# Kibana **URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=274 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 275 --- ## [Help with window sort in vega](https://discuss.elastic.co/t/help-with-window-sort-in-vega/286783)
**Author:** [@nsimi](https://discuss.elastic.co/u/nsimi)\ **Replies:** 3\ **Last updated:** [October 15, 2021, 10:04pm UTC](https://discuss.elastic.co/t/help-with-window-sort-in-vega/286783 "2021-10-15T22:04:43Z")
Hello All, I am trying to get a window transform to sort data, and am having some issues, either my expectations are wrong or I am just doing something wrong: { "$schema": "https://vega.github.io/schema/vega/v5.json"… --- ## [How can I filter a Vega data table to unique values of a field?](https://discuss.elastic.co/t/how-can-i-filter-a-vega-data-table-to-unique-values-of-a-field/286761)
**Author:** [@nsimi](https://discuss.elastic.co/u/nsimi)\ **Replies:** 2\ **Last updated:** [October 15, 2021, 4:26pm UTC](https://discuss.elastic.co/t/how-can-i-filter-a-vega-data-table-to-unique-values-of-a-field/286761 "2021-10-15T16:26:17Z")
Hello All, I have data that I am querying, and I want to be able to filter to unique values of a field on the data in the table, can I do that? If so can someone explain to me how? Thank you! --- ## [401 Unauthorised error heartbeat](https://discuss.elastic.co/t/401-unauthorised-error-heartbeat/286056)
**Author:** [@Spoo](https://discuss.elastic.co/u/Spoo)\ **Replies:** 1\ **Last updated:** [October 15, 2021, 3:22pm UTC](https://discuss.elastic.co/t/401-unauthorised-error-heartbeat/286056 "2021-10-15T15:22:14Z")
Hi I have a question about Elasticsearch and kibana setup on my work account So I have setup elk stack on an AWS EC2 instance and an other ubuntu web server. I am working on self managed not cloud based. I have insta… --- ## [Assigning Multiple Roles to one Kibana Space](https://discuss.elastic.co/t/assigning-multiple-roles-to-one-kibana-space/285812)
**Author:** [@pkward](https://discuss.elastic.co/u/pkward)\ **Replies:** 1\ **Last updated:** [October 15, 2021, 3:14pm UTC](https://discuss.elastic.co/t/assigning-multiple-roles-to-one-kibana-space/285812 "2021-10-15T15:14:18Z")
Hello, I want to assign multiple roles to one space, but I also want one role to be able to view specific dashboards or even if they have access to the dashboard to only see data that I give them access to. For example,… --- ## [Trying to Compare two timestamps to calculate ingestion speed](https://discuss.elastic.co/t/trying-to-compare-two-timestamps-to-calculate-ingestion-speed/286823)
**Author:** [@jamesm1](https://discuss.elastic.co/u/jamesm1)\ **Replies:** 2\ **Last updated:** [October 15, 2021, 2:58pm UTC](https://discuss.elastic.co/t/trying-to-compare-two-timestamps-to-calculate-ingestion-speed/286823 "2021-10-15T14:58:52Z")
Hello! I am in the process of attempting to create a column which tells me the difference between the time the log was created in elastic (so the ingestion time stamp) and the timestamp against my IIS log(so the iis.acc… --- ## [Customize Lens's graphs](https://discuss.elastic.co/t/customize-lenss-graphs/286702)
**Author:** [@Kadhem](https://discuss.elastic.co/u/Kadhem)\ **Replies:** 9\ **Last updated:** [October 15, 2021, 2:36pm UTC](https://discuss.elastic.co/t/customize-lenss-graphs/286702 "2021-10-15T14:36:12Z")
Hi, i'm using Lens charts in Kibana. i want to display a graph where Y axis is the timestamp and X axis is the values of My field . But Lens enable me to use a simple Function "Value" is there any solution? I don't want… --- ## [How to filter out a specific data in a panel?](https://discuss.elastic.co/t/how-to-filter-out-a-specific-data-in-a-panel/286799)
**Author:** [@elasticfran](https://discuss.elastic.co/u/elasticfran)\ **Replies:** 3\ **Last updated:** [October 15, 2021, 2:26pm UTC](https://discuss.elastic.co/t/how-to-filter-out-a-specific-data-in-a-panel/286799 "2021-10-15T14:26:55Z")
Hey there! Have a question about kibana / dashboard / panel. How can i exclude a given information in a panel? Say i have a graph reporting cities my customers are from, how can i exclude one of the cities? Best! --- ## [Strategy for automatically importing a kibana backup JSON file](https://discuss.elastic.co/t/strategy-for-automatically-importing-a-kibana-backup-json-file/286829)
