# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=279

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 280

---

## [About Kibana Settings](https://discuss.elastic.co/t/about-kibana-settings/285357)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 4\
**Last updated:** [September 28, 2021, 10:33pm UTC](https://discuss.elastic.co/t/about-kibana-settings/285357 "2021-09-28T22:33:23Z")

</div>

Hi, Is there a way to view all of the configuration settings a kibana instance is running without access to the kibana config file? Version is 7.13.1. Thx D

---

## [YY of XX shards failed - illegal\_argument\_exception](https://discuss.elastic.co/t/yy-of-xx-shards-failed-illegal-argument-exception/285294)

<div class="topic-metadata">

**Author:** [@ehsan001](https://discuss.elastic.co/u/ehsan001)\
**Replies:** 3\
**Last updated:** [September 28, 2021, 9:33pm UTC](https://discuss.elastic.co/t/yy-of-xx-shards-failed-illegal-argument-exception/285294 "2021-09-28T21:33:31Z")

</div>

Hi, I am using Kibana version 7.11.1 and when trying to create an Lens visualization for one of painless scripted fields getting the below error. Any recommendation how to resolve the issue? Mapping used to create a ne…

---

## [Alert rule for standard cluster alerts: search\_phase\_execution\_exception \[illegal\_argument\_exception\]](https://discuss.elastic.co/t/alert-rule-for-standard-cluster-alerts-search-phase-execution-exception-illegal-argument-exception/284668)

<div class="topic-metadata">

**Author:** [@jrykowski-huron](https://discuss.elastic.co/u/jrykowski-huron)\
**Replies:** 2\
**Last updated:** [September 28, 2021, 9:03pm UTC](https://discuss.elastic.co/t/alert-rule-for-standard-cluster-alerts-search-phase-execution-exception-illegal-argument-exception/284668 "2021-09-28T21:03:10Z")

</div>

7.14.1 Platinum license Setting up brand new cluster, and have configured metricbeat style monitoring of cluster (separate elasticsearch for monitoring). Entered setup mode and did the add of standard alerts. Looks l…

---

## [Label alignment with two layers (7.15.0)](https://discuss.elastic.co/t/label-alignment-with-two-layers-7-15-0/285334)

<div class="topic-metadata">

**Author:** [@tomhe](https://discuss.elastic.co/u/tomhe)\
**Replies:** 4\
**Last updated:** [September 28, 2021, 2:34pm UTC](https://discuss.elastic.co/t/label-alignment-with-two-layers-7-15-0/285334 "2021-09-28T14:34:19Z")

</div>

I have a lens visualization (in version 7.15.0) where I want bar chart showing "Closed" vs "Not closed" where I color "Closed" with green and "Not closed" with red. To be able to set different colors for the bars I use t…

---

## [Regex not working with painless](https://discuss.elastic.co/t/regex-not-working-with-painless/284221)

<div class="topic-metadata">

**Author:** [@forst](https://discuss.elastic.co/u/forst)\
**Replies:** 9\
**Last updated:** [September 28, 2021, 2:19pm UTC](https://discuss.elastic.co/t/regex-not-working-with-painless/284221 "2021-09-28T14:19:03Z")

</div>

I'm trying to write a regex query for a java log error as following \[Poolthread\] com.xxxx.content.core-bundle com.xxxxx.content.model.impl.RegisterTypeInternal(3179)\] The activate method has thrown an exception (com.xxx…

---

## [Values changing when ordering by metric](https://discuss.elastic.co/t/values-changing-when-ordering-by-metric/285055)

<div class="topic-metadata">

**Author:** [@Jomy](https://discuss.elastic.co/u/Jomy)\
**Replies:** 4\
**Last updated:** [September 28, 2021, 12:40pm UTC](https://discuss.elastic.co/t/values-changing-when-ordering-by-metric/285055 "2021-09-28T12:40:37Z")

</div>

Hi, I am facing an issue with "order by". I have an Y axis with an "average" aggregation. I have an X axis with a "Term" aggregation (where my terms are street names) =\> I have an average value for each street. I would…

---

## [7.15 metric visualization percentile bucket\[agg.parentId\] is undefined](https://discuss.elastic.co/t/7-15-metric-visualization-percentile-bucket-agg-parentid-is-undefined/285125)

