# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=285

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 286

---

## [Canvas bar chart: is it possible to have the y-axis in a time format](https://discuss.elastic.co/t/canvas-bar-chart-is-it-possible-to-have-the-y-axis-in-a-time-format/283642)

<div class="topic-metadata">

**Author:** [@hNiven](https://discuss.elastic.co/u/hNiven)\
**Replies:** 2\
**Last updated:** [September 9, 2021, 1:21pm UTC](https://discuss.elastic.co/t/canvas-bar-chart-is-it-possible-to-have-the-y-axis-in-a-time-format/283642 "2021-09-09T13:21:31Z")

</div>

Hi, I am creating a bar chart on canvas where the x-axis is in months and the y-axis is in seconds for some sort of process to be completed. I was wondering if instead of having the y-axis in seconds you can get it to b…

---

## [Kibana DMARC IP location](https://discuss.elastic.co/t/kibana-dmarc-ip-location/282574)

<div class="topic-metadata">

**Author:** [@hapkoek](https://discuss.elastic.co/u/hapkoek)\
**Replies:** 4\
**Last updated:** [September 9, 2021, 8:10am UTC](https://discuss.elastic.co/t/kibana-dmarc-ip-location/282574 "2021-09-09T08:10:04Z")

</div>

Hi all, Recently I installed Elastic and Kibana to create a dashboard for DMARC statistics. (ParseDMARC) Currently Kibana uses ParseDMARC objects to import the data. Two of the fields are Source\_IP and Destination\_IP. …

---

## [Analyse usage on Kibana](https://discuss.elastic.co/t/analyse-usage-on-kibana/283443)

<div class="topic-metadata">

**Author:** [@Ankit\_Vishwakarma](https://discuss.elastic.co/u/Ankit_Vishwakarma)\
**Replies:** 3\
**Last updated:** [September 9, 2021, 11:53am UTC](https://discuss.elastic.co/t/analyse-usage-on-kibana/283443 "2021-09-09T11:53:13Z")

</div>

I want to capture the user's action on Kibana dashboard. User actions like the open dashboard, click on visualizations, etc. Is there any metric that captures user actions/events? This will help us to identify the usage…

---

## [Is there any method to show specific host into one single chart in the dashboard?](https://discuss.elastic.co/t/is-there-any-method-to-show-specific-host-into-one-single-chart-in-the-dashboard/283166)

<div class="topic-metadata">

**Author:** [@afan](https://discuss.elastic.co/u/afan)\
**Replies:** 4\
**Last updated:** [September 9, 2021, 10:41am UTC](https://discuss.elastic.co/t/is-there-any-method-to-show-specific-host-into-one-single-chart-in-the-dashboard/283166 "2021-09-09T10:41:41Z")

</div>

I am trying to build the dashboard right now and able to show the CPU/memory usage by single specific host as below. however, I would like to group some specific hostnames (just like uat servers or app servers) to sho…

---

## [Read-only Query](https://discuss.elastic.co/t/read-only-query/283040)

<div class="topic-metadata">

**Author:** [@k.schmidtke](https://discuss.elastic.co/u/k.schmidtke)\
**Replies:** 2\
**Last updated:** [September 9, 2021, 9:54am UTC](https://discuss.elastic.co/t/read-only-query/283040 "2021-09-09T09:54:23Z")

</div>

I want to have preset Dashboards for Users with fixed querys that cannot be changed. Example: I want my Dashboard to query with "header\_from : company.com", but it schouldn't be changeable by read-only users Is this p…

---

## [Need help to have space on elasticsearch](https://discuss.elastic.co/t/need-help-to-have-space-on-elasticsearch/282220)

<div class="topic-metadata">

**Author:** [@Pacous](https://discuss.elastic.co/u/Pacous)\
**Replies:** 13\
**Last updated:** [September 9, 2021, 9:42am UTC](https://discuss.elastic.co/t/need-help-to-have-space-on-elasticsearch/282220 "2021-09-09T09:42:03Z")

</div>

When I replay the logs from logstash to elasticsearch, I no longer see them on kibana. I think there is no more storage space. So I go to Stack Management -\> Index Management to delete Indices. But, that does not solve…

