# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=272

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 273

---

## [Canvas - Timefilter issue](https://discuss.elastic.co/t/canvas-timefilter-issue/287425)

<div class="topic-metadata">

**Author:** [@r.pollak](https://discuss.elastic.co/u/r.pollak)\
**Replies:** 11\
**Last updated:** [October 23, 2021, 2:15pm UTC](https://discuss.elastic.co/t/canvas-timefilter-issue/287425 "2021-10-23T14:15:01Z")

</div>

Hi together, without using a time filter, the graph shows several data. All date have a timestamp of 23. September 2021 After adding a time filer with a time range "last year" the graphs shows no more data. Can…

---

## [Importing prebuilt kibana dashboards: "0 objects imported"](https://discuss.elastic.co/t/importing-prebuilt-kibana-dashboards-0-objects-imported/287008)

<div class="topic-metadata">

**Author:** [@elasticfran](https://discuss.elastic.co/u/elasticfran)\
**Replies:** 4\
**Last updated:** [October 23, 2021, 7:35am UTC](https://discuss.elastic.co/t/importing-prebuilt-kibana-dashboards-0-objects-imported/287008 "2021-10-23T07:35:04Z")

</div>

Hey there :slight\_smile: I am experiencing issues importing prebuilt dashboards in kibana from https://elastic-content-share.eu/ , i follow the installation procedure but i dont get new dashboards available in "saved ob…

---

## [Geoip filter in logstash with Index Template not creating geo\_point object as expected](https://discuss.elastic.co/t/geoip-filter-in-logstash-with-index-template-not-creating-geo-point-object-as-expected/286768)

<div class="topic-metadata">

**Author:** [@ehfdub](https://discuss.elastic.co/u/ehfdub)\
**Replies:** 5\
**Last updated:** [October 22, 2021, 3:34pm UTC](https://discuss.elastic.co/t/geoip-filter-in-logstash-with-index-template-not-creating-geo-point-object-as-expected/286768 "2021-10-22T15:34:40Z")

</div>

Hello, I have a geoip in my logstash filter: geoip { source =\> "src\_ip" } and I created an index template via the Kibana DevTools for ALL new indexes: PUT /\_template/my\_template { "order": 0, "template": "\*", …

---

## [How to create custom message info for monitors in Elastic?](https://discuss.elastic.co/t/how-to-create-custom-message-info-for-monitors-in-elastic/283456)

<div class="topic-metadata">

**Author:** [@Maddyle0](https://discuss.elastic.co/u/Maddyle0)\
**Replies:** 3\
**Last updated:** [October 22, 2021, 8:46am UTC](https://discuss.elastic.co/t/how-to-create-custom-message-info-for-monitors-in-elastic/283456 "2021-10-22T08:46:31Z")

</div>

Hello, I'm new to Elastic, I have configured the Email alerts for port violation monitor, but I getting emails with default Messages info, not Specific details about the alert. How can I edit the default template and add…

---

## [Heartbeat Down Counter](https://discuss.elastic.co/t/heartbeat-down-counter/285817)

<div class="topic-metadata">

**Author:** [@maltewhiite](https://discuss.elastic.co/u/maltewhiite)\
**Replies:** 3\
**Last updated:** [October 22, 2021, 7:59am UTC](https://discuss.elastic.co/t/heartbeat-down-counter/285817 "2021-10-22T07:59:18Z")

</div>

How do I make a simple counter, that show how many of my hosts are down? We are running heartbeat. I'd think it was simple to make this, but I can't figure it out. How do I make a simple counter that show how many of …

---

## [Add "time" chart on kibana](https://discuss.elastic.co/t/add-time-chart-on-kibana/287271)

<div class="topic-metadata">

**Author:** [@christbiz86](https://discuss.elastic.co/u/christbiz86)\
**Replies:** 6\
**Last updated:** [October 22, 2021, 6:31am UTC](https://discuss.elastic.co/t/add-time-chart-on-kibana/287271 "2021-10-22T06:31:24Z")

</div>

hi all, i want adding time chart like the screenshot. kibana only show the "document" field ony. i've add the index pattern and it doesn't work. any help please! my kibana currently

---

## [How to get kubernetes namespace in webhook alert payload?](https://discuss.elastic.co/t/how-to-get-kubernetes-namespace-in-webhook-alert-payload/286877)

