# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=225

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 226

---

## [Проблемы с отображением гео-кластеров на карты](https://discuss.elastic.co/t/topic/301385)

<div class="topic-metadata">

**Author:** [@Fess](https://discuss.elastic.co/u/Fess)\
**Replies:** 1\
**Last updated:** [April 2, 2022, 9:38am UTC](https://discuss.elastic.co/t/topic/301385 "2022-04-02T09:38:47Z")

</div>

Добрый день, рзвёрнут кластер Elasticsearch 7.1.2 в закрытой сети без доступа к интернету. Отображение иочек на карте работает, но при включения режима отображать кластера при количестве более 10000 отображение не происх…

---

## [Wrong sorting of colours in bar chart](https://discuss.elastic.co/t/wrong-sorting-of-colours-in-bar-chart/300955)

<div class="topic-metadata">

**Author:** [@JeroenK](https://discuss.elastic.co/u/JeroenK)\
**Replies:** 2\
**Last updated:** [April 2, 2022, 7:23am UTC](https://discuss.elastic.co/t/wrong-sorting-of-colours-in-bar-chart/300955 "2022-04-02T07:23:21Z")

</div>

I have a bar chart in Canvas for which I want to give each bar a separate colour in a gradient sorted in the same way the bar chart is sorted, example: My code: filters | essql query="select top 10 \\"sales.repres…

---

## [Greedymultine works in simulation but fails when actually used](https://discuss.elastic.co/t/greedymultine-works-in-simulation-but-fails-when-actually-used/301364)

<div class="topic-metadata">

**Author:** [@Patr123](https://discuss.elastic.co/u/Patr123)\
**Replies:** 1\
**Last updated:** [April 2, 2022, 4:26am UTC](https://discuss.elastic.co/t/greedymultine-works-in-simulation-but-fails-when-actually-used/301364 "2022-04-02T04:26:05Z")

</div>

Hello all, I am trying to use the GREEDYMULTILINE in one of ingest pipeline as the GREEDYDATA is not working. So when I do the simulation using my grok processor in dev tools it works just fine but it fails when I actua…

---

## [Reporting Error in Kibana: Spawning Chromium Browser in Docker, Kibana 8](https://discuss.elastic.co/t/reporting-error-in-kibana-spawning-chromium-browser-in-docker-kibana-8/300574)

<div class="topic-metadata">

**Author:** [@Kirubanandhan](https://discuss.elastic.co/u/Kirubanandhan)\
**Replies:** 12\
**Last updated:** [April 1, 2022, 7:10pm UTC](https://discuss.elastic.co/t/reporting-error-in-kibana-spawning-chromium-browser-in-docker-kibana-8/300574 "2022-04-01T19:10:40Z")

</div>

I am having issue in Report generation in Kibana v8. I am running in Docker. Getting like Chromium headless Browser error. After that i had ran Diagnostics. It shows the error that i need to disable sandbox. That also m…

---

## [Data intersection](https://discuss.elastic.co/t/data-intersection/301351)

<div class="topic-metadata">

**Author:** [@ratel\_joun](https://discuss.elastic.co/u/ratel_joun)\
**Replies:** 1\
**Last updated:** [April 1, 2022, 5:47pm UTC](https://discuss.elastic.co/t/data-intersection/301351 "2022-04-01T17:47:48Z")

</div>

hello everybody, can anyone answer how to get the intersection between data in two fields in the same index, in other words the data found in field1 and field2 but not at the same row. for example, i want to get the su…

---

## [Create Timerange](https://discuss.elastic.co/t/create-timerange/301015)

<div class="topic-metadata">

**Author:** [@GoncaloCarvalho](https://discuss.elastic.co/u/GoncaloCarvalho)\
**Replies:** 1\
**Last updated:** [April 1, 2022, 5:42pm UTC](https://discuss.elastic.co/t/create-timerange/301015 "2022-04-01T17:42:58Z")

</div>

Greetings, Was wondering if someone could throw at me an example of how to use the Timerange in the expression language? I'm currently trying something of the likes: | var\_set "timeToGo" value={timerange from="2022-03…

