# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=256

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 257

---

## [Kibana is not ready yet](https://discuss.elastic.co/t/kibana-is-not-ready-yet/292404)

<div class="topic-metadata">

**Author:** [@nNeroche](https://discuss.elastic.co/u/nNeroche)\
**Replies:** 1\
**Last updated:** [December 19, 2021, 11:52pm UTC](https://discuss.elastic.co/t/kibana-is-not-ready-yet/292404 "2021-12-19T23:52:07Z")

</div>

Hi everyone, I just installed wazuh-manager on a vm, Ubuntu LTS 20.04. The problem is when I try to connect to the web page, I am getting "Kibana is not ready yet" text. I checked IP addresses on both Elasticsearch.yml…

---

## [How to make Dev tools request automatic using the Pipeline?](https://discuss.elastic.co/t/how-to-make-dev-tools-request-automatic-using-the-pipeline/292377)

<div class="topic-metadata">

**Author:** [@Angad\_Panesar1](https://discuss.elastic.co/u/Angad_Panesar1)\
**Replies:** 1\
**Last updated:** [December 18, 2021, 6:14pm UTC](https://discuss.elastic.co/t/how-to-make-dev-tools-request-automatic-using-the-pipeline/292377 "2021-12-18T18:14:39Z")

</div>

Hi, I tried to create an ingest pipeline to run every time new data is ingested but unfortunately it still does not work. Here is what I have done: The create pipeline method: PUT \_ingest/pipeline/set\_place { "descri…

---

## [Escaping special characters to search for latest log4j exploit payload](https://discuss.elastic.co/t/escaping-special-characters-to-search-for-latest-log4j-exploit-payload/292369)

<div class="topic-metadata">

**Author:** [@RedInDisguise](https://discuss.elastic.co/u/RedInDisguise)\
**Replies:** 1\
**Last updated:** [December 18, 2021, 3:50pm UTC](https://discuss.elastic.co/t/escaping-special-characters-to-search-for-latest-log4j-exploit-payload/292369 "2021-12-18T15:50:37Z")

</div>

Hi all, Would anyone have ideas how to search for the latest log4j DOS exploit, example payload: "${${::-${::-$${::-j}}}}"? We are having trouble escaping the characters in a KQL search however open to a EQL search acro…

---

## [\#! Deprecation: \[types removal\] Specifying types in a watcher index action is deprecated](https://discuss.elastic.co/t/deprecation-types-removal-specifying-types-in-a-watcher-index-action-is-deprecated/291815)

<div class="topic-metadata">

**Author:** [@DoDuyen162000](https://discuss.elastic.co/u/DoDuyen162000)\
**Replies:** 2\
**Last updated:** [December 18, 2021, 4:47am UTC](https://discuss.elastic.co/t/deprecation-types-removal-specifying-types-in-a-watcher-index-action-is-deprecated/291815 "2021-12-18T04:47:22Z")

</div>

I'm having trouble creating a watcher. I don't know what I was wrong about? Here's my fault:

---

## [Tracking Containment Alerts](https://discuss.elastic.co/t/tracking-containment-alerts/291872)

<div class="topic-metadata">

**Author:** [@lmoore2210](https://discuss.elastic.co/u/lmoore2210)\
**Replies:** 4\
**Last updated:** [December 17, 2021, 8:03pm UTC](https://discuss.elastic.co/t/tracking-containment-alerts/291872 "2021-12-17T20:03:26Z")

</div>

Hey Elastic Crew, Right now I'm using a NiFi flow to push static GEOJSON data using now() timestamps to an Elasticsearch. The following file is an example: I've set up an alert that "should" trigger when my GEOJSON …

---

## [How to make Dev tools request automatic?](https://discuss.elastic.co/t/how-to-make-dev-tools-request-automatic/292308)

<div class="topic-metadata">

**Author:** [@Angad\_Panesar1](https://discuss.elastic.co/u/Angad_Panesar1)\
**Replies:** 3\
**Last updated:** [December 17, 2021, 7:46pm UTC](https://discuss.elastic.co/t/how-to-make-dev-tools-request-automatic/292308 "2021-12-17T19:46:38Z")

</div>

How would I make a request automatically update the data over time instead of just manually going into dev tools and running the request every time. e.g. after 1 hour. See the request below. POST compair\_\*/\_update\_by\_q…

