# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=270

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 271

---

## [How to use last value in a custom visualization?](https://discuss.elastic.co/t/how-to-use-last-value-in-a-custom-visualization/286213)

<div class="topic-metadata">

**Author:** [@Joao\_Silva](https://discuss.elastic.co/u/Joao_Silva)\
**Replies:** 3\
**Last updated:** [October 28, 2021, 3:51pm UTC](https://discuss.elastic.co/t/how-to-use-last-value-in-a-custom-visualization/286213 "2021-10-28T15:51:44Z")

</div>

I have been trying to create a custom visualization with vega to display some simple data. In this case, I wanted to display the data from a vehicle where it would show the battery current vs the vehicle speed (I'm start…

---

## [Dynamic range and Histogram function](https://discuss.elastic.co/t/dynamic-range-and-histogram-function/287931)

<div class="topic-metadata">

**Author:** [@kibanauser4](https://discuss.elastic.co/u/kibanauser4)\
**Replies:** 6\
**Last updated:** [October 28, 2021, 3:39pm UTC](https://discuss.elastic.co/t/dynamic-range-and-histogram-function/287931 "2021-10-28T15:39:41Z")

</div>

Hi, I'm new to Kibana and this is my first time creating visualizations in Kibana so I need a little help. My dataset is pretty simple and I do not have a timestamp field. One of the fields is "price" and I wanted to cre…

---

## [What role do I enable for kibana dashboard CSV download?](https://discuss.elastic.co/t/what-role-do-i-enable-for-kibana-dashboard-csv-download/286520)

<div class="topic-metadata">

**Author:** [@blueren](https://discuss.elastic.co/u/blueren)\
**Replies:** 7\
**Last updated:** [October 28, 2021, 2:17pm UTC](https://discuss.elastic.co/t/what-role-do-i-enable-for-kibana-dashboard-csv-download/286520 "2021-10-28T14:17:26Z")

</div>

I have the exact issue as mentioned in this other thread but unfortunately I'm unable to get it working based on the responses provided there. I have a custom role with a "read" access on dashboard. The user is unable t…

---

## [Kibana Data Table Exclude](https://discuss.elastic.co/t/kibana-data-table-exclude/287721)

<div class="topic-metadata">

**Author:** [@rachelyang](https://discuss.elastic.co/u/rachelyang)\
**Replies:** 3\
**Last updated:** [October 28, 2021, 1:58pm UTC](https://discuss.elastic.co/t/kibana-data-table-exclude/287721 "2021-10-28T13:58:04Z")

</div>

Hi, I am trying to exclude all the items which contain /abr\_live/amlst\* from Kibana data table. It does not work. How can I use wildcard in the Buckets -\> Advanced -\> Exclude? Thanks,

---

## [\[esaggs\] \> error in data table visulisation](https://discuss.elastic.co/t/esaggs-error-in-data-table-visulisation/287917)

<div class="topic-metadata">

**Author:** [@hNiven](https://discuss.elastic.co/u/hNiven)\
**Replies:** 3\
**Last updated:** [October 28, 2021, 1:23pm UTC](https://discuss.elastic.co/t/esaggs-error-in-data-table-visulisation/287917 "2021-10-28T13:23:36Z")

</div>

Hi, We have an index with a large amount of data coming through and have created a data table to visualize the data. The data table contains 1 metric and 5 buckets and the size for each bucket has been set to 50,000 to …

---

## [Display percentage bar in Lens](https://discuss.elastic.co/t/display-percentage-bar-in-lens/287907)

<div class="topic-metadata">

**Author:** [@AlexM566](https://discuss.elastic.co/u/AlexM566)\
**Replies:** 5\
**Last updated:** [October 28, 2021, 1:18pm UTC](https://discuss.elastic.co/t/display-percentage-bar-in-lens/287907 "2021-10-28T13:18:12Z")

</div>

Hello everyone, I have a question and I want to know if this is possible. I have a lens visualization I want to display on the vertical axis beside the what is currently is in left, a percentage bar also on vertical axi…

---

## [How to disable Kibana Lens Suggestions bar](https://discuss.elastic.co/t/how-to-disable-kibana-lens-suggestions-bar/287902)

<div class="topic-metadata">

**Author:** [@nastymajestic](https://discuss.elastic.co/u/nastymajestic)\
**Replies:** 1\
**Last updated:** [October 28, 2021, 11:07am UTC](https://discuss.elastic.co/t/how-to-disable-kibana-lens-suggestions-bar/287902 "2021-10-28T11:07:04Z")

</div>

As a title, how to disable the Suggestions bar in Kibana Lens? I'm working on huge sets of data and the suggestion bar is slowing down the process. Is there a way to disable it?