---

## [Rollup job or transform size of resulting indices - lifecycle?](https://discuss.elastic.co/t/rollup-job-or-transform-size-of-resulting-indices-lifecycle/301213)

<div class="topic-metadata">

**Author:** [@Matt\_McGovern](https://discuss.elastic.co/u/Matt_McGovern)\
**Replies:** 2\
**Last updated:** [April 1, 2022, 2:46pm UTC](https://discuss.elastic.co/t/rollup-job-or-transform-size-of-resulting-indices-lifecycle/301213 "2022-04-01T14:46:43Z")

</div>

Do Rollup jobs ever reduce in size on their own? I couldn't find a way to add the index created by a rollup job to a lifecycle policy. The rollup job never seemed to reduce in size so I turned the job off. Need case: we…

---

## [Environment variable to configure elasticsearch.customHeaders for Kibana](https://discuss.elastic.co/t/environment-variable-to-configure-elasticsearch-customheaders-for-kibana/301304)

<div class="topic-metadata">

**Author:** [@duarnad](https://discuss.elastic.co/u/duarnad)\
**Replies:** 0\
**Last updated:** [April 1, 2022, 10:06am UTC](https://discuss.elastic.co/t/environment-variable-to-configure-elasticsearch-customheaders-for-kibana/301304 "2022-04-01T10:06:49Z")

</div>

Hello, My goal is to configure elastic.customHeaders for basic auth from an environment variable. I have tried several combinations but it seems that I can't find the right one, and I wonder at what step in the parsing…

---

## [Dashboard based on data from 2 indexes](https://discuss.elastic.co/t/dashboard-based-on-data-from-2-indexes/300419)

<div class="topic-metadata">

**Author:** [@shinobu](https://discuss.elastic.co/u/shinobu)\
**Replies:** 2\
**Last updated:** [April 1, 2022, 8:57am UTC](https://discuss.elastic.co/t/dashboard-based-on-data-from-2-indexes/300419 "2022-04-01T08:57:25Z")

</div>

Hello, I want to create a Dashboard with a table thats showing me every url that does not a specific value in another field. So basically i have 2 indexes: Alert index: { "url": "sometemplateurl.com" } Lookup Inde…

---

## [When \`xpack.ml.enabled\` is set to false, entering Kibana's machine learning page has a error in the log](https://discuss.elastic.co/t/when-xpack-ml-enabled-is-set-to-false-entering-kibanas-machine-learning-page-has-a-error-in-the-log/301158)

<div class="topic-metadata">

**Author:** [@linghengqian](https://discuss.elastic.co/u/linghengqian)\
**Replies:** 4\
**Last updated:** [April 1, 2022, 12:18am UTC](https://discuss.elastic.co/t/when-xpack-ml-enabled-is-set-to-false-entering-kibanas-machine-learning-page-has-a-error-in-the-log/301158 "2022-04-01T00:18:43Z")

</div>

I am doing some tests in docker-compose.yml, I noticed that when I set the Elasticsearch environment variable to contain XPACK\_ML\_ENABLED: false, the machine learning page of the Kibana instance will jump to some urls …

---

## [TSVB links on each\_all](https://discuss.elastic.co/t/tsvb-links-on-each-all/301271)

<div class="topic-metadata">

**Author:** [@Gustavo\_Llermaly](https://discuss.elastic.co/u/Gustavo_Llermaly)\
**Replies:** 1\
**Last updated:** [March 31, 2022, 10:48pm UTC](https://discuss.elastic.co/t/tsvb-links-on-each-all/301271 "2022-03-31T22:48:24Z")

</div>

I'm trying to create a list of links based on some fields value, but the markdown syntax is not working. Is there any way to do each\_all links? {{#each \_all}} - \[{{ label }}\](http://google.com) {{/each}} …

---

## [Transform group by showing data that's not in the original index](https://discuss.elastic.co/t/transform-group-by-showing-data-thats-not-in-the-original-index/301239)

<div class="topic-metadata">

**Author:** [@Matt\_McGovern](https://discuss.elastic.co/u/Matt_McGovern)\
**Replies:** 0\
**Last updated:** [March 31, 2022, 5:51pm UTC](https://discuss.elastic.co/t/transform-group-by-showing-data-thats-not-in-the-original-index/301239 "2022-03-31T17:51:56Z")

