# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=259

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 260

---

## [Exporting large number of objects from Kibana - errors](https://discuss.elastic.co/t/exporting-large-number-of-objects-from-kibana-errors/291158)

<div class="topic-metadata">

**Author:** [@vee](https://discuss.elastic.co/u/vee)\
**Replies:** 2\
**Last updated:** [December 8, 2021, 6:59pm UTC](https://discuss.elastic.co/t/exporting-large-number-of-objects-from-kibana-errors/291158 "2021-12-08T18:59:38Z")

</div>

Hi there, We have v7.5 Elasticsearch/Kibana. Trying to export Saved Objects in prod (~12,000 objects). But it's erroring with this reason in Kibana with this error: Unable to generate export. Here are the Kibana logs at…

---

## [How we can attach a document with the alert to teams action?](https://discuss.elastic.co/t/how-we-can-attach-a-document-with-the-alert-to-teams-action/289790)

<div class="topic-metadata">

**Author:** [@ranju](https://discuss.elastic.co/u/ranju)\
**Replies:** 3\
**Last updated:** [December 8, 2021, 6:34pm UTC](https://discuss.elastic.co/t/how-we-can-attach-a-document-with-the-alert-to-teams-action/289790 "2021-12-08T18:34:08Z")

</div>

Document means some dashboard as pdf likewise. Currently, We are using webhook for sending alerts to the team's channels from the watcher. same functionality we are able to perform in email action. eg: "actions": { …

---

## [Importing saved objects. - broken index pattern IDs](https://discuss.elastic.co/t/importing-saved-objects-broken-index-pattern-ids/291160)

<div class="topic-metadata">

**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\
**Replies:** 1\
**Last updated:** [December 8, 2021, 4:49pm UTC](https://discuss.elastic.co/t/importing-saved-objects-broken-index-pattern-ids/291160 "2021-12-08T16:49:45Z")

</div>

I recently moved some objects between kibana instances. I suspect this is the first time since I have done this since I upgraded to 7.14. When I imported them I was surprised not to be prompted to fix broken ids for in…

---

## [Partial Legacy Monitoring](https://discuss.elastic.co/t/partial-legacy-monitoring/290967)

<div class="topic-metadata">

**Author:** [@gimpastic](https://discuss.elastic.co/u/gimpastic)\
**Replies:** 1\
**Last updated:** [December 8, 2021, 2:56pm UTC](https://discuss.elastic.co/t/partial-legacy-monitoring/290967 "2021-12-08T14:56:42Z")

</div>

I'm getting the notification window "Partial Legacy Monitoring " each time when I open https://kibana.x.com/app/monitoring I'm using metricbeats\\filebeats to monitor the stack Partial Legacy Monitoring Detected It app…

---

## [Logs Do Not Appear In APM, Although Correlation Info Is Present](https://discuss.elastic.co/t/logs-do-not-appear-in-apm-although-correlation-info-is-present/289720)

<div class="topic-metadata">

**Author:** [@Brandon\_Liles](https://discuss.elastic.co/u/Brandon_Liles)\
**Replies:** 13\
**Last updated:** [December 8, 2021, 1:55pm UTC](https://discuss.elastic.co/t/logs-do-not-appear-in-apm-although-correlation-info-is-present/289720 "2021-12-08T13:55:14Z")

</div>

Using version 7.15.2 of Elasticsearch, Kibana and APM. I have APM configured and can see transactions/traces. I have Serilog configured with the Elasticsearch sink and I am using the EcsTextFormatter. When I go to Logs \>…

---

## [Click on metric visualisation to filter](https://discuss.elastic.co/t/click-on-metric-visualisation-to-filter/291142)

<div class="topic-metadata">

**Author:** [@lisajb](https://discuss.elastic.co/u/lisajb)\
**Replies:** 2\
**Last updated:** [December 8, 2021, 10:19am UTC](https://discuss.elastic.co/t/click-on-metric-visualisation-to-filter/291142 "2021-12-08T10:19:58Z")

</div>

Hi all, very basic question but want to check I'm not going mad here - When using a dashboard to monitor logs, most types of visualisation can be clicked to set up a filter, filtering to just the part of the visualisati…

---

## [Canvas dropdown](https://discuss.elastic.co/t/canvas-dropdown/291061)

<div class="topic-metadata">

**Author:** [@MTV](https://discuss.elastic.co/u/MTV)\
**Replies:** 2\
**Last updated:** [December 8, 2021, 6:51am UTC](https://discuss.elastic.co/t/canvas-dropdown/291061 "2021-12-08T06:51:01Z")

</div>

Hi, I have a dropdown in canvas, which is used to filter some visualizations. Is it possible to select multiple values, or we can only select a single value from the dropdown? Thank you!

