# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=287

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 288

---

## [How to combine indexes in Kibana when searching](https://discuss.elastic.co/t/how-to-combine-indexes-in-kibana-when-searching/283211)

<div class="topic-metadata">

**Author:** [@Aleksei](https://discuss.elastic.co/u/Aleksei)\
**Replies:** 5\
**Last updated:** [September 3, 2021, 9:51am UTC](https://discuss.elastic.co/t/how-to-combine-indexes-in-kibana-when-searching/283211 "2021-09-03T09:51:09Z")

</div>

Hi. Maybe someone has already looked for this question. How do I get data from different indexes ? How to perform a search combining two or more indexes in elastic ?

---

## [Converting x axis values from UTC epoch to date time](https://discuss.elastic.co/t/converting-x-axis-values-from-utc-epoch-to-date-time/282050)

<div class="topic-metadata">

**Author:** [@TUMAAA](https://discuss.elastic.co/u/TUMAAA)\
**Replies:** 4\
**Last updated:** [September 3, 2021, 8:00am UTC](https://discuss.elastic.co/t/converting-x-axis-values-from-utc-epoch-to-date-time/282050 "2021-09-03T08:00:43Z")

</div>

Dear community, I have x axis values in a kibana histogram plot that are UTC epoch (in nano sec). These x values are hardly usable. It would help if I can convert them to sec. Even better is if I can convert them to dat…

---

## [Tweaking autocompleteTerminateAfter](https://discuss.elastic.co/t/tweaking-autocompleteterminateafter/283010)

<div class="topic-metadata">

**Author:** [@gael17](https://discuss.elastic.co/u/gael17)\
**Replies:** 2\
**Last updated:** [September 3, 2021, 7:03am UTC](https://discuss.elastic.co/t/tweaking-autocompleteterminateafter/283010 "2021-09-03T07:03:42Z")

</div>

Hey there, I've been using controls for my kibana 7.14 dashboard. I'm wondering if there is a way to tweak the autocompleteTerminateAfter, like an "autocompleteTerminateBefore" ? Let me explain: My documents look like…

---

## [How can kibana compare two fields?](https://discuss.elastic.co/t/how-can-kibana-compare-two-fields/282918)

<div class="topic-metadata">

**Author:** [@rodri.gz](https://discuss.elastic.co/u/rodri.gz)\
**Replies:** 7\
**Last updated:** [September 3, 2021, 6:51am UTC](https://discuss.elastic.co/t/how-can-kibana-compare-two-fields/282918 "2021-09-03T06:51:22Z")

</div>

hello! I want to compare two fields in the query bar. is it posible to do it in kibana ? example: field\_1 == value\_1 field\_2 == value\_2 thanks in advance!

---

## [About the kibana error "Kibana server is not ready yetroot"](https://discuss.elastic.co/t/about-the-kibana-error-kibana-server-is-not-ready-yetroot/283231)

<div class="topic-metadata">

**Author:** [@vamei\_T](https://discuss.elastic.co/u/vamei_T)\
**Replies:** 13\
**Last updated:** [September 3, 2021, 6:17am UTC](https://discuss.elastic.co/t/about-the-kibana-error-kibana-server-is-not-ready-yetroot/283231 "2021-09-03T06:17:12Z")

</div>

my es and kibana version is 7.9.2 anyone hava method to solove is?

---

## [Label template for a link in a script field](https://discuss.elastic.co/t/label-template-for-a-link-in-a-script-field/282649)

<div class="topic-metadata">

**Author:** [@ippo](https://discuss.elastic.co/u/ippo)\
**Replies:** 4\
**Last updated:** [September 2, 2021, 8:04pm UTC](https://discuss.elastic.co/t/label-template-for-a-link-in-a-script-field/282649 "2021-09-02T20:04:07Z")

</div>

Hello guys , Since i use multiple fields to create my url my script field return the value of the link . is there any way to put a in label template an emoji :grinning: instead of just some text. ? Also when i click on…

---

## [Reverse the autocompleteTerminateAfter parameter?](https://discuss.elastic.co/t/reverse-the-autocompleteterminateafter-parameter/283045)