</div>

I've got a tranform set up that has multiple group fields and aggregations. The first group by field shows data in the resulting index that is not anywhere in the original index. It starts with the text: deleterulebyrule…

---

## [Detect\_Failed\_Logon](https://discuss.elastic.co/t/detect-failed-logon/301230)

<div class="topic-metadata">

**Author:** [@mohamed\_hamham](https://discuss.elastic.co/u/mohamed_hamham)\
**Replies:** 0\
**Last updated:** [March 31, 2022, 5:15pm UTC](https://discuss.elastic.co/t/detect-failed-logon/301230 "2022-03-31T17:15:01Z")

</div>

Hello Community; Please show me some help on writing a rule on Kibana interface. I want to detect users who are failed to logon 5 times to their account. i've already detect failed logon attempt based on EventID = 462…

---

## [Kibana region value is misspelt (SJÆLLAND NOT SJAÆLLAND)](https://discuss.elastic.co/t/kibana-region-value-is-misspelt-sjaelland-not-sjaaelland/300805)

<div class="topic-metadata">

**Author:** [@Sinchana\_P](https://discuss.elastic.co/u/Sinchana_P)\
**Replies:** 3\
**Last updated:** [March 31, 2022, 3:31pm UTC](https://discuss.elastic.co/t/kibana-region-value-is-misspelt-sjaelland-not-sjaaelland/300805 "2022-03-31T15:31:52Z")

</div>

The region name is spelt wrong in https://maps.elastic.co/v7.10/index.html?locale=en#file/administrative\_regions\_lvl2 This causes region map filter also to have wrong spelling and hence difficult to find the name. Ple…

---

## [Kinaba runs an error](https://discuss.elastic.co/t/kinaba-runs-an-error/299809)

<div class="topic-metadata">

**Author:** [@spoilsme](https://discuss.elastic.co/u/spoilsme)\
**Replies:** 1\
**Last updated:** [March 31, 2022, 2:48pm UTC](https://discuss.elastic.co/t/kinaba-runs-an-error/299809 "2022-03-31T14:48:44Z")

</div>

machine learning

---

## [Share Canvas on website](https://discuss.elastic.co/t/share-canvas-on-website/301208)

<div class="topic-metadata">

**Author:** [@AlexM566](https://discuss.elastic.co/u/AlexM566)\
**Replies:** 0\
**Last updated:** [March 31, 2022, 2:16pm UTC](https://discuss.elastic.co/t/share-canvas-on-website/301208 "2022-03-31T14:16:23Z")

</div>

Hello everyone, I have a problem, I want to share my canvas on the website, but I have a problem, the canvas is not shared on the website. I followed the instructions given in the documentation, but no success. This is …

---

## [Kibana - ES scroll returned fewer total hits than expected!](https://discuss.elastic.co/t/kibana-es-scroll-returned-fewer-total-hits-than-expected/300931)

<div class="topic-metadata">

**Author:** [@hocho](https://discuss.elastic.co/u/hocho)\
**Replies:** 3\
**Last updated:** [March 31, 2022, 2:16pm UTC](https://discuss.elastic.co/t/kibana-es-scroll-returned-fewer-total-hits-than-expected/300931 "2022-03-31T14:16:05Z")

</div>

Hello, I have run into an issue where all the events that are displayed in Discover are not exported to the CSV file. When this happens Kibana generates the following log message in kibana.log: ES scroll returned fewe…

---

## [Kibana: Unable to calculate average](https://discuss.elastic.co/t/kibana-unable-to-calculate-average/300847)

<div class="topic-metadata">

**Author:** [@sravanreddy.t](https://discuss.elastic.co/u/sravanreddy.t)\
**Replies:** 5\
**Last updated:** [March 31, 2022, 12:41pm UTC](https://discuss.elastic.co/t/kibana-unable-to-calculate-average/300847 "2022-03-31T12:41:14Z")

</div>

Hi, Need your help to calculate the average for the test cases. For Ex: No of test cases executed: 0,0,1,2 Total Builds : 4 My requirement is to calculate the average only for the no of test cases are more than zero.…