---

## [8.0 Upgrade Assistant and the changing log format warning](https://discuss.elastic.co/t/8-0-upgrade-assistant-and-the-changing-log-format-warning/292277)

<div class="topic-metadata">

**Author:** [@mw\_jko](https://discuss.elastic.co/u/mw_jko)\
**Replies:** 4\
**Last updated:** [December 17, 2021, 4:31pm UTC](https://discuss.elastic.co/t/8-0-upgrade-assistant-and-the-changing-log-format-warning/292277 "2021-12-17T16:31:46Z")

</div>

Heya, I updated the ELK stack to the very latest version and it looks like, it's the probably last "minor" update :tada: I fixed all the issues reported by the upgrade assistant so far (the upgrade assistant was a huge…

---

## [In Kibana vega can we give index pattern with filters in data source](https://discuss.elastic.co/t/in-kibana-vega-can-we-give-index-pattern-with-filters-in-data-source/292243)

<div class="topic-metadata">

**Author:** [@chandima\_jayamina](https://discuss.elastic.co/u/chandima_jayamina)\
**Replies:** 1\
**Last updated:** [December 17, 2021, 12:09pm UTC](https://discuss.elastic.co/t/in-kibana-vega-can-we-give-index-pattern-with-filters-in-data-source/292243 "2021-12-17T12:09:50Z")

</div>

Hi I have to show all the data on index pattern with some filters. In discover I have school and I want to filter out all the students in grade 5. When I add the filter and see in discover it has 6000 records. But all re…

---

## [Kibana's stack-monitoring partly broken after stack upgrade from 7.13 to 7.15](https://discuss.elastic.co/t/kibanas-stack-monitoring-partly-broken-after-stack-upgrade-from-7-13-to-7-15/286183)

<div class="topic-metadata">

**Author:** [@heikis](https://discuss.elastic.co/u/heikis)\
**Replies:** 8\
**Last updated:** [December 17, 2021, 9:54am UTC](https://discuss.elastic.co/t/kibanas-stack-monitoring-partly-broken-after-stack-upgrade-from-7-13-to-7-15/286183 "2021-12-17T09:54:36Z")

</div>

Hello. We upgraded our Elastic stack (Elasticsearch nodes, logstash, beats, kibana) from 7.13 to 7.15.0. Everything is working well except that in Kibana, Stack Monitoring (Cluster Overview) we are getting some weird ti…

---

## [Long Query string from mysql.slowlog doesn't show on table but show on json](https://discuss.elastic.co/t/long-query-string-from-mysql-slowlog-doesnt-show-on-table-but-show-on-json/291887)

<div class="topic-metadata">

**Author:** [@budums](https://discuss.elastic.co/u/budums)\
**Replies:** 5\
**Last updated:** [December 17, 2021, 9:14am UTC](https://discuss.elastic.co/t/long-query-string-from-mysql-slowlog-doesnt-show-on-table-but-show-on-json/291887 "2021-12-17T09:14:38Z")

</div>

hi I already setup filebeat on database server to get slow log query and send to Elasticsearch. but on kibana at Discover menu if query string from slowlog is too long doesn't show on table view and I set expand fi…

---

## [Kibana 7.16.1 plugin installation](https://discuss.elastic.co/t/kibana-7-16-1-plugin-installation/292047)

<div class="topic-metadata">

**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\
**Replies:** 2\
**Last updated:** [December 16, 2021, 4:40pm UTC](https://discuss.elastic.co/t/kibana-7-16-1-plugin-installation/292047 "2021-12-16T16:40:47Z")

</div>

Hello there, I am updating my Elasticstack from 7.13.3 to 7.16.1 due to apache Log4j2 vulnerability. Now I have a custom plugin which is compatible with 7.13.3. I assume it should be compatible with 7.16.1. can I just…

---

## [Grouping Kibana Spaces](https://discuss.elastic.co/t/grouping-kibana-spaces/291063)

<div class="topic-metadata">

**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\
**Replies:** 2\
**Last updated:** [December 16, 2021, 3:00pm UTC](https://discuss.elastic.co/t/grouping-kibana-spaces/291063 "2021-12-16T15:00:55Z")

</div>

Is there a way to create groups of Kibana spaces? I know you can control which spaces users have access to using Roles, but other than that is there a way to create a group of spaces. For instance, if there were several …

