# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=294

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 295

---

## [Add agent wrong documentation](https://discuss.elastic.co/t/add-agent-wrong-documentation/281512)

<div class="topic-metadata">

**Author:** [@Lucas\_Van\_den\_Abbeel](https://discuss.elastic.co/u/Lucas_Van_den_Abbeel)\
**Replies:** 2\
**Last updated:** [August 16, 2021, 4:10pm UTC](https://discuss.elastic.co/t/add-agent-wrong-documentation/281512 "2021-08-16T16:10:03Z")

</div>

./elastic-agent install -f --kibana-url=xxxx --enrollment-token=xxxxx is not working unknown flag: --kibana-url

---

## [Create new field "Year" from a complete date](https://discuss.elastic.co/t/create-new-field-year-from-a-complete-date/281332)

<div class="topic-metadata">

**Author:** [@Raptoresse](https://discuss.elastic.co/u/Raptoresse)\
**Replies:** 3\
**Last updated:** [August 16, 2021, 3:13pm UTC](https://discuss.elastic.co/t/create-new-field-year-from-a-complete-date/281332 "2021-08-16T15:13:29Z")

</div>

Hi everybody ! I have a probleme : I have a field "date". I want to select juste the year, and create a vizualisation "controls" type (Add dropdown menus and range sliders to your dashboard) with the new field. For thi…

---

## [Scripted fields - doc\[message.keyword\].value reading as empty - field is not empty](https://discuss.elastic.co/t/scripted-fields-doc-message-keyword-value-reading-as-empty-field-is-not-empty/280953)

<div class="topic-metadata">

**Author:** [@acastravet](https://discuss.elastic.co/u/acastravet)\
**Replies:** 15\
**Last updated:** [August 16, 2021, 7:05am UTC](https://discuss.elastic.co/t/scripted-fields-doc-message-keyword-value-reading-as-empty-field-is-not-empty/280953 "2021-08-16T07:05:48Z")

</div>

Hello everyone, I have a field that holds all the log information (multiple fields inside it). Field looks like this: logging.level="some info", @timestamp="some info", message="some info", trace\_id="some info" I am t…

---

## [Custom index does NOT show in Kibana](https://discuss.elastic.co/t/custom-index-does-not-show-in-kibana/281490)

<div class="topic-metadata">

**Author:** [@panagiss](https://discuss.elastic.co/u/panagiss)\
**Replies:** 3\
**Last updated:** [August 15, 2021, 11:08pm UTC](https://discuss.elastic.co/t/custom-index-does-not-show-in-kibana/281490 "2021-08-15T23:08:56Z")

</div>

I'm outputting a custom index from Logstash to Elastisearch but it won't show in KIbana's main dashboards (e.g. Security panel / data sources). While it will show in index management in settings. Here is the how out…

---

## [Kibana 7.14 - fresh installation fails \[Starting saved objects migrations - action failed\]](https://discuss.elastic.co/t/kibana-7-14-fresh-installation-fails-starting-saved-objects-migrations-action-failed/281385)

<div class="topic-metadata">

**Author:** [@Dostoyevsky](https://discuss.elastic.co/u/Dostoyevsky)\
**Replies:** 1\
**Last updated:** [August 15, 2021, 10:43pm UTC](https://discuss.elastic.co/t/kibana-7-14-fresh-installation-fails-starting-saved-objects-migrations-action-failed/281385 "2021-08-15T22:43:53Z")

</div>

Hi everyone, note that this is a fresh install, not an upgrade, also elasticsearch is running i am attempting to run Kibana on my local win10 machine, however, am faced with the following message : log \[18:58:43.305…

---

## [Unable to authenticate user \['elastic'\] in docker-compose](https://discuss.elastic.co/t/unable-to-authenticate-user-elastic-in-docker-compose/281445)

<div class="topic-metadata">

**Author:** [@naaviin](https://discuss.elastic.co/u/naaviin)\
**Replies:** 0\
**Last updated:** [August 14, 2021, 2:56pm UTC](https://discuss.elastic.co/t/unable-to-authenticate-user-elastic-in-docker-compose/281445 "2021-08-14T14:56:38Z")

