# Kibana **URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=296 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 297 --- ## [Kibana unable to revive connection to Elasticsearch in Kubernetes](https://discuss.elastic.co/t/kibana-unable-to-revive-connection-to-elasticsearch-in-kubernetes/280927)
**Author:** [@rtemotfuorco123](https://discuss.elastic.co/u/rtemotfuorco123)\ **Replies:** 0\ **Last updated:** [August 10, 2021, 12:10pm UTC](https://discuss.elastic.co/t/kibana-unable-to-revive-connection-to-elasticsearch-in-kubernetes/280927 "2021-08-10T12:10:35Z")
Hi, I am getting Unable to revive connection: http://elasticsearch:9200/ in Kibana service logs in Kubernetes. What I don't understand is that, I am explicitly setting the Kibana env vars as listed below (commented out … --- ## [Kibana 7.12.0 add Enrich pipeline](https://discuss.elastic.co/t/kibana-7-12-0-add-enrich-pipeline/280796)
**Author:** [@zhyp](https://discuss.elastic.co/u/zhyp)\ **Replies:** 6\ **Last updated:** [August 10, 2021, 11:32am UTC](https://discuss.elastic.co/t/kibana-7-12-0-add-enrich-pipeline/280796 "2021-08-10T11:32:00Z")
Hi, I want to calculate the value of a field in index A. Its data comes from two other index fields, index B and index C. Calculation formula: index A.count = index B.count - index C.count. Condition: index A… --- ## [Plugin "metricsEntities" is disabled](https://discuss.elastic.co/t/plugin-metricsentities-is-disabled/280728)
**Author:** [@Naim\_Rihan](https://discuss.elastic.co/u/Naim_Rihan)\ **Replies:** 6\ **Last updated:** [August 10, 2021, 7:27am UTC](https://discuss.elastic.co/t/plugin-metricsentities-is-disabled/280728 "2021-08-10T07:27:09Z")
Hi, I install Kibana 7.14 and command with "my\_path".\\bin\\kibana.bat but I get the following error: Plugin "metricsEntities" is disabled How can I fix it? Thanks --- ## [Regex with "interval" flag enabled to filter private-ip-addresses](https://discuss.elastic.co/t/regex-with-interval-flag-enabled-to-filter-private-ip-addresses/280826)
**Author:** [@jnair](https://discuss.elastic.co/u/jnair)\ **Replies:** 0\ **Last updated:** [August 9, 2021, 3:37pm UTC](https://discuss.elastic.co/t/regex-with-interval-flag-enabled-to-filter-private-ip-addresses/280826 "2021-08-09T15:37:21Z")
In the kibana visualization query interface, in the "Add filter -\> Edit as Query DSL" editor, I am using the below "REGEX" filter queries with the "INTERVAL" flag set, to filter the Private-IP addresses. I did check the … --- ## [Wich urls use kibana maps?](https://discuss.elastic.co/t/wich-urls-use-kibana-maps/280823)
**Author:** [@Juan\_Montoya](https://discuss.elastic.co/u/Juan_Montoya)\ **Replies:** 1\ **Last updated:** [August 9, 2021, 7:14pm UTC](https://discuss.elastic.co/t/wich-urls-use-kibana-maps/280823 "2021-08-09T19:14:11Z")
Hi, I have a server without internet connection running Kibana, I need to add to my firewall rules the URLs that Kibana Maps use to allow the traffic between the server and the APIs of the kibana maps. I don't find the… --- ## [Is it possible to set custom colors for Lens filters on a Pie/Donut?](https://discuss.elastic.co/t/is-it-possible-to-set-custom-colors-for-lens-filters-on-a-pie-donut/280590)
**Author:** [@PanoramicPanda](https://discuss.elastic.co/u/PanoramicPanda)\ **Replies:** 4\ **Last updated:** [August 9, 2021, 4:09pm UTC](https://discuss.elastic.co/t/is-it-possible-to-set-custom-colors-for-lens-filters-on-a-pie-donut/280590 "2021-08-09T16:09:07Z")
Trying to convert legacy visualizations to Lens ones, and the thing that's sticking out to me as a sore spot is that I can't figure out how to get specific colors for keywords/filters. The colors in Lens group into the … --- ## [Link in Markdown panel to dashboard with specific time and refresh interval?](https://discuss.elastic.co/t/link-in-markdown-panel-to-dashboard-with-specific-time-and-refresh-interval/274985)