<div class="topic-metadata">

**Author:** [@jsteenkamp](https://discuss.elastic.co/u/jsteenkamp)\
**Replies:** 4\
**Last updated:** [September 28, 2021, 11:16am UTC](https://discuss.elastic.co/t/7-15-metric-visualization-percentile-bucket-agg-parentid-is-undefined/285125 "2021-09-28T11:16:54Z")

</div>

After upgrading from 7.14.2 to 7.15, some existing metric visualizations that use percentiles have stopped working. Search Error bucket\[agg.parentId\] is undefined getPercentileValue@https://.../44040/bundles/plugin/d…

---

## [Load balancing Kibana](https://discuss.elastic.co/t/load-balancing-kibana/284932)

<div class="topic-metadata">

**Author:** [@vee](https://discuss.elastic.co/u/vee)\
**Replies:** 5\
**Last updated:** [September 28, 2021, 9:50am UTC](https://discuss.elastic.co/t/load-balancing-kibana/284932 "2021-09-28T09:50:24Z")

</div>

Hi - we have 3 clusters in our prod spread across three diff Data centers. Each cluster setup: One instance of Kibana -\> 2 client nodes for load balancing -\> data nodes Since dashboards and visualizations are local to…

---

## [Enable secure connection from Kibana to Elasticsearch](https://discuss.elastic.co/t/enable-secure-connection-from-kibana-to-elasticsearch/285255)

<div class="topic-metadata">

**Author:** [@ls4074](https://discuss.elastic.co/u/ls4074)\
**Replies:** 1\
**Last updated:** [September 28, 2021, 9:10am UTC](https://discuss.elastic.co/t/enable-secure-connection-from-kibana-to-elasticsearch/285255 "2021-09-28T09:10:39Z")

</div>

I have xpack enabled on Elasticsearch (ES) on both http layer and transport layer. Now I am trying to enable the secure connection from Kibana to ES. I have added these in Kibana.yaml elasticsearchHosts: "https://elasti…

---

## [Facing some issues in creating index patterns using the python elasticsearch API](https://discuss.elastic.co/t/facing-some-issues-in-creating-index-patterns-using-the-python-elasticsearch-api/285305)

<div class="topic-metadata">

**Author:** [@Rahul\_Kulhalli](https://discuss.elastic.co/u/Rahul_Kulhalli)\
**Replies:** 1\
**Last updated:** [September 28, 2021, 9:06am UTC](https://discuss.elastic.co/t/facing-some-issues-in-creating-index-patterns-using-the-python-elasticsearch-api/285305 "2021-09-28T09:06:41Z")

</div>

Hello, I want to create an index pattern on Kibana through the python API also set the default timeFieldName to @timestamp. However, I am a little confused in regards to the API documentation provided by Elasticsearch-p…

---

## [Kibana Dashboard not loaded in AWS ES](https://discuss.elastic.co/t/kibana-dashboard-not-loaded-in-aws-es/285321)

<div class="topic-metadata">

**Author:** [@Balaji\_Arumugam](https://discuss.elastic.co/u/Balaji_Arumugam)\
**Replies:** 1\
**Last updated:** [September 28, 2021, 8:06am UTC](https://discuss.elastic.co/t/kibana-dashboard-not-loaded-in-aws-es/285321 "2021-09-28T08:06:16Z")

</div>

Hi, I have 3 master and 2 data nodes in amazon Elasticsearch. we have some production servers and installed filebeat and are able to push logs in Elasticsearch. For now we have installed metricbeat on one of the produc…

---

## [Cannot read properties of undefined (reading 'statusCode')](https://discuss.elastic.co/t/cannot-read-properties-of-undefined-reading-statuscode/285141)

<div class="topic-metadata">

**Author:** [@Mohammad.ali](https://discuss.elastic.co/u/Mohammad.ali)\
**Replies:** 4\
**Last updated:** [September 28, 2021, 7:25am UTC](https://discuss.elastic.co/t/cannot-read-properties-of-undefined-reading-statuscode/285141 "2021-09-28T07:25:03Z")

</div>

Hello everyone currently iam using kibana 7.6.1..i have a index with more than 4k fields and what i need to do is to refresh field list regarding our developer created new fields ..when i do that it takes long time and…

