# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=217

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 218

---

## [Using Regex in Kibana Query DSL (filter-option in discover mode)](https://discuss.elastic.co/t/using-regex-in-kibana-query-dsl-filter-option-in-discover-mode/303937)

<div class="topic-metadata">

**Author:** [@CaMaNi](https://discuss.elastic.co/u/CaMaNi)\
**Replies:** 4\
**Last updated:** [May 5, 2022, 5:45am UTC](https://discuss.elastic.co/t/using-regex-in-kibana-query-dsl-filter-option-in-discover-mode/303937 "2022-05-05T05:45:38Z")

</div>

Good day everyone, I am relatively new to the use of Kibana. And I have the following problem: I want to filter out all numbers and special characters like "\_" or "-" in a field in Discover mode, so that I only have Le…

---

## [Issue getting Zeek logs into Kibana](https://discuss.elastic.co/t/issue-getting-zeek-logs-into-kibana/303974)

<div class="topic-metadata">

**Author:** [@espressobeanies](https://discuss.elastic.co/u/espressobeanies)\
**Replies:** 3\
**Last updated:** [May 5, 2022, 3:26am UTC](https://discuss.elastic.co/t/issue-getting-zeek-logs-into-kibana/303974 "2022-05-05T03:26:45Z")

</div>

I'm having problems getting my Zeek logs into Kibana using an Elastic Agent that is not Fleet Managed. I'm running the latest and greatest versions of everything and I confirmed I can see dashboard information about the …

---

## [How do I connect Kibana with ES 8.0.0?](https://discuss.elastic.co/t/how-do-i-connect-kibana-with-es-8-0-0/303573)

<div class="topic-metadata">

**Author:** [@McLaine](https://discuss.elastic.co/u/McLaine)\
**Replies:** 1\
**Last updated:** [May 5, 2022, 3:00am UTC](https://discuss.elastic.co/t/how-do-i-connect-kibana-with-es-8-0-0/303573 "2022-05-05T03:00:56Z")

</div>

Hello! My new ES 8.x Cluster works so far but, not with TLS Cluster and I can´t connect Kibana (also 8) with it. \[2022-04-29T07:41:44,969\]\[WARN \]\[o.e.t.OutboundHandler \] \[node1\] send message failed \[channel: Netty4T…

---

## [Data is not populating in kibana](https://discuss.elastic.co/t/data-is-not-populating-in-kibana/303830)

<div class="topic-metadata">

**Author:** [@SnehaB](https://discuss.elastic.co/u/SnehaB)\
**Replies:** 1\
**Last updated:** [May 5, 2022, 2:20am UTC](https://discuss.elastic.co/t/data-is-not-populating-in-kibana/303830 "2022-05-05T02:20:39Z")

</div>

Hi Team, I have created a index on kibana.But I am not able to see the data in the same index. please check the below logs for reference. The logs are showing as follows :- Total time for which application threads we…

---

## [Kibana visualization TSVB not showing entire data and gives error](https://discuss.elastic.co/t/kibana-visualization-tsvb-not-showing-entire-data-and-gives-error/303963)

<div class="topic-metadata">

**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\
**Replies:** 1\
**Last updated:** [May 4, 2022, 7:03pm UTC](https://discuss.elastic.co/t/kibana-visualization-tsvb-not-showing-entire-data-and-gives-error/303963 "2022-05-04T19:03:21Z")

</div>

Hello All, I'm trying create a tsvb in which I need to get data for ex: from past 9 months and while selecting the time range I get below error,Mostly I'm facing this issue due to TSVB only.I've a dashboard considerin…

---

## [Filtering documents with another index](https://discuss.elastic.co/t/filtering-documents-with-another-index/303956)

<div class="topic-metadata">

**Author:** [@Andrea\_Bozzano](https://discuss.elastic.co/u/Andrea_Bozzano)\
**Replies:** 1\
**Last updated:** [May 4, 2022, 4:51pm UTC](https://discuss.elastic.co/t/filtering-documents-with-another-index/303956 "2022-05-04T16:51:32Z")

