# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=291

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 292

---

## [Kibana Alerts and Actions on index Threshold?](https://discuss.elastic.co/t/kibana-alerts-and-actions-on-index-threshold/280519)

<div class="topic-metadata">

**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\
**Replies:** 2\
**Last updated:** [August 24, 2021, 10:08am UTC](https://discuss.elastic.co/t/kibana-alerts-and-actions-on-index-threshold/280519 "2021-08-24T10:08:10Z")

</div>

I want to generate alert while condition is met. I created the alert and its action. At the time of testing its works fine. while I am running my actual file it is not generating any alert and its actions. I am also att…

---

## [Kibana password protected?](https://discuss.elastic.co/t/kibana-password-protected/282214)

<div class="topic-metadata">

**Author:** [@selin](https://discuss.elastic.co/u/selin)\
**Replies:** 6\
**Last updated:** [August 24, 2021, 6:48am UTC](https://discuss.elastic.co/t/kibana-password-protected/282214 "2021-08-24T06:48:10Z")

</div>

Hi friend can i know is the password of user login to kibana protected? Can anyone view the psssword? What is xpack.security.encryptionKey

---

## [Kibana: Minimum Permissions for saving the queries for a dashboard](https://discuss.elastic.co/t/kibana-minimum-permissions-for-saving-the-queries-for-a-dashboard/282259)

<div class="topic-metadata">

**Author:** [@Kunal\_Sharma](https://discuss.elastic.co/u/Kunal_Sharma)\
**Replies:** 2\
**Last updated:** [August 24, 2021, 5:50am UTC](https://discuss.elastic.co/t/kibana-minimum-permissions-for-saving-the-queries-for-a-dashboard/282259 "2021-08-24T05:50:27Z")

</div>

Dear Team, We have a role in Kibana that provides the read only access to a dashboard under a tenant (with tenant permission for the Role as Read Only). With this current role, users are not able to save the search que…

---

## [Kibana integration with remedy](https://discuss.elastic.co/t/kibana-integration-with-remedy/282192)

<div class="topic-metadata">

**Author:** [@rodri.gz](https://discuss.elastic.co/u/rodri.gz)\
**Replies:** 2\
**Last updated:** [August 24, 2021, 3:52am UTC](https://discuss.elastic.co/t/kibana-integration-with-remedy/282192 "2021-08-24T03:52:01Z")

</div>

Hello! I am doing some tests and I have a question. Can kibana alert or create tickets in a Remedy? Thanks in advance!

---

## [Kibana cluster with nginx not working](https://discuss.elastic.co/t/kibana-cluster-with-nginx-not-working/282232)

<div class="topic-metadata">

**Author:** [@selin](https://discuss.elastic.co/u/selin)\
**Replies:** 2\
**Last updated:** [August 24, 2021, 1:20am UTC](https://discuss.elastic.co/t/kibana-cluster-with-nginx-not-working/282232 "2021-08-24T01:20:45Z")

</div>

Hi bro and sis, I would need to set kibana cluster. Is there any idea how can it be done. A single kibana no issue. But cluster after login i hitting 401 error. I not sure why exactly. I point both kibana to same yaml f…

---

## [Kibana selective loading of visualizations](https://discuss.elastic.co/t/kibana-selective-loading-of-visualizations/282208)

<div class="topic-metadata">

**Author:** [@katja1](https://discuss.elastic.co/u/katja1)\
**Replies:** 1\
**Last updated:** [August 23, 2021, 10:57pm UTC](https://discuss.elastic.co/t/kibana-selective-loading-of-visualizations/282208 "2021-08-23T22:57:00Z")

</div>

Hi, Is selective loading of visualizations possible in Kibana - meaning for example, if I select a filter and there are some visualizations on dashboard that do not have any data after filtering, then this visualization…

---

## [Kibana: Get delta t in a visualization](https://discuss.elastic.co/t/kibana-get-delta-t-in-a-visualization/282277)

<div class="topic-metadata">

**Author:** [@Saliinger](https://discuss.elastic.co/u/Saliinger)\
**Replies:** 0\
**Last updated:** [August 23, 2021, 10:02pm UTC](https://discuss.elastic.co/t/kibana-get-delta-t-in-a-visualization/282277 "2021-08-23T22:02:33Z")