<div class="topic-metadata">

**Author:** [@AndyLibrian](https://discuss.elastic.co/u/AndyLibrian)\
**Replies:** 1\
**Last updated:** [October 21, 2021, 9:01pm UTC](https://discuss.elastic.co/t/how-to-get-kubernetes-namespace-in-webhook-alert-payload/286877 "2021-10-21T21:01:05Z")

</div>

Hi. Does anyone know how to get kubernetes namespace in webhook alert payload from metricbeat k8s module? Or more generically, how to access the event data to include in the payload? I installed metricbeat on kubernetes…

---

## [Quotes are not converted correctly](https://discuss.elastic.co/t/quotes-are-not-converted-correctly/286994)

<div class="topic-metadata">

**Author:** [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)\
**Replies:** 7\
**Last updated:** [October 21, 2021, 7:15pm UTC](https://discuss.elastic.co/t/quotes-are-not-converted-correctly/286994 "2021-10-21T19:15:53Z")

</div>

Dear all =) When creating Create Rule over the API, and want to search for host:"10.250.11.11", then I run into problems. This is invalid JSON: "esQuery": '{ "query": { "query\_string": { "query": "host:"10.250.11.11" …

---

## [Round off a aggregated numeric value to few decimal places](https://discuss.elastic.co/t/round-off-a-aggregated-numeric-value-to-few-decimal-places/287316)

<div class="topic-metadata">

**Author:** [@venkatkumar229](https://discuss.elastic.co/u/venkatkumar229)\
**Replies:** 2\
**Last updated:** [October 21, 2021, 5:49pm UTC](https://discuss.elastic.co/t/round-off-a-aggregated-numeric-value-to-few-decimal-places/287316 "2021-10-21T17:49:31Z")

</div>

Hi Team, I am aggregating a numeric field which contains the response time data. When i try to find the avg value it is giving me a very long number(\>10 digitis after the decimal point). Could you please help in roundin…

---

## [RSS feed into ELK. Can we do it with Filebeat?](https://discuss.elastic.co/t/rss-feed-into-elk-can-we-do-it-with-filebeat/287310)

<div class="topic-metadata">

**Author:** [@elasticfran](https://discuss.elastic.co/u/elasticfran)\
**Replies:** 1\
**Last updated:** [October 21, 2021, 2:12pm UTC](https://discuss.elastic.co/t/rss-feed-into-elk-can-we-do-it-with-filebeat/287310 "2021-10-21T14:12:02Z")

</div>

Hey there! Can we ingest RSS feeds into Filebeat? I found a module for Logstash but given my environment would be better doing it with Filebeat. Any experience? Much appreciated!

---

## [Kibana dashboard feature](https://discuss.elastic.co/t/kibana-dashboard-feature/287128)

<div class="topic-metadata">

**Author:** [@SRIGURU\_VEL](https://discuss.elastic.co/u/SRIGURU_VEL)\
**Replies:** 2\
**Last updated:** [October 21, 2021, 1:27pm UTC](https://discuss.elastic.co/t/kibana-dashboard-feature/287128 "2021-10-21T13:27:06Z")

</div>

Hi Experts, During one of the training session with one customer. User came up with the query that - can we put security on the dashboard so it is not deleted. Scenario- Because we will have multiple dashboards for Wi…

---

## [Issue with Cisco Integration](https://discuss.elastic.co/t/issue-with-cisco-integration/287102)

<div class="topic-metadata">

**Author:** [@vdselastic](https://discuss.elastic.co/u/vdselastic)\
**Replies:** 2\
**Last updated:** [October 21, 2021, 12:55pm UTC](https://discuss.elastic.co/t/issue-with-cisco-integration/287102 "2021-10-21T12:55:02Z")

</div>

hi, I'm trying to make the cisco integration v0.11.5 works, but I have error with the ingest pipeline cisco.ios. Here's the error that I got when I put manually a document in the pipeline: { "root\_cause": \[ { …

---

## [Issue with number of values being displayed for vertical and horizontal bars in kibana](https://discuss.elastic.co/t/issue-with-number-of-values-being-displayed-for-vertical-and-horizontal-bars-in-kibana/286222)