</div>

Hi everyone, and thank you for your time reading this. I'm having two indexes, let's think of those, for sake of semplicity, as: index1: log content file index2: list of hostnames Now, I developed a dashboard in Kiba…

---

## [Configure Dashboard Only Mode](https://discuss.elastic.co/t/configure-dashboard-only-mode/303373)

<div class="topic-metadata">

**Author:** [@vuhai\_fo4](https://discuss.elastic.co/u/vuhai_fo4)\
**Replies:** 1\
**Last updated:** [May 4, 2022, 4:37pm UTC](https://discuss.elastic.co/t/configure-dashboard-only-mode/303373 "2022-05-04T16:37:53Z")

</div>

Hi, I am learning about Dashboard Only Mode in Kibana. I'm currently having a problem where this mode in Advance Setting is deprecated. Please guide me how to fix this issue and share me more documents about this mode …

---

## [Exclude fields Kibana Discover](https://discuss.elastic.co/t/exclude-fields-kibana-discover/303930)

<div class="topic-metadata">

**Author:** [@Alessio\_Creo](https://discuss.elastic.co/u/Alessio_Creo)\
**Replies:** 1\
**Last updated:** [May 4, 2022, 4:34pm UTC](https://discuss.elastic.co/t/exclude-fields-kibana-discover/303930 "2022-05-04T16:34:16Z")

</div>

Hi there, I wonder if it's possible in Kibana discover to exclude certain fields from the result set (not just hide the columns). In other words I onder if is possible to user the \_source filtering in Kibana. Thank you…

---

## [Multi tenancy PDF reports generation using Kibana / Canvas](https://discuss.elastic.co/t/multi-tenancy-pdf-reports-generation-using-kibana-canvas/303016)

<div class="topic-metadata">

**Author:** [@nicolas.brasey](https://discuss.elastic.co/u/nicolas.brasey)\
**Replies:** 1\
**Last updated:** [May 4, 2022, 4:05pm UTC](https://discuss.elastic.co/t/multi-tenancy-pdf-reports-generation-using-kibana-canvas/303016 "2022-05-04T16:05:42Z")

</div>

Hi, I'm new here and I'm investigating how I can use Canvas to generate nice looking PDF reports for different tenants. I'm new to Kibana and I'm not sure if what I'm trying to achieve is even possible . I'm using the v…

---

## [How can I send alerts to telegram?](https://discuss.elastic.co/t/how-can-i-send-alerts-to-telegram/303652)

<div class="topic-metadata">

**Author:** [@perea870724](https://discuss.elastic.co/u/perea870724)\
**Replies:** 1\
**Last updated:** [May 4, 2022, 3:51pm UTC](https://discuss.elastic.co/t/how-can-i-send-alerts-to-telegram/303652 "2022-05-04T15:51:38Z")

</div>

Hello community, how can I send alerts to telegram?

---

## [Sum table and sum scorecard does not match](https://discuss.elastic.co/t/sum-table-and-sum-scorecard-does-not-match/303940)

<div class="topic-metadata">

**Author:** [@PaulaCM](https://discuss.elastic.co/u/PaulaCM)\
**Replies:** 4\
**Last updated:** [May 4, 2022, 3:23pm UTC](https://discuss.elastic.co/t/sum-table-and-sum-scorecard-does-not-match/303940 "2022-05-04T15:23:24Z")

</div>

Hello! Using the kibana dashboard, I have this table with visit duration values, and at the bottom we can see the sum of all values Then I try to show this sum value in an scorecard using the same function sum(visitD…

---

## [Can't build Kibana: yarn build](https://discuss.elastic.co/t/cant-build-kibana-yarn-build/303750)

<div class="topic-metadata">

**Author:** [@MichelPitz](https://discuss.elastic.co/u/MichelPitz)\
**Replies:** 5\
**Last updated:** [May 4, 2022, 2:58pm UTC](https://discuss.elastic.co/t/cant-build-kibana-yarn-build/303750 "2022-05-04T14:58:22Z")

</div>

Hello, I created a custom connector like Pargerduty, the connector is working localhost perfectly. However I cannot build the projectm I got the following error. Actually, even if git clone the project and do not chan…