---

## [TSVB Clipping with elk 7.10.2](https://discuss.elastic.co/t/tsvb-clipping-with-elk-7-10-2/281973)

<div class="topic-metadata">

**Author:** [@Rollup\_eval](https://discuss.elastic.co/u/Rollup_eval)\
**Replies:** 1\
**Last updated:** [September 9, 2021, 8:26am UTC](https://discuss.elastic.co/t/tsvb-clipping-with-elk-7-10-2/281973 "2021-09-09T08:26:13Z")

</div>

I'am using elk 7.10.2 and TSVB kibana plugin. For TSVB , I enter axis-min 0.1 for axis betwwen 0% and 100%, i get the following Any lines with one extremity lower than axis min dissappear: clipping fails Note that …

---

## [Plain text on markdown is not displayed if I select a long time range](https://discuss.elastic.co/t/plain-text-on-markdown-is-not-displayed-if-i-select-a-long-time-range/283626)

<div class="topic-metadata">

**Author:** [@Fosco](https://discuss.elastic.co/u/Fosco)\
**Replies:** 6\
**Last updated:** [September 9, 2021, 8:17am UTC](https://discuss.elastic.co/t/plain-text-on-markdown-is-not-displayed-if-i-select-a-long-time-range/283626 "2021-09-09T08:17:43Z")

</div>

Hello, I am on kibana 7.10.2 and when I create a TSVB Markdown visual with only plain text (or with an image), and then I select a time range of one year, the visual loads a long time until this error : Thanks

---

## [Pin main menu](https://discuss.elastic.co/t/pin-main-menu/283659)

<div class="topic-metadata">

**Author:** [@Tuckson](https://discuss.elastic.co/u/Tuckson)\
**Replies:** 2\
**Last updated:** [September 9, 2021, 8:09am UTC](https://discuss.elastic.co/t/pin-main-menu/283659 "2021-09-09T08:09:16Z")

</div>

Hi, Using 7.14.1 In the past there was the possibility to pin the main menu, hoewever nowadays the menu slides away always. Is there no way to pin this/ make it always visible? Cheers

---

## [7.14.x Kibana query bar (search) user interface glitch in Firefox 91/92](https://discuss.elastic.co/t/7-14-x-kibana-query-bar-search-user-interface-glitch-in-firefox-91-92/283740)

<div class="topic-metadata">

**Author:** [@jsteenkamp](https://discuss.elastic.co/u/jsteenkamp)\
**Replies:** 1\
**Last updated:** [September 9, 2021, 7:10am UTC](https://discuss.elastic.co/t/7-14-x-kibana-query-bar-search-user-interface-glitch-in-firefox-91-92/283740 "2021-09-09T07:10:19Z")

</div>

Kibana query bar (search) user interface glitch. Firefox version 91 and 92 Kibana version 7.14.0 and 7.14.1

---

## [\[Kibana 7.10\] how to match item in two index patten](https://discuss.elastic.co/t/kibana-7-10-how-to-match-item-in-two-index-patten/283730)

<div class="topic-metadata">

**Author:** [@cps598](https://discuss.elastic.co/u/cps598)\
**Replies:** 1\
**Last updated:** [September 9, 2021, 5:52am UTC](https://discuss.elastic.co/t/kibana-7-10-how-to-match-item-in-two-index-patten/283730 "2021-09-09T05:52:45Z")

</div>

I originally have two index patterns with one same item called user.id. Now I create one more index pattern which combines those two indexes. But I find that they just simply add one index after another, which includes t…

---

## [Elastalert send me 0 hit query doesn't work ? please help](https://discuss.elastic.co/t/elastalert-send-me-0-hit-query-doesnt-work-please-help/283732)

<div class="topic-metadata">

**Author:** [@Salim\_Adnan](https://discuss.elastic.co/u/Salim_Adnan)\
**Replies:** 2\
**Last updated:** [September 9, 2021, 5:47am UTC](https://discuss.elastic.co/t/elastalert-send-me-0-hit-query-doesnt-work-please-help/283732 "2021-09-09T05:47:58Z")

</div>

\--------------my config.yaml------------ This is the folder that contains the rule yaml files Any .yaml file will be loaded as a rule rules\_folder: example\_rules How often ElastAlert will query Elasticsearch The unit c…