**Author:** [@ramom01](https://discuss.elastic.co/u/ramom01)\ **Replies:** 1\ **Last updated:** [October 15, 2021, 1:53pm UTC](https://discuss.elastic.co/t/strategy-for-automatically-importing-a-kibana-backup-json-file/286829 "2021-10-15T13:53:01Z")
I have an instance of elastic + kibana in version 7.13.1 with docker compose, I have some kibana backup files with some dashboards, and I was wondering if there is a strategy to automatically import these backups when I … --- ## [In Vega, Filter one data table by another data table's contents](https://discuss.elastic.co/t/in-vega-filter-one-data-table-by-another-data-tables-contents/286747)
**Author:** [@nsimi](https://discuss.elastic.co/u/nsimi)\ **Replies:** 1\ **Last updated:** [October 15, 2021, 12:16pm UTC](https://discuss.elastic.co/t/in-vega-filter-one-data-table-by-another-data-tables-contents/286747 "2021-10-15T12:16:11Z")
Hello, I am trying to determine how I could filter data tables based on another tables contents. e.g. Lets assume I have two tables; Table A that has items 1,3,5, and 7 in it. and Table B that has items 1,2,3,4,5, and… --- ## [.startsWith Implementation](https://discuss.elastic.co/t/startswith-implementation/286489)
**Author:** [@varunbsgaur](https://discuss.elastic.co/u/varunbsgaur)\ **Replies:** 1\ **Last updated:** [October 15, 2021, 9:33am UTC](https://discuss.elastic.co/t/startswith-implementation/286489 "2021-10-15T09:33:47Z")
Need to know proper implementation of startsWith for the url for the script to run in all the 4 cases of document. Error comes for startsWith when runnned. SCRIPT:- POST \_ingest/pipeline/\_simulate { "pipeline": { … --- ## [No cached mapping for this field!](https://discuss.elastic.co/t/no-cached-mapping-for-this-field/286684)
**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\ **Replies:** 5\ **Last updated:** [October 15, 2021, 5:39am UTC](https://discuss.elastic.co/t/no-cached-mapping-for-this-field/286684 "2021-10-15T05:39:44Z")
I tried the management -\> index pattern and hit refreshed button still I am not getting these fields. In the discover window, I am seeing these fields with warning tags but I am not getting these fields while using in… --- ## [Kibana docker setup](https://discuss.elastic.co/t/kibana-docker-setup/285612)
**Author:** [@alpine\_f1](https://discuss.elastic.co/u/alpine_f1)\ **Replies:** 3\ **Last updated:** [October 15, 2021, 3:56am UTC](https://discuss.elastic.co/t/kibana-docker-setup/285612 "2021-10-15T03:56:34Z")
I am running Elasticsearch cluster (2 master, 2 data and 1 voter) as docker containers behind a load balanced setup. F5 URL for that looks like https://myelastic.mycompany.com. I am also running Kibana container that con… --- ## [Kibana-visualization Data Table not allow choose a source with index pattern type](https://discuss.elastic.co/t/kibana-visualization-data-table-not-allow-choose-a-source-with-index-pattern-type/286516)
**Author:** [@Oskr](https://discuss.elastic.co/u/Oskr)\ **Replies:** 4\ **Last updated:** [October 15, 2021, 2:52am UTC](https://discuss.elastic.co/t/kibana-visualization-data-table-not-allow-choose-a-source-with-index-pattern-type/286516 "2021-10-15T02:52:28Z")
When I tried to create a new visualization type Data Table in kibana can\`t select a index pattern. I have others spaces in my kibana and in the others if I can. What is the reason for this behavior? --- ## [Use Kibana current user to send request to Elasticsearch plugin](https://discuss.elastic.co/t/use-kibana-current-user-to-send-request-to-elasticsearch-plugin/286732)
**Author:** [@aza-zil](https://discuss.elastic.co/u/aza-zil)\ **Replies:** 2\ **Last updated:** [October 15, 2021, 1:37am UTC](https://discuss.elastic.co/t/use-kibana-current-user-to-send-request-to-elasticsearch-plugin/286732 "2021-10-15T01:37:39Z")
I have an ES ActionPlugin that has an API, and I created a Kibana plugin, I want the Kibana plugin to send a post request to the ES plugin using context.core.Elasticsearch.legacy.client.callAsInternalUser or context.c… --- ## [Vega: Datasource external to elasticsearch](https://discuss.elastic.co/t/vega-datasource-external-to-elasticsearch/286742)
**Author:** [@Vishal\_Patil](https://discuss.elastic.co/u/Vishal_Patil)\ **Replies:** 1\ **Last updated:** [October 15, 2021, 1:11am UTC](https://discuss.elastic.co/t/vega-datasource-external-to-elasticsearch/286742 "2021-10-15T01:11:51Z")
Is it possible to create a Vega/Vega-lite chart in Kibana with an external API endpoint that returns json data ? --- ## [How to create ELK user in Bitnami ELK instance (AWS)](https://discuss.elastic.co/t/how-to-create-elk-user-in-bitnami-elk-instance-aws/286723)