<div class="topic-metadata">

**Author:** [@gael17](https://discuss.elastic.co/u/gael17)\
**Replies:** 1\
**Last updated:** [September 2, 2021, 4:03pm UTC](https://discuss.elastic.co/t/reverse-the-autocompleteterminateafter-parameter/283045 "2021-09-02T16:03:34Z")

</div>

Hey there, I've been using controls in my kibana 7.14 setup. The autocompleteTerminateAfter is not really what I'm looking for. Let me explain: My documents look like: { type: "a" } I've been adding documents of …

---

## [Multiple field value in URL (scripted field)](https://discuss.elastic.co/t/multiple-field-value-in-url-scripted-field/283051)

<div class="topic-metadata">

**Author:** [@Loulou](https://discuss.elastic.co/u/Loulou)\
**Replies:** 1\
**Last updated:** [September 2, 2021, 4:02pm UTC](https://discuss.elastic.co/t/multiple-field-value-in-url-scripted-field/283051 "2021-09-02T16:02:07Z")

</div>

Hi, What I want to do is exactly what this user wanted to do as well: How to pass multiple field values of a table to URL So basically the possibility to pass multiple values in a field URL. I tried using the Scripted …

---

## [Match date field on day in the month](https://discuss.elastic.co/t/match-date-field-on-day-in-the-month/283069)

<div class="topic-metadata">

**Author:** [@orly\_spivak](https://discuss.elastic.co/u/orly_spivak)\
**Replies:** 1\
**Last updated:** [September 2, 2021, 3:58pm UTC](https://discuss.elastic.co/t/match-date-field-on-day-in-the-month/283069 "2021-09-02T15:58:47Z")

</div>

Hey, I have a date type field that I wont to match by, and get all documents that the date field in them is the first day of the month. I tried regex but it does not work because it's not a string field. I will be happ…

---

## [Kibana KQL issue, Greater than does not work for event.duration field](https://discuss.elastic.co/t/kibana-kql-issue-greater-than-does-not-work-for-event-duration-field/282943)

<div class="topic-metadata">

**Author:** [@geekzy](https://discuss.elastic.co/u/geekzy)\
**Replies:** 3\
**Last updated:** [September 2, 2021, 10:01am UTC](https://discuss.elastic.co/t/kibana-kql-issue-greater-than-does-not-work-for-event-duration-field/282943 "2021-09-02T10:01:32Z")

</div>

I am currently on using Kibana v7.13.3. I am ingesting zeek logs into my elastic stack and trying to filter by event duration that exceeds a specific time frame. I have tried using the following basic KQL to filter by: e…

---

## [Wrap text in dashboard table](https://discuss.elastic.co/t/wrap-text-in-dashboard-table/283107)

<div class="topic-metadata">

**Author:** [@elastic9](https://discuss.elastic.co/u/elastic9)\
**Replies:** 1\
**Last updated:** [September 2, 2021, 9:27am UTC](https://discuss.elastic.co/t/wrap-text-in-dashboard-table/283107 "2021-09-02T09:27:48Z")

</div>

I'm currently on Kibana 7.13.3, and was wondering if it was possible to wrap text in tables made in the dashboard. I've got long text entries, and when visualising them in the dashboard tables, they seem to just truncate…

---

## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/282925)

<div class="topic-metadata">

**Author:** [@Alvaro\_Eixea](https://discuss.elastic.co/u/Alvaro_Eixea)\
**Replies:** 6\
**Last updated:** [September 2, 2021, 7:21am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/282925 "2021-09-02T07:21:54Z")

</div>

Hi, I have upgrade my monolithic server using these guide: Upgrade Elasticsearch, Filebeat and Kibana - Upgrade guide Now ,i have my server broken, kibana show always the message "kibana server is not ready yet" on scr…

---

## [Complete newbie, but need urgent cleanup](https://discuss.elastic.co/t/complete-newbie-but-need-urgent-cleanup/282802)

