# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=27

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 28

---

## [Creating rules in different spaces through API](https://discuss.elastic.co/t/creating-rules-in-different-spaces-through-api/372841)

<div class="topic-metadata">

**Author:** [@Joey\_Visbeen](https://discuss.elastic.co/u/Joey_Visbeen)\
**Replies:** 2\
**Last updated:** [January 6, 2025, 1:27pm UTC](https://discuss.elastic.co/t/creating-rules-in-different-spaces-through-api/372841 "2025-01-06T13:27:40Z")

</div>

When creating a rule in kibana it shows in the developer tools that the end point of the specific space is used to create the rule within the space. Request URL: {kibana\_url}/s/{space\_name}/api/alerting/rule But when w…

---

## [How to build a sidebar navigation in our plugin generated by script based on kibana8.14.3](https://discuss.elastic.co/t/how-to-build-a-sidebar-navigation-in-our-plugin-generated-by-script-based-on-kibana8-14-3/369290)

<div class="topic-metadata">

**Author:** [@hash-yang](https://discuss.elastic.co/u/hash-yang)\
**Replies:** 1\
**Last updated:** [January 6, 2025, 12:36pm UTC](https://discuss.elastic.co/t/how-to-build-a-sidebar-navigation-in-our-plugin-generated-by-script-based-on-kibana8-14-3/369290 "2025-01-06T12:36:52Z")

</div>

version current: kibana 8.14.3; elasticsearch 8.13.4 I follow the guideline run\_kibana\_with\_your\_plugin\_in\_dev\_mode. My Plugin is running normally, and it can be shown in the kibana nivagation. Now, i want to build…

---

## [User can view reports created by other users](https://discuss.elastic.co/t/user-can-view-reports-created-by-other-users/372778)

<div class="topic-metadata">

**Author:** [@JesusGM](https://discuss.elastic.co/u/JesusGM)\
**Replies:** 1\
**Last updated:** [January 4, 2025, 3:54pm UTC](https://discuss.elastic.co/t/user-can-view-reports-created-by-other-users/372778 "2025-01-04T15:54:26Z")

</div>

Hi, I've noticed that I can only view the reports I've created. Is there a way to access reports created by other users in Kibana?

---

## [Which elastic agent integration to be used for custom logs?](https://discuss.elastic.co/t/which-elastic-agent-integration-to-be-used-for-custom-logs/372752)

<div class="topic-metadata">

**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\
**Replies:** 3\
**Last updated:** [January 3, 2025, 7:30pm UTC](https://discuss.elastic.co/t/which-elastic-agent-integration-to-be-used-for-custom-logs/372752 "2025-01-03T19:30:34Z")

</div>

Hello, I am wanting to ingest logs but I am a bit confused on which integration to use:

---

## [IngressRoute not exposing kibana for ECK operator](https://discuss.elastic.co/t/ingressroute-not-exposing-kibana-for-eck-operator/372747)

<div class="topic-metadata">

**Author:** [@Merthan\_Tukus](https://discuss.elastic.co/u/Merthan_Tukus)\
**Replies:** 0\
**Last updated:** [January 3, 2025, 1:05pm UTC](https://discuss.elastic.co/t/ingressroute-not-exposing-kibana-for-eck-operator/372747 "2025-01-03T13:05:41Z")

</div>

IngressRoute (Traefik) not exposing on our domain, while port forwarding works. Cloudflare is correctly set up for dns resolving. Anyone know how to get it working, since we are now getting an internal server error As …

---

## [Issues with Persistent Changes in Metricbeat Visuals and Index Mapping](https://discuss.elastic.co/t/issues-with-persistent-changes-in-metricbeat-visuals-and-index-mapping/372635)

<div class="topic-metadata">

**Author:** [@componentByss](https://discuss.elastic.co/u/componentByss)\
**Replies:** 7\
**Last updated:** [December 31, 2024, 3:55pm UTC](https://discuss.elastic.co/t/issues-with-persistent-changes-in-metricbeat-visuals-and-index-mapping/372635 "2024-12-31T15:55:25Z")