<div class="topic-metadata">

**Author:** [@revati-chawla](https://discuss.elastic.co/u/revati-chawla)\
**Replies:** 7\
**Last updated:** [October 21, 2021, 11:51am UTC](https://discuss.elastic.co/t/issue-with-number-of-values-being-displayed-for-vertical-and-horizontal-bars-in-kibana/286222 "2021-10-21T11:51:57Z")

</div>

Hello, We are facing issues while visualising using vertical bars where the number of values being displayed on the x-axis are exceeding the limit defined in the size parameter. Version: 7.14.2 PFB a screenshot for yo…

---

## [Yet another issue using Kibana API to import Dashboard](https://discuss.elastic.co/t/yet-another-issue-using-kibana-api-to-import-dashboard/287088)

<div class="topic-metadata">

**Author:** [@skiefer](https://discuss.elastic.co/u/skiefer)\
**Replies:** 6\
**Last updated:** [October 21, 2021, 11:10am UTC](https://discuss.elastic.co/t/yet-another-issue-using-kibana-api-to-import-dashboard/287088 "2021-10-21T11:10:04Z")

</div>

I've read thru all the previous posts on the subject, and every google result I can find, but still can't get this running. I was provided a json file of Dashboard configuration to load into my environment. Kibana vers…

---

## [Issues related to embedding dashboards for public consumption](https://discuss.elastic.co/t/issues-related-to-embedding-dashboards-for-public-consumption/286695)

<div class="topic-metadata">

**Author:** [@twright8](https://discuss.elastic.co/u/twright8)\
**Replies:** 2\
**Last updated:** [October 21, 2021, 9:55am UTC](https://discuss.elastic.co/t/issues-related-to-embedding-dashboards-for-public-consumption/286695 "2021-10-21T09:55:15Z")

</div>

Hi everyone, I'm trying to publicly display a 7.14 dashboard via iframe on the same domain. I have set up security, use an API key and everything works with anonymous access. However, there are several issues related t…

---

## [Add new button to visualizations' top navbar](https://discuss.elastic.co/t/add-new-button-to-visualizations-top-navbar/286931)

<div class="topic-metadata">

**Author:** [@aza-zil](https://discuss.elastic.co/u/aza-zil)\
**Replies:** 2\
**Last updated:** [October 21, 2021, 7:08am UTC](https://discuss.elastic.co/t/add-new-button-to-visualizations-top-navbar/286931 "2021-10-21T07:08:07Z")

</div>

I am creating a Kibana plugin, and I want to add a new plugin, so I need to add a button on the top navbar of the visualization pages. I have two questions: 1- how do I add the button? 2- how can I access the data/requ…

---

## [Multiple elastic search in kibana](https://discuss.elastic.co/t/multiple-elastic-search-in-kibana/287176)

<div class="topic-metadata">

**Author:** [@mangeshs](https://discuss.elastic.co/u/mangeshs)\
**Replies:** 2\
**Last updated:** [October 20, 2021, 11:49pm UTC](https://discuss.elastic.co/t/multiple-elastic-search-in-kibana/287176 "2021-10-20T23:49:56Z")

</div>

I have two Elasticsearch running and single kibana I want to point both to single kibana kibana.yml elasticsearch.hosts: \["http://localhost:9200","http://localhost:9201"\] any other changes to made?

---

## [TSVB Visualization Sum Aggregration](https://discuss.elastic.co/t/tsvb-visualization-sum-aggregration/287078)

<div class="topic-metadata">

**Author:** [@Ankita\_Pachauri](https://discuss.elastic.co/u/Ankita_Pachauri)\
**Replies:** 3\
**Last updated:** [October 20, 2021, 9:52pm UTC](https://discuss.elastic.co/t/tsvb-visualization-sum-aggregration/287078 "2021-10-20T21:52:20Z")

</div>

Hi, I am using the TSVB Visualization to calculate the sum of CPU and memory assigned to the number of virtual machines. When I change the timestamp from the last 24 hours to the last 48 hours, the sum becomes double. B…

---

## [Elasticsearch is running but it does not connect when the public ip is given in browser](https://discuss.elastic.co/t/elasticsearch-is-running-but-it-does-not-connect-when-the-public-ip-is-given-in-browser/287040)

<div class="topic-metadata">

**Author:** [@spo](https://discuss.elastic.co/u/spo)\
**Replies:** 10\
**Last updated:** [October 20, 2021, 9:09pm UTC](https://discuss.elastic.co/t/elasticsearch-is-running-but-it-does-not-connect-when-the-public-ip-is-given-in-browser/287040 "2021-10-20T21:09:04Z")