<div class="topic-metadata">

**Author:** [@TwanVeugelers](https://discuss.elastic.co/u/TwanVeugelers)\
**Replies:** 7\
**Last updated:** [September 2, 2021, 5:45am UTC](https://discuss.elastic.co/t/complete-newbie-but-need-urgent-cleanup/282802 "2021-09-02T05:45:41Z")

</div>

Hi. I have taken over the monitoring / elastic search from a colleague that left the company. I now see that our D drive is almost reaching its limits and will be full pretty shortly. I'm a full newbie and need to lea…

---

## [Mail log event correlation](https://discuss.elastic.co/t/mail-log-event-correlation/283115)

<div class="topic-metadata">

**Author:** [@mherbert](https://discuss.elastic.co/u/mherbert)\
**Replies:** 11\
**Last updated:** [September 2, 2021, 5:25am UTC](https://discuss.elastic.co/t/mail-log-event-correlation/283115 "2021-09-02T05:25:51Z")

</div>

Apologies, I don't know whether this is the correct forum for this question, please bear with me. I have an elasticsearch index containing mail logging events from syslog, however as with postfix the complete transactio…

---

## [Failed to authenticate user \[kibana\_system\]](https://discuss.elastic.co/t/failed-to-authenticate-user-kibana-system/282864)

<div class="topic-metadata">

**Author:** [@yyyayo](https://discuss.elastic.co/u/yyyayo)\
**Replies:** 3\
**Last updated:** [September 2, 2021, 2:38am UTC](https://discuss.elastic.co/t/failed-to-authenticate-user-kibana-system/282864 "2021-09-02T02:38:14Z")

</div>

When I tried Kibana development, I ran the following commands: yarn es snapshot --license trial yarn start --run-examples Then I encountered an error in Elasticsearch: failed to retrieve password hash for reserved use…

---

## [Threat intelligence module](https://discuss.elastic.co/t/threat-intelligence-module/282766)

<div class="topic-metadata">

**Author:** [@Servando\_Dominguez](https://discuss.elastic.co/u/Servando_Dominguez)\
**Replies:** 3\
**Last updated:** [September 2, 2021, 2:20am UTC](https://discuss.elastic.co/t/threat-intelligence-module/282766 "2021-09-02T02:20:57Z")

</div>

Hi there! Alert for a maybe, a stupid question. I want to enable the thread intelligence module from diferent resources. I click enable in Kibana and go to the documentation: My question is, where I put this config/…

---

## [Kibana UI refused to connect](https://discuss.elastic.co/t/kibana-ui-refused-to-connect/283093)

<div class="topic-metadata">

**Author:** [@peter\_murphy](https://discuss.elastic.co/u/peter_murphy)\
**Replies:** 2\
**Last updated:** [September 1, 2021, 10:28pm UTC](https://discuss.elastic.co/t/kibana-ui-refused-to-connect/283093 "2021-09-01T22:28:57Z")

</div>

Hi I'm having trouble accessing the Kibana UI in my browser. I'm sure it's something in the config but I can't tell what. I can successfully curl localhost:9200 on the server but not localhost:5601, and I cannot curl eit…

---

## [Counting events in a specific time range](https://discuss.elastic.co/t/counting-events-in-a-specific-time-range/282932)

<div class="topic-metadata">

**Author:** [@katja1](https://discuss.elastic.co/u/katja1)\
**Replies:** 2\
**Last updated:** [September 1, 2021, 5:50pm UTC](https://discuss.elastic.co/t/counting-events-in-a-specific-time-range/282932 "2021-09-01T17:50:02Z")

</div>

Our problem is the following; we are collecting information about customers visiting our page. We are intrested in counting repeated visits by the same customer in a specific time range - we would like to determine the n…

---

## [Kibana is extremely slow (Loading graphs, new pages, etc.)](https://discuss.elastic.co/t/kibana-is-extremely-slow-loading-graphs-new-pages-etc/282955)

<div class="topic-metadata">

**Author:** [@Dave\_Houser](https://discuss.elastic.co/u/Dave_Houser)\
**Replies:** 6\
**Last updated:** [September 1, 2021, 5:32pm UTC](https://discuss.elastic.co/t/kibana-is-extremely-slow-loading-graphs-new-pages-etc/282955 "2021-09-01T17:32:40Z")

