# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=277

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 278

---

## [Issue with server.publicBaseUrl](https://discuss.elastic.co/t/issue-with-server-publicbaseurl/285796)

<div class="topic-metadata">

**Author:** [@PhilD](https://discuss.elastic.co/u/PhilD)\
**Replies:** 4\
**Last updated:** [October 5, 2021, 12:51pm UTC](https://discuss.elastic.co/t/issue-with-server-publicbaseurl/285796 "2021-10-05T12:51:11Z")

</div>

Hello, I've deployed Kibana 7.14, behind a NGINX proxy, but keep getting a toast notification that server.publicBaseUrl has not been set; yet it has been in kibana.yml. Is there a way to dump the running configuration t…

---

## [Application URL not working after upgrade from 7.8 to 7.14.2](https://discuss.elastic.co/t/application-url-not-working-after-upgrade-from-7-8-to-7-14-2/285840)

<div class="topic-metadata">

**Author:** [@hsalim](https://discuss.elastic.co/u/hsalim)\
**Replies:** 1\
**Last updated:** [October 5, 2021, 12:35pm UTC](https://discuss.elastic.co/t/application-url-not-working-after-upgrade-from-7-8-to-7-14-2/285840 "2021-10-05T12:35:04Z")

</div>

Hello, I am encountering following two issues: I get 'Application Not Found No application was found at this URL. Try going back or choosing an app from the menu.' when trying to access dashboards. See attached Co…

---

## [Boolean comparison using Lens formula](https://discuss.elastic.co/t/boolean-comparison-using-lens-formula/285872)

<div class="topic-metadata">

**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\
**Replies:** 1\
**Last updated:** [October 5, 2021, 8:23am UTC](https://discuss.elastic.co/t/boolean-comparison-using-lens-formula/285872 "2021-10-05T08:23:57Z")

</div>

Hello, I was wondering if this is possible using Lens formula to return a boolean true or false value? Toy example: 101 \>= 100 would return true Or maybe there is another way to achieve this result? Thanks in advanc…

---

## [Scrollbar not present in timelion legend](https://discuss.elastic.co/t/scrollbar-not-present-in-timelion-legend/284051)

<div class="topic-metadata">

**Author:** [@vikramdayma](https://discuss.elastic.co/u/vikramdayma)\
**Replies:** 2\
**Last updated:** [October 5, 2021, 7:23am UTC](https://discuss.elastic.co/t/scrollbar-not-present-in-timelion-legend/284051 "2021-10-05T07:23:44Z")

</div>

Hi, I am facing an issue in timelion legend scrollbar. I create a timelion visualization with some trend lines. I create 70 legend dynamically but scroll bar is not displaying to scroll all legend. So all legends ar…

---

## [Alert on logs error](https://discuss.elastic.co/t/alert-on-logs-error/285772)

<div class="topic-metadata">

**Author:** [@alfredo.deluca](https://discuss.elastic.co/u/alfredo.deluca)\
**Replies:** 6\
**Last updated:** [October 4, 2021, 7:44pm UTC](https://discuss.elastic.co/t/alert-on-logs-error/285772 "2021-10-04T19:44:32Z")

</div>

Hi all. I have scripts that run every night to back up gitlab and and at the end it logs a file with the result of that backup. The logs are sent to our Elastic cloud account and from there I want to create an alert wh…

---

## [How to sort percentage bar by date?](https://discuss.elastic.co/t/how-to-sort-percentage-bar-by-date/285764)

<div class="topic-metadata">

**Author:** [@ShayWeizman](https://discuss.elastic.co/u/ShayWeizman)\
**Replies:** 3\
**Last updated:** [October 4, 2021, 6:34pm UTC](https://discuss.elastic.co/t/how-to-sort-percentage-bar-by-date/285764 "2021-10-04T18:34:10Z")

</div>

Hi All, I'm using v 7.11.1 I have this data structure in elastic: { "\_index" : "testcases", "\_type" : "\_doc", "\_id" : "ub0ll3sB2oqJ9931yhZw", "\_score" : 1.0, "\_source" : { "buildVersion" : "1.1.1.1", "testcase"…

---

## [How best to visually represent attempted (and not-attempted) combinations?](https://discuss.elastic.co/t/how-best-to-visually-represent-attempted-and-not-attempted-combinations/285692)