---

## [Kibana 17.1 restarting after: "TypeError: Cannot read properties of undefined (reading 'isServer')"](https://discuss.elastic.co/t/kibana-17-1-restarting-after-typeerror-cannot-read-properties-of-undefined-reading-isserver/299727)

<div class="topic-metadata">

**Author:** [@ab\_mes](https://discuss.elastic.co/u/ab_mes)\
**Replies:** 3\
**Last updated:** [March 31, 2022, 11:10am UTC](https://discuss.elastic.co/t/kibana-17-1-restarting-after-typeerror-cannot-read-properties-of-undefined-reading-isserver/299727 "2022-03-31T11:10:00Z")

</div>

After migrating from a 7.8.1 stack to 7.16.3, Kibana will intermittently restart, with the last log being: TypeError: Cannot read properties of undefined (reading 'isServer') at TLSWrap.onerror (node:\_tls\_wrap:411:2…

---

## [How to get the average between two timestamp](https://discuss.elastic.co/t/how-to-get-the-average-between-two-timestamp/301100)

<div class="topic-metadata">

**Author:** [@Roberto\_Mejri](https://discuss.elastic.co/u/Roberto_Mejri)\
**Replies:** 4\
**Last updated:** [March 31, 2022, 10:12am UTC](https://discuss.elastic.co/t/how-to-get-the-average-between-two-timestamp/301100 "2022-03-31T10:12:51Z")

</div>

HI, (I'm literally new on Kibana). My Team leader asked to me to do the visualize on Kibana with the count... of the log got on Spring microservice. The problem is now I have to display the average between timestamps of …

---

## [Handlebar Helpers in TSVB Markdown](https://discuss.elastic.co/t/handlebar-helpers-in-tsvb-markdown/300991)

<div class="topic-metadata">

**Author:** [@Kirubanandhan](https://discuss.elastic.co/u/Kirubanandhan)\
**Replies:** 4\
**Last updated:** [March 31, 2022, 9:02am UTC](https://discuss.elastic.co/t/handlebar-helpers-in-tsvb-markdown/300991 "2022-03-31T09:02:35Z")

</div>

Hi Team, I want to add some Handlebar helpers like below. So that i can use it in TSVB Markdown. I need to use it for calculate difference between the two count values. @tsullivan @devon.thomson @bhavyarm Help required…

---

## [Kibana Donut chart with small inner circle](https://discuss.elastic.co/t/kibana-donut-chart-with-small-inner-circle/300977)

<div class="topic-metadata">

**Author:** [@santy1](https://discuss.elastic.co/u/santy1)\
**Replies:** 5\
**Last updated:** [March 31, 2022, 8:39am UTC](https://discuss.elastic.co/t/kibana-donut-chart-with-small-inner-circle/300977 "2022-03-31T08:39:36Z")

</div>

Hello Team, I am on ELK v7.17. I have created donut chart to represent some data, using Lens. However, I see that the inner circle is quite small. I read somewhere, that there is an options tab that can be used to chan…

---

## [Install Kibana 7.16 fails with parse mapping](https://discuss.elastic.co/t/install-kibana-7-16-fails-with-parse-mapping/300946)

<div class="topic-metadata">

**Author:** [@Karel\_Cech](https://discuss.elastic.co/u/Karel_Cech)\
**Replies:** 4\
**Last updated:** [March 30, 2022, 9:44pm UTC](https://discuss.elastic.co/t/install-kibana-7-16-fails-with-parse-mapping/300946 "2022-03-30T21:44:14Z")

</div>

Hi, we try to install Kibana 7.16.3 in our Openshift environment, but it fails with "Failed to parse mapping \[\_doc\]" : {"type":"log","@timestamp":"2022-03-29T12:09:24+02:00","tags":\["info","savedobjects-service"\],"pid"…

---

## [Kibana dashboard cannot load metricbeat data](https://discuss.elastic.co/t/kibana-dashboard-cannot-load-metricbeat-data/300933)

<div class="topic-metadata">

**Author:** [@leelax22](https://discuss.elastic.co/u/leelax22)\
**Replies:** 4\
**Last updated:** [March 31, 2022, 5:48am UTC](https://discuss.elastic.co/t/kibana-dashboard-cannot-load-metricbeat-data/300933 "2022-03-31T05:48:03Z")