---

## [How to search all Domain](https://discuss.elastic.co/t/how-to-search-all-domain/282797)

<div class="topic-metadata">

**Author:** [@Mick1](https://discuss.elastic.co/u/Mick1)\
**Replies:** 3\
**Last updated:** [September 9, 2021, 4:07am UTC](https://discuss.elastic.co/t/how-to-search-all-domain/282797 "2021-09-09T04:07:20Z")

</div>

Why domain : \*.02222105.com include www.02222105.com and 02222105.com but not include www100.02222105.com How to Search all Domain (Lucene or KQL) Thanks you Master

---

## [\[Kibana 7.10\] How to search from all Index Patten](https://discuss.elastic.co/t/kibana-7-10-how-to-search-from-all-index-patten/283721)

<div class="topic-metadata">

**Author:** [@cps598](https://discuss.elastic.co/u/cps598)\
**Replies:** 3\
**Last updated:** [September 9, 2021, 2:33am UTC](https://discuss.elastic.co/t/kibana-7-10-how-to-search-from-all-index-patten/283721 "2021-09-09T02:33:04Z")

</div>

I would like to search for the IP address from all Index Patten. All Index Patten got the same field call "s.ip". Can we search like Splunk "index:\* s.ip:192.168.1.1"?

---

## [Kibana jwt authentication](https://discuss.elastic.co/t/kibana-jwt-authentication/283122)

<div class="topic-metadata">

**Author:** [@Divya\_Bansal](https://discuss.elastic.co/u/Divya_Bansal)\
**Replies:** 7\
**Last updated:** [September 8, 2021, 10:45pm UTC](https://discuss.elastic.co/t/kibana-jwt-authentication/283122 "2021-09-08T22:45:43Z")

</div>

is open distro a free open-source software for kibana jwt authentication? if yes, how can we achieve jwt authentication using it? . is there any other plugin that is free open source for jwt authentication of kibana?

---

## [Error with bulk index operation when displaying in kibana](https://discuss.elastic.co/t/error-with-bulk-index-operation-when-displaying-in-kibana/283325)

<div class="topic-metadata">

**Author:** [@yrtqz](https://discuss.elastic.co/u/yrtqz)\
**Replies:** 8\
**Last updated:** [September 8, 2021, 10:35pm UTC](https://discuss.elastic.co/t/error-with-bulk-index-operation-when-displaying-in-kibana/283325 "2021-09-08T22:35:03Z")

</div>

I have elasticsearch 7.10.2 and kibana 7.10.2 (technically opensearch) running. I import data into an existing index with a bulk index command. The response is a 201 back from elasticsearch. When i go to kibana, the dash…

---

## [Stack Monitoring not showing anything for kibana 7.9.1](https://discuss.elastic.co/t/stack-monitoring-not-showing-anything-for-kibana-7-9-1/283570)

<div class="topic-metadata">

**Author:** [@vikasgurlinka](https://discuss.elastic.co/u/vikasgurlinka)\
**Replies:** 3\
**Last updated:** [September 8, 2021, 9:59pm UTC](https://discuss.elastic.co/t/stack-monitoring-not-showing-anything-for-kibana-7-9-1/283570 "2021-09-08T21:59:34Z")

</div>

We have been using Elasticsearch 7.9.1 and Kibana 7.9.1 with self-monitoring enabled. Stack monitoring was working fine earlier but all of a sudden it went blank and showing nothing and we did not do any changes to the c…

---

## [Help with rule variables(email alert)](https://discuss.elastic.co/t/help-with-rule-variables-email-alert/283313)

<div class="topic-metadata">

**Author:** [@Dovan](https://discuss.elastic.co/u/Dovan)\
**Replies:** 4\
**Last updated:** [September 8, 2021, 9:03pm UTC](https://discuss.elastic.co/t/help-with-rule-variables-email-alert/283313 "2021-09-08T21:03:22Z")

</div>

I would like to know if it is possible for me to use the value of an event field in the email notification of a rule, for example, in the log index comes the fields with IP, SRC, ATTACK\_INFO, severity and others, and I w…

