# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=261

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 262

---

## [Kibana Maps Tooltip Date format](https://discuss.elastic.co/t/kibana-maps-tooltip-date-format/290810)

<div class="topic-metadata">

**Author:** [@travisvyas](https://discuss.elastic.co/u/travisvyas)\
**Replies:** 1\
**Last updated:** [December 2, 2021, 8:47pm UTC](https://discuss.elastic.co/t/kibana-maps-tooltip-date-format/290810 "2021-12-02T20:47:56Z")

</div>

After our kibana was updated to 7.12 we have noticed that our date/time fields are showing as epoch in the kibana maps when we hover over our data points. When the same date/fields are seen in discover tab they are fine…

---

## [Vega Multiple Roots Error](https://discuss.elastic.co/t/vega-multiple-roots-error/290824)

<div class="topic-metadata">

**Author:** [@WhatImIDoing](https://discuss.elastic.co/u/WhatImIDoing)\
**Replies:** 4\
**Last updated:** [December 2, 2021, 8:46pm UTC](https://discuss.elastic.co/t/vega-multiple-roots-error/290824 "2021-12-02T20:46:44Z")

</div>

I am getting a multiple roots error from this vega script and i am not sure where in the transformation i am going wrong. { "$schema": "https://vega.github.io/schema/vega/v5.json", "description": "An example of a …

---

## [KIbana SQL query parametrization](https://discuss.elastic.co/t/kibana-sql-query-parametrization/289787)

<div class="topic-metadata">

**Author:** [@marekpowwm](https://discuss.elastic.co/u/marekpowwm)\
**Replies:** 1\
**Last updated:** [December 2, 2021, 8:33pm UTC](https://discuss.elastic.co/t/kibana-sql-query-parametrization/289787 "2021-12-02T20:33:12Z")

</div>

Is it possible to add a parameter to select index using ES SQL? I created a variable named indexName and I tried to add it to the query this way: SELECT \* FROM "{indexName}" But I get the error: So my question is: …

---

## [Kibana NetworkError while trying to access /api/core/capabiities](https://discuss.elastic.co/t/kibana-networkerror-while-trying-to-access-api-core-capabiities/289408)

<div class="topic-metadata">

**Author:** [@kallistisoft](https://discuss.elastic.co/u/kallistisoft)\
**Replies:** 2\
**Last updated:** [December 2, 2021, 8:28pm UTC](https://discuss.elastic.co/t/kibana-networkerror-while-trying-to-access-api-core-capabiities/289408 "2021-12-02T20:28:49Z")

</div>

I'm trying to setup an ELK stack on Arch Linux and am unable to access the Kibana dashboard. When trying to access Kibana it hangs on the 'loading elastic' loading screen and eventually fails by timing out on the reques…

---

## [Free Text Input Control](https://discuss.elastic.co/t/free-text-input-control/290757)

<div class="topic-metadata">

**Author:** [@kshepitzki1](https://discuss.elastic.co/u/kshepitzki1)\
**Replies:** 1\
**Last updated:** [December 2, 2021, 8:26pm UTC](https://discuss.elastic.co/t/free-text-input-control/290757 "2021-12-02T20:26:44Z")

</div>

Input Controls are amazing. Would be nice to complement the Drop Down and Range controls with Free Text controls that are bound to specific fields like the other controls. Is it possible?

---

## [Fleet server problem](https://discuss.elastic.co/t/fleet-server-problem/289654)

<div class="topic-metadata">

**Author:** [@dzsonaszg](https://discuss.elastic.co/u/dzsonaszg)\
**Replies:** 3\
**Last updated:** [December 2, 2021, 8:19pm UTC](https://discuss.elastic.co/t/fleet-server-problem/289654 "2021-12-02T20:19:35Z")

</div>

Hello, My Feelt server is missing from the agent list, and if i try to reistall, i get this message. Now my agents are working correctly. On my endpoints the enrollment works just fine, but not the endpoint security as…

---

## [Does rollup support scripted fields?](https://discuss.elastic.co/t/does-rollup-support-scripted-fields/290503)

<div class="topic-metadata">

**Author:** [@Liangliang\_Qiu](https://discuss.elastic.co/u/Liangliang_Qiu)\
**Replies:** 3\
**Last updated:** [December 2, 2021, 8:16pm UTC](https://discuss.elastic.co/t/does-rollup-support-scripted-fields/290503 "2021-12-02T20:16:53Z")

</div>

hi, team, i had created the scripted fields in index patterns. When i create rollups job, i cann't find the scripted fields that i will aggregate on metrics.