</div>

I am hitting below error in Kibana during startup via docker compose. I am using same id elastic in my kibana below is my docker-compsoe code version: "3.9" services: kibana: image: docker.elastic.co/kibana/kiba…

---

## [Filter logs which are after a particular event](https://discuss.elastic.co/t/filter-logs-which-are-after-a-particular-event/281437)

<div class="topic-metadata">

**Author:** [@Pavan\_Kumar\_R](https://discuss.elastic.co/u/Pavan_Kumar_R)\
**Replies:** 0\
**Last updated:** [August 14, 2021, 11:12am UTC](https://discuss.elastic.co/t/filter-logs-which-are-after-a-particular-event/281437 "2021-08-14T11:12:30Z")

</div>

I have 4 applications each will write "Application started : App1", with application's name at the end. In logstash I used grok filter to extract applications name into a field 'appName', I also added tags '\_event', 'app…

---

## [Fatal CLI Error cannot find module to-regex while starting Kibana](https://discuss.elastic.co/t/fatal-cli-error-cannot-find-module-to-regex-while-starting-kibana/279972)

<div class="topic-metadata">

**Author:** [@Ashutosh](https://discuss.elastic.co/u/Ashutosh)\
**Replies:** 2\
**Last updated:** [August 14, 2021, 8:37am UTC](https://discuss.elastic.co/t/fatal-cli-error-cannot-find-module-to-regex-while-starting-kibana/279972 "2021-08-14T08:37:52Z")

</div>

Hi All, I have installed Kibana 7.13. I am not able to start Kibana using "systemctl start kibana". I keep seeing the following errors when I run journalctl -u kibana -f fatal CLI Error cannot find module to-regex I a…

---

## [Kibana 7.12.0 Index fields are summed by day](https://discuss.elastic.co/t/kibana-7-12-0-index-fields-are-summed-by-day/280860)

<div class="topic-metadata">

**Author:** [@zhyp](https://discuss.elastic.co/u/zhyp)\
**Replies:** 2\
**Last updated:** [August 14, 2021, 7:06am UTC](https://discuss.elastic.co/t/kibana-7-12-0-index-fields-are-summed-by-day/280860 "2021-08-14T07:06:16Z")

</div>

Hi I have an index. Its structure is as follows: Date Hour time Number of hours Number of dates I want the number of dates to automatically add up by day. Calculation formula: Number of dates = Number of…

---

## [Getting issue while installing Kibana](https://discuss.elastic.co/t/getting-issue-while-installing-kibana/280916)

<div class="topic-metadata">

**Author:** [@MKYash](https://discuss.elastic.co/u/MKYash)\
**Replies:** 1\
**Last updated:** [August 13, 2021, 10:48pm UTC](https://discuss.elastic.co/t/getting-issue-while-installing-kibana/280916 "2021-08-13T22:48:59Z")

</div>

Kibana Versions : 7.14.0 Node Version : v14.17.4 Kibana installation issue. While running yarn start getting below error. Also tried to install yarn add @kbn/apm-config-loader

---

## [Need ELK REST API for view alerts which meet threshold value](https://discuss.elastic.co/t/need-elk-rest-api-for-view-alerts-which-meet-threshold-value/281289)

<div class="topic-metadata">

**Author:** [@prashant.j.singh](https://discuss.elastic.co/u/prashant.j.singh)\
**Replies:** 1\
**Last updated:** [August 13, 2021, 10:37pm UTC](https://discuss.elastic.co/t/need-elk-rest-api-for-view-alerts-which-meet-threshold-value/281289 "2021-08-13T22:37:38Z")

</div>

MY ELK APM version is 7.14 - licence Free basics . please suggest or help me how can view all alert or any API those alert meet threshold value. using alert connector : server log and index

---

## [Kibana Enhanced Table Plugin - Computed columns issue](https://discuss.elastic.co/t/kibana-enhanced-table-plugin-computed-columns-issue/281351)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 1\
**Last updated:** [August 13, 2021, 10:29pm UTC](https://discuss.elastic.co/t/kibana-enhanced-table-plugin-computed-columns-issue/281351 "2021-08-13T22:29:16Z")