---

## [Aggregating on two filter terms or more](https://discuss.elastic.co/t/aggregating-on-two-filter-terms-or-more/302385)

<div class="topic-metadata">

**Author:** [@Jack6128](https://discuss.elastic.co/u/Jack6128)\
**Replies:** 1\
**Last updated:** [May 4, 2022, 2:58pm UTC](https://discuss.elastic.co/t/aggregating-on-two-filter-terms-or-more/302385 "2022-05-04T14:58:17Z")

</div>

How can I aggregate on two filter terms (strings) or more based on values stored in the same value column?, at the moment I'm trying to make a dashboard warning lamp based on two alarm events e.g. "door-tamper-1" and "do…

---

## [Observability -\> metrics -\> inventory. dashboards, where the data is stored?](https://discuss.elastic.co/t/observability-metrics-inventory-dashboards-where-the-data-is-stored/301888)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 1\
**Last updated:** [May 4, 2022, 2:19pm UTC](https://discuss.elastic.co/t/observability-metrics-inventory-dashboards-where-the-data-is-stored/301888 "2022-05-04T14:19:17Z")

</div>

Hi, I need to create dashboards identically to the ones in the kibana section, Observability -\> metrics -\> inventory. Where this data is stored for this dashboards?

---

## [Geopoint Help](https://discuss.elastic.co/t/geopoint-help/303946)

<div class="topic-metadata">

**Author:** [@AmyMCollins](https://discuss.elastic.co/u/AmyMCollins)\
**Replies:** 1\
**Last updated:** [May 4, 2022, 1:48pm UTC](https://discuss.elastic.co/t/geopoint-help/303946 "2022-05-04T13:48:16Z")

</div>

Hi, I am trying to create some dummy data. I want to add a geopoint using the dev tools but I am struggling. I am using the below api: PUT my\_index/\_doc/1 { "text": "Geo-point as an object", "location": { "la…

---

## [Exclude with pattern matching on a field](https://discuss.elastic.co/t/exclude-with-pattern-matching-on-a-field/303942)

<div class="topic-metadata">

**Author:** [@scrouet](https://discuss.elastic.co/u/scrouet)\
**Replies:** 0\
**Last updated:** [May 4, 2022, 12:38pm UTC](https://discuss.elastic.co/t/exclude-with-pattern-matching-on-a-field/303942 "2022-05-04T12:38:29Z")

</div>

Hello, I've enabled AppLocker on Windows and I want to exclude some false positive based on a field named data.win.ruleAndFileData.filePath when it contains strings like "%OSDRIVE%\\USERS\\SAM\_ACCOUNT\_NAME\\APPDATA\\LOCAL\\T…

---

## [How to create kibana plugin and render \`Hello World\`](https://discuss.elastic.co/t/how-to-create-kibana-plugin-and-render-hello-world/303154)

<div class="topic-metadata">

**Author:** [@Azhar\_Uddin1](https://discuss.elastic.co/u/Azhar_Uddin1)\
**Replies:** 7\
**Last updated:** [May 3, 2022, 9:12am UTC](https://discuss.elastic.co/t/how-to-create-kibana-plugin-and-render-hello-world/303154 "2022-05-03T09:12:00Z")

</div>

I started kibana and elastic search a few days ago just trying to create the kibana plugin and render hello world on a page I went to mixuan sun website for a guide but I couldn't get it even I watched the official vi…

---

## [White space in numeric field kibana 8.1.1](https://discuss.elastic.co/t/white-space-in-numeric-field-kibana-8-1-1/301932)

<div class="topic-metadata">

**Author:** [@INS](https://discuss.elastic.co/u/INS)\
**Replies:** 1\
**Last updated:** [May 4, 2022, 10:58am UTC](https://discuss.elastic.co/t/white-space-in-numeric-field-kibana-8-1-1/301932 "2022-05-04T10:58:08Z")

</div>

Hi I saw some differences between kibana 7 and 8 in visible fields. How can I change the display format without spaces for multiple number halves for ex. id\_mts 3 467 857 678 and the second topic How can I define …