</div>

Hello. I have this visualization using TSVB Is possible to get the time when metrics are equal to 0 and put it in a TSVB table? I mean: Get the time when metric turns to 0 for X time and show in a TSVB table how ma…

---

## [Kibana List API Questions](https://discuss.elastic.co/t/kibana-list-api-questions/280530)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 2\
**Last updated:** [August 23, 2021, 5:16pm UTC](https://discuss.elastic.co/t/kibana-list-api-questions/280530 "2021-08-23T17:16:01Z")

</div>

Hello all, We really like the Kibana List API. it enables us to make black and whitelists we can use in Elastic detection rules. For example a list of developers, compromised accounts, vpn users, etc. We also really lik…

---

## [Configure Kibana with default fields](https://discuss.elastic.co/t/configure-kibana-with-default-fields/282253)

<div class="topic-metadata">

**Author:** [@gba8912](https://discuss.elastic.co/u/gba8912)\
**Replies:** 3\
**Last updated:** [August 23, 2021, 5:14pm UTC](https://discuss.elastic.co/t/configure-kibana-with-default-fields/282253 "2021-08-23T17:14:30Z")

</div>

Hi all, I made a grok filter to for logstash that created fields in kinbana. This is great but in discover, I am having to add the fields manually every time i load in. Is there a way to make kibana load in the fields a…

---

## [Elasticsearch and kibana not accessible on the web browser](https://discuss.elastic.co/t/elasticsearch-and-kibana-not-accessible-on-the-web-browser/282169)

<div class="topic-metadata">

**Author:** [@123451](https://discuss.elastic.co/u/123451)\
**Replies:** 5\
**Last updated:** [August 23, 2021, 3:40pm UTC](https://discuss.elastic.co/t/elasticsearch-and-kibana-not-accessible-on-the-web-browser/282169 "2021-08-23T15:40:12Z")

</div>

Hi, I can not access Elasticsearch and kibana from the web browser. When I type in the Url: https://192.168.0.1:9200 on the web browser, I get this error. { "name" : "node-1", "cluster\_name" : "elasticsearch", "clus…

---

## [How to execute dynamic queries with visualisations](https://discuss.elastic.co/t/how-to-execute-dynamic-queries-with-visualisations/281640)

<div class="topic-metadata">

**Author:** [@akashk](https://discuss.elastic.co/u/akashk)\
**Replies:** 8\
**Last updated:** [August 23, 2021, 1:13pm UTC](https://discuss.elastic.co/t/how-to-execute-dynamic-queries-with-visualisations/281640 "2021-08-23T13:13:58Z")

</div>

Hi, I am new to ELK and I am facing one issue in creating visualisations. So we have two different sources(log files) from where we are reading the logs and storing triggeredTime and pickedTime of application event in …

---

## [Tracking multiple records by unique value from json.rest](https://discuss.elastic.co/t/tracking-multiple-records-by-unique-value-from-json-rest/282225)

<div class="topic-metadata">

**Author:** [@Olga\_Drakonen](https://discuss.elastic.co/u/Olga_Drakonen)\
**Replies:** 0\
**Last updated:** [August 23, 2021, 12:57pm UTC](https://discuss.elastic.co/t/tracking-multiple-records-by-unique-value-from-json-rest/282225 "2021-08-23T12:57:55Z")

</div>

I have a huge array of records, each with a unique value in json.rest. Each entry with its own zson.rest key value is first displayed in one record from the first service, then in the next record from the second service.…

---

## [Scripted fields for Kibana alerting not showing](https://discuss.elastic.co/t/scripted-fields-for-kibana-alerting-not-showing/281913)

<div class="topic-metadata">

**Author:** [@aniket.sonavane](https://discuss.elastic.co/u/aniket.sonavane)\
**Replies:** 5\
**Last updated:** [August 23, 2021, 12:54pm UTC](https://discuss.elastic.co/t/scripted-fields-for-kibana-alerting-not-showing/281913 "2021-08-23T12:54:32Z")