---

## [Usage of Lens in Dashboard](https://discuss.elastic.co/t/usage-of-lens-in-dashboard/287868)

<div class="topic-metadata">

**Author:** [@RAM\_NATHAN](https://discuss.elastic.co/u/RAM_NATHAN)\
**Replies:** 3\
**Last updated:** [October 28, 2021, 11:01am UTC](https://discuss.elastic.co/t/usage-of-lens-in-dashboard/287868 "2021-10-28T11:01:42Z")

</div>

Hi Im trying to use Lens visualization. I have two views as metric and bar chart as below When I add this to dashboard, Im able to see only one of the two So how to use other graph (bar chart). I dont see a way…

---

## [Accessing images into elasticsearch](https://discuss.elastic.co/t/accessing-images-into-elasticsearch/287844)

<div class="topic-metadata">

**Author:** [@Salman\_Ali](https://discuss.elastic.co/u/Salman_Ali)\
**Replies:** 6\
**Last updated:** [October 28, 2021, 6:21am UTC](https://discuss.elastic.co/t/accessing-images-into-elasticsearch/287844 "2021-10-28T06:21:01Z")

</div>

Hey I have screenshots of different sites stored on my local machine. I want to store it in Elasticsearch. So I can view each screenshot against the relevant domain in kibana. But I don't have any clue how to do this. …

---

## [Kibana - ERR\_OSSL\_PEM\_NO\_START\_LINE](https://discuss.elastic.co/t/kibana-err-ossl-pem-no-start-line/287873)

<div class="topic-metadata">

**Author:** [@Trinity\_Rolling](https://discuss.elastic.co/u/Trinity_Rolling)\
**Replies:** 1\
**Last updated:** [October 28, 2021, 6:05am UTC](https://discuss.elastic.co/t/kibana-err-ossl-pem-no-start-line/287873 "2021-10-28T06:05:48Z")

</div>

Elasticsearch SSL is working. Moving onto Kibana SSL. I've followed the documents to generate new csr requests for Kibana-server.cer and kibana-server.key files. I've placed them in the kibana config directory. I've…

---

## [Kibana - Shorten URL API With Workspace URL's](https://discuss.elastic.co/t/kibana-shorten-url-api-with-workspace-urls/287687)

<div class="topic-metadata">

**Author:** [@scott\_stash](https://discuss.elastic.co/u/scott_stash)\
**Replies:** 2\
**Last updated:** [October 27, 2021, 8:42pm UTC](https://discuss.elastic.co/t/kibana-shorten-url-api-with-workspace-urls/287687 "2021-10-27T20:42:09Z")

</div>

Currently for my project I create a lot of dashboards with really long links because they apply filters such as time range etc. The Kibana shorten URL is great for this. I'm not moving my dashboards into different work…

---

## [In vega how do I handle "other" cases with a scale](https://discuss.elastic.co/t/in-vega-how-do-i-handle-other-cases-with-a-scale/287363)

<div class="topic-metadata">

**Author:** [@nsimi](https://discuss.elastic.co/u/nsimi)\
**Replies:** 2\
**Last updated:** [October 27, 2021, 6:14pm UTC](https://discuss.elastic.co/t/in-vega-how-do-i-handle-other-cases-with-a-scale/287363 "2021-10-27T18:14:36Z")

</div>

Hello All, I have an ordinal scale that contains items \[ A, B, C\] and data that has values of \[A,B,C,D,E,F\] how do I put D,E, and F under a catch all with the scale? Similar to how "other" functions in other kibana visu…

---

## [Alert - Query to get distinct count](https://discuss.elastic.co/t/alert-query-to-get-distinct-count/287583)

<div class="topic-metadata">

**Author:** [@fredrick.bb](https://discuss.elastic.co/u/fredrick.bb)\
**Replies:** 3\
**Last updated:** [October 27, 2021, 6:13pm UTC](https://discuss.elastic.co/t/alert-query-to-get-distinct-count/287583 "2021-10-27T18:13:25Z")