</div>

Hello everyone, I'm encountering an issue in Kibana 8.9.1 where changes made in the Visualize Library to the Metricbeat Docker ECS table, for example, do not persist after a set number of days. Specifically, the visuali…

---

## [Error upgrading kibana to newer version 8.17.0](https://discuss.elastic.co/t/error-upgrading-kibana-to-newer-version-8-17-0/372577)

<div class="topic-metadata">

**Author:** [@lusynda](https://discuss.elastic.co/u/lusynda)\
**Replies:** 4\
**Last updated:** [December 30, 2024, 7:02pm UTC](https://discuss.elastic.co/t/error-upgrading-kibana-to-newer-version-8-17-0/372577 "2024-12-30T19:02:49Z")

</div>

Hi all, I've been having this problems for the last 2 kibana version upgrade. from 8.15.0 to 8.16.0 and from 8.16.0 to 8.17.0 Everytime i upgrade using both apt package manager and from deb package it gave me this err…

---

## [Kibana err\_empty\_response from Kibana](https://discuss.elastic.co/t/kibana-err-empty-response-from-kibana/372634)

<div class="topic-metadata">

**Author:** [@douglas\_Garcia](https://discuss.elastic.co/u/douglas_Garcia)\
**Replies:** 1\
**Last updated:** [December 30, 2024, 6:08pm UTC](https://discuss.elastic.co/t/kibana-err-empty-response-from-kibana/372634 "2024-12-30T18:08:14Z")

</div>

Hello Team, I have installed on my local machine ES and Kibana to test around I am able to run ES and log in but when it comes to Kibana I have a small issue; I am able to install it and also run the service but when …

---

## [Kibana Roles "Show reserved roles" not sticky](https://discuss.elastic.co/t/kibana-roles-show-reserved-roles-not-sticky/372287)

<div class="topic-metadata">

**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\
**Replies:** 0\
**Last updated:** [December 20, 2024, 8:25pm UTC](https://discuss.elastic.co/t/kibana-roles-show-reserved-roles-not-sticky/372287 "2024-12-20T20:25:07Z")

</div>

When working with roles, unclicking "show reserved roles" to make the list manageable. As soon as you look at a role and come back, that switch becomes "unstuck". Just a suggestion, I think it should stay set, at least…

---

## [Kibana Search Application Customize Returned Result](https://discuss.elastic.co/t/kibana-search-application-customize-returned-result/372609)

<div class="topic-metadata">

**Author:** [@samer\_saleh](https://discuss.elastic.co/u/samer_saleh)\
**Replies:** 0\
**Last updated:** [December 29, 2024, 11:54pm UTC](https://discuss.elastic.co/t/kibana-search-application-customize-returned-result/372609 "2024-12-29T23:54:06Z")

</div>

Hi , Im trying the Kibana Search Applications for the first time. Initially when I created the search application against a certain index I was getting all the fields displayed. After some reading I found that I can you…

---

## [Dashboards for Suricata \> Filebeat \> Logstash Setup](https://discuss.elastic.co/t/dashboards-for-suricata-filebeat-logstash-setup/372436)

<div class="topic-metadata">

**Author:** [@elastirroot](https://discuss.elastic.co/u/elastirroot)\
**Replies:** 11\
**Last updated:** [December 29, 2024, 3:10am UTC](https://discuss.elastic.co/t/dashboards-for-suricata-filebeat-logstash-setup/372436 "2024-12-29T03:10:19Z")

</div>

Hi, I have my Stack setup across two machines. The first with Suricata and filebeat and the other logstash and Kibana/Elasticsearch. tcpdump confirms logs are being sent over and I recently figured out how to import my…

---

## [Export Dataview](https://discuss.elastic.co/t/export-dataview/371944)

<div class="topic-metadata">

**Author:** [@madhavsankarg](https://discuss.elastic.co/u/madhavsankarg)\
**Replies:** 4\
**Last updated:** [December 23, 2024, 10:00am UTC](https://discuss.elastic.co/t/export-dataview/371944 "2024-12-23T10:00:34Z")

</div>

When I export data view from Kibana through Saved Objects the fields are not getting exported. When I import it I am not able to see the fields. Does anyone know why its happening like this? Kibana Version - 8.14.1