</div>

System: Ubuntu 18.04 16 Cores 16Gb RAM ELK system ELK 7.14 Single node (Kibana, Elastic, Logstash) All was deployed with Ubuntu apt (Install Elasticsearch with Debian Package | Elasticsearch Guide \[7.14\] | Elastic)…

---

## [System Down alert on Kibana](https://discuss.elastic.co/t/system-down-alert-on-kibana/282860)

<div class="topic-metadata">

**Author:** [@grumpypant](https://discuss.elastic.co/u/grumpypant)\
**Replies:** 4\
**Last updated:** [September 1, 2021, 4:41pm UTC](https://discuss.elastic.co/t/system-down-alert-on-kibana/282860 "2021-09-01T16:41:41Z")

</div>

New to ELK I'm trying to setup rules for alerting on Kibana. One of them would be "Host Down". Trying to use the system.uptime.duration.ms metricset to tell me if a Host is down for more than 5 mins. So far, below ima…

---

## [Alert if index has 0 documents in last X minutes (Rules and connectors or Detection Rules)](https://discuss.elastic.co/t/alert-if-index-has-0-documents-in-last-x-minutes-rules-and-connectors-or-detection-rules/282902)

<div class="topic-metadata">

**Author:** [@gneves](https://discuss.elastic.co/u/gneves)\
**Replies:** 3\
**Last updated:** [September 1, 2021, 2:36pm UTC](https://discuss.elastic.co/t/alert-if-index-has-0-documents-in-last-x-minutes-rules-and-connectors-or-detection-rules/282902 "2021-09-01T14:36:36Z")

</div>

Hello Guys, I've been working around with "Rules and Connectors" and "Detection Rules" in order to get a notification when one of my beats stops sending data. Each beat has different indexes, so i would like to "know" i…

---

## [Scripted field returns null on querying for logs](https://discuss.elastic.co/t/scripted-field-returns-null-on-querying-for-logs/282072)

<div class="topic-metadata">

**Author:** [@NavinKu10](https://discuss.elastic.co/u/NavinKu10)\
**Replies:** 5\
**Last updated:** [September 1, 2021, 12:52pm UTC](https://discuss.elastic.co/t/scripted-field-returns-null-on-querying-for-logs/282072 "2021-09-01T12:52:57Z")

</div>

Hi community. I am a newbie in Kibana and Elastic search. I am using scripted fields to search for logs containing certains strings and then visualize them. I have written my script in Painless. Here is the line that is…

---

## [TSVB Variable Name Markdown Syntax](https://discuss.elastic.co/t/tsvb-variable-name-markdown-syntax/281352)

<div class="topic-metadata">

**Author:** [@Bustencio](https://discuss.elastic.co/u/Bustencio)\
**Replies:** 4\
**Last updated:** [September 1, 2021, 11:17am UTC](https://discuss.elastic.co/t/tsvb-variable-name-markdown-syntax/281352 "2021-09-01T11:17:49Z")

</div>

Hi, I'm trying to create a TSVB visualization using Markdown to show values and some text. My problem appears when accessing label names while using date fields in a Terms aggregation because it overwrites the label. Is…

---

## [TSVB - Sum of value for unique records](https://discuss.elastic.co/t/tsvb-sum-of-value-for-unique-records/282967)

<div class="topic-metadata">

**Author:** [@Athul\_Devkar](https://discuss.elastic.co/u/Athul_Devkar)\
**Replies:** 2\
**Last updated:** [September 1, 2021, 12:29am UTC](https://discuss.elastic.co/t/tsvb-sum-of-value-for-unique-records/282967 "2021-09-01T00:29:39Z")

</div>

Is there anyway I can filter unique records and then find the sum of value for those unique records? Data example: Order# - TotalMRC O101 - $120 O101 - $120(duplicate record) O102 - $130 O103 - $120 Expected resul…