</div>

log : 1 { "\_index": "some index", "fields": { "PARTITION": \[ 4 \], "APPLICATION\_NAME": \[ "order-app" \], } } ----- log : 2 { "\_index": "some index", "fields": { "PARTITION": \[ …

---

## [How do I constrain data in a vega visualization to the visible space?](https://discuss.elastic.co/t/how-do-i-constrain-data-in-a-vega-visualization-to-the-visible-space/287131)

<div class="topic-metadata">

**Author:** [@nsimi](https://discuss.elastic.co/u/nsimi)\
**Replies:** 2\
**Last updated:** [October 27, 2021, 5:54pm UTC](https://discuss.elastic.co/t/how-do-i-constrain-data-in-a-vega-visualization-to-the-visible-space/287131 "2021-10-27T17:54:20Z")

</div>

Hello All, is there a way to constrain all the data in a visualization to the area with in the visualization? Here is an example: { "$schema": "https://vega.github.io/schema/vega/v5.json", "width": 700, "height"…

---

## [Date range values of urltemplate throws rison error](https://discuss.elastic.co/t/date-range-values-of-urltemplate-throws-rison-error/286573)

<div class="topic-metadata">

**Author:** [@Prathibha\_Y](https://discuss.elastic.co/u/Prathibha_Y)\
**Replies:** 1\
**Last updated:** [October 27, 2021, 5:47pm UTC](https://discuss.elastic.co/t/date-range-values-of-urltemplate-throws-rison-error/286573 "2021-10-27T17:47:16Z")

</div>

Hi trying to use urltemplate variables for date range but getting rison decode error, am I doing it right ? This is the error rison decoder error: missing ':' version Kibana 7.10.0 - oss This is the url app/dashboa…

---

## [Kibana : Unable to authenticate user \[\] for REST request after deleting logs](https://discuss.elastic.co/t/kibana-unable-to-authenticate-user-for-rest-request-after-deleting-logs/287781)

<div class="topic-metadata">

**Author:** [@Leviath](https://discuss.elastic.co/u/Leviath)\
**Replies:** 1\
**Last updated:** [October 27, 2021, 4:37pm UTC](https://discuss.elastic.co/t/kibana-unable-to-authenticate-user-for-rest-request-after-deleting-logs/287781 "2021-10-27T16:37:42Z")

</div>

Hello everyone, I'm new to elastic and I can't connect Kibana to Elasticsearch anymore. Whenever I try to connect, i get "kibana is not ready yet" and : {"type":"log","@timestamp":"2021-10-27T11:06:16+02:00","tags":\["…

---

## [Postfix Dashboards visualization](https://discuss.elastic.co/t/postfix-dashboards-visualization/287731)

<div class="topic-metadata">

**Author:** [@pi314](https://discuss.elastic.co/u/pi314)\
**Replies:** 1\
**Last updated:** [October 27, 2021, 4:36pm UTC](https://discuss.elastic.co/t/postfix-dashboards-visualization/287731 "2021-10-27T16:36:03Z")

</div>

Hello everyone! i'm newie with ELK, my question is from a dummy person and I need some compassion :sweat\_smile: I install in a virtual machine with Ubuntu 20.04, Postfix, Logstash, Kibana and Elastic. I follow the next…

---

## [Aggregation: unique count grouped by combination of field value](https://discuss.elastic.co/t/aggregation-unique-count-grouped-by-combination-of-field-value/287431)

<div class="topic-metadata">

**Author:** [@ismarslomic](https://discuss.elastic.co/u/ismarslomic)\
**Replies:** 2\
**Last updated:** [October 27, 2021, 4:30pm UTC](https://discuss.elastic.co/t/aggregation-unique-count-grouped-by-combination-of-field-value/287431 "2021-10-27T16:30:32Z")

</div>

Given following documents (simplified) in an index: { "vehicle": "A", "source": "foo" } { "vehicle": "A", "source": "bar" } { "vehicle": "A", "source": "foo" } { "vehicle": "B", "source": "foo" } { "ve…

---

## [Problem with word wrapping in Expanded document](https://discuss.elastic.co/t/problem-with-word-wrapping-in-expanded-document/287648)

<div class="topic-metadata">

**Author:** [@mirekchk](https://discuss.elastic.co/u/mirekchk)\
**Replies:** 1\
**Last updated:** [October 27, 2021, 4:21pm UTC](https://discuss.elastic.co/t/problem-with-word-wrapping-in-expanded-document/287648 "2021-10-27T16:21:44Z")

</div>

I have problem with word wrapping in Expanded document (viz image) in Kibana v 7.15.0 (in 7.14.1 it is OK). Field name is wrapping and user have problems in investigation. Is any solution for this pls?