</div>

The objective is to setup an email alert on heap\_utilization where heap\_utilization% is greater than 85% group by jvm\_name for production enviroment. I am working on elastic stack version 7.13.0 where I also set up APM …

---

## [Can't edit Widget after rename Index Pattern](https://discuss.elastic.co/t/cant-edit-widget-after-rename-index-pattern/281514)

<div class="topic-metadata">

**Author:** [@Arethusa](https://discuss.elastic.co/u/Arethusa)\
**Replies:** 1\
**Last updated:** [August 23, 2021, 12:47pm UTC](https://discuss.elastic.co/t/cant-edit-widget-after-rename-index-pattern/281514 "2021-08-23T12:47:24Z")

</div>

Hello, I am on v 7.12.0. I observe a bug, maybe it was fix with new version but we never know. Some one have rename one Index Pattern, and after that, I can't edit my widget to update it, I have to create new widget. …

---

## [Kibana Alerts accessing fields](https://discuss.elastic.co/t/kibana-alerts-accessing-fields/280789)

<div class="topic-metadata">

**Author:** [@bevano](https://discuss.elastic.co/u/bevano)\
**Replies:** 1\
**Last updated:** [August 23, 2021, 12:39pm UTC](https://discuss.elastic.co/t/kibana-alerts-accessing-fields/280789 "2021-08-23T12:39:41Z")

</div>

Hi All, Is it possible to access specific fields within Action boxes under Alerts in Kibana. For example, I want to alert when the field "host.status" equals down. This is easy using the Elasticsearch Query. After this…

---

## [Having hard time to extract day of week in scripted field](https://discuss.elastic.co/t/having-hard-time-to-extract-day-of-week-in-scripted-field/281690)

<div class="topic-metadata">

**Author:** [@Mojahid\_Ahmad](https://discuss.elastic.co/u/Mojahid_Ahmad)\
**Replies:** 6\
**Last updated:** [August 23, 2021, 10:41am UTC](https://discuss.elastic.co/t/having-hard-time-to-extract-day-of-week-in-scripted-field/281690 "2021-08-23T10:41:00Z")

</div>

I am able to extract hour of day using the below script format. But facing the issue while extracting the day of week because of timezone. I used this script. \["","Mon","Tue","Wed","Thu","Fri","Sat","Sun"\]doc\['event\_ti…

---

## [Error Fleet Server - Error - x509: cannot validate certificate for x.x.x.x because it doesn't contain any IP SANs](https://discuss.elastic.co/t/error-fleet-server-error-x509-cannot-validate-certificate-for-x-x-x-x-because-it-doesnt-contain-any-ip-sans/282170)

<div class="topic-metadata">

**Author:** [@Carlos\_Velasquez](https://discuss.elastic.co/u/Carlos_Velasquez)\
**Replies:** 1\
**Last updated:** [August 23, 2021, 10:36am UTC](https://discuss.elastic.co/t/error-fleet-server-error-x509-cannot-validate-certificate-for-x-x-x-x-because-it-doesnt-contain-any-ip-sans/282170 "2021-08-23T10:36:41Z")

</div>

hello I am trying to connect to Fleet but I get the following error, I have created the certificates but I can't solve the problem 2021-08-20T21:50:53.027-0500 ERROR status/reporter.go:236 Elastic Agent status cha…

---

## [Kafka consumergroup metricset & TSVB interval](https://discuss.elastic.co/t/kafka-consumergroup-metricset-tsvb-interval/279964)

<div class="topic-metadata">

**Author:** [@Malec](https://discuss.elastic.co/u/Malec)\
**Replies:** 2\
**Last updated:** [August 23, 2021, 10:25am UTC](https://discuss.elastic.co/t/kafka-consumergroup-metricset-tsvb-interval/279964 "2021-08-23T10:25:08Z")

</div>

Hi, I'm trying to use the Kafka consumergroup metricset to report global lag per consumer group. For simplicity's sake let's say that 1 consumergroup == one topic. The problem is the lag is reported per partition so if…

