.elastic.co/t/unable-to-export-csv/316362)

<div class="topic-metadata">

**Author:** [@rivermigue](https://discuss.elastic.co/u/rivermigue)\
**Replies:** 1\
**Last updated:** [October 14, 2022, 1:58pm UTC](https://discuss.elastic.co/t/unable-to-export-csv/316362 "2022-10-14T13:58:28Z")

</div>

I have recently enabled the xpack plugin for native basic authentication, once I did that, the export csv within kibana stopped working and displaying the following error message: Failed to create report Sorry, you don'…

---

## [Convert text field to keyword using runtime field](https://discuss.elastic.co/t/convert-text-field-to-keyword-using-runtime-field/316572)

<div class="topic-metadata">

**Author:** [@sunilmpatil](https://discuss.elastic.co/u/sunilmpatil)\
**Replies:** 1\
**Last updated:** [October 14, 2022, 12:15am UTC](https://discuss.elastic.co/t/convert-text-field-to-keyword-using-runtime-field/316572 "2022-10-14T00:15:05Z")

</div>

Hi, I have log data ingested into multiple elasticsearch indices. Index pattern is created to generate Kibana dashboard. Some fields are created as text, hence I am not able to use them in Kibana aggregations. I tried u…

---

## [Kibana Canvas expression](https://discuss.elastic.co/t/kibana-canvas-expression/316556)

<div class="topic-metadata">

**Author:** [@Zdeno\_Liska](https://discuss.elastic.co/u/Zdeno_Liska)\
**Replies:** 1\
**Last updated:** [October 13, 2022, 11:43pm UTC](https://discuss.elastic.co/t/kibana-canvas-expression/316556 "2022-10-13T23:43:20Z")

</div>

Hi, please, I have 2 questions: what is the difference between filters and selectFilter In Kibana 8.4 seems like filter is not working anymore: and question no2: Can I have two occurances of selectFilter within o…

---

## [Handling of search bar](https://discuss.elastic.co/t/handling-of-search-bar/316524)

<div class="topic-metadata">

**Author:** [@eshnajain](https://discuss.elastic.co/u/eshnajain)\
**Replies:** 0\
**Last updated:** [October 13, 2022, 10:56am UTC](https://discuss.elastic.co/t/handling-of-search-bar/316524 "2022-10-13T10:56:43Z")

</div>

Hi, I have incorporated kibana search bar in my custom plugin. I am having difficult to call the handler function . I want to refetch data when time range is modified or refresh button is used . Currently it waits for ne…

---

## [KIbana Canvas-large amount of elements and reusable query](https://discuss.elastic.co/t/kibana-canvas-large-amount-of-elements-and-reusable-query/316557)

<div class="topic-metadata">

**Author:** [@Zdeno\_Liska](https://discuss.elastic.co/u/Zdeno_Liska)\
**Replies:** 0\
**Last updated:** [October 13, 2022, 4:05pm UTC](https://discuss.elastic.co/t/kibana-canvas-large-amount-of-elements-and-reusable-query/316557 "2022-10-13T16:05:12Z")

</div>

Hi, ist there any way how to share queries in Kibana's Canvas between elements? I have cca 200 elements, some of them with Histogram query, some of them using histogram query result as input parameter for where clausule…

---

## [Kibana Cannot open monitoring dashboard because remote cluster is not accessable](https://discuss.elastic.co/t/kibana-cannot-open-monitoring-dashboard-because-remote-cluster-is-not-accessable/316028)

<div class="topic-metadata">

**Author:** [@edwardcccc](https://discuss.elastic.co/u/edwardcccc)\
**Replies:** 3\
**Last updated:** [October 13, 2022, 6:17am UTC](https://discuss.elastic.co/t/kibana-cannot-open-monitoring-dashboard-because-remote-cluster-is-not-accessable/316028 "2022-10-13T06:17:05Z")

</div>

I have a ELK 8.4.3 Main Cluster I have ELK self-monitoring enabled on this cluster another ELK 8.4.1 Remote Cluster, on a separate machine, which is not online all the time I only use this cluster to offload data from…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=173)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=175)