---

## [Bulk Upgrading Elastic Agents](https://discuss.elastic.co/t/bulk-upgrading-elastic-agents/287663)

<div class="topic-metadata">

**Author:** [@geekzy](https://discuss.elastic.co/u/geekzy)\
**Replies:** 2\
**Last updated:** [October 27, 2021, 2:48pm UTC](https://discuss.elastic.co/t/bulk-upgrading-elastic-agents/287663 "2021-10-27T14:48:35Z")

</div>

We have been in the process of upgrading our elastic agents from 7.13.0 to 7.15.1. Currently we have been able to upgrade the agents individually via the GUI however we are not able to perform a bulk upgrade of all the a…

---

## [Filebeat: How to convert data from bytes to mb in a Kibana panel?](https://discuss.elastic.co/t/filebeat-how-to-convert-data-from-bytes-to-mb-in-a-kibana-panel/287798)

<div class="topic-metadata">

**Author:** [@elasticfran](https://discuss.elastic.co/u/elasticfran)\
**Replies:** 1\
**Last updated:** [October 27, 2021, 1:17pm UTC](https://discuss.elastic.co/t/filebeat-how-to-convert-data-from-bytes-to-mb-in-a-kibana-panel/287798 "2021-10-27T13:17:47Z")

</div>

Hey there! I am building a panel in Kibana. My source is a field in Filebeat called network.bytes. Does anyone know how to convert it ( and visualize it ) from bytes to mb or even gb? Thanks

---

## [Values of type: VALUE\_NULL](https://discuss.elastic.co/t/values-of-type-value-null/286492)

<div class="topic-metadata">

**Author:** [@ebosdev](https://discuss.elastic.co/u/ebosdev)\
**Replies:** 3\
**Last updated:** [October 27, 2021, 12:12pm UTC](https://discuss.elastic.co/t/values-of-type-value-null/286492 "2021-10-27T12:12:34Z")

</div>

Hello everyone, I am trying to visualize a timelion and this is the query i am using: .es(index=investigation\_master\_index,timefield=uco-observable:sentTime.@value,split=uco-observable:messageText.keyword:1000) the me…

---

## [Not able to access Kibana remotely. Request timeout after 3000ms](https://discuss.elastic.co/t/not-able-to-access-kibana-remotely-request-timeout-after-3000ms/287776)

<div class="topic-metadata">

**Author:** [@The\_Man](https://discuss.elastic.co/u/The_Man)\
**Replies:** 1\
**Last updated:** [October 27, 2021, 11:13am UTC](https://discuss.elastic.co/t/not-able-to-access-kibana-remotely-request-timeout-after-3000ms/287776 "2021-10-27T11:13:06Z")

</div>

I am not able to remotely access kibana using my http://publicip:5601 kibana.yml # Kibana is served by a back end server. This setting specifies the port to use. #server.port: 5601 # Specifies the address to which the…

---

## [Closing all indices before system recovery](https://discuss.elastic.co/t/closing-all-indices-before-system-recovery/287163)

<div class="topic-metadata">

**Author:** [@Waxman](https://discuss.elastic.co/u/Waxman)\
**Replies:** 3\
**Last updated:** [October 27, 2021, 9:42am UTC](https://discuss.elastic.co/t/closing-all-indices-before-system-recovery/287163 "2021-10-27T09:42:03Z")

</div>

Hi All, I'd like to ask if there is a possibility to recover whole cluster without closing indices ? In Kibana 7.11.2-\> stack management -\> snapshot and restore -\>when trying restore "All data streams and indices, incl…

---

## [When is the lifepolicy of DELETE phase is executed?](https://discuss.elastic.co/t/when-is-the-lifepolicy-of-delete-phase-is-executed/287680)