</div>

Hi , I'm using Kibana - Elasticsearch Plugin - Enhanced Table. Issue is I can create computed columns for fields in buckets like terms, filters etc. I cannot create computed columns for fields in metrics aggregation l…

---

## [Turn off Alert during night](https://discuss.elastic.co/t/turn-off-alert-during-night/281156)

<div class="topic-metadata">

**Author:** [@wlbsxnlp22](https://discuss.elastic.co/u/wlbsxnlp22)\
**Replies:** 1\
**Last updated:** [August 13, 2021, 10:21pm UTC](https://discuss.elastic.co/t/turn-off-alert-during-night/281156 "2021-08-13T22:21:22Z")

</div>

Hi, Is there a way to use the Elasticsearch Query Alert type to only run an alert during business hours? If so does anyone have an example script? Any help would be very appreciated.

---

## [ELK APM : Select a connector type "Index" - where can view these alert](https://discuss.elastic.co/t/elk-apm-select-a-connector-type-index-where-can-view-these-alert/281288)

<div class="topic-metadata">

**Author:** [@prashant.j.singh](https://discuss.elastic.co/u/prashant.j.singh)\
**Replies:** 1\
**Last updated:** [August 13, 2021, 10:10pm UTC](https://discuss.elastic.co/t/elk-apm-select-a-connector-type-index-where-can-view-these-alert/281288 "2021-08-13T22:10:33Z")

</div>

I have enabled connector Type "index" in kibana 7.14 and apply index connector. please help where can view these alert for index connector . Any have API or log ? ELK APM Detail : Kibaban 7.14 , Elasticserach 7.14

---

## [Exclude duplicate data](https://discuss.elastic.co/t/exclude-duplicate-data/281226)

<div class="topic-metadata">

**Author:** [@dcarpio080](https://discuss.elastic.co/u/dcarpio080)\
**Replies:** 1\
**Last updated:** [August 13, 2021, 10:02pm UTC](https://discuss.elastic.co/t/exclude-duplicate-data/281226 "2021-08-13T22:02:31Z")

</div>

Hello, Could you please help me to exclude the duplicate data from some charts that I'm creating for our executive team, basically I want to count the last update for each ticket, but It seems It is counting all the tic…

---

## [7.14.0 no cURL disable](https://discuss.elastic.co/t/7-14-0-no-curl-disable/281381)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 4\
**Last updated:** [August 13, 2021, 9:56pm UTC](https://discuss.elastic.co/t/7-14-0-no-curl-disable/281381 "2021-08-13T21:56:10Z")

</div>

I upgraded 7.14.0 and now I don't have option to copy my sql that I test on dev tool to copy as cURL is there a switch or it is disable due to license issue. I have basic free license

---

## [Static field - Calculate diffs between date fields with painless](https://discuss.elastic.co/t/static-field-calculate-diffs-between-date-fields-with-painless/281258)

<div class="topic-metadata">

**Author:** [@seadub](https://discuss.elastic.co/u/seadub)\
**Replies:** 5\
**Last updated:** [August 13, 2021, 3:23pm UTC](https://discuss.elastic.co/t/static-field-calculate-diffs-between-date-fields-with-painless/281258 "2021-08-13T15:23:23Z")

</div>

I'm attempting to add a new static field on an existing index, and having struggles getting data back in the preview to verify syntax. I've confirmed that both fields are registered as "date" type in the index. Here's …

---

## [Current timestamp in Kibana Dev Tools](https://discuss.elastic.co/t/current-timestamp-in-kibana-dev-tools/281247)

<div class="topic-metadata">

**Author:** [@Luca\_Frost](https://discuss.elastic.co/u/Luca_Frost)\
**Replies:** 1\
**Last updated:** [August 13, 2021, 11:43am UTC](https://discuss.elastic.co/t/current-timestamp-in-kibana-dev-tools/281247 "2021-08-13T11:43:13Z")

</div>

Hi All, Apologies if this question has already been answered. Is it possible to create a new document using the Kibana Dev Console and set the timestamp field to now, much in the same way as datetime.now() in python. P…

---

## [System integration navigation visuals use all the wrong URLs / IDs?](https://discuss.elastic.co/t/system-integration-navigation-visuals-use-all-the-wrong-urls-ids/281180)