<div class="topic-metadata">

**Author:** [@cgmelastic](https://discuss.elastic.co/u/cgmelastic)\
**Replies:** 4\
**Last updated:** [October 4, 2021, 5:27pm UTC](https://discuss.elastic.co/t/how-best-to-visually-represent-attempted-and-not-attempted-combinations/285692 "2021-10-04T17:27:20Z")

</div>

In a game I'm playing, there is a recipe book type thing. The ingredients for a recipe are known but not the specific quantity of each ingredient required to create the recipe, only a minimum and maximum value for each. …

---

## [API Bug? Error enabling rule: could not create API key - Unsupported scheme \\"ApiKey\\" for granting API Key](https://discuss.elastic.co/t/api-bug-error-enabling-rule-could-not-create-api-key-unsupported-scheme-apikey-for-granting-api-key/285407)

<div class="topic-metadata">

**Author:** [@jrykowski-huron](https://discuss.elastic.co/u/jrykowski-huron)\
**Replies:** 2\
**Last updated:** [October 4, 2021, 2:48pm UTC](https://discuss.elastic.co/t/api-bug-error-enabling-rule-could-not-create-api-key-unsupported-scheme-apikey-for-granting-api-key/285407 "2021-10-04T14:48:08Z")

</div>

Authentication type is ApiKey. Version: 7.14.1 When rule is already Enabled, there is no trouble calling the API endpoint for \_enable. Returns Status Code 204. But if rule is actually Disabled (and therefore need to …

---

## [Kibana: top values and "missing" (other) values](https://discuss.elastic.co/t/kibana-top-values-and-missing-other-values/285736)

<div class="topic-metadata">

**Author:** [@fabbo](https://discuss.elastic.co/u/fabbo)\
**Replies:** 1\
**Last updated:** [October 4, 2021, 8:51am UTC](https://discuss.elastic.co/t/kibana-top-values-and-missing-other-values/285736 "2021-10-04T08:51:50Z")

</div>

I'm using Kibana 7.10.2, and I want to make a pie chart where the slices are the top values of a field. There is a slider to change the number of values. However, I seem to recall that, in older versions, there was a ti…

---

## [ILM policy for .monitoring indexes](https://discuss.elastic.co/t/ilm-policy-for-monitoring-indexes/285433)

<div class="topic-metadata">

**Author:** [@dabo](https://discuss.elastic.co/u/dabo)\
**Replies:** 2\
**Last updated:** [October 4, 2021, 6:51am UTC](https://discuss.elastic.co/t/ilm-policy-for-monitoring-indexes/285433 "2021-10-04T06:51:13Z")

</div>

Hi, How do I properly set up an ILM policy for .monitoring-\* indexes? When I create a policy and add it to the index templates I get some error about rollover\_alias Then when I add rollover alias and I get another err…

---

## [How to use variable inside a switch condition?](https://discuss.elastic.co/t/how-to-use-variable-inside-a-switch-condition/285188)

<div class="topic-metadata">

**Author:** [@isaacli](https://discuss.elastic.co/u/isaacli)\
**Replies:** 2\
**Last updated:** [October 4, 2021, 1:10am UTC](https://discuss.elastic.co/t/how-to-use-variable-inside-a-switch-condition/285188 "2021-10-04T01:10:50Z")

</div>

Hello, I am trying to build a traffic light element inside Canvas. I am using different variables to control the expression. However, I found that the variables are not working inside the "Switch" condition blocks. fi…

---

## [Filebeat Connection to Elastic Search Error](https://discuss.elastic.co/t/filebeat-connection-to-elastic-search-error/285733)

<div class="topic-metadata">

**Author:** [@siddhesh\_jadhav](https://discuss.elastic.co/u/siddhesh_jadhav)\
**Replies:** 13\
**Last updated:** [October 3, 2021, 5:09pm UTC](https://discuss.elastic.co/t/filebeat-connection-to-elastic-search-error/285733 "2021-10-03T17:09:56Z")

</div>

HI, I tried installing filebeat on win10. used ' .\\filebeat.exe -e test config' the output says Config OK. but while testing output of filebeat using '.\\filebeat.exe -e test output' it dsiplays the following error. ple…

---

## [Create Alert by Comparing 2 fields in 2 indexes](https://discuss.elastic.co/t/create-alert-by-comparing-2-fields-in-2-indexes/284694)