**Author:** [@Swarup\_Mukherjee](https://discuss.elastic.co/u/Swarup_Mukherjee)\ **Replies:** 1\ **Last updated:** [October 15, 2021, 12:29am UTC](https://discuss.elastic.co/t/how-to-create-elk-user-in-bitnami-elk-instance-aws/286723 "2021-10-15T00:29:14Z")
Hi Team, How to create ELK user in Bitnami ELK instance (AWS) like we have “USER” Please share the steps. --- ## [Visualize Library - Pie chart](https://discuss.elastic.co/t/visualize-library-pie-chart/286690)
**Author:** [@Emin\_Cevikol](https://discuss.elastic.co/u/Emin_Cevikol)\ **Replies:** 3\ **Last updated:** [October 14, 2021, 3:53pm UTC](https://discuss.elastic.co/t/visualize-library-pie-chart/286690 "2021-10-14T15:53:03Z")
Hi everyone, I have a pie chart which shows percentage of two values (Success or Failure) count. I want to filter for example If sum of count greater then 1000, Then show me the pie chart otherwise not. How can I provid… --- ## [Kibana export CSV encoding](https://discuss.elastic.co/t/kibana-export-csv-encoding/286656)
**Author:** [@Richard\_Schroeder](https://discuss.elastic.co/u/Richard_Schroeder)\ **Replies:** 1\ **Last updated:** [October 14, 2021, 12:40pm UTC](https://discuss.elastic.co/t/kibana-export-csv-encoding/286656 "2021-10-14T12:40:46Z")
Is there any way to change the default encoding of the CSV file when exporting data from a visualization? --- ## [If else return scripted field date field](https://discuss.elastic.co/t/if-else-return-scripted-field-date-field/286646)
**Author:** [@Surya\_Raviraj](https://discuss.elastic.co/u/Surya_Raviraj)\ **Replies:** 1\ **Last updated:** [October 14, 2021, 12:29pm UTC](https://discuss.elastic.co/t/if-else-return-scripted-field-date-field/286646 "2021-10-14T12:29:36Z")
Is it possible to do an if else return statement with dates? For example, if the date in the date column is 1/1/21 I want it to return Week 1. I tried doing that below but I am getting the error shown in the screenshot. … --- ## [Create an index rate alert](https://discuss.elastic.co/t/create-an-index-rate-alert/286564)
**Author:** [@pingz](https://discuss.elastic.co/u/pingz)\ **Replies:** 1\ **Last updated:** [October 14, 2021, 12:04pm UTC](https://discuss.elastic.co/t/create-an-index-rate-alert/286564 "2021-10-14T12:04:44Z")
Hi there: I would like to create a rule to send alert if there is an index in the system with index rate in the last 10 min exceeds a threshold value. I can see index rate from stack monitoring for each index, but how … --- ## [Unable to access Kibana in T-Pot](https://discuss.elastic.co/t/unable-to-access-kibana-in-t-pot/286409)
**Author:** [@paulap2](https://discuss.elastic.co/u/paulap2)\ **Replies:** 3\ **Last updated:** [October 14, 2021, 11:46am UTC](https://discuss.elastic.co/t/unable-to-access-kibana-in-t-pot/286409 "2021-10-14T11:46:25Z")
Hi, I am setting up T-POT for a uni project. I followed this tutorial step by step: Setup a T-POT Honeypot on Azure in less than 30 minutes - YouTube It worked for me over the weekend but today my kibana was giving me … --- ## [\[Help\] Display Concurrency between 2 date-type](https://discuss.elastic.co/t/help-display-concurrency-between-2-date-type/286351)
**Author:** [@hoaf13](https://discuss.elastic.co/u/hoaf13)\ **Replies:** 2\ **Last updated:** [October 14, 2021, 8:27am UTC](https://discuss.elastic.co/t/help-display-concurrency-between-2-date-type/286351 "2021-10-14T08:27:07Z")
I have 2 date-type: "timestamp\_pickup\_at" : "2021-09-06T04:10:28.070Z", "timestamp\_hangup\_at" : "2021-09-06T04:10:36.022Z" I want to visualize that as a conccurency date histogram. I refer to this topic but not work. … --- ## [Kibana shows internal server error after implementing Authentication](https://discuss.elastic.co/t/kibana-shows-internal-server-error-after-implementing-authentication/286308)
**Author:** [@Apoorv\_Singh](https://discuss.elastic.co/u/Apoorv_Singh)\ **Replies:** 2\ **Last updated:** [October 14, 2021, 5:16am UTC](https://discuss.elastic.co/t/kibana-shows-internal-server-error-after-implementing-authentication/286308 "2021-10-14T05:16:21Z")
I am trying to integrate my kibana dashboard into my website without password. To secure it I am using the auth\_request module of Nginx. But I am stuck at this error - Version: 7.14.1 Build: 42892 Error: Internal Server… --- ## [Drilldown on Kibana Scripted Fields](https://discuss.elastic.co/t/drilldown-on-kibana-scripted-fields/285520)