<div class="topic-metadata">

**Author:** [@MinwooKim](https://discuss.elastic.co/u/MinwooKim)\
**Replies:** 5\
**Last updated:** [October 27, 2021, 1:31am UTC](https://discuss.elastic.co/t/when-is-the-lifepolicy-of-delete-phase-is-executed/287680 "2021-10-27T01:31:14Z")

</div>

As shown above, the hot phase with 30 day rollover was already in active state, thus I have indexes with indexname-2021.05.10-1 indexname-2021.05.16-000002 indexname-2021.06.15-000003 indexname-2021.07.10-000004 …

---

## [Set a watcher to on 2 conditions if both are met, then 1 action](https://discuss.elastic.co/t/set-a-watcher-to-on-2-conditions-if-both-are-met-then-1-action/287475)

<div class="topic-metadata">

**Author:** [@AAguilarbr](https://discuss.elastic.co/u/AAguilarbr)\
**Replies:** 1\
**Last updated:** [October 26, 2021, 10:43pm UTC](https://discuss.elastic.co/t/set-a-watcher-to-on-2-conditions-if-both-are-met-then-1-action/287475 "2021-10-26T22:43:38Z")

</div>

Hello Team, Im trying to setup a Watcher that will have 2 conditions, For exemple: If CPU reaches certain Tresholds, AND If IIS.ent request QUEUE hits a certain treshold. Send an email. How can I set up that IF …

---

## [Multiple conditions watcher](https://discuss.elastic.co/t/multiple-conditions-watcher/287713)

<div class="topic-metadata">

**Author:** [@AAguilarbr](https://discuss.elastic.co/u/AAguilarbr)\
**Replies:** 1\
**Last updated:** [October 26, 2021, 10:43pm UTC](https://discuss.elastic.co/t/multiple-conditions-watcher/287713 "2021-10-26T22:43:09Z")

</div>

Hello Team, Im trying to setup a Watcher that will have 2 conditions, For exemple: If CPU reaches certain Tresholds, AND If IIS.ent request QUEUE hits a certain treshold. Send an email. How can I set up that IF bot…

---

## [Canvas Kibana highlight point in bubble chart from dropdown](https://discuss.elastic.co/t/canvas-kibana-highlight-point-in-bubble-chart-from-dropdown/285573)

<div class="topic-metadata">

**Author:** [@MTV](https://discuss.elastic.co/u/MTV)\
**Replies:** 3\
**Last updated:** [October 26, 2021, 3:00pm UTC](https://discuss.elastic.co/t/canvas-kibana-highlight-point-in-bubble-chart-from-dropdown/285573 "2021-10-26T15:00:56Z")

</div>

Hi, I am working with canvas in which I have one dropdown which filters for countries. I have a bubble plot (x and y numeric, and countries as text) with the full data (no filters). The goal is to keep the full data in …

---

## [Choose which date field is used in the dashboard date filter](https://discuss.elastic.co/t/choose-which-date-field-is-used-in-the-dashboard-date-filter/286688)

<div class="topic-metadata">

**Author:** [@ggreystorm26](https://discuss.elastic.co/u/ggreystorm26)\
**Replies:** 10\
**Last updated:** [October 26, 2021, 12:10pm UTC](https://discuss.elastic.co/t/choose-which-date-field-is-used-in-the-dashboard-date-filter/286688 "2021-10-26T12:10:03Z")

</div>

I would like to know how to specify which date field is used in the date filter at the top right of the dashboard creation page. I am using only one index, but the two date fields I have were added in the Index Patterns…

---

## [In pointseries stacked chart showing ‘text’ values on the right place](https://discuss.elastic.co/t/in-pointseries-stacked-chart-showing-text-values-on-the-right-place/287203)

<div class="topic-metadata">

**Author:** [@bodach](https://discuss.elastic.co/u/bodach)\
**Replies:** 2\
**Last updated:** [October 26, 2021, 11:09am UTC](https://discuss.elastic.co/t/in-pointseries-stacked-chart-showing-text-values-on-the-right-place/287203 "2021-10-26T11:09:05Z")

</div>

Hello, I've created a stacked bar chart, I want to show the values on the right places and I also have a filter that will change with the dropdown. How can I arrange the text for it to show in the right places. This i…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=269)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=271)