<div class="topic-metadata">

**Author:** [@Abanob\_Medhat](https://discuss.elastic.co/u/Abanob_Medhat)\
**Replies:** 2\
**Last updated:** [October 3, 2021, 10:23am UTC](https://discuss.elastic.co/t/create-alert-by-comparing-2-fields-in-2-indexes/284694 "2021-10-03T10:23:19Z")

</div>

Hi, I want to compare 2 fields from 2 different indexes to create alert. the 2 indexes , one for apache access logs and the other one is my IOCs. All what I want to do is to compare between the vulnerable IPs in my IO…

---

## [Unknown\_host\_exception | watcher webhook](https://discuss.elastic.co/t/unknown-host-exception-watcher-webhook/285753)

<div class="topic-metadata">

**Author:** [@Juliana\_Sabino](https://discuss.elastic.co/u/Juliana_Sabino)\
**Replies:** 5\
**Last updated:** [October 2, 2021, 7:45pm UTC](https://discuss.elastic.co/t/unknown-host-exception-watcher-webhook/285753 "2021-10-02T19:45:03Z")

</div>

Hi Team, I'm a newbie and I'm trying to create a watcher. I'm receiving this error and I don't know what I'm doing wrong. "actions": \[ { "id": "my\_webhook", "type": "webhook", "status": "…

---

## [Displaying data from one event to other events](https://discuss.elastic.co/t/displaying-data-from-one-event-to-other-events/285747)

<div class="topic-metadata">

**Author:** [@mostafaelsayed](https://discuss.elastic.co/u/mostafaelsayed)\
**Replies:** 10\
**Last updated:** [October 2, 2021, 7:42pm UTC](https://discuss.elastic.co/t/displaying-data-from-one-event-to-other-events/285747 "2021-10-02T19:42:19Z")

</div>

Hello All Is there a way in kibana to display fields from one event to other related events in data tables aggregations and discover views? for example, 2 events with this format: 1. { id: 1, city: 'London', tem…

---

## [ERROR#011\[logstash\]#011logstash/async.go:280#011Failed to publish events caused by: write tcp 172.31.82.54:52674-\>172.31.22.210:5044: write: connection reset by peer](https://discuss.elastic.co/t/error-011-logstash-011logstash-async-go-280-011failed-to-publish-events-caused-by-write-tcp-172-31-82-54-52674-172-31-22-210-write-connection-reset-by-peer/285729)

<div class="topic-metadata">

**Author:** [@sai\_dheeraj](https://discuss.elastic.co/u/sai_dheeraj)\
**Replies:** 1\
**Last updated:** [October 2, 2021, 1:41pm UTC](https://discuss.elastic.co/t/error-011-logstash-011logstash-async-go-280-011failed-to-publish-events-caused-by-write-tcp-172-31-82-54-52674-172-31-22-210-write-connection-reset-by-peer/285729 "2021-10-02T13:41:28Z")

</div>

Oct 2 08:16:56 ip-172-31-82-54 filebeat: 2021-10-02T08:16:56.116Z#011INFO#011\[publisher\]#011pipeline/retry.go:219#011retryer: send unwait signal to consumer Oct 2 08:16:56 ip-172-31-82-54 filebeat: 2021-10-02T08:16:56…

---

## [Join python prediction with kibana visualisations](https://discuss.elastic.co/t/join-python-prediction-with-kibana-visualisations/285619)

<div class="topic-metadata">

**Author:** [@oussy\_hdm](https://discuss.elastic.co/u/oussy_hdm)\
**Replies:** 2\
**Last updated:** [October 2, 2021, 8:08am UTC](https://discuss.elastic.co/t/join-python-prediction-with-kibana-visualisations/285619 "2021-10-02T08:08:24Z")

</div>

Hi, I'm new to ELK, and I have two Visualizations for two models predictions in python and i want to join them to an existing Dashboard in kibana. Is this possible? I tried to index every prediction algorithme value…

---

## [How to involve KQL search bar in Kibana Plugin](https://discuss.elastic.co/t/how-to-involve-kql-search-bar-in-kibana-plugin/283153)

<div class="topic-metadata">

**Author:** [@yyyayo](https://discuss.elastic.co/u/yyyayo)\
**Replies:** 5\
**Last updated:** [October 1, 2021, 6:55pm UTC](https://discuss.elastic.co/t/how-to-involve-kql-search-bar-in-kibana-plugin/283153 "2021-10-01T18:55:46Z")

</div>

Are there any ways I can have this KQL search bar in my own plugin? By default, the plugin only contains the time filter on the right.