---

## [How to have graphs overlapping in vega-lite](https://discuss.elastic.co/t/how-to-have-graphs-overlapping-in-vega-lite/372304)

<div class="topic-metadata">

**Author:** [@Meht-evaS](https://discuss.elastic.co/u/Meht-evaS)\
**Replies:** 0\
**Last updated:** [December 22, 2024, 3:11pm UTC](https://discuss.elastic.co/t/how-to-have-graphs-overlapping-in-vega-lite/372304 "2024-12-22T15:11:58Z")

</div>

Hi, I'm trying to create a single chart on Kibana via Vega visualization that allows me to show two overlapping charts. In input I take logs that come to me from wazuh in which the date (date\_id) is reported in the form …

---

## [How to Handle "null" Values in Visualizations in Kibana 8?](https://discuss.elastic.co/t/how-to-handle-null-values-in-visualizations-in-kibana-8/372006)

<div class="topic-metadata">

**Author:** [@ms.zerone](https://discuss.elastic.co/u/ms.zerone)\
**Replies:** 1\
**Last updated:** [December 19, 2024, 7:45pm UTC](https://discuss.elastic.co/t/how-to-handle-null-values-in-visualizations-in-kibana-8/372006 "2024-12-19T19:45:04Z")

</div>

Hi everyone, I’m facing an issue in Kibana 8 related to how fields with no data are handled in visualizations (e.g., Enhanced Table). In Kibana 7, when a field had no data, it would return 0 if the field was set to num…

---

## [Can I get the datepicker parameters to use in a KQL query in Kibana](https://discuss.elastic.co/t/can-i-get-the-datepicker-parameters-to-use-in-a-kql-query-in-kibana/372224)

<div class="topic-metadata">

**Author:** [@bjornbear](https://discuss.elastic.co/u/bjornbear)\
**Replies:** 0\
**Last updated:** [December 19, 2024, 1:41pm UTC](https://discuss.elastic.co/t/can-i-get-the-datepicker-parameters-to-use-in-a-kql-query-in-kibana/372224 "2024-12-19T13:41:43Z")

</div>

Is it possible yet to use the Datepicker parameters in a KQL or filter since I have several time fields that I would want to link to the selected time range.

---

## [Switch between the "document" and "summary" columns in Kibana Discover](https://discuss.elastic.co/t/switch-between-the-document-and-summary-columns-in-kibana-discover/372063)

<div class="topic-metadata">

**Author:** [@debuggedme](https://discuss.elastic.co/u/debuggedme)\
**Replies:** 6\
**Last updated:** [December 18, 2024, 3:10pm UTC](https://discuss.elastic.co/t/switch-between-the-document-and-summary-columns-in-kibana-discover/372063 "2024-12-18T15:10:46Z")

</div>

How to switch between the "document" and "summary" columns in Kibana Discover? In version 8.15, I saw "document," but in 8.16, I see "summary," and it is empty. The default column set to \_source doesn't seem to take …

---

## [No data from logfile on a new index](https://discuss.elastic.co/t/no-data-from-logfile-on-a-new-index/371998)

<div class="topic-metadata">

**Author:** [@moep](https://discuss.elastic.co/u/moep)\
**Replies:** 1\
**Last updated:** [December 17, 2024, 8:48pm UTC](https://discuss.elastic.co/t/no-data-from-logfile-on-a-new-index/371998 "2024-12-17T20:48:45Z")

</div>

Hello, I have running the ELK Stack in a Docker-compose setup. thats my setup: ~/local-ELK/logstash   main  pwd /home/moep/local-ELK/logstash Thats my filter in /home/moep/local-ELK/logstash/pipeline/weechat.co…

---

## [Anomaly detection for web site visitor surge (sparse data)](https://discuss.elastic.co/t/anomaly-detection-for-web-site-visitor-surge-sparse-data/372033)

<div class="topic-metadata">

**Author:** [@J\_Reinhardt](https://discuss.elastic.co/u/J_Reinhardt)\
**Replies:** 1\
**Last updated:** [December 17, 2024, 3:31pm UTC](https://discuss.elastic.co/t/anomaly-detection-for-web-site-visitor-surge-sparse-data/372033 "2024-12-17T15:31:20Z")