**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\ **Replies:** 5\ **Last updated:** [August 9, 2021, 2:55pm UTC](https://discuss.elastic.co/t/link-in-markdown-panel-to-dashboard-with-specific-time-and-refresh-interval/274985 "2021-08-09T14:55:05Z")
I'm using TSVB Markdown panels to present links to dashboards, like this: \[Dashboard title\](#/dashboard/88da11e0-9c58-11eb-b38d-7b8e5ab9c930) Such links are independent of the current space, which is how I like them. T… --- ## [Yarn start error: Permission denied](https://discuss.elastic.co/t/yarn-start-error-permission-denied/280501)
**Author:** [@wenqi73](https://discuss.elastic.co/u/wenqi73)\ **Replies:** 1\ **Last updated:** [August 9, 2021, 1:12pm UTC](https://discuss.elastic.co/t/yarn-start-error-permission-denied/280501 "2021-08-09T13:12:02Z")
I tried to develop kibana and run the commands in Getting started | Kibana Guide \[7.14\] | Elastic, when I run yarn start --run-examples the terminal threw an error: user/git/kibana/node\_modules/lmdb-store/index.js:77 … --- ## [Parsing data in Kibana](https://discuss.elastic.co/t/parsing-data-in-kibana/280791)
**Author:** [@salma\_widiarti](https://discuss.elastic.co/u/salma_widiarti)\ **Replies:** 1\ **Last updated:** [August 9, 2021, 12:33pm UTC](https://discuss.elastic.co/t/parsing-data-in-kibana/280791 "2021-08-09T12:33:55Z")
Hi all, i have data like this, How do i parsing this data? I need data id or data amount to have its own labels. --- ## [The number of indexes is increasing day by day, and the kibana dashboard shows that indexes are getting slower and slower](https://discuss.elastic.co/t/the-number-of-indexes-is-increasing-day-by-day-and-the-kibana-dashboard-shows-that-indexes-are-getting-slower-and-slower/280618)
**Author:** [@yt\_h](https://discuss.elastic.co/u/yt_h)\ **Replies:** 3\ **Last updated:** [August 9, 2021, 8:49am UTC](https://discuss.elastic.co/t/the-number-of-indexes-is-increasing-day-by-day-and-the-kibana-dashboard-shows-that-indexes-are-getting-slower-and-slower/280618 "2021-08-09T08:49:53Z")
elastic search version：7.5.1 kibana：7.5.1 3 master roles, 3 data roles, 6 nodes in total. It takes a few minutes to query the index, this is the fragmentation state. GET \_cluster/health { "cluster\_name": "elastics… --- ## [Get the raw log which can't index to elastic search](https://discuss.elastic.co/t/get-the-raw-log-which-cant-index-to-elastic-search/280693)
**Author:** [@jamecollins](https://discuss.elastic.co/u/jamecollins)\ **Replies:** 1\ **Last updated:** [August 9, 2021, 8:40am UTC](https://discuss.elastic.co/t/get-the-raw-log-which-cant-index-to-elastic-search/280693 "2021-08-09T08:40:21Z")
I have error on logstash: \[2021-08-07T00:24:08,330\]\[WARN \]\[logstash.outputs.elasticsearch\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>nil, :\_index=\>"logstash-2021.08.07", :\_type=\>"… --- ## [How can I ...Compare two indices fields if data matches then create new index and store the matched data into it](https://discuss.elastic.co/t/how-can-i-compare-two-indices-fields-if-data-matches-then-create-new-index-and-store-the-matched-data-into-it/280130)
**Author:** [@sneha\_gupta](https://discuss.elastic.co/u/sneha_gupta)\ **Replies:** 2\ **Last updated:** [August 9, 2021, 7:52am UTC](https://discuss.elastic.co/t/how-can-i-compare-two-indices-fields-if-data-matches-then-create-new-index-and-store-the-matched-data-into-it/280130 "2021-08-09T07:52:52Z")
Was thinking if I can use sub queries either "union" but left with nothing as above is not supported --- ## [Script field .. shards failed](https://discuss.elastic.co/t/script-field-shards-failed/280290)
**Author:** [@djikon](https://discuss.elastic.co/u/djikon)\ **Replies:** 6\ **Last updated:** [August 9, 2021, 7:26am UTC](https://discuss.elastic.co/t/script-field-shards-failed/280290 "2021-08-09T07:26:24Z")
Hi, I create a script field and i have a lot of shards failed. my script field is just : doc\['evenement.@timestamp'\].value.getMillis() - doc\['debutSejour'\].value.getMillis() shards failed exist too fort : if(doc\['ev… --- ## [Discover: Request Timeout after 30000ms](https://discuss.elastic.co/t/discover-request-timeout-after-30000ms/280593)