---

## [Embed Kibana Dashboard via IFrame / csp config](https://discuss.elastic.co/t/embed-kibana-dashboard-via-iframe-csp-config/291128)

<div class="topic-metadata">

**Author:** [@ksremo](https://discuss.elastic.co/u/ksremo)\
**Replies:** 3\
**Last updated:** [December 16, 2021, 2:13pm UTC](https://discuss.elastic.co/t/embed-kibana-dashboard-via-iframe-csp-config/291128 "2021-12-16T14:13:32Z")

</div>

hi i want a third webserver to embed a dashboard via iframe, but default csp config denied it. what i tried so far in the kibana.yml xpack.security.sameSiteCookies: None xpack.security.secureCookies: true csp.strict:…

---

## [A way to pass on kibana's authentication credentials from a python flask app?](https://discuss.elastic.co/t/a-way-to-pass-on-kibanas-authentication-credentials-from-a-python-flask-app/290100)

<div class="topic-metadata">

**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\
**Replies:** 1\
**Last updated:** [December 16, 2021, 1:45pm UTC](https://discuss.elastic.co/t/a-way-to-pass-on-kibanas-authentication-credentials-from-a-python-flask-app/290100 "2021-12-16T13:45:40Z")

</div>

Hello, I have a Flask app that redirects to an kibana instance that populates dashboards and works as expected . However,i'm wondering if there's a way to pass on kibana's credentials via the APP so that the kibana does…

---

## [Connecting Kibana to an OpenID provider without setting up TLS](https://discuss.elastic.co/t/connecting-kibana-to-an-openid-provider-without-setting-up-tls/291450)

<div class="topic-metadata">

**Author:** [@Tom\_Cook](https://discuss.elastic.co/u/Tom_Cook)\
**Replies:** 1\
**Last updated:** [December 16, 2021, 1:38pm UTC](https://discuss.elastic.co/t/connecting-kibana-to-an-openid-provider-without-setting-up-tls/291450 "2021-12-16T13:38:38Z")

</div>

I've got a small Elasticsearch cluster (two nodes) running in docker along with Kibana. The only thing that's exposed outside of the docker network is the Kibana service on port 5601 - and that's only exposed to localho…

---

## [Unable to start Kibana after enabling tls in Elasticsearch](https://discuss.elastic.co/t/unable-to-start-kibana-after-enabling-tls-in-elasticsearch/291482)

<div class="topic-metadata">

**Author:** [@mahmoudmaani](https://discuss.elastic.co/u/mahmoudmaani)\
**Replies:** 1\
**Last updated:** [December 16, 2021, 1:15pm UTC](https://discuss.elastic.co/t/unable-to-start-kibana-after-enabling-tls-in-elasticsearch/291482 "2021-12-16T13:15:42Z")

</div>

I configured the TLS in Elasticsearch.yml. Everything is working well in Elastic and I can access it via HTTPS like https://192.168.56.108:9200 but when I am trying to access Kibana I get "Kibana server is not ready yet"…

---

## [Add units to metric visualization in kibana](https://discuss.elastic.co/t/add-units-to-metric-visualization-in-kibana/292098)

<div class="topic-metadata">

**Author:** [@Anton\_Schleenvoigt](https://discuss.elastic.co/u/Anton_Schleenvoigt)\
**Replies:** 1\
**Last updated:** [December 16, 2021, 10:35am UTC](https://discuss.elastic.co/t/add-units-to-metric-visualization-in-kibana/292098 "2021-12-16T10:35:03Z")

</div>

Right now I have created a metric that shows maximum value of an power meter value X and after this value i would like to add the measure unit sent i within the same msg. I have a modbus that sends different values and …

---

## [Kibana dropdown filter doesn't handle results containing a dash (-)](https://discuss.elastic.co/t/kibana-dropdown-filter-doesnt-handle-results-containing-a-dash/291994)

<div class="topic-metadata">

**Author:** [@vpy](https://discuss.elastic.co/u/vpy)\
**Replies:** 1\
**Last updated:** [December 16, 2021, 9:13am UTC](https://discuss.elastic.co/t/kibana-dropdown-filter-doesnt-handle-results-containing-a-dash/291994 "2021-12-16T09:13:00Z")