</div>

I'm trying to use elastic anomaly detection to identify when a surge in website visitor activity occurs for a particular IP address. The data set is really simple, it just shows the number of times an IP address has vis…

---

## [Kibana canvas timing out after upgrade](https://discuss.elastic.co/t/kibana-canvas-timing-out-after-upgrade/372040)

<div class="topic-metadata">

**Author:** [@Stephen\_IAnson](https://discuss.elastic.co/u/Stephen_IAnson)\
**Replies:** 1\
**Last updated:** [December 17, 2024, 2:10pm UTC](https://discuss.elastic.co/t/kibana-canvas-timing-out-after-upgrade/372040 "2024-12-17T14:10:34Z")

</div>

Hi, I've just upgraded from elasticsearch+kibana 8.13.3 to 8.16.1. The upgrade seemed to go smoothly, but now I notice my canvas dashboards show clocks for ages and many elements (using essql with elasticsearch) then f…

---

## [Kibana error after login](https://discuss.elastic.co/t/kibana-error-after-login/370200)

<div class="topic-metadata">

**Author:** [@stephane\_chan](https://discuss.elastic.co/u/stephane_chan)\
**Replies:** 3\
**Last updated:** [December 16, 2024, 8:08am UTC](https://discuss.elastic.co/t/kibana-error-after-login/370200 "2024-12-16T08:08:28Z")

</div>

Hi, I try to install stack Kibana version 8.15 and Elasticsearch. Elasticsearch and Kibana is successfully installed, but when log into Kibana, I have this error "urlForwarding" is not found

---

## [How can I make field analysis closer to the number of documents in Discover?](https://discuss.elastic.co/t/how-can-i-make-field-analysis-closer-to-the-number-of-documents-in-discover/371948)

<div class="topic-metadata">

**Author:** [@aac210214](https://discuss.elastic.co/u/aac210214)\
**Replies:** 2\
**Last updated:** [December 16, 2024, 12:28am UTC](https://discuss.elastic.co/t/how-can-i-make-field-analysis-closer-to-the-number-of-documents-in-discover/371948 "2024-12-16T00:28:56Z")

</div>

like this There are more than 90,000 documents But the analysis only shows 5000

---

## [Watcher / alarm in Kibana 8.15 based on unique values](https://discuss.elastic.co/t/watcher-alarm-in-kibana-8-15-based-on-unique-values/371997)

<div class="topic-metadata">

**Author:** [@MatthewS](https://discuss.elastic.co/u/MatthewS)\
**Replies:** 0\
**Last updated:** [December 15, 2024, 8:01pm UTC](https://discuss.elastic.co/t/watcher-alarm-in-kibana-8-15-based-on-unique-values/371997 "2024-12-15T20:01:32Z")

</div>

Hello, I'm using kibana and elastic 8.15 version. I'm sending to elasticsearch custom, parsed logs. One of the fields is type IP, and obviuosly contains IP address. I want to setup custom actions (email / webhook) if ne…

---

## [Field Statistics Export + API](https://discuss.elastic.co/t/field-statistics-export-api/371974)

<div class="topic-metadata">

**Author:** [@elasticfantastik](https://discuss.elastic.co/u/elasticfantastik)\
**Replies:** 1\
**Last updated:** [December 15, 2024, 4:47pm UTC](https://discuss.elastic.co/t/field-statistics-export-api/371974 "2024-12-15T16:47:06Z")

</div>

Within Kibana, when clicking the "Field Statistics" for any given index, I was wondering if there's an easy way of saving the results, in particular the top-value statistics for each field. I've tried saving a webarchive…

---

## [Calculating index sizes](https://discuss.elastic.co/t/calculating-index-sizes/371980)

<div class="topic-metadata">

**Author:** [@Snow](https://discuss.elastic.co/u/Snow)\
**Replies:** 2\
**Last updated:** [December 15, 2024, 7:40am UTC](https://discuss.elastic.co/t/calculating-index-sizes/371980 "2024-12-15T07:40:14Z")

</div>

Hi, Is there any way to visualize index sizes without using mapper size plugin or any other plugin? need to visualize index names - storage occupied ?