---

## [Transforms failed status with runtime fields](https://discuss.elastic.co/t/transforms-failed-status-with-runtime-fields/303444)

<div class="topic-metadata">

**Author:** [@Ann\_Abbott](https://discuss.elastic.co/u/Ann_Abbott)\
**Replies:** 3\
**Last updated:** [May 4, 2022, 10:48am UTC](https://discuss.elastic.co/t/transforms-failed-status-with-runtime-fields/303444 "2022-05-04T10:48:12Z")

</div>

Hi, I am trying to create a transforms index with runtime-fields called adoption\_time\_stamp that's in a date format. Every time I try to create a transforms index with this adoption\_time\_stamp runtime\_field, I get t…

---

## [Filter data in kibana based on begin date and end date](https://discuss.elastic.co/t/filter-data-in-kibana-based-on-begin-date-and-end-date/303905)

<div class="topic-metadata">

**Author:** [@Alice\_Ionescu](https://discuss.elastic.co/u/Alice_Ionescu)\
**Replies:** 1\
**Last updated:** [May 4, 2022, 10:41am UTC](https://discuss.elastic.co/t/filter-data-in-kibana-based-on-begin-date-and-end-date/303905 "2022-05-04T10:41:53Z")

</div>

Hello, I have a table with information and a begin date and an end date. I want to be able to filter data that are valid in the given interval. Do you have an idea on how to do this? Thanks!

---

## [Connecting elastic agents over internet](https://discuss.elastic.co/t/connecting-elastic-agents-over-internet/303915)

<div class="topic-metadata">

**Author:** [@Kevin\_Hemelrijk](https://discuss.elastic.co/u/Kevin_Hemelrijk)\
**Replies:** 0\
**Last updated:** [May 4, 2022, 8:42am UTC](https://discuss.elastic.co/t/connecting-elastic-agents-over-internet/303915 "2022-05-04T08:42:45Z")

</div>

Hello, We have a question about connecting elastic agents on remote networks over the internet to our internal fleet server/elastic cluster. Is it possible to connect a remote elastic agent (on a different network) ove…

---

## [Unable to login to kibana](https://discuss.elastic.co/t/unable-to-login-to-kibana/303863)

<div class="topic-metadata">

**Author:** [@cool999](https://discuss.elastic.co/u/cool999)\
**Replies:** 2\
**Last updated:** [May 4, 2022, 8:32am UTC](https://discuss.elastic.co/t/unable-to-login-to-kibana/303863 "2022-05-04T08:32:35Z")

</div>

Hi Team, I have installed es cluster v 7.16.2. kibana is installed on two servers. If kibana service is running on both servers, then i am not able to login to kibana. If its stopped on one of the server, then able to…

---

## [Metric - show last consecutive values](https://discuss.elastic.co/t/metric-show-last-consecutive-values/303902)

<div class="topic-metadata">

**Author:** [@Itiel\_Olenick](https://discuss.elastic.co/u/Itiel_Olenick)\
**Replies:** 0\
**Last updated:** [May 4, 2022, 5:47am UTC](https://discuss.elastic.co/t/metric-show-last-consecutive-values/303902 "2022-05-04T05:47:05Z")

</div>

Hi there, We have data coming in from a health check we preform on our services, and i am trying to figure out a way to create a metric that will show the last consecutive fails. The data field for the health-check is …

---

## [Kibana Unable to retrieve version information from Elasticsearch nodes. socket hang up](https://discuss.elastic.co/t/kibana-unable-to-retrieve-version-information-from-elasticsearch-nodes-socket-hang-up/303528)

<div class="topic-metadata">

**Author:** [@Roshan1](https://discuss.elastic.co/u/Roshan1)\
**Replies:** 8\
**Last updated:** [May 4, 2022, 4:46am UTC](https://discuss.elastic.co/t/kibana-unable-to-retrieve-version-information-from-elasticsearch-nodes-socket-hang-up/303528 "2022-05-04T04:46:46Z")

</div>

Dear Team, kindly advise why error occurs when starting Kibana? da46c1"}} {"ecs":{"version":"8.0.0"},"@timestamp":"2022-04-28T18:37:07.516+04:00","message":"Unable to retrieve version information from Elasticsearch nod…