---

## [Hyperlink or drilldown for a metric in Table Visualisation](https://discuss.elastic.co/t/hyperlink-or-drilldown-for-a-metric-in-table-visualisation/285001)

<div class="topic-metadata">

**Author:** [@Anuj\_Zope](https://discuss.elastic.co/u/Anuj_Zope)\
**Replies:** 4\
**Last updated:** [September 28, 2021, 6:45am UTC](https://discuss.elastic.co/t/hyperlink-or-drilldown-for-a-metric-in-table-visualisation/285001 "2021-09-28T06:45:12Z")

</div>

Hi! I am using Kibana 7.10.2. So I am making a dashboard with tickets data. For certain tables, the last column is the 'Count of Tickets'. What I need it that for every table I make with this column, I want to make the…

---

## [CSV export: Reporting features are not yet ready](https://discuss.elastic.co/t/csv-export-reporting-features-are-not-yet-ready/285163)

<div class="topic-metadata">

**Author:** [@drnw](https://discuss.elastic.co/u/drnw)\
**Replies:** 5\
**Last updated:** [September 28, 2021, 4:30am UTC](https://discuss.elastic.co/t/csv-export-reporting-features-are-not-yet-ready/285163 "2021-09-28T04:30:38Z")

</div>

Please advise regards my failure to get CSV export working with an on-premise basic installation. Mac OSX install of Kibana from Homebrew (elastic/tap/kibana-full: stable 7.15.0) is throwing the following error: "tags"…

---

## [Configuring Spaces - Identifying Permissions for Role Access](https://discuss.elastic.co/t/configuring-spaces-identifying-permissions-for-role-access/285107)

<div class="topic-metadata">

**Author:** [@tthiry](https://discuss.elastic.co/u/tthiry)\
**Replies:** 5\
**Last updated:** [September 28, 2021, 12:11am UTC](https://discuss.elastic.co/t/configuring-spaces-identifying-permissions-for-role-access/285107 "2021-09-28T00:11:04Z")

</div>

Hello, Short time reader, first time caller... I am new to Elasticsearch and I am stumbling around. I am following the best practice of creating separate spaces for different user groups. For example I have a space for…

---

## [Single character column width in table view](https://discuss.elastic.co/t/single-character-column-width-in-table-view/285290)

<div class="topic-metadata">

**Author:** [@Chris\_Stone](https://discuss.elastic.co/u/Chris_Stone)\
**Replies:** 2\
**Last updated:** [September 27, 2021, 11:22pm UTC](https://discuss.elastic.co/t/single-character-column-width-in-table-view/285290 "2021-09-27T23:22:33Z")

</div>

After upgrading to 7.15 from 7.13, I see that many records in Discovery have a width of 1 character for the "field" column in table view. The json view looks fine. I see the issue in both the "classic" and updated views.…

---

## [\[request query.pattern\]: expected value of type \[string\] but got \[undefined\]](https://discuss.elastic.co/t/request-query-pattern-expected-value-of-type-string-but-got-undefined/284953)

<div class="topic-metadata">

**Author:** [@ewitkop](https://discuss.elastic.co/u/ewitkop)\
**Replies:** 6\
**Last updated:** [September 27, 2021, 10:58pm UTC](https://discuss.elastic.co/t/request-query-pattern-expected-value-of-type-string-but-got-undefined/284953 "2021-09-27T22:58:48Z")

</div>

I cannot seem to create an index pattern. There are over 600 fields and I cannot tell which one Kibana has an issue with. I have Kibana logging to stdout. And I can't get a idea of which field it has an issue with. Any …

---

## [\_grokparsefailure - Success in Grok Debugger - Log with Double quotes JSON](https://discuss.elastic.co/t/grokparsefailure-success-in-grok-debugger-log-with-double-quotes-json/285012)

<div class="topic-metadata">

**Author:** [@Athul\_Devkar](https://discuss.elastic.co/u/Athul_Devkar)\
**Replies:** 7\
**Last updated:** [September 27, 2021, 9:14pm UTC](https://discuss.elastic.co/t/grokparsefailure-success-in-grok-debugger-log-with-double-quotes-json/285012 "2021-09-27T21:14:42Z")