<div class="topic-metadata">

**Author:** [@c1jt](https://discuss.elastic.co/u/c1jt)\
**Replies:** 3\
**Last updated:** [August 13, 2021, 9:39am UTC](https://discuss.elastic.co/t/system-integration-navigation-visuals-use-all-the-wrong-urls-ids/281180 "2021-08-13T09:39:15Z")

</div>

Hello! I have linked a "System" integration to a Windows hosted agent policy, this looks to have instaleld some dashboards akin to what Winlogbeat does. However, the navigation visuals ("Dashboard links \[Windows System …

---

## [ML multi metric split filed only have keywork](https://discuss.elastic.co/t/ml-multi-metric-split-filed-only-have-keywork/280888)

<div class="topic-metadata">

**Author:** [@quyennguyen](https://discuss.elastic.co/u/quyennguyen)\
**Replies:** 12\
**Last updated:** [August 13, 2021, 9:38am UTC](https://discuss.elastic.co/t/ml-multi-metric-split-filed-only-have-keywork/280888 "2021-08-13T09:38:37Z")

</div>

I'm just a beginner of ML so I didn't know why this happened in my ELK. I want to create new job in multi metric so I following those step Pick "Fail login" search index Then pick multi metric -\> time range "use ful…

---

## [Question about failed authentication logging](https://discuss.elastic.co/t/question-about-failed-authentication-logging/281319)

<div class="topic-metadata">

**Author:** [@borna\_talebi](https://discuss.elastic.co/u/borna_talebi)\
**Replies:** 1\
**Last updated:** [August 13, 2021, 8:53am UTC](https://discuss.elastic.co/t/question-about-failed-authentication-logging/281319 "2021-08-13T08:53:53Z")

</div>

Hi I want to enable logging when a user failed to log in via Kibana web UI. But I'm sure where should I enable it. The documents were a bit confusing so I'm not sure should I make changes to elasticsearch.yml or kibana…

---

## [Unable to choose Elasticsearch Query as Alert Type](https://discuss.elastic.co/t/unable-to-choose-elasticsearch-query-as-alert-type/281132)

<div class="topic-metadata">

**Author:** [@andrewgodwinB](https://discuss.elastic.co/u/andrewgodwinB)\
**Replies:** 4\
**Last updated:** [August 13, 2021, 8:40am UTC](https://discuss.elastic.co/t/unable-to-choose-elasticsearch-query-as-alert-type/281132 "2021-08-13T08:40:24Z")

</div>

Hi, I'm trying to grant a role access to use Elasticsearch Query as an alert type. The users with that role are unable to see the Elasticsearch Query when they go to create a new alert in Kibana. I can see it but I hav…

---

## [Using rsyslog server & reporting agent name](https://discuss.elastic.co/t/using-rsyslog-server-reporting-agent-name/281270)

<div class="topic-metadata">

**Author:** [@droidus](https://discuss.elastic.co/u/droidus)\
**Replies:** 1\
**Last updated:** [August 12, 2021, 10:34pm UTC](https://discuss.elastic.co/t/using-rsyslog-server-reporting-agent-name/281270 "2021-08-12T22:34:44Z")

</div>

I am using a rsyslog server. I have several of my machines forwardring their logs there, then elastic picks them up. I am going through one of the records, and notice that the hostname is rsyslog, but then when I look …

---

## [Embedded iframe Kibana Login Loop on Mobile Browsers](https://discuss.elastic.co/t/embedded-iframe-kibana-login-loop-on-mobile-browsers/280859)

<div class="topic-metadata">

**Author:** [@lifeowl](https://discuss.elastic.co/u/lifeowl)\
**Replies:** 4\
**Last updated:** [August 12, 2021, 10:04pm UTC](https://discuss.elastic.co/t/embedded-iframe-kibana-login-loop-on-mobile-browsers/280859 "2021-08-12T22:04:31Z")

</div>

Hi there, As described in Kibana stuck in login loop, Google Chrome will no longer store non-secure cookies as of Release 84, which results in an authentication loop if Kibana is embedded in an iframe on an HTTP website…