</div>

browser error when accessing Elasticsearch Elasticsearch.yml file: # ======================== Elasticsearch Configuration ========================= # # NOTE: Elasticsearch comes with reasonable defaults for most set…

---

## [Scripted Fields in Kibana Not Working as Expected](https://discuss.elastic.co/t/scripted-fields-in-kibana-not-working-as-expected/287221)

<div class="topic-metadata">

**Author:** [@alecm](https://discuss.elastic.co/u/alecm)\
**Replies:** 1\
**Last updated:** [October 20, 2021, 6:30pm UTC](https://discuss.elastic.co/t/scripted-fields-in-kibana-not-working-as-expected/287221 "2021-10-20T18:30:53Z")

</div>

Hi, I'm new to Kibana and am testing out scripted fields functionality. I've used them a few times in the past, but am running into strange issues today. Documents in my dataset contain a text key \[classification\_info\].…

---

## [How to set default index-pattern for different users](https://discuss.elastic.co/t/how-to-set-default-index-pattern-for-different-users/287207)

<div class="topic-metadata">

**Author:** [@mcosta](https://discuss.elastic.co/u/mcosta)\
**Replies:** 8\
**Last updated:** [October 20, 2021, 5:57pm UTC](https://discuss.elastic.co/t/how-to-set-default-index-pattern-for-different-users/287207 "2021-10-20T17:57:03Z")

</div>

Hi all, I have user-A with access to index-A and user-B with access to index-B. Both use Kibana to visualize data and there are two index-patterns defined (one for each index). As far as I know, I can only set one inde…

---

## [Issues configuring Kibana Watcher SMTP Server](https://discuss.elastic.co/t/issues-configuring-kibana-watcher-smtp-server/286772)

<div class="topic-metadata">

**Author:** [@Fran\_mindlbs](https://discuss.elastic.co/u/Fran_mindlbs)\
**Replies:** 2\
**Last updated:** [October 20, 2021, 1:31pm UTC](https://discuss.elastic.co/t/issues-configuring-kibana-watcher-smtp-server/286772 "2021-10-20T13:31:28Z")

</div>

Like the ones before me, I've been running in circles for the last few days haha. When I modify the user settings with my SMTP server (SendGrid) in the elastic.yml file, I get a "this changes are not allowed". I don't …

---

## [Error in creating a PDF report for a canvas workpad](https://discuss.elastic.co/t/error-in-creating-a-pdf-report-for-a-canvas-workpad/286976)

<div class="topic-metadata">

**Author:** [@hNiven](https://discuss.elastic.co/u/hNiven)\
**Replies:** 1\
**Last updated:** [October 20, 2021, 12:53pm UTC](https://discuss.elastic.co/t/error-in-creating-a-pdf-report-for-a-canvas-workpad/286976 "2021-10-20T12:53:34Z")

</div>

Hi, I am trying to use the share feature to generate a PDF report of a canvas workpad I have created. However, when I try to generate the report I am met with 2 errors when trying multiple times: Error: Error spawnin…

---

## [Kibana Metric Visualisation - Controlling Margins / White Space](https://discuss.elastic.co/t/kibana-metric-visualisation-controlling-margins-white-space/285558)

<div class="topic-metadata">

**Author:** [@AndyH](https://discuss.elastic.co/u/AndyH)\
**Replies:** 2\
**Last updated:** [October 20, 2021, 11:56am UTC](https://discuss.elastic.co/t/kibana-metric-visualisation-controlling-margins-white-space/285558 "2021-10-20T11:56:02Z")

</div>

I have a simple Metric Visualisation in Kibana It uses the space very inefficiently: here the metric font size is 18pt and this is the minimum panel size to avoid vertical scroll bars. In fact if I shrink the metric f…

---

## [New table in Discover has the sorting labels incorrect for date fields](https://discuss.elastic.co/t/new-table-in-discover-has-the-sorting-labels-incorrect-for-date-fields/286244)

<div class="topic-metadata">

**Author:** [@Harsha\_Mudundi](https://discuss.elastic.co/u/Harsha_Mudundi)\
**Replies:** 2\
**Last updated:** [October 20, 2021, 11:29am UTC](https://discuss.elastic.co/t/new-table-in-discover-has-the-sorting-labels-incorrect-for-date-fields/286244 "2021-10-20T11:29:05Z")

</div>

The labels when sorting date fields should be Old- New for ascending order and New- Old for descending order. Instead its implemented the reverse way in New table of Discover. Im using kibana 7.13.0.