---

## [Custom domain using AWS Cloudfront](https://discuss.elastic.co/t/custom-domain-using-aws-cloudfront/289621)

<div class="topic-metadata">

**Author:** [@michael.brizic](https://discuss.elastic.co/u/michael.brizic)\
**Replies:** 2\
**Last updated:** [December 2, 2021, 8:13pm UTC](https://discuss.elastic.co/t/custom-domain-using-aws-cloudfront/289621 "2021-12-02T20:13:02Z")

</div>

I've read this blog post which has been helpful in getting started: Custom Domain However, due to various requirements on our end, I need to proxy our Elastic Cloud Kibana instance using AWS Route53/Cloudfront. And for …

---

## [Issue on .tasks index when trying to update Kibana from 6.8 to 7.6](https://discuss.elastic.co/t/issue-on-tasks-index-when-trying-to-update-kibana-from-6-8-to-7-6/289575)

<div class="topic-metadata">

**Author:** [@cam1](https://discuss.elastic.co/u/cam1)\
**Replies:** 1\
**Last updated:** [December 2, 2021, 8:09pm UTC](https://discuss.elastic.co/t/issue-on-tasks-index-when-trying-to-update-kibana-from-6-8-to-7-6/289575 "2021-12-02T20:09:37Z")

</div>

Hello, I'm trying to upgrade my ES cluster from 6.8 to 7.6 but i'm facing an issue when I try to update my Kibana instance. I get an error on the .tasks index : FATAL \[index\_not\_found\_exception\] no such index \[.tasks…

---

## [Kibana SESSION\_EXPIRED](https://discuss.elastic.co/t/kibana-session-expired/289506)

<div class="topic-metadata">

**Author:** [@mst3r25](https://discuss.elastic.co/u/mst3r25)\
**Replies:** 1\
**Last updated:** [December 2, 2021, 8:06pm UTC](https://discuss.elastic.co/t/kibana-session-expired/289506 "2021-12-02T20:06:06Z")

</div>

I keep getting random SESSION\_EXPIRED when after implementing PKI authentication. If I use username and password my session never expires. Sometime I am able to use PKI to log back in after the SESSION\_EXPIRED, other tim…

---

## [Generation of logs for kibana has stopped after SIGHUP](https://discuss.elastic.co/t/generation-of-logs-for-kibana-has-stopped-after-sighup/289439)

<div class="topic-metadata">

**Author:** [@pratiksha](https://discuss.elastic.co/u/pratiksha)\
**Replies:** 1\
**Last updated:** [December 2, 2021, 7:48pm UTC](https://discuss.elastic.co/t/generation-of-logs-for-kibana-has-stopped-after-sighup/289439 "2021-12-02T19:48:28Z")

</div>

I observed that after SIGHUP signal sent to kibana, logs generation have stopped. Please tell how and why sighup signal is sent to kibana service.

---

## [Getting lines of a log that surround an error message with kibana](https://discuss.elastic.co/t/getting-lines-of-a-log-that-surround-an-error-message-with-kibana/289368)

<div class="topic-metadata">

**Author:** [@tnibbe](https://discuss.elastic.co/u/tnibbe)\
**Replies:** 1\
**Last updated:** [December 2, 2021, 7:41pm UTC](https://discuss.elastic.co/t/getting-lines-of-a-log-that-surround-an-error-message-with-kibana/289368 "2021-12-02T19:41:15Z")

</div>

Hello I am trying to use the ELK stack for error diagnosis with some testing output logs. I have a log structured as follows. DateTime MessageType MessageOrigin Message 2021-10-28T00:11:16…

---

## [Change kibana loading logo](https://discuss.elastic.co/t/change-kibana-loading-logo/289340)

<div class="topic-metadata">

**Author:** [@mohamed.softparadigm](https://discuss.elastic.co/u/mohamed.softparadigm)\
**Replies:** 1\
**Last updated:** [December 2, 2021, 7:16pm UTC](https://discuss.elastic.co/t/change-kibana-loading-logo/289340 "2021-12-02T19:16:52Z")

</div>

I am running kibana 7.15 in a docker container. How can I change Elasticsearch loading logo in kibana iframe?