</div>

Hi I would like to report a this Kibana canvas issue. Let me first describe the test environment: The canvas contains a dropdown filter and a Data table. The kibana index is issued from syslog files. The main index f…

---

## [Is it possible to send one email with several Dashboard PDF reports?](https://discuss.elastic.co/t/is-it-possible-to-send-one-email-with-several-dashboard-pdf-reports/291359)

<div class="topic-metadata">

**Author:** [@Luis\_P](https://discuss.elastic.co/u/Luis_P)\
**Replies:** 3\
**Last updated:** [December 15, 2021, 9:16pm UTC](https://discuss.elastic.co/t/is-it-possible-to-send-one-email-with-several-dashboard-pdf-reports/291359 "2021-12-15T21:16:30Z")

</div>

I've been building a watcher with the purpose of when the condition is met, it should send one email with several Dashboard PDF reports as attachments, one for each process. So far I've only been able to make it so it se…

---

## [7.16.1 - All beats docs in Discover had unknown field and value as json](https://discuss.elastic.co/t/7-16-1-all-beats-docs-in-discover-had-unknown-field-and-value-as-json/292017)

<div class="topic-metadata">

**Author:** [@Zabulon](https://discuss.elastic.co/u/Zabulon)\
**Replies:** 6\
**Last updated:** [December 15, 2021, 6:26pm UTC](https://discuss.elastic.co/t/7-16-1-all-beats-docs-in-discover-had-unknown-field-and-value-as-json/292017 "2021-12-15T18:26:46Z")

</div>

Hi, Yeserday, I upgraded one of our cluster from 7.13.4 to 7.16.1. When I'm going to discover pane and choose a beat index, almost all field show as 'unknown field' and the values are showing as JSON. The other clus…

---

## [How to filter log in kibana](https://discuss.elastic.co/t/how-to-filter-log-in-kibana/291981)

<div class="topic-metadata">

**Author:** [@Roccof97](https://discuss.elastic.co/u/Roccof97)\
**Replies:** 1\
**Last updated:** [December 15, 2021, 4:21pm UTC](https://discuss.elastic.co/t/how-to-filter-log-in-kibana/291981 "2021-12-15T16:21:32Z")

</div>

Hi everyone, my goal is to filter this string "sudo egrep -i -r '${jndi:(ldap\[s\]?|rmi|dns):/\[^\\n\]+' /var/log" in the message of my logs This is related to the log4j issue. Thanks in advance to those who help me.

---

## [Watcher, multiple web posts](https://discuss.elastic.co/t/watcher-multiple-web-posts/290643)

<div class="topic-metadata">

**Author:** [@runtman](https://discuss.elastic.co/u/runtman)\
**Replies:** 3\
**Last updated:** [December 15, 2021, 4:03pm UTC](https://discuss.elastic.co/t/watcher-multiple-web-posts/290643 "2021-12-15T16:03:49Z")

</div>

I've looked through the docs and can't really find an answer if this is possible. I want a watcher job to fire every 5 minutes to hit an API. First of all it must hit the API to gain an authorization token, then once i…

---

## [WebHook works with Alerting but doesnt with watcher](https://discuss.elastic.co/t/webhook-works-with-alerting-but-doesnt-with-watcher/291335)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 2\
**Last updated:** [December 15, 2021, 4:01pm UTC](https://discuss.elastic.co/t/webhook-works-with-alerting-but-doesnt-with-watcher/291335 "2021-12-15T16:01:27Z")

</div>

Hi, Im trying to send webhooks to logstash with watcher, and Im getting this error "type" : "client\_protocol\_exception", "reason" : null, "caused\_by" : { "type" : "proto…

---

## [Python Elasticsearch aggregated query](https://discuss.elastic.co/t/python-elasticsearch-aggregated-query/291998)

<div class="topic-metadata">

**Author:** [@Sederfo](https://discuss.elastic.co/u/Sederfo)\
**Replies:** 5\
**Last updated:** [December 15, 2021, 3:59pm UTC](https://discuss.elastic.co/t/python-elasticsearch-aggregated-query/291998 "2021-12-15T15:59:16Z")

</div>

I am struggling to get an aggregated response based on a query... for example, in Kibana visualization, after creating a table with the aggregations and query I need, I can view the request by going inside the visualizat…