---

## [How to make alerts with telegram bot?](https://discuss.elastic.co/t/how-to-make-alerts-with-telegram-bot/282794)

<div class="topic-metadata">

**Author:** [@sevenout](https://discuss.elastic.co/u/sevenout)\
**Replies:** 1\
**Last updated:** [August 31, 2021, 10:48pm UTC](https://discuss.elastic.co/t/how-to-make-alerts-with-telegram-bot/282794 "2021-08-31T22:48:10Z")

</div>

hi guys, i'm learning Elasticsearch but i stumble in this problem. i want to send an alert from elastic to telegram. In short this is the result that i expect: i use webhook connector and this is the config b…

---

## [Is there a converter from a search in kibana to query language?](https://discuss.elastic.co/t/is-there-a-converter-from-a-search-in-kibana-to-query-language/282954)

<div class="topic-metadata">

**Author:** [@Dovan](https://discuss.elastic.co/u/Dovan)\
**Replies:** 1\
**Last updated:** [August 31, 2021, 10:15pm UTC](https://discuss.elastic.co/t/is-there-a-converter-from-a-search-in-kibana-to-query-language/282954 "2021-08-31T22:15:52Z")

</div>

I would like to know if there is any program or some type of converter from a search to a query language in kibana

---

## [Filter out signals that are produced too often by one user](https://discuss.elastic.co/t/filter-out-signals-that-are-produced-too-often-by-one-user/282553)

<div class="topic-metadata">

**Author:** [@lina1](https://discuss.elastic.co/u/lina1)\
**Replies:** 3\
**Last updated:** [August 31, 2021, 9:49pm UTC](https://discuss.elastic.co/t/filter-out-signals-that-are-produced-too-often-by-one-user/282553 "2021-08-31T21:49:19Z")

</div>

Hi all, I am working for a software company and we use Elasticsearch and Kibana to monitor the signals that our clients send. For that we implemented signals, that include a UserID and unique errorcodes. The problem is…

---

## [Azure event hub azure.activitylogs.properties](https://discuss.elastic.co/t/azure-event-hub-azure-activitylogs-properties/282907)

<div class="topic-metadata">

**Author:** [@graimato](https://discuss.elastic.co/u/graimato)\
**Replies:** 1\
**Last updated:** [August 31, 2021, 7:13pm UTC](https://discuss.elastic.co/t/azure-event-hub-azure-activitylogs-properties/282907 "2021-08-31T19:13:53Z")

</div>

Hello, I'm trying to analyze the information from cloud Azure. I have activated the EventHub and I receive the log, but i have data form Azure Appgataway like azure.activitylogs.properties { "receivedBytes": 65, "s…

---

## [Caused by: org.elasticsearch.action.search.SearchPhaseExecutionException](https://discuss.elastic.co/t/caused-by-org-elasticsearch-action-search-searchphaseexecutionexception/282914)

<div class="topic-metadata">

**Author:** [@Pradeep\_Patil](https://discuss.elastic.co/u/Pradeep_Patil)\
**Replies:** 1\
**Last updated:** [August 31, 2021, 7:12pm UTC](https://discuss.elastic.co/t/caused-by-org-elasticsearch-action-search-searchphaseexecutionexception/282914 "2021-08-31T19:12:09Z")

</div>

Caused by: org.elasticsearch.action.search.SearchPhaseExecutionException: Search rejected due to missing shards \[\[.kibana\_task\_manager\_7.14.0\_001\]\[0\]\]. Consider using allow\_partial\_search\_results setting to bypass this e…

---

## [Errors with a "does not exist" query](https://discuss.elastic.co/t/errors-with-a-does-not-exist-query/282846)

<div class="topic-metadata">

**Author:** [@variable](https://discuss.elastic.co/u/variable)\
**Replies:** 2\
**Last updated:** [August 31, 2021, 7:07pm UTC](https://discuss.elastic.co/t/errors-with-a-does-not-exist-query/282846 "2021-08-31T19:07:47Z")

</div>

I am trying to determine if this is a bug before opening an Issue. I am trying to create a query to return results when a field does not have any data. These work and return results (but not what I'm looking for): eve…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=286)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=288)