</div>

I am facing issues while trying to parse this log. I have tried multiple options but nothing seems to work. No error message in the logs, except for this tag in the records. Can you please help with what I am missing her…

---

## [How to use regex with vega](https://discuss.elastic.co/t/how-to-use-regex-with-vega/285237)

<div class="topic-metadata">

**Author:** [@forst](https://discuss.elastic.co/u/forst)\
**Replies:** 4\
**Last updated:** [September 27, 2021, 7:17pm UTC](https://discuss.elastic.co/t/how-to-use-regex-with-vega/285237 "2021-09-27T19:17:16Z")

</div>

I am new to vega lite / vega. I'm trying to write a regex query for a java log error as following with vega tree layout. A field 'message' contains : \[Poolthread\] com.xxxx.content.core-bundle com.xxxxx.content.model.…

---

## [Commenataries in kibana](https://discuss.elastic.co/t/commenataries-in-kibana/285198)

<div class="topic-metadata">

**Author:** [@ippo](https://discuss.elastic.co/u/ippo)\
**Replies:** 1\
**Last updated:** [September 27, 2021, 6:47pm UTC](https://discuss.elastic.co/t/commenataries-in-kibana/285198 "2021-09-27T18:47:44Z")

</div>

Hello guys i wanted to ask you if there is a way to add commentaries in a column to an enhanced table in kibana or if you think there is a way to implement this idea. any idea could help :pray:

---

## [Configurable visualization](https://discuss.elastic.co/t/configurable-visualization/284990)

<div class="topic-metadata">

**Author:** [@PaulBuciuman](https://discuss.elastic.co/u/PaulBuciuman)\
**Replies:** 3\
**Last updated:** [September 27, 2021, 5:33pm UTC](https://discuss.elastic.co/t/configurable-visualization/284990 "2021-09-27T17:33:04Z")

</div>

I'm create a simple visualization that shows using a treemap, top 20 request times from an API. But I want that 20 to be configurable outside the settings page, similar to the way I can customize the time range. Is this …

---

## [Querying a list to check the size](https://discuss.elastic.co/t/querying-a-list-to-check-the-size/284969)

<div class="topic-metadata">

**Author:** [@eztask.io](https://discuss.elastic.co/u/eztask.io)\
**Replies:** 3\
**Last updated:** [September 27, 2021, 5:32pm UTC](https://discuss.elastic.co/t/querying-a-list-to-check-the-size/284969 "2021-09-27T17:32:35Z")

</div>

Hello, I am just new to Kibana query. I am trying to query a field, which is a list of objects "leadStages" : \[ { "leadStage" : 1, "inTime" : 1597832744832, "outTime…

---

## [Unable to load Kibana UI from Internet Exlporer](https://discuss.elastic.co/t/unable-to-load-kibana-ui-from-internet-exlporer/284118)

<div class="topic-metadata">

**Author:** [@MKirby](https://discuss.elastic.co/u/MKirby)\
**Replies:** 5\
**Last updated:** [September 27, 2021, 3:49pm UTC](https://discuss.elastic.co/t/unable-to-load-kibana-ui-from-internet-exlporer/284118 "2021-09-27T15:49:50Z")

</div>

I have completed installing Kibana, Logstash and ElasticStack all versions 7.13.4 (In that order) in the production environment. Each portion of the stack is installed on it's own Red Hat Enterprise 8 server, and Elasti…

---

## [Can I create a Data table which aggregates a top hit per ID?](https://discuss.elastic.co/t/can-i-create-a-data-table-which-aggregates-a-top-hit-per-id/285089)

<div class="topic-metadata">

**Author:** [@Joao\_Silva](https://discuss.elastic.co/u/Joao_Silva)\
**Replies:** 2\
**Last updated:** [September 27, 2021, 2:58pm UTC](https://discuss.elastic.co/t/can-i-create-a-data-table-which-aggregates-a-top-hit-per-id/285089 "2021-09-27T14:58:21Z")

</div>

Imagine that I have documents with the fields ID, ValueA, ValueB and that my index for each ID, let's say from 1 to 50 have some random values for A and B. Is it possible to build a visualization with 50 rows, one per I…