---

## [Getting error \`\[template\] unknown field \[index\_patterns\]\` while creating index template in 7.14.0](https://discuss.elastic.co/t/getting-error-template-unknown-field-index-patterns-while-creating-index-template-in-7-14-0/283700)

<div class="topic-metadata">

**Author:** [@prathamesh7](https://discuss.elastic.co/u/prathamesh7)\
**Replies:** 3\
**Last updated:** [September 8, 2021, 7:25pm UTC](https://discuss.elastic.co/t/getting-error-template-unknown-field-index-patterns-while-creating-index-template-in-7-14-0/283700 "2021-09-08T19:25:58Z")

</div>

Hi Team, I am creating index template (not legacy template) in kibana in version 7.14.0 but can see below error in 6th step of Review template in preview tab. { "statusCode": 400, "error": "Bad Request", "messag…

---

## [Updating status code data with predefined Labels in Dashboard](https://discuss.elastic.co/t/updating-status-code-data-with-predefined-labels-in-dashboard/283668)

<div class="topic-metadata">

**Author:** [@keyu](https://discuss.elastic.co/u/keyu)\
**Replies:** 1\
**Last updated:** [September 8, 2021, 1:45pm UTC](https://discuss.elastic.co/t/updating-status-code-data-with-predefined-labels-in-dashboard/283668 "2021-09-08T13:45:40Z")

</div>

Hi, I am working on processing my transaction data for visualization. But I want to update the status codes with corresponding values. In Discover, I am able to see the data as 00, 01, 02 .. etc., But it should visual…

---

## [Unable to see dashboard drilldown option in kibana dashboards](https://discuss.elastic.co/t/unable-to-see-dashboard-drilldown-option-in-kibana-dashboards/283609)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 1\
**Last updated:** [September 8, 2021, 1:40pm UTC](https://discuss.elastic.co/t/unable-to-see-dashboard-drilldown-option-in-kibana-dashboards/283609 "2021-09-08T13:40:19Z")

</div>

Hi all, I'm unable to see dashboard drilldown option in kibana dashboards when I click on visualization intended. I'm using Kibana 7.10.2 version. Is it related to Kibana OSS build vs Non OSS build? Should i reinst…

---

## [ES and KIBANA not keeping up with Suricata logs](https://discuss.elastic.co/t/es-and-kibana-not-keeping-up-with-suricata-logs/283636)

<div class="topic-metadata">

**Author:** [@nunex\_17](https://discuss.elastic.co/u/nunex_17)\
**Replies:** 0\
**Last updated:** [September 8, 2021, 9:29am UTC](https://discuss.elastic.co/t/es-and-kibana-not-keeping-up-with-suricata-logs/283636 "2021-09-08T09:29:31Z")

</div>

Hi. I implemented a Suricata server with Filebeat to send logs to elasticsearch. The logs are then displayed in Kibana via the Filebeat Suricata module. My problem is when I enable flow logging in the meericata log fil…

---

## [Pie Chart with Filters Aggregation ..what is my path (Sorry, I really haven't got a clue)?](https://discuss.elastic.co/t/pie-chart-with-filters-aggregation-what-is-my-path-sorry-i-really-havent-got-a-clue/282246)

<div class="topic-metadata">

**Author:** [@ChrizK](https://discuss.elastic.co/u/ChrizK)\
**Replies:** 9\
**Last updated:** [September 8, 2021, 7:35am UTC](https://discuss.elastic.co/t/pie-chart-with-filters-aggregation-what-is-my-path-sorry-i-really-havent-got-a-clue/282246 "2021-09-08T07:35:43Z")

</div>

The Test area within my organisation has implemented ELK. The main purpose is to capture, analyse and visualise logs produced by an in-house load tool. There are also other 'applications' which feed logs. I have mainl…

---

## [Help with complex DSL query/filter/grouping](https://discuss.elastic.co/t/help-with-complex-dsl-query-filter-grouping/282608)

<div class="topic-metadata">

**Author:** [@Bryan\_Hamilton](https://discuss.elastic.co/u/Bryan_Hamilton)\
**Replies:** 2\
**Last updated:** [September 8, 2021, 7:31am UTC](https://discuss.elastic.co/t/help-with-complex-dsl-query-filter-grouping/282608 "2021-09-08T07:31:47Z")