---

## [Possibility to update global variables](https://discuss.elastic.co/t/possibility-to-update-global-variables/284359)

<div class="topic-metadata">

**Author:** [@CalvinHobbes](https://discuss.elastic.co/u/CalvinHobbes)\
**Replies:** 1\
**Last updated:** [October 1, 2021, 2:57pm UTC](https://discuss.elastic.co/t/possibility-to-update-global-variables/284359 "2021-10-01T14:57:57Z")

</div>

Is there a possibility to update global variables in Canvas so that these can be referenced (and updated) between elements?

---

## [Passing essql statements in Workpad Variables](https://discuss.elastic.co/t/passing-essql-statements-in-workpad-variables/284367)

<div class="topic-metadata">

**Author:** [@CalvinHobbes](https://discuss.elastic.co/u/CalvinHobbes)\
**Replies:** 1\
**Last updated:** [October 1, 2021, 1:59pm UTC](https://discuss.elastic.co/t/passing-essql-statements-in-workpad-variables/284367 "2021-10-01T13:59:29Z")

</div>

I am trying to pass essql statements in Workpad variables, but the elements are not recoqnizing it as valid essql statements. I suspect it has to do with escaping of special characters: is this possible to do?

---

## [How can i check if the value of the field is an array?](https://discuss.elastic.co/t/how-can-i-check-if-the-value-of-the-field-is-an-array/285087)

<div class="topic-metadata">

**Author:** [@Aurel\_Drejta](https://discuss.elastic.co/u/Aurel_Drejta)\
**Replies:** 1\
**Last updated:** [October 1, 2021, 1:22pm UTC](https://discuss.elastic.co/t/how-can-i-check-if-the-value-of-the-field-is-an-array/285087 "2021-10-01T13:22:48Z")

</div>

Hi everyone, By accident i inserted some values as arrays inside the index, when the actual value should have been a string. This is the wrong value : { "hits" : \[ { "\_index" : "en\_file", "\_type"…

---

## [Index Stats kibana](https://discuss.elastic.co/t/index-stats-kibana/283688)

<div class="topic-metadata">

**Author:** [@rodri.gz](https://discuss.elastic.co/u/rodri.gz)\
**Replies:** 1\
**Last updated:** [October 1, 2021, 1:13pm UTC](https://discuss.elastic.co/t/index-stats-kibana/283688 "2021-10-01T13:13:50Z")

</div>

Hello ! I have seen that in kibana you can consult statistics of an index. Can this metadata be consulted as one more field and viewed on a dashboard? i tried this but it only returns empty fields. Thanks in ad…

---

## [Automatically download dashboard csv file by api fail](https://discuss.elastic.co/t/automatically-download-dashboard-csv-file-by-api-fail/284441)

<div class="topic-metadata">

**Author:** [@luckygoodlily](https://discuss.elastic.co/u/luckygoodlily)\
**Replies:** 1\
**Last updated:** [October 1, 2021, 1:05pm UTC](https://discuss.elastic.co/t/automatically-download-dashboard-csv-file-by-api-fail/284441 "2021-10-01T13:05:24Z")

</div>

Hello, we are developing a project for company, and we are working with the ELK stack. I have a problem that I have some visualizations in Dashboard and I want to download csv file by shell script (Automatically generat…

---

## [URL drilldown for Count in a visualization](https://discuss.elastic.co/t/url-drilldown-for-count-in-a-visualization/285192)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 3\
**Last updated:** [October 1, 2021, 1:00pm UTC](https://discuss.elastic.co/t/url-drilldown-for-count-in-a-visualization/285192 "2021-10-01T13:00:23Z")

</div>

Hi all, I'm trying to give count for a visualization . I want to see which are those count of users. Is there an option to give URl drilldown for count or is there any turnaround? I already have an URL drilldown f…