---

## [ElasticSearch 6.0 + Grafana 7.x data viz is not working as expected](https://discuss.elastic.co/t/elasticsearch-6-0-grafana-7-x-data-viz-is-not-working-as-expected/288669)

<div class="topic-metadata">

**Author:** [@111343](https://discuss.elastic.co/u/111343)\
**Replies:** 2\
**Last updated:** [December 2, 2021, 7:15pm UTC](https://discuss.elastic.co/t/elasticsearch-6-0-grafana-7-x-data-viz-is-not-working-as-expected/288669 "2021-12-02T19:15:42Z")

</div>

Reporting the issue here What Grafana version and what operating system are you using? - 7.5.4 What are you trying to achieve? I’m trying to vizualize specific excerpts of the logs. I need to display performance of th…

---

## [CSV exporting reports fails almost all the time](https://discuss.elastic.co/t/csv-exporting-reports-fails-almost-all-the-time/289087)

<div class="topic-metadata">

**Author:** [@Mike\_Williams](https://discuss.elastic.co/u/Mike_Williams)\
**Replies:** 1\
**Last updated:** [December 2, 2021, 7:09pm UTC](https://discuss.elastic.co/t/csv-exporting-reports-fails-almost-all-the-time/289087 "2021-12-02T19:09:17Z")

</div>

In very similar vanes as 7.5 \[reporting\] fails randomly and Kibana Reporting -csv download fails frequently with error 'Unable to generate report Max attempts reached (3)' we're currently unable to do CSV exporting most …

---

## [Specific Graph](https://discuss.elastic.co/t/specific-graph/288909)

<div class="topic-metadata">

**Author:** [@Alexandre\_Solane](https://discuss.elastic.co/u/Alexandre_Solane)\
**Replies:** 1\
**Last updated:** [December 2, 2021, 6:37pm UTC](https://discuss.elastic.co/t/specific-graph/288909 "2021-12-02T18:37:31Z")

</div>

Hello everyone, I have a specific question. In my Elastic Index, i've got record which contain many timestamp and one value input\_y (for each record). I want to create graph group by record that mark point input\_y for e…

---

## [Multiple SQL statements in query](https://discuss.elastic.co/t/multiple-sql-statements-in-query/288494)

<div class="topic-metadata">

**Author:** [@antongb](https://discuss.elastic.co/u/antongb)\
**Replies:** 1\
**Last updated:** [December 2, 2021, 6:19pm UTC](https://discuss.elastic.co/t/multiple-sql-statements-in-query/288494 "2021-12-02T18:19:32Z")

</div>

Hi, I would like to design a query which finds the subset of field values based on the same values in a different document. Here is the document structure for context: TABLE = FRUIT\_QUESTIONS {"ID": 1, "question": "Do…

---

## [Reuse Dashboards accross different indexes in Kibana](https://discuss.elastic.co/t/reuse-dashboards-accross-different-indexes-in-kibana/289513)

<div class="topic-metadata">

**Author:** [@f4d0](https://discuss.elastic.co/u/f4d0)\
**Replies:** 4\
**Last updated:** [December 2, 2021, 2:33pm UTC](https://discuss.elastic.co/t/reuse-dashboards-accross-different-indexes-in-kibana/289513 "2021-12-02T14:33:21Z")

</div>

Hi Everyone, I work in Cybersecurity and every week I have different sets of data to ingest that require separated indexes. The data sets are ingested using the exactly same mappings, and everytime I have to draw new d…