---

## [Kibana Formula using ifelse with multiple conditions](https://discuss.elastic.co/t/kibana-formula-using-ifelse-with-multiple-conditions/370983)

<div class="topic-metadata">

**Author:** [@bjornbear](https://discuss.elastic.co/u/bjornbear)\
**Replies:** 5\
**Last updated:** [December 13, 2024, 1:57pm UTC](https://discuss.elastic.co/t/kibana-formula-using-ifelse-with-multiple-conditions/370983 "2024-12-13T13:57:12Z")

</div>

How can I combine multiple conditions in an ifelse statement? I need to avoid a situation where I divide by zero e.g. any of the following values: count() and count(shift='1w')+count(shift='2w') may not be 0 to avoid a N…

---

## [Get efficiency of production](https://discuss.elastic.co/t/get-efficiency-of-production/371945)

<div class="topic-metadata">

**Author:** [@MRoed](https://discuss.elastic.co/u/MRoed)\
**Replies:** 0\
**Last updated:** [December 13, 2024, 8:06am UTC](https://discuss.elastic.co/t/get-efficiency-of-production/371945 "2024-12-13T08:06:00Z")

</div>

I would like to determine the efficiency of a production process. This should be represented by the number of items produced divided by the target number of items within the selected time period. To achieve this, I want …

---

## [Can you change the index that Machine Learning Jobs use after job creation?](https://discuss.elastic.co/t/can-you-change-the-index-that-machine-learning-jobs-use-after-job-creation/371936)

<div class="topic-metadata">

**Author:** [@Datt\_Mamon](https://discuss.elastic.co/u/Datt_Mamon)\
**Replies:** 2\
**Last updated:** [December 12, 2024, 10:52pm UTC](https://discuss.elastic.co/t/can-you-change-the-index-that-machine-learning-jobs-use-after-job-creation/371936 "2024-12-12T22:52:40Z")

</div>

Hello, I am looking for some assistance with a question. I have some machine learning jobs currently using an index called, "Win." Due to some configuration changes, the underlying index structure had to change, so the …

---

## [Elastic should offer more out of the box](https://discuss.elastic.co/t/elastic-should-offer-more-out-of-the-box/371926)

<div class="topic-metadata">

**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\
**Replies:** 4\
**Last updated:** [December 12, 2024, 7:42pm UTC](https://discuss.elastic.co/t/elastic-should-offer-more-out-of-the-box/371926 "2024-12-12T19:42:48Z")

</div>

Hello, How come Elastic doesn't target small use cases and build more out of box solutions and offer that as selling points. For example, Windows Event Logs are such a great resource of information. It can identify acc…

---

## [Add custom JavaScript to hide buttons in Kibana](https://discuss.elastic.co/t/add-custom-javascript-to-hide-buttons-in-kibana/363526)

<div class="topic-metadata">

**Author:** [@Manoilayans](https://discuss.elastic.co/u/Manoilayans)\
**Replies:** 4\
**Last updated:** [December 12, 2024, 4:12pm UTC](https://discuss.elastic.co/t/add-custom-javascript-to-hide-buttons-in-kibana/363526 "2024-12-12T16:12:54Z")

</div>

While creating a new Dashboard in Kibana, we can get below screen. I wish to hide the button i.e, "Controls"

---

## [Virus Detection While Downloading Kibana 8.16.1 from Official Site](https://discuss.elastic.co/t/virus-detection-while-downloading-kibana-8-16-1-from-official-site/371846)

<div class="topic-metadata">

**Author:** [@Rajani\_Kumar](https://discuss.elastic.co/u/Rajani_Kumar)\
**Replies:** 3\
**Last updated:** [December 12, 2024, 1:59pm UTC](https://discuss.elastic.co/t/virus-detection-while-downloading-kibana-8-16-1-from-official-site/371846 "2024-12-12T13:59:34Z")

</div>

Hello, I am trying to download Kibana 8.16.1 from the official Elastic website, but my laptop is detecting a virus during the download process. Has anyone else encountered this issue or have suggestions on how to safely…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=26)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=28)