---

## [Detecting DNS Exfiltration](https://discuss.elastic.co/t/detecting-dns-exfiltration/285239)

<div class="topic-metadata">

**Author:** [@ksremo](https://discuss.elastic.co/u/ksremo)\
**Replies:** 1\
**Last updated:** [September 27, 2021, 2:47pm UTC](https://discuss.elastic.co/t/detecting-dns-exfiltration/285239 "2021-09-27T14:47:56Z")

</div>

Hello, we ingest dns logs into Elasticsearch. the format is domain -\> whole domain -\> deeper.cdn.example.com domain1 -\> com domain2 -\> example domain3 -\> cdn domain4 -\> deeper Now we want to create a siem detecti…

---

## [How to calculate the average count with term](https://discuss.elastic.co/t/how-to-calculate-the-average-count-with-term/284879)

<div class="topic-metadata">

**Author:** [@forst](https://discuss.elastic.co/u/forst)\
**Replies:** 7\
**Last updated:** [September 27, 2021, 2:31pm UTC](https://discuss.elastic.co/t/how-to-calculate-the-average-count-with-term/284879 "2021-09-27T14:31:44Z")

</div>

I am looking to make a heatmap type visualization, I wanted to put the time on x-axis and the team (name) on y-axis. a team has a number of different jobs I wanted to put the average count with : count total / count j…

---

## [Canvas - Values retrieved from ESQL aren't the same as the ones displayed in chart](https://discuss.elastic.co/t/canvas-values-retrieved-from-esql-arent-the-same-as-the-ones-displayed-in-chart/284640)

<div class="topic-metadata">

**Author:** [@Luis\_P](https://discuss.elastic.co/u/Luis_P)\
**Replies:** 6\
**Last updated:** [September 27, 2021, 2:13pm UTC](https://discuss.elastic.co/t/canvas-values-retrieved-from-esql-arent-the-same-as-the-ones-displayed-in-chart/284640 "2021-09-27T14:13:03Z")

</div>

I made a query which produces the following table: I've cropped out the other column, but it represents the processes I have documents on, being NrByProcess the count of documents for each process. However, when using…

---

## [Error fetching alert status Stack Monitoring](https://discuss.elastic.co/t/error-fetching-alert-status-stack-monitoring/283707)

<div class="topic-metadata">

**Author:** [@vikasgurlinka](https://discuss.elastic.co/u/vikasgurlinka)\
**Replies:** 1\
**Last updated:** [September 27, 2021, 12:51pm UTC](https://discuss.elastic.co/t/error-fetching-alert-status-stack-monitoring/283707 "2021-09-27T12:51:18Z")

</div>

We have been using Kibana 7.9.1 and when we open stack monitoring an error message saying Error fetching alert status is being popped up. But it seems the Stack monitoring displays all monitored data correctly (CPU, mem…

---

## [How to get e-mail notification with log file path og log file hostname](https://discuss.elastic.co/t/how-to-get-e-mail-notification-with-log-file-path-og-log-file-hostname/283890)

<div class="topic-metadata">

**Author:** [@amiraliw](https://discuss.elastic.co/u/amiraliw)\
**Replies:** 1\
**Last updated:** [September 27, 2021, 12:40pm UTC](https://discuss.elastic.co/t/how-to-get-e-mail-notification-with-log-file-path-og-log-file-hostname/283890 "2021-09-27T12:40:30Z")

</div>

Hi I am very new in elasticsearch and kibana. I have elasticsearch and kibana on the same on premise server. And filebeat agents are installed on several other servers (on premise). These agents send logs to elasticsea…

---

## [Graphic display of questions in different time frames](https://discuss.elastic.co/t/graphic-display-of-questions-in-different-time-frames/285150)

<div class="topic-metadata">

**Author:** [@cheerone](https://discuss.elastic.co/u/cheerone)\
**Replies:** 1\
**Last updated:** [September 27, 2021, 8:09am UTC](https://discuss.elastic.co/t/graphic-display-of-questions-in-different-time-frames/285150 "2021-09-27T08:09:00Z")

</div>

I use metricbeat system module collect servers data. When i choose "last 30 minutes" "last 24 hours" and "today",the data shown in the graph is too different. Can you explain why this is happening? Is it a statistical p…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=278)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=280)