---

## [Warning: 299 Elasticsearch-7.15.1 .... setup minimal security](https://discuss.elastic.co/t/warning-299-elasticsearch-7-15-1-setup-minimal-security/287179)

<div class="topic-metadata">

**Author:** [@6NMgfDwZ3](https://discuss.elastic.co/u/6NMgfDwZ3)\
**Replies:** 2\
**Last updated:** [October 20, 2021, 11:16am UTC](https://discuss.elastic.co/t/warning-299-elasticsearch-7-15-1-setup-minimal-security/287179 "2021-10-20T11:16:34Z")

</div>

Hi all, I'm using Elasticsearch-Kibana-Filebeat (all v7.15.1) (Ubuntu 21.04) and I get this message at every Discover refreshing, or query Warning: 299 Elasticsearch-7.15.1-83c34f456ae29d60e94d886e455e6a3409bba9ed "Ela…

---

## [Multiple Time-ranges for Y-axis data in Visualization](https://discuss.elastic.co/t/multiple-time-ranges-for-y-axis-data-in-visualization/286648)

<div class="topic-metadata">

**Author:** [@Troy\_S](https://discuss.elastic.co/u/Troy_S)\
**Replies:** 1\
**Last updated:** [October 20, 2021, 11:14am UTC](https://discuss.elastic.co/t/multiple-time-ranges-for-y-axis-data-in-visualization/286648 "2021-10-20T11:14:45Z")

</div>

I'm trying to create a single chart to show how data for a single week compares to the monthly average of that same data. I know I can use a Dashboard to create side-by-side visualizations, but I'd like to have one chart…

---

## [Kibana search events where value of a field matches another fields value in the same event?](https://discuss.elastic.co/t/kibana-search-events-where-value-of-a-field-matches-another-fields-value-in-the-same-event/287074)

<div class="topic-metadata">

**Author:** [@buzzdeee](https://discuss.elastic.co/u/buzzdeee)\
**Replies:** 2\
**Last updated:** [October 20, 2021, 11:13am UTC](https://discuss.elastic.co/t/kibana-search-events-where-value-of-a-field-matches-another-fields-value-in-the-same-event/287074 "2021-10-20T11:13:16Z")

</div>

Hi, is it somehow possible to search in kibana either via KQL or Lucene syntax for a field that has the same value as another field in the same event? i.e. assume I've a user.name and user.target.name where some events…

---

## [Detected an unhandled Promise rejection.\\nResponseError: \[parent\] Data too large, data for](https://discuss.elastic.co/t/detected-an-unhandled-promise-rejection-nresponseerror-parent-data-too-large-data-for/287172)

<div class="topic-metadata">

**Author:** [@Mesut\_Yilmaz](https://discuss.elastic.co/u/Mesut_Yilmaz)\
**Replies:** 3\
**Last updated:** [October 20, 2021, 10:08am UTC](https://discuss.elastic.co/t/detected-an-unhandled-promise-rejection-nresponseerror-parent-data-too-large-data-for/287172 "2021-10-20T10:08:18Z")

</div>

Hi there, I am suffering with this issue on kibana.log elastic cluster is up but kibana doesnt come up. JVM heapsize is set 32GB and VMs have 64GB Memories. What could be reason for this error? \` Management,enterpriseS…

---

## [Kibana Data Table returns "missing" for existing values](https://discuss.elastic.co/t/kibana-data-table-returns-missing-for-existing-values/287093)

<div class="topic-metadata">

**Author:** [@Svetilnicheg](https://discuss.elastic.co/u/Svetilnicheg)\
**Replies:** 1\
**Last updated:** [October 20, 2021, 9:53am UTC](https://discuss.elastic.co/t/kibana-data-table-returns-missing-for-existing-values/287093 "2021-10-20T09:53:16Z")

</div>

Hi! I created Data Table viz and noticed that some of my records are missing. all records exist in Discover but when I try to find them in data table they are not there. I suspect that \\n is the problem (it's present i…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=271)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=273)