---

## [Editing a Visualization - Application Not Found Error](https://discuss.elastic.co/t/editing-a-visualization-application-not-found-error/291178)

<div class="topic-metadata">

**Author:** [@blissweb](https://discuss.elastic.co/u/blissweb)\
**Replies:** 1\
**Last updated:** [December 8, 2021, 5:56am UTC](https://discuss.elastic.co/t/editing-a-visualization-application-not-found-error/291178 "2021-12-08T05:56:55Z")

</div>

Hello. I've imported some dashboards using the metricbeat import dashboards feature from the yml file. I see the dashboards, they work ok, but when I try to edit a particular visualization to make changes it says "Appl…

---

## [Service Not Available - License Not Available](https://discuss.elastic.co/t/service-not-available-license-not-available/291169)

<div class="topic-metadata">

**Author:** [@blissweb](https://discuss.elastic.co/u/blissweb)\
**Replies:** 7\
**Last updated:** [December 8, 2021, 2:31am UTC](https://discuss.elastic.co/t/service-not-available-license-not-available/291169 "2021-12-08T02:31:12Z")

</div>

Hi, Been using the docker version of filebeat, metricbeat, Elasticsearch and kibana. Has been working fine, but after about 24 hours up, it starts showing the message about no license. I'm not using Authentication of …

---

## [Upgrade to ES 7.15.2 and Kibana not working](https://discuss.elastic.co/t/upgrade-to-es-7-15-2-and-kibana-not-working/291098)

<div class="topic-metadata">

**Author:** [@Frank\_Kuo](https://discuss.elastic.co/u/Frank_Kuo)\
**Replies:** 8\
**Last updated:** [December 8, 2021, 1:39am UTC](https://discuss.elastic.co/t/upgrade-to-es-7-15-2-and-kibana-not-working/291098 "2021-12-08T01:39:02Z")

</div>

I have upgraded ES/Kibana/Logstash from v7.62. to v7.15.2. All installations are success but KIBANA services started with error. Can someone help me with the below error? I have no idea how to resolved it. Kibana log …

---

## [Kibana - Calculate range of time like hours](https://discuss.elastic.co/t/kibana-calculate-range-of-time-like-hours/290986)

<div class="topic-metadata">

**Author:** [@redsegsolucoes](https://discuss.elastic.co/u/redsegsolucoes)\
**Replies:** 1\
**Last updated:** [December 7, 2021, 9:25pm UTC](https://discuss.elastic.co/t/kibana-calculate-range-of-time-like-hours/290986 "2021-12-07T21:25:47Z")

</div>

I would like to know how to calculate dates inside Kibana, for example, (end\_date - start\_date), How long does it take for a driver to get from city A to city B? is possible to do this calculation inside Query DSL and …

---

## [Accessing the start and end times in a filter group](https://discuss.elastic.co/t/accessing-the-start-and-end-times-in-a-filter-group/290935)

<div class="topic-metadata">

**Author:** [@ckes](https://discuss.elastic.co/u/ckes)\
**Replies:** 1\
**Last updated:** [December 7, 2021, 8:15pm UTC](https://discuss.elastic.co/t/accessing-the-start-and-end-times-in-a-filter-group/290935 "2021-12-07T20:15:16Z")

</div>

Hello, I'd like to display the month and day of a drop-down filter on a different page of my report, using it as a sub-heading of all subsequent pages. I've verified that essql queries work using the range I've selecte…

---

## [Kibana stop working](https://discuss.elastic.co/t/kibana-stop-working/291086)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 7\
**Last updated:** [December 7, 2021, 7:03pm UTC](https://discuss.elastic.co/t/kibana-stop-working/291086 "2021-12-07T19:03:09Z")