---

## [Change kibana logo](https://discuss.elastic.co/t/change-kibana-logo/285136)

<div class="topic-metadata">

**Author:** [@byul](https://discuss.elastic.co/u/byul)\
**Replies:** 1\
**Last updated:** [October 1, 2021, 11:03am UTC](https://discuss.elastic.co/t/change-kibana-logo/285136 "2021-10-01T11:03:27Z")

</div>

Hello everybody, can someone please help change the kibana logo, I tried changing favicons like it was stated here Custom Logo Kibana 7.9.2 (guide) by replacing the images by my own custom logo but nothing changed (see i…

---

## [Make Kibana accessible from a path of an existing domain](https://discuss.elastic.co/t/make-kibana-accessible-from-a-path-of-an-existing-domain/285241)

<div class="topic-metadata">

**Author:** [@Satkay](https://discuss.elastic.co/u/Satkay)\
**Replies:** 1\
**Last updated:** [October 1, 2021, 10:23am UTC](https://discuss.elastic.co/t/make-kibana-accessible-from-a-path-of-an-existing-domain/285241 "2021-10-01T10:23:14Z")

</div>

Hi Forum, I'm trying to deploy Elastic in Google cloud using ECK and need to expose Kibana UI via Istio Gateway. Something like this. test.com/kibana --\> Should go to Kibana test.com/elastic --\> Should go to elastic. …

---

## [Few logs present in elasticsearch but not visible in Kibana](https://discuss.elastic.co/t/few-logs-present-in-elasticsearch-but-not-visible-in-kibana/285596)

<div class="topic-metadata">

**Author:** [@Sandeep\_Gupta](https://discuss.elastic.co/u/Sandeep_Gupta)\
**Replies:** 2\
**Last updated:** [October 1, 2021, 10:10am UTC](https://discuss.elastic.co/t/few-logs-present-in-elasticsearch-but-not-visible-in-kibana/285596 "2021-10-01T10:10:29Z")

</div>

I am using Elastic 7.11. I am logging each request to my website in Elasticsearch through Logstash and using Kibana to view the request data. Somehow, I am not able to see (in Kibana) each request sent to Elasticsearch.…

---

## [Can't figure out how to create time based visualisation with sub-aggregation](https://discuss.elastic.co/t/cant-figure-out-how-to-create-time-based-visualisation-with-sub-aggregation/285563)

<div class="topic-metadata">

**Author:** [@Sergey\_Ganchuk](https://discuss.elastic.co/u/Sergey_Ganchuk)\
**Replies:** 4\
**Last updated:** [October 1, 2021, 9:42am UTC](https://discuss.elastic.co/t/cant-figure-out-how-to-create-time-based-visualisation-with-sub-aggregation/285563 "2021-10-01T09:42:40Z")

</div>

Hello. I'm collecting accounting data from our cloud platform (vmname, memory, cpu, owner, etc...) Script is running every hour and posting document for every vm. I would like to visualize usage of resources by every …

---

## [Kibana - Metricbeat Gadget Top Hosts](https://discuss.elastic.co/t/kibana-metricbeat-gadget-top-hosts/285273)

<div class="topic-metadata">

**Author:** [@Joel.Andrews](https://discuss.elastic.co/u/Joel.Andrews)\
**Replies:** 1\
**Last updated:** [October 1, 2021, 9:35am UTC](https://discuss.elastic.co/t/kibana-metricbeat-gadget-top-hosts/285273 "2021-10-01T09:35:48Z")

</div>

Hi There, After upgrading to 7.15.0, I've noticed a couple of the Metricbeat gadgets are not reporting correctly anymore. It shows the stats for a couple of hosts, and the rest are just solid bars. Is there a configur…

---

## [Using a force transform with "x", "y" forces](https://discuss.elastic.co/t/using-a-force-transform-with-x-y-forces/283838)

<div class="topic-metadata">

**Author:** [@elad\_sheinfeld](https://discuss.elastic.co/u/elad_sheinfeld)\
**Replies:** 1\
**Last updated:** [October 1, 2021, 9:26am UTC](https://discuss.elastic.co/t/using-a-force-transform-with-x-y-forces/283838 "2021-10-01T09:26:52Z")

</div>

Hey all, I'm using the VEGA visualization in ELK version 7.13.3 I'm trying to draw nodes connected to networks. I want the x, y coordinates represent the "node\_id" and "net\_level" respectively, using the force transfo…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=276)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=278)