---

## [Dashboards and Searches not importing using the Saved Objects API](https://discuss.elastic.co/t/dashboards-and-searches-not-importing-using-the-saved-objects-api/280690)

<div class="topic-metadata">

**Author:** [@mhare](https://discuss.elastic.co/u/mhare)\
**Replies:** 2\
**Last updated:** [August 12, 2021, 7:21pm UTC](https://discuss.elastic.co/t/dashboards-and-searches-not-importing-using-the-saved-objects-api/280690 "2021-08-12T19:21:22Z")

</div>

I am using stack version 7.13.4 on Windows I created a system including Queries, Searches, Dashboards, Visualizations, Index Patterns. I exported these using the Kibana UI creating ndjson files for each category. I can …

---

## [How to use the iframe on an external page already authenticated](https://discuss.elastic.co/t/how-to-use-the-iframe-on-an-external-page-already-authenticated/280598)

<div class="topic-metadata">

**Author:** [@francieliton\_araujo](https://discuss.elastic.co/u/francieliton_araujo)\
**Replies:** 1\
**Last updated:** [August 12, 2021, 6:33pm UTC](https://discuss.elastic.co/t/how-to-use-the-iframe-on-an-external-page-already-authenticated/280598 "2021-08-12T18:33:26Z")

</div>

It would be possible, for example, from the tooth of another web tool, like: zabbix, to access a kibana dash. My intention is to get from within zabbix, create a page that opens a graphic of the kibana, without the pe…

---

## [Is it possible to use Angular Navbar Component in Kibana?](https://discuss.elastic.co/t/is-it-possible-to-use-angular-navbar-component-in-kibana/280587)

<div class="topic-metadata">

**Author:** [@raghosh](https://discuss.elastic.co/u/raghosh)\
**Replies:** 1\
**Last updated:** [August 12, 2021, 6:22pm UTC](https://discuss.elastic.co/t/is-it-possible-to-use-angular-navbar-component-in-kibana/280587 "2021-08-12T18:22:41Z")

</div>

Basically we have common Navbar across all application which is built in angular and adapt , all forntend Microservices uses that. WE have Kibana as UI service but currently it doesnt have the navbar integrated . Is ther…

---

## [Error to send test email fron kibana connector](https://discuss.elastic.co/t/error-to-send-test-email-fron-kibana-connector/280567)

<div class="topic-metadata">

**Author:** [@perea870724](https://discuss.elastic.co/u/perea870724)\
**Replies:** 1\
**Last updated:** [August 12, 2021, 6:17pm UTC](https://discuss.elastic.co/t/error-to-send-test-email-fron-kibana-connector/280567 "2021-08-12T18:17:58Z")

</div>

Hello, friends of the community, I am facing a problem when configuring the sending of email through connector, when I perform a test I get the following error: Action failed to run The following error was found: erro…

---

## [How to use the root of Spanish words for searches?](https://discuss.elastic.co/t/how-to-use-the-root-of-spanish-words-for-searches/280558)

<div class="topic-metadata">

**Author:** [@JavierArevalo](https://discuss.elastic.co/u/JavierArevalo)\
**Replies:** 1\
**Last updated:** [August 12, 2021, 6:13pm UTC](https://discuss.elastic.co/t/how-to-use-the-root-of-spanish-words-for-searches/280558 "2021-08-12T18:13:39Z")

</div>

I need to search my documents by words, I want to obtain all the documents related to a word and its derivations in Spanish, for example: if I search for "flor" I want to obtain all the documents related to the words: "f…

---

## [How to disable attempts to connect to the package registry?](https://discuss.elastic.co/t/how-to-disable-attempts-to-connect-to-the-package-registry/280516)

<div class="topic-metadata">

**Author:** [@fadenb](https://discuss.elastic.co/u/fadenb)\
**Replies:** 1\
**Last updated:** [August 12, 2021, 6:07pm UTC](https://discuss.elastic.co/t/how-to-disable-attempts-to-connect-to-the-package-registry/280516 "2021-08-12T18:07:04Z")

</div>

Hi, We are operating an Elastic stack in an environment that is intentionally unable to access the outside world/internet. When we browse to our Kibana dashboards, we see that our browsers are trying to fetch /api/flee…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=293)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=295)