---

## [Fleet server, connection limits and duplicate agents](https://discuss.elastic.co/t/fleet-server-connection-limits-and-duplicate-agents/290771)

<div class="topic-metadata">

**Author:** [@blinder](https://discuss.elastic.co/u/blinder)\
**Replies:** 0\
**Last updated:** [December 2, 2021, 1:47pm UTC](https://discuss.elastic.co/t/fleet-server-connection-limits-and-duplicate-agents/290771 "2021-12-02T13:47:02Z")

</div>

Hi We recently enrolled about 300 fleet clients to our On-Prem ECE cluster, enrollment seems to be working fine but duplicates( marked as offline) are spawning en mass. Data are being ingested from machines with double …

---

## [Color palette Tag Cloud in canvas](https://discuss.elastic.co/t/color-palette-tag-cloud-in-canvas/290765)

<div class="topic-metadata">

**Author:** [@MTV](https://discuss.elastic.co/u/MTV)\
**Replies:** 0\
**Last updated:** [December 2, 2021, 12:23pm UTC](https://discuss.elastic.co/t/color-palette-tag-cloud-in-canvas/290765 "2021-12-02T12:23:08Z")

</div>

Hi, I have a word cloud built in kibana that I want to bring to canvas, which so far is working properly. My questions are reagrding the color of the cloud, and the filters used in canvas. Let's say I have a dropdown w…

---

## [Scripted field error al crear](https://discuss.elastic.co/t/scripted-field-error-al-crear/290667)

<div class="topic-metadata">

**Author:** [@Javier\_Garcia\_Alvare](https://discuss.elastic.co/u/Javier_Garcia_Alvare)\
**Replies:** 5\
**Last updated:** [December 2, 2021, 11:14am UTC](https://discuss.elastic.co/t/scripted-field-error-al-crear/290667 "2021-12-02T11:14:31Z")

</div>

Buenos días, soy nuevo en el manejo y estoy intentado crear un scripted field y me da error. Alguien me puede ayudar, Gracias. Nombre scripted\_field: PRUEBA if(doc\['CAMPO'\].value.toString().substring(0,5)==("valor")){…

---

## [How to update Index patterns?](https://discuss.elastic.co/t/how-to-update-index-patterns/290636)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 4\
**Last updated:** [December 2, 2021, 2:22am UTC](https://discuss.elastic.co/t/how-to-update-index-patterns/290636 "2021-12-02T02:22:49Z")

</div>

I currently use Elastic stack 7.14. Recently, when I wanted to search for a certain field, I found that it couldn’t be searched. Kibana gave me a prompt "Unindexed fields can not be searched". I remember that index patte…

---

## [Clearing index pattern fields](https://discuss.elastic.co/t/clearing-index-pattern-fields/290716)

<div class="topic-metadata">

**Author:** [@hamzahda](https://discuss.elastic.co/u/hamzahda)\
**Replies:** 1\
**Last updated:** [December 2, 2021, 1:18am UTC](https://discuss.elastic.co/t/clearing-index-pattern-fields/290716 "2021-12-02T01:18:53Z")

</div>

I want to clear around 2000 unused fields in a kibana index pattern and I was wondering wich of the following two approaches should I take: deleting all of the fields and then only the used fields will be recreated by…

---

## [Elastic agent tries to download beats from Elastic artifacts directly without passing by fleet server](https://discuss.elastic.co/t/elastic-agent-tries-to-download-beats-from-elastic-artifacts-directly-without-passing-by-fleet-server/290676)

<div class="topic-metadata">

**Author:** [@djamel.lahouazi](https://discuss.elastic.co/u/djamel.lahouazi)\
**Replies:** 5\
**Last updated:** [December 2, 2021, 12:24am UTC](https://discuss.elastic.co/t/elastic-agent-tries-to-download-beats-from-elastic-artifacts-directly-without-passing-by-fleet-server/290676 "2021-12-02T00:24:09Z")

</div>

I installed fleet server & kibana in a machine that has access to internet and installed elasticagent in Windows server that does not have access to internet. But when I try to add integration (osquerybeat) i find in the…