---

## [Revisiting "lookup table" concept](https://discuss.elastic.co/t/revisiting-lookup-table-concept/303791)

<div class="topic-metadata">

**Author:** [@erik\_n](https://discuss.elastic.co/u/erik_n)\
**Replies:** 8\
**Last updated:** [May 4, 2022, 12:13am UTC](https://discuss.elastic.co/t/revisiting-lookup-table-concept/303791 "2022-05-04T00:13:13Z")

</div>

I've read all of the previous topics about this and done some searching, but I can't figure it out, so I'll ask specifically about my situation. I have one cluster that is explicitly for reporting and visualizations. I'…

---

## [Restoring datastreams isn't working as planned](https://discuss.elastic.co/t/restoring-datastreams-isnt-working-as-planned/303870)

<div class="topic-metadata">

**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\
**Replies:** 1\
**Last updated:** [May 4, 2022, 12:12am UTC](https://discuss.elastic.co/t/restoring-datastreams-isnt-working-as-planned/303870 "2022-05-04T00:12:32Z")

</div>

I'm getting to about the end of my wits with trying to restore a backing index to a datastream. Essentially I have a set up that I have a datastream-1 with backing indices .ds-datastream-1-2022-04.01 and .ds-datastream…

---

## [Add agent feedback](https://discuss.elastic.co/t/add-agent-feedback/303883)

<div class="topic-metadata">

**Author:** [@schapman](https://discuss.elastic.co/u/schapman)\
**Replies:** 0\
**Last updated:** [May 3, 2022, 10:26pm UTC](https://discuss.elastic.co/t/add-agent-feedback/303883 "2022-05-03T22:26:06Z")

</div>

Clicking on "Send Feedback" brings me here, so here I will leave my feed back. When adding an agent. step 2 is "Download the Elastic Agent to your host" and step 3 is "Enroll and start the Elastic Agent". The combinatio…

---

## [Unable to Delete Copied Dashboard Panel](https://discuss.elastic.co/t/unable-to-delete-copied-dashboard-panel/302677)

<div class="topic-metadata">

**Author:** [@Bartu\_Gokalp](https://discuss.elastic.co/u/Bartu_Gokalp)\
**Replies:** 14\
**Last updated:** [May 3, 2022, 10:15pm UTC](https://discuss.elastic.co/t/unable-to-delete-copied-dashboard-panel/302677 "2022-05-03T22:15:40Z")

</div>

I have copied a from one dashboard to another. Than I have deleted original panel from first dashboard. Options \> more \> Delete from dashboard is not visible in editing mode. So, I am unable to delete it. (see screensho…

---

## [Kibana lens formula distinct by rows](https://discuss.elastic.co/t/kibana-lens-formula-distinct-by-rows/303847)

<div class="topic-metadata">

**Author:** [@wiwinagtor](https://discuss.elastic.co/u/wiwinagtor)\
**Replies:** 2\
**Last updated:** [May 3, 2022, 6:31pm UTC](https://discuss.elastic.co/t/kibana-lens-formula-distinct-by-rows/303847 "2022-05-03T18:31:00Z")

</div>

Is there a way to perform using kibana lens a calculated fields table where the formulas changes by row? For example: Or there is another way to do it, Thanks everyone

---

## [How to update a plugin to a newer yet unsupported Kibana version?](https://discuss.elastic.co/t/how-to-update-a-plugin-to-a-newer-yet-unsupported-kibana-version/303560)

<div class="topic-metadata">

**Author:** [@pritster5](https://discuss.elastic.co/u/pritster5)\
**Replies:** 1\
**Last updated:** [May 3, 2022, 4:59pm UTC](https://discuss.elastic.co/t/how-to-update-a-plugin-to-a-newer-yet-unsupported-kibana-version/303560 "2022-05-03T16:59:22Z")

</div>

I am trying to update a plugin (SigmaUI by SOC Prime) written for an older version of Kibana (confirmed working on ELK 7.5). The plugin does not work on ELK 8.X+ (because the way plugins are handled was changed in ELK 7…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=216)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=218)