</div>

I am testing to monitor aks using ELK stack and beat. The installation is completed with version 8.1.0, and it is confirmed that data is well accumulated in Kibana through the metricbeat-\* index. Because I did not conn…

---

## [Mapping Not showing in Discover](https://discuss.elastic.co/t/mapping-not-showing-in-discover/300452)

<div class="topic-metadata">

**Author:** [@merlin\_nunez1](https://discuss.elastic.co/u/merlin_nunez1)\
**Replies:** 1\
**Last updated:** [March 31, 2022, 5:27am UTC](https://discuss.elastic.co/t/mapping-not-showing-in-discover/300452 "2022-03-31T05:27:56Z")

</div>

After upgrading our cluster from version 7.15 to 7.17, the discover module stopped showing all fields for our .net application logs. We index all our .net application logs to indices named ui, and the mapping shows ther…

---

## [Issue with non functionality: toogle column in table \[Kibana 8.1.1\]](https://discuss.elastic.co/t/issue-with-non-functionality-toogle-column-in-table-kibana-8-1-1/301123)

<div class="topic-metadata">

**Author:** [@INS](https://discuss.elastic.co/u/INS)\
**Replies:** 1\
**Last updated:** [March 31, 2022, 5:21am UTC](https://discuss.elastic.co/t/issue-with-non-functionality-toogle-column-in-table-kibana-8-1-1/301123 "2022-03-31T05:21:31Z")

</div>

Hi Please fix functionality for legacy view in this version of kibana for making " toogle column in table" Now it doesn't work.

---

## [Kibana Discover 10,000 documents download limit](https://discuss.elastic.co/t/kibana-discover-10-000-documents-download-limit/300555)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 6\
**Last updated:** [March 31, 2022, 5:19am UTC](https://discuss.elastic.co/t/kibana-discover-10-000-documents-download-limit/300555 "2022-03-31T05:19:21Z")

</div>

I want to save a search and download 100,000 documents from discover page. But I'm able to download only 10,000 documents. How to increase this limit in discover...I checked in advanced settings...But it is not changin…

---

## [Metricbeat - system.memory.actual.used.pct](https://discuss.elastic.co/t/metricbeat-system-memory-actual-used-pct/301035)

<div class="topic-metadata">

**Author:** [@Matt.Wash](https://discuss.elastic.co/u/Matt.Wash)\
**Replies:** 2\
**Last updated:** [March 30, 2022, 11:59pm UTC](https://discuss.elastic.co/t/metricbeat-system-memory-actual-used-pct/301035 "2022-03-30T23:59:07Z")

</div>

Hi, When i try to find the root cause of a crash using metricbeat field system.memory.actual.used.pct, my dashboard appears to change the values when i filter by host.name for the machine that crashed. Before I filter b…

---

## [Missing authentication credentials for REST request](https://discuss.elastic.co/t/missing-authentication-credentials-for-rest-request/301144)

<div class="topic-metadata">

**Author:** [@Kishan\_Kini](https://discuss.elastic.co/u/Kishan_Kini)\
**Replies:** 1\
**Last updated:** [March 30, 2022, 11:52pm UTC](https://discuss.elastic.co/t/missing-authentication-credentials-for-rest-request/301144 "2022-03-30T23:52:13Z")

</div>

\[ERROR\]\[Elasticsearch-service\] Unable to retrieve version information from Elasticsearch nodes. security\_exception: \[security\_exception\] Reason: missing authentication credentials for REST request \[/\_nodes?filter\_path=no…

---

## [Previous versions of dashboards](https://discuss.elastic.co/t/previous-versions-of-dashboards/301113)

<div class="topic-metadata">

**Author:** [@Marjolein](https://discuss.elastic.co/u/Marjolein)\
**Replies:** 1\
**Last updated:** [March 30, 2022, 11:47pm UTC](https://discuss.elastic.co/t/previous-versions-of-dashboards/301113 "2022-03-30T23:47:48Z")

</div>

Hi! I'm a very new user of kibana and running into some issues. Is it possible to revert (roll back) to a previous saved version of a dashboard? I can't find it anywhere. Thanks!

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=224)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=226)