---

## [Advanced Watcher Alternative input](https://discuss.elastic.co/t/advanced-watcher-alternative-input/290455)

<div class="topic-metadata">

**Author:** [@zangero98](https://discuss.elastic.co/u/zangero98)\
**Replies:** 1\
**Last updated:** [December 1, 2021, 11:43pm UTC](https://discuss.elastic.co/t/advanced-watcher-alternative-input/290455 "2021-12-01T23:43:57Z")

</div>

Hi, I want to specify an advanced watch with an alternative input. Right now I am matching all logs in the syntax, but i just want to match fileset.name = firewall I'm an elastic beginner and so I'm not very familiar w…

---

## [Is it possible to enable HTTPs only between the browser and kibana?](https://discuss.elastic.co/t/is-it-possible-to-enable-https-only-between-the-browser-and-kibana/290421)

<div class="topic-metadata">

**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\
**Replies:** 5\
**Last updated:** [December 1, 2021, 8:29pm UTC](https://discuss.elastic.co/t/is-it-possible-to-enable-https-only-between-the-browser-and-kibana/290421 "2021-12-01T20:29:29Z")

</div>

hello, I have a set up where an app developed via flask places the logs onto a Elasticsearch server the ingests and visualizes the logs . I want to know if i could enable HTTP only between the browser and kibana and no…

---

## [Is it possible to embed Kibana Visualizations on Google Slides or Docs?](https://discuss.elastic.co/t/is-it-possible-to-embed-kibana-visualizations-on-google-slides-or-docs/290427)

<div class="topic-metadata">

**Author:** [@Urbano\_Freitas](https://discuss.elastic.co/u/Urbano_Freitas)\
**Replies:** 4\
**Last updated:** [December 1, 2021, 8:13pm UTC](https://discuss.elastic.co/t/is-it-possible-to-embed-kibana-visualizations-on-google-slides-or-docs/290427 "2021-12-01T20:13:51Z")

</div>

Hi everyone, I do Load Tests frequently and I generally in the end share a report with Load Test results and with observations. I generally do this by creating some visualizations with Kibana and then snap(1) the visua…

---

## [Create visualization with Lens Error](https://discuss.elastic.co/t/create-visualization-with-lens-error/290687)

<div class="topic-metadata">

**Author:** [@kbujold\_wr](https://discuss.elastic.co/u/kbujold_wr)\
**Replies:** 2\
**Last updated:** [December 1, 2021, 5:04pm UTC](https://discuss.elastic.co/t/create-visualization-with-lens-error/290687 "2021-12-01T17:04:29Z")

</div>

Hi, we are using elastic 7.9.3 After a fresh installation, if we navigate to the Visualize panel and select Create visualization / Lens we get can error saying "Unexpected token u in JSON at position 0" on the UI. If w…

---

## [Zoom in/out on custom picture](https://discuss.elastic.co/t/zoom-in-out-on-custom-picture/290536)

<div class="topic-metadata">

**Author:** [@Testeur](https://discuss.elastic.co/u/Testeur)\
**Replies:** 3\
**Last updated:** [December 1, 2021, 4:45pm UTC](https://discuss.elastic.co/t/zoom-in-out-on-custom-picture/290536 "2021-12-01T16:45:03Z")

</div>

Hello, I would like to know if with Kibana it is possible to create our own picture and be able to zoom in/out and put a circle when something has been found. The same as Map functionnalities but on a custom "map". This…

---

## [Progression wheel value at the end of the wheel](https://discuss.elastic.co/t/progression-wheel-value-at-the-end-of-the-wheel/288475)

<div class="topic-metadata">

**Author:** [@MTV](https://discuss.elastic.co/u/MTV)\
**Replies:** 6\
**Last updated:** [December 1, 2021, 2:37pm UTC](https://discuss.elastic.co/t/progression-wheel-value-at-the-end-of-the-wheel/288475 "2021-12-01T14:37:42Z")

</div>

Hi, I am working with canvas and was trying to find a way to show the value in a progression wheel at the end of the wheel instead of in the center. I tried some approaches using css that I used for bar plots and scatte…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=260)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=262)