---

## [Rollup-Jobs - How to visualize Raw and Rolledup-Data](https://discuss.elastic.co/t/rollup-jobs-how-to-visualize-raw-and-rolledup-data/282065)

<div class="topic-metadata">

**Author:** [@cwiechmann](https://discuss.elastic.co/u/cwiechmann)\
**Replies:** 4\
**Last updated:** [August 23, 2021, 9:08am UTC](https://discuss.elastic.co/t/rollup-jobs-how-to-visualize-raw-and-rolledup-data/282065 "2021-08-23T09:08:34Z")

</div>

Hi Experts, I'm using the Elasticstack version 7.14.0 and have started to use Rollup-Jobs. Based on the documentation is seems, that rolled-up query results should include Raw-Data (as long as available) and automatical…

---

## [Built in alerts fail to run](https://discuss.elastic.co/t/built-in-alerts-fail-to-run/281207)

<div class="topic-metadata">

**Author:** [@radovan](https://discuss.elastic.co/u/radovan)\
**Replies:** 5\
**Last updated:** [August 23, 2021, 8:16am UTC](https://discuss.elastic.co/t/built-in-alerts-fail-to-run/281207 "2021-08-23T08:16:03Z")

</div>

Hi, I decided to create a monitoring cluster and after a few problems at the start all is running now. There are metricbeat clients on the elastic nodes with only elastic/logstash/kibana modules enabled, logs are flowin…

---

## [Security Features](https://discuss.elastic.co/t/security-features/282179)

<div class="topic-metadata">

**Author:** [@Yazan\_Mostafa](https://discuss.elastic.co/u/Yazan_Mostafa)\
**Replies:** 1\
**Last updated:** [August 23, 2021, 4:25am UTC](https://discuss.elastic.co/t/security-features/282179 "2021-08-23T04:25:35Z")

</div>

Hi everyone I am new to ELK Stack, I am trying to upload data for elastic, but unfortunately I can't because of security features... Can any one help me hot to give privilege and set roles to solve the problem it is u…

---

## [TOO\_MANY\_REQUESTS/12/disk usage exceeded](https://discuss.elastic.co/t/too-many-requests-12-disk-usage-exceeded/280753)

<div class="topic-metadata">

**Author:** [@mfisher](https://discuss.elastic.co/u/mfisher)\
**Replies:** 3\
**Last updated:** [August 23, 2021, 1:29am UTC](https://discuss.elastic.co/t/too-many-requests-12-disk-usage-exceeded/280753 "2021-08-23T01:29:42Z")

</div>

Recently credentials are failing in the Kibana web interface. Checking the logs there is an error indicating disk usage is exceeded. {"type":"log","@timestamp":"2021-08-08T20:41:52-05:00","tags":\["error","plugins","apm…

---

## [Fetch Out data from Index based on condition with VEGA](https://discuss.elastic.co/t/fetch-out-data-from-index-based-on-condition-with-vega/282133)

<div class="topic-metadata">

**Author:** [@Harshal\_Goyal](https://discuss.elastic.co/u/Harshal_Goyal)\
**Replies:** 1\
**Last updated:** [August 22, 2021, 7:16am UTC](https://discuss.elastic.co/t/fetch-out-data-from-index-based-on-condition-with-vega/282133 "2021-08-22T07:16:22Z")

</div>

I am trying to fetch the data based on a specific condition say a field that goes by name sym and only has a specific value "X". And use only that data to plot the graphs using vega query. But I am unable to fetch the da…

---

## [Kibana - Failed to query events data](https://discuss.elastic.co/t/kibana-failed-to-query-events-data/281699)

<div class="topic-metadata">

**Author:** [@panagiss](https://discuss.elastic.co/u/panagiss)\
**Replies:** 7\
**Last updated:** [August 21, 2021, 12:22pm UTC](https://discuss.elastic.co/t/kibana-failed-to-query-events-data/281699 "2021-08-21T12:22:01Z")

</div>

Here are the full errors: That is the error i see in KIbana when i try to visualize auditbeat data from auditbeat index. i cannot visualize anything in Kibana now from that index. The error states: type": "illeg…