---

## [Kibana issue with relative and absolute range combination](https://discuss.elastic.co/t/kibana-issue-with-relative-and-absolute-range-combination/291972)

<div class="topic-metadata">

**Author:** [@Angelos](https://discuss.elastic.co/u/Angelos)\
**Replies:** 3\
**Last updated:** [December 15, 2021, 3:14pm UTC](https://discuss.elastic.co/t/kibana-issue-with-relative-and-absolute-range-combination/291972 "2021-12-15T15:14:12Z")

</div>

Elasticsearch Platinum: 7.16.1 Hi! We recently found out that when we use relative as start date and absolute as end date it doesn't work as intended. For example when I select relative start date "14 days ago" and ab…

---

## [Create Index Lifecycle Policies to existing index](https://discuss.elastic.co/t/create-index-lifecycle-policies-to-existing-index/290983)

<div class="topic-metadata">

**Author:** [@Aviel\_Bashari](https://discuss.elastic.co/u/Aviel_Bashari)\
**Replies:** 17\
**Last updated:** [December 15, 2021, 3:08pm UTC](https://discuss.elastic.co/t/create-index-lifecycle-policies-to-existing-index/290983 "2021-12-15T15:08:17Z")

</div>

Hi, im trying to add 'Index Lifecycle Policies' to my existing index. my steps: Index management --\> choose my index --\> add lifecycle policy --\> slect logs but i got 'Policy logs is configured for rollover, but ind…

---

## [Change navLinks with kibana 7.14](https://discuss.elastic.co/t/change-navlinks-with-kibana-7-14/291951)

<div class="topic-metadata">

**Author:** [@Osysh](https://discuss.elastic.co/u/Osysh)\
**Replies:** 3\
**Last updated:** [December 15, 2021, 2:40pm UTC](https://discuss.elastic.co/t/change-navlinks-with-kibana-7-14/291951 "2021-12-15T14:40:37Z")

</div>

Hi ! Is it possible to change the home navLink througth a custom plugin in Kibana 7.14 ? The final aim is to replace it with a plugin url. It seems that the chrome.navLinks.update() method is not available for this vers…

---

## [Elastic Machine Learning NLP (Elastic 8.0)](https://discuss.elastic.co/t/elastic-machine-learning-nlp-elastic-8-0/291993)

<div class="topic-metadata">

**Author:** [@zangero98](https://discuss.elastic.co/u/zangero98)\
**Replies:** 0\
**Last updated:** [December 15, 2021, 2:23pm UTC](https://discuss.elastic.co/t/elastic-machine-learning-nlp-elastic-8-0/291993 "2021-12-15T14:23:00Z")

</div>

Hello, im currently writing a thesis about elastic machine learning. I would like to specify the NLP topic with use cases that can be realized with elastic NLP. Until now i only analyzed the prebuild languageid model a…

---

## [Kibana is not getting connected to elastic search](https://discuss.elastic.co/t/kibana-is-not-getting-connected-to-elastic-search/291630)

<div class="topic-metadata">

**Author:** [@aravi](https://discuss.elastic.co/u/aravi)\
**Replies:** 1\
**Last updated:** [December 15, 2021, 1:16pm UTC](https://discuss.elastic.co/t/kibana-is-not-getting-connected-to-elastic-search/291630 "2021-12-15T13:16:08Z")

</div>

We are not bale to open up the kibana portal due to the probable socket timed out error while reaching the Elasticsearch. Recently we have made a change to disable the xpack-security in the Elasticsearch. Please be infor…

---

## [Is there a way to update the Elastic index field data through Kibana console - preferably through Discover feature](https://discuss.elastic.co/t/is-there-a-way-to-update-the-elastic-index-field-data-through-kibana-console-preferably-through-discover-feature/291700)

<div class="topic-metadata">

**Author:** [@Pradeep\_Nukatoti](https://discuss.elastic.co/u/Pradeep_Nukatoti)\
**Replies:** 1\
**Last updated:** [December 15, 2021, 12:44pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-update-the-elastic-index-field-data-through-kibana-console-preferably-through-discover-feature/291700 "2021-12-15T12:44:46Z")

</div>

Hello Folks, I'm looking for a way to update the Elastic index field data through Kibana console through discover, I was able to pull the data and display it as a table but I don't see a way to update it and ES index.…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=255)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=257)