</div>

working kibana stop working here is message that comes up when I try to access kibana:5601 {"type":"log","@timestamp":"2021-12-06T19:18:16-06:00","tags":\["error","plugins","taskManager"\],"pid":3497,"message":"Failed to…

---

## [Kibana login for new users failing](https://discuss.elastic.co/t/kibana-login-for-new-users-failing/291045)

<div class="topic-metadata">

**Author:** [@aditi\_salunke](https://discuss.elastic.co/u/aditi_salunke)\
**Replies:** 3\
**Last updated:** [December 7, 2021, 6:50pm UTC](https://discuss.elastic.co/t/kibana-login-for-new-users-failing/291045 "2021-12-07T18:50:51Z")

</div>

Hello, Can anyone explain what exactly happens in the following situation: Unless we sign in using elastic: ' built-in user ' and change password for new users who are created on kibana are not able to login and receiv…

---

## [Getting \_timestampparsefailure error in kibana tags](https://discuss.elastic.co/t/getting-timestampparsefailure-error-in-kibana-tags/291150)

<div class="topic-metadata">

**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\
**Replies:** 0\
**Last updated:** [December 7, 2021, 5:39pm UTC](https://discuss.elastic.co/t/getting-timestampparsefailure-error-in-kibana-tags/291150 "2021-12-07T17:39:20Z")

</div>

Hello team, I am getting \_timestampparsefailure error in kibana tags. looks everything goods. Sample log line: 2021-12-03T12:31:57,176 DEBUG \[ghReVdD7RmwHTUFpx7WgdA\] com.pingidentity.pa.core.interceptor.flow - Invokin…

---

## [How to show Y axis in percentage instead of count in vertical bar chart](https://discuss.elastic.co/t/how-to-show-y-axis-in-percentage-instead-of-count-in-vertical-bar-chart/289778)

<div class="topic-metadata">

**Author:** [@Divyank\_Mahalle](https://discuss.elastic.co/u/Divyank_Mahalle)\
**Replies:** 5\
**Last updated:** [December 7, 2021, 5:15pm UTC](https://discuss.elastic.co/t/how-to-show-y-axis-in-percentage-instead-of-count-in-vertical-bar-chart/289778 "2021-12-07T17:15:43Z")

</div>

Hi, I am using a vertical bar chart for data visualization. I want percentage instead of count in Y-axis. I checked multiple options but was unable to get through it, Viz Pic-

---

## [How to use Kibana API in plugin development](https://discuss.elastic.co/t/how-to-use-kibana-api-in-plugin-development/291131)

<div class="topic-metadata">

**Author:** [@Fabio-sama](https://discuss.elastic.co/u/Fabio-sama)\
**Replies:** 3\
**Last updated:** [December 7, 2021, 4:55pm UTC](https://discuss.elastic.co/t/how-to-use-kibana-api-in-plugin-development/291131 "2021-12-07T16:55:32Z")

</div>

Hi there, we're trying to develop a custom plugin and we're stuck when it comes to call a Kibana APIs. We can import the RequestHandlerContext interface to provide a context we can use to call Elasticsearch APIs, but w…

---

## [Kibana - Error: EACCES: permission denied, open '/etc/kibana/kibana.yml'](https://discuss.elastic.co/t/kibana-error-eacces-permission-denied-open-etc-kibana-kibana-yml/291117)

<div class="topic-metadata">

**Author:** [@Peter\_M](https://discuss.elastic.co/u/Peter_M)\
**Replies:** 14\
**Last updated:** [December 7, 2021, 2:16pm UTC](https://discuss.elastic.co/t/kibana-error-eacces-permission-denied-open-etc-kibana-kibana-yml/291117 "2021-12-07T14:16:13Z")

</div>

Hey all, Fairly new to setting up Kibana, we are setting up on a test environment at the moment, an azure vm using CentOs. We installed Elasticseach and Kibana with Ansible playbooks, during some troubleshooting we had…

---

## [Elastic Search cant find the results from Regex pattern](https://discuss.elastic.co/t/elastic-search-cant-find-the-results-from-regex-pattern/289049)