---

## [Visualisation to replay user session/journey](https://discuss.elastic.co/t/visualisation-to-replay-user-session-journey/281052)

<div class="topic-metadata">

**Author:** [@Likewise](https://discuss.elastic.co/u/Likewise)\
**Replies:** 3\
**Last updated:** [August 21, 2021, 2:41am UTC](https://discuss.elastic.co/t/visualisation-to-replay-user-session-journey/281052 "2021-08-21T02:41:04Z")

</div>

Hi community! I am a complete newbie to ELK though have been using Discover for a few months to randomly investigate issues experienced by our end users. We currently use ELK to log most of the activity that happens on …

---

## [Remaking legacy visualizations on Kibana, problems with colors and filters](https://discuss.elastic.co/t/remaking-legacy-visualizations-on-kibana-problems-with-colors-and-filters/282118)

<div class="topic-metadata">

**Author:** [@Mrizzi](https://discuss.elastic.co/u/Mrizzi)\
**Replies:** 1\
**Last updated:** [August 20, 2021, 8:48pm UTC](https://discuss.elastic.co/t/remaking-legacy-visualizations-on-kibana-problems-with-colors-and-filters/282118 "2021-08-20T20:48:40Z")

</div>

Hey everyone, hope you're doing okay. I've been migrating legacy visualizations into lens visualizations (mostly for the better tooltips) and i've been banging my head about seemingly basic features from the legacy ones…

---

## [Bazel build artifacts stored in /tmp by default?](https://discuss.elastic.co/t/bazel-build-artifacts-stored-in-tmp-by-default/281814)

<div class="topic-metadata">

**Author:** [@GavinAnderegg](https://discuss.elastic.co/u/GavinAnderegg)\
**Replies:** 2\
**Last updated:** [August 20, 2021, 8:46pm UTC](https://discuss.elastic.co/t/bazel-build-artifacts-stored-in-tmp-by-default/281814 "2021-08-20T20:46:35Z")

</div>

Hi! I'm working on a custom Kibana plugin for a client, and am currently using Elastic Stack 7.13. One trouble that I've been running into is that I often hit the error Error: Cannot find module '@kbn/config-schema' eve…

---

## [ELK Stack + TLS + Headache](https://discuss.elastic.co/t/elk-stack-tls-headache/279429)

<div class="topic-metadata">

**Author:** [@pooch](https://discuss.elastic.co/u/pooch)\
**Replies:** 14\
**Last updated:** [August 20, 2021, 6:39pm UTC](https://discuss.elastic.co/t/elk-stack-tls-headache/279429 "2021-08-20T18:39:42Z")

</div>

I am ashamed to admin that I spent a week or so trying to get SSL enabled in my stack and this is my last ditch effort. I have scoured the docs, message boards, git but I am getting nowhere. ELK Stack version 7.13.2 ins…

---

## [Getting issue while installing kibana](https://discuss.elastic.co/t/getting-issue-while-installing-kibana/281093)

<div class="topic-metadata">

**Author:** [@sujalray](https://discuss.elastic.co/u/sujalray)\
**Replies:** 1\
**Last updated:** [August 20, 2021, 5:25pm UTC](https://discuss.elastic.co/t/getting-issue-while-installing-kibana/281093 "2021-08-20T17:25:02Z")

</div>

HI Team, -I am getting issue while installing kibana on dev mode. Kibana Version - 7.14.0 Node Version - 14.17.3 -I am using the following URL for installation process. -I am cloning the code using the below URL -…

---

## [Filter Order in Dashboard](https://discuss.elastic.co/t/filter-order-in-dashboard/281037)

<div class="topic-metadata">

**Author:** [@Garry](https://discuss.elastic.co/u/Garry)\
**Replies:** 1\
**Last updated:** [August 20, 2021, 5:21pm UTC](https://discuss.elastic.co/t/filter-order-in-dashboard/281037 "2021-08-20T17:21:28Z")

</div>

Can you change the order of filters in a Dashboard? If I want to add a new one at the left hand side or in the middle do I need to recreate them each time?

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=290)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=292)