</div>

Hi all, I have 2 seperate queries and am trying to find a way to filter and only return documents matching both queries. Query01 = event.provider : "Microsoft-Windows-Sysmon" and event.code:"3" and destination.port:(…

---

## [How to load apm metrics data in Observability Metrics UI?](https://discuss.elastic.co/t/how-to-load-apm-metrics-data-in-observability-metrics-ui/283617)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 0\
**Last updated:** [September 8, 2021, 7:16am UTC](https://discuss.elastic.co/t/how-to-load-apm-metrics-data-in-observability-metrics-ui/283617 "2021-09-08T07:16:39Z")

</div>

I saw that kibana provides metrics, but it only loads metricsbeat index by default. I am a little curious. Since the apm server also collects metrics, how can I generate graphics from this part of the data?

---

## [Wrong result in tsvb](https://discuss.elastic.co/t/wrong-result-in-tsvb/283552)

<div class="topic-metadata">

**Author:** [@vijay\_kaali](https://discuss.elastic.co/u/vijay_kaali)\
**Replies:** 2\
**Last updated:** [September 8, 2021, 6:29am UTC](https://discuss.elastic.co/t/wrong-result-in-tsvb/283552 "2021-09-08T06:29:02Z")

</div>

i am trying to get uptime . i have created Gauge TSVB aggregation and it shows - days but i can see data , if i have same in data table attached is the screen shot

---

## [Corrupted Kibana Saved Object](https://discuss.elastic.co/t/corrupted-kibana-saved-object/283521)

<div class="topic-metadata">

**Author:** [@msszafar](https://discuss.elastic.co/u/msszafar)\
**Replies:** 4\
**Last updated:** [September 8, 2021, 5:27am UTC](https://discuss.elastic.co/t/corrupted-kibana-saved-object/283521 "2021-09-08T05:27:43Z")

</div>

Hey, Can anyone please tell me how to check the corrupted saved object of kibana? Context: I'm intended to upgrade kibana. If any kibana saved object is corrupt then upgrade fails, so its workaround is to manually find …

---

## [How to seed a dashboard png via webhook weekly?](https://discuss.elastic.co/t/how-to-seed-a-dashboard-png-via-webhook-weekly/283557)

<div class="topic-metadata">

**Author:** [@Liangliang\_Qiu](https://discuss.elastic.co/u/Liangliang_Qiu)\
**Replies:** 2\
**Last updated:** [September 8, 2021, 1:27am UTC](https://discuss.elastic.co/t/how-to-seed-a-dashboard-png-via-webhook-weekly/283557 "2021-09-08T01:27:21Z")

</div>

Here we want to use watcher to send a weekly png report into a group such Wechat etc, which is produced from dashboard periodically. Email report is able to use attachment, while webhook doesn't have this parameter. I u…

---

## [Kibana External Search Link](https://discuss.elastic.co/t/kibana-external-search-link/283579)

<div class="topic-metadata">

**Author:** [@mikemitchell](https://discuss.elastic.co/u/mikemitchell)\
**Replies:** 1\
**Last updated:** [September 7, 2021, 9:58pm UTC](https://discuss.elastic.co/t/kibana-external-search-link/283579 "2021-09-07T21:58:46Z")

</div>

We would like to manually create a get request to Kibana. All we need from the user currently is the root URL, something like https://elastic.cyborglab.local/, and we're able to create the link that would take them direc…

---

## [How to get percentage of failed tests from all results](https://discuss.elastic.co/t/how-to-get-percentage-of-failed-tests-from-all-results/282818)

<div class="topic-metadata">

**Author:** [@ShayWeizman](https://discuss.elastic.co/u/ShayWeizman)\
**Replies:** 5\
**Last updated:** [September 7, 2021, 6:59pm UTC](https://discuss.elastic.co/t/how-to-get-percentage-of-failed-tests-from-all-results/282818 "2021-09-07T18:59:21Z")

</div>

Hi All, I'm using v 7.11.1 I have this data structure in elastic: { "\_index" : "stamshay", "\_type" : "\_doc", "\_id" : "ub0ll3sB2oqJ9931yhZw", "\_score" : 1.0, "\_source" : { "buildVersion" : "1.1.1.1", "testcase" …

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=284)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=286)