<div class="topic-metadata">

**Author:** [@rishabhtryroll](https://discuss.elastic.co/u/rishabhtryroll)\
**Replies:** 1\
**Last updated:** [December 7, 2021, 9:51am UTC](https://discuss.elastic.co/t/elastic-search-cant-find-the-results-from-regex-pattern/289049 "2021-12-07T09:51:32Z")

</div>

I am searching a particular regex pattern in the discover tab through KQL and Lucence but I got the error Expected ":", "\<", "\<=", "\>", "\>=", AND, OR, end of input, whitespace but "\\" found. log:"api.mydomain.com" AND '…

---

## [How to include some values and exclude some others on the same field?](https://discuss.elastic.co/t/how-to-include-some-values-and-exclude-some-others-on-the-same-field/291020)

<div class="topic-metadata">

**Author:** [@Huseyin\_Tunctepe](https://discuss.elastic.co/u/Huseyin_Tunctepe)\
**Replies:** 4\
**Last updated:** [December 7, 2021, 8:10am UTC](https://discuss.elastic.co/t/how-to-include-some-values-and-exclude-some-others-on-the-same-field/291020 "2021-12-07T08:10:36Z")

</div>

I have written a Lucene query and a KQL to show "puppet-disabled" and exclude values that contain "CHG", "INC" and "EXC" in the message field. However, all returned results include "puppet-disabled" text and the supposed…

---

## [Request without field - Case insensitive mystery](https://discuss.elastic.co/t/request-without-field-case-insensitive-mystery/290852)

<div class="topic-metadata">

**Author:** [@Florent\_Fauvin](https://discuss.elastic.co/u/Florent_Fauvin)\
**Replies:** 2\
**Last updated:** [December 7, 2021, 4:08am UTC](https://discuss.elastic.co/t/request-without-field-case-insensitive-mystery/290852 "2021-12-07T04:08:33Z")

</div>

Hello ! I have a mystery I can't explain. Request : process.name:calc.exe \> 9 hits Request : process.name:CALC.exe \> 0 hits Request : CALC.exe (just it) \> 11 hits (included the 9 previous hits ) When I do a request w…

---

## [A question on throttling the alerts](https://discuss.elastic.co/t/a-question-on-throttling-the-alerts/288833)

<div class="topic-metadata">

**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\
**Replies:** 3\
**Last updated:** [December 6, 2021, 11:51pm UTC](https://discuss.elastic.co/t/a-question-on-throttling-the-alerts/288833 "2021-12-06T23:51:20Z")

</div>

Hi, Right now I have an alert configured which triggers every 5 mins. However it monitors if an error of a particular type has occured over last 24 hours. It sends emails and in ideal case the throttle period will be 2…

---

## [Not able to login into the Kibana](https://discuss.elastic.co/t/not-able-to-login-into-the-kibana/291014)

<div class="topic-metadata">

**Author:** [@wizard](https://discuss.elastic.co/u/wizard)\
**Replies:** 4\
**Last updated:** [December 6, 2021, 8:46pm UTC](https://discuss.elastic.co/t/not-able-to-login-into-the-kibana/291014 "2021-12-06T20:46:23Z")

</div>

Hello, When I am trying to login into the kibana, it's sending me an error "Oops! Error. Try again.". I have checked my storage also it's only 92% in use. Please suggest me.

---

## [Error on index template creation: "composable template \[...\] template after composition is invalid"](https://discuss.elastic.co/t/error-on-index-template-creation-composable-template-template-after-composition-is-invalid/291076)

<div class="topic-metadata">

**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\
**Replies:** 1\
**Last updated:** [December 6, 2021, 8:07pm UTC](https://discuss.elastic.co/t/error-on-index-template-creation-composable-template-template-after-composition-is-invalid/291076 "2021-12-06T20:07:57Z")

</div>

Subject really says it all. version 7.14 The cluster is new and has just one node for testing and this is the first datastream I have tried to create. One thing that is puzzling me is what does it mean by "composable …