**Author:** [@mightykat](https://discuss.elastic.co/u/mightykat)\ **Replies:** 2\ **Last updated:** [October 13, 2021, 8:32pm UTC](https://discuss.elastic.co/t/drilldown-on-kibana-scripted-fields/285520 "2021-10-13T20:32:18Z")
Kibana: 7.1.1 Background: I created a few Scripted Fields in Kibana using painless to parse a list of key/value pairs. I use different scripts to produce data formats to enable various visualizations. For example: P… --- ## [How to work with Query Results in Vega](https://discuss.elastic.co/t/how-to-work-with-query-results-in-vega/286643)
**Author:** [@nsimi](https://discuss.elastic.co/u/nsimi)\ **Replies:** 9\ **Last updated:** [October 13, 2021, 7:47pm UTC](https://discuss.elastic.co/t/how-to-work-with-query-results-in-vega/286643 "2021-10-13T19:47:10Z")
Hello all, I am directly querying elasticseach from my vega visualization, and I am looking for some education on how to access the results of my query. Can anyone provide an example or point me at something that shows/… --- ## [What is the grok pattern that can match variable length documents from a single log file?](https://discuss.elastic.co/t/what-is-the-grok-pattern-that-can-match-variable-length-documents-from-a-single-log-file/285338)
**Author:** [@shi](https://discuss.elastic.co/u/shi)\ **Replies:** 8\ **Last updated:** [October 13, 2021, 7:41pm UTC](https://discuss.elastic.co/t/what-is-the-grok-pattern-that-can-match-variable-length-documents-from-a-single-log-file/285338 "2021-10-13T19:41:38Z")
I am having records/documents of variable lengths, say 3 types of logs coming in a single log fie. What is the grok pattern that can match variable length documents from a single log file? This grok pattern can be used… --- ## [Help, trying to get force directed vega graph working](https://discuss.elastic.co/t/help-trying-to-get-force-directed-vega-graph-working/285716)
**Author:** [@nsimi](https://discuss.elastic.co/u/nsimi)\ **Replies:** 12\ **Last updated:** [October 13, 2021, 3:35pm UTC](https://discuss.elastic.co/t/help-trying-to-get-force-directed-vega-graph-working/285716 "2021-10-13T15:35:31Z")
Hello All, I am trying to get a force directed graph working with my data in ES and vega, Here is a pastebin link to my vega code because its too long to post here. When I look at the dat with the VEGA\_DEBUG on the co… --- ## [Displaying time lag data as an average over time using TSVB](https://discuss.elastic.co/t/displaying-time-lag-data-as-an-average-over-time-using-tsvb/286536)
**Author:** [@IceKing](https://discuss.elastic.co/u/IceKing)\ **Replies:** 1\ **Last updated:** [October 13, 2021, 2:18pm UTC](https://discuss.elastic.co/t/displaying-time-lag-data-as-an-average-over-time-using-tsvb/286536 "2021-10-13T14:18:24Z")
Hi, I would like some assistance please. I'm using Amazon OpenSearch Service (successor to Amazon Elasticsearch Service). Currently I have set of documents in my index that have following date/time fields "CreatedDa… --- ## [Kibana Query Question](https://discuss.elastic.co/t/kibana-query-question/285997)
**Author:** [@vladik22](https://discuss.elastic.co/u/vladik22)\ **Replies:** 4\ **Last updated:** [October 13, 2021, 2:09pm UTC](https://discuss.elastic.co/t/kibana-query-question/285997 "2021-10-13T14:09:32Z")
Hello guys Is it possible and how can I to filter documents from one index according to values from another index? For example I have 2 indexes Logs and Activities I want to see in visualisation documents from index… --- ## [Kibana showing incorrect timestamp](https://discuss.elastic.co/t/kibana-showing-incorrect-timestamp/286619)
**Author:** [@Sn4cK](https://discuss.elastic.co/u/Sn4cK)\ **Replies:** 1\ **Last updated:** [October 13, 2021, 1:22pm UTC](https://discuss.elastic.co/t/kibana-showing-incorrect-timestamp/286619 "2021-10-13T13:22:07Z")
Hello, I am having issue with how Kibana shows timestamps of my documents indexed in Elasticsearch. I have a document looking like: { "\_index": "speedtest", "\_type": "\_doc", "\_id": "1-nldXwBFYKxSrUSopKs", "\_ve… [Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=273) [Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=275)