---

## [Map keyword values for display](https://discuss.elastic.co/t/map-keyword-values-for-display/291042)

<div class="topic-metadata">

**Author:** [@Senor\_K2n](https://discuss.elastic.co/u/Senor_K2n)\
**Replies:** 2\
**Last updated:** [December 6, 2021, 1:54pm UTC](https://discuss.elastic.co/t/map-keyword-values-for-display/291042 "2021-12-06T13:54:31Z")

</div>

Hi, I'm relatively new to working with ELK, and I haven't found a response to this question yet. For storage optimization reasons, I want to use some aliases in my input files to store fixed values. However I would li…

---

## [How to create birds eye visualization in kibana?](https://discuss.elastic.co/t/how-to-create-birds-eye-visualization-in-kibana/290628)

<div class="topic-metadata">

**Author:** [@sidharth\_vijayakumar](https://discuss.elastic.co/u/sidharth_vijayakumar)\
**Replies:** 6\
**Last updated:** [December 6, 2021, 3:51am UTC](https://discuss.elastic.co/t/how-to-create-birds-eye-visualization-in-kibana/290628 "2021-12-06T03:51:35Z")

</div>

Hi Team, I want to create a similar visualization in kibana dashboard which kind of visualization should I use? I am trying to create a visualization where users could see pod distribution across the nodes. I want s…

---

## [Need to apply ILM policy on existing index](https://discuss.elastic.co/t/need-to-apply-ilm-policy-on-existing-index/290984)

<div class="topic-metadata">

**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\
**Replies:** 1\
**Last updated:** [December 5, 2021, 11:49pm UTC](https://discuss.elastic.co/t/need-to-apply-ilm-policy-on-existing-index/290984 "2021-12-05T23:49:44Z")

</div>

Hello team, I have created one index kafka-facebook and missed to apply ILM policies. Now all data is going into S3 bucket like: partials:kafka-facebook-2021-12-04-000035 The above index has almost 500 GB of data. ca…

---

## [Is there a way to filter by date and not by date time in Kibana Lens?](https://discuss.elastic.co/t/is-there-a-way-to-filter-by-date-and-not-by-date-time-in-kibana-lens/289387)

<div class="topic-metadata">

**Author:** [@Arrick](https://discuss.elastic.co/u/Arrick)\
**Replies:** 8\
**Last updated:** [December 5, 2021, 7:08am UTC](https://discuss.elastic.co/t/is-there-a-way-to-filter-by-date-and-not-by-date-time-in-kibana-lens/289387 "2021-12-05T07:08:03Z")

</div>

I've recently tried to use kibana lens and realised that my time filter in control is filtering by date time. Is there a way to make it filter by date instead? what I plan to obtain is something similar to this:

---

## [Scatter plot which uses data source from Enhanced table on Dashboard](https://discuss.elastic.co/t/scatter-plot-which-uses-data-source-from-enhanced-table-on-dashboard/290871)

<div class="topic-metadata">

**Author:** [@Michael\_Ubry](https://discuss.elastic.co/u/Michael_Ubry)\
**Replies:** 1\
**Last updated:** [December 4, 2021, 6:04pm UTC](https://discuss.elastic.co/t/scatter-plot-which-uses-data-source-from-enhanced-table-on-dashboard/290871 "2021-12-04T18:04:37Z")

</div>

Hi, I have Enhanced table plugin installed and I created pivot table which is visible on Dashboard. Underneath, I would like to have scatter plot which would be using data source not from index but from this pivot table…

---

## [FATAL Error: Unknown configuration key(s): "action.auto\_create\_index"](https://discuss.elastic.co/t/fatal-error-unknown-configuration-key-s-action-auto-create-index/290850)

<div class="topic-metadata">

**Author:** [@Glardz](https://discuss.elastic.co/u/Glardz)\
**Replies:** 2\
**Last updated:** [December 4, 2021, 6:01pm UTC](https://discuss.elastic.co/t/fatal-error-unknown-configuration-key-s-action-auto-create-index/290850 "2021-12-04T18:01:32Z")

</div>

Hi, i have this message when i start the service kibana: my kibana.yml file: # Kibana is served by a back end server. This setting specifies the port to use. #server.port: 5601 elasticsearch.hosts: - https://elk0…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=258)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=260)