**Author:** [@sha\_man](https://discuss.elastic.co/u/sha_man)\ **Replies:** 2\ **Last updated:** [August 9, 2021, 5:48am UTC](https://discuss.elastic.co/t/discover-request-timeout-after-30000ms/280593 "2021-08-09T05:48:13Z")
Hi, we are using Kibana 6.7.1 and Elasticsearch version 6.7 in our org. when I run a query to get the data i get timeout error as "Discover: Request Timeout after 30000ms". We have deployed kibana using helm charts in … --- ## [Strange behaviour Index Pattern](https://discuss.elastic.co/t/strange-behaviour-index-pattern/280532)
**Author:** [@Jose\_Manuel\_Tirado](https://discuss.elastic.co/u/Jose_Manuel_Tirado)\ **Replies:** 1\ **Last updated:** [August 9, 2021, 5:03am UTC](https://discuss.elastic.co/t/strange-behaviour-index-pattern/280532 "2021-08-09T05:03:42Z")
HI! when I access index pattern I see these strange fields and I can't do anything with them What are they and how can I eliminate them? Are they occupying my memory? Thank you --- ## [FATAL UnableToReadKeystore: unable to read keystore](https://discuss.elastic.co/t/fatal-unabletoreadkeystore-unable-to-read-keystore/280710)
**Author:** [@AmirHossein\_Sohrabi](https://discuss.elastic.co/u/AmirHossein_Sohrabi)\ **Replies:** 2\ **Last updated:** [August 8, 2021, 11:25pm UTC](https://discuss.elastic.co/t/fatal-unabletoreadkeystore-unable-to-read-keystore/280710 "2021-08-08T23:25:54Z")
I'm using an ubuntu 16.04 server on a VM. and installed elasticsearch and kibana both version 7.14. elasticsearch works properly. but when I start the kibana service first it logs running on "systemctl status kibana" … --- ## [Issues with builtin network ML job high\_count\_network\_denies](https://discuss.elastic.co/t/issues-with-builtin-network-ml-job-high-count-network-denies/280635)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 1\ **Last updated:** [August 8, 2021, 8:12pm UTC](https://discuss.elastic.co/t/issues-with-builtin-network-ml-job-high-count-network-denies/280635 "2021-08-08T20:12:09Z")
Hello, Just tried the new builtin network ML jobs.. First of all, our Elastic stack crashed after adding the ML jobs through the wizard. After recovering one of the four jobs, high\_count\_network\_denies, seemed to not pr… --- ## [Snapshot watcher - when there are more multiple repositories to be watched](https://discuss.elastic.co/t/snapshot-watcher-when-there-are-more-multiple-repositories-to-be-watched/280246)
**Author:** [@achybala](https://discuss.elastic.co/u/achybala)\ **Replies:** 7\ **Last updated:** [August 7, 2021, 1:39pm UTC](https://discuss.elastic.co/t/snapshot-watcher-when-there-are-more-multiple-repositories-to-be-watched/280246 "2021-08-07T13:39:38Z")
Hi, With the help from multiple discussions in this forum, I'm able to create a watcher to look for any snapshots in 'failed' state in a given snapshot repository. { "trigger": { "schedule": { "interval": "60s" … --- ## [Kibana startup Fatal error](https://discuss.elastic.co/t/kibana-startup-fatal-error/280669)
**Author:** [@AmirHossein\_Sohrabi](https://discuss.elastic.co/u/AmirHossein_Sohrabi)\ **Replies:** 3\ **Last updated:** [August 7, 2021, 4:40am UTC](https://discuss.elastic.co/t/kibana-startup-fatal-error/280669 "2021-08-07T04:40:37Z")
I'm using an ubuntu 16.04 server on a VM. and installed elasticsearch and kibana both version 7.14. elasticsearch works properly. but when I start the kibana service first it logs running on "systemctl status kibana" … --- ## [How do I relate 2 objects with no common field?](https://discuss.elastic.co/t/how-do-i-relate-2-objects-with-no-common-field/280688)
**Author:** [@creativeguitar](https://discuss.elastic.co/u/creativeguitar)\ **Replies:** 0\ **Last updated:** [August 6, 2021, 10:13pm UTC](https://discuss.elastic.co/t/how-do-i-relate-2-objects-with-no-common-field/280688 "2021-08-06T22:13:51Z")
Input Data: \* Operating Systems CSVs \* Fields: OperatingSystem, general\_availability, end\_of\_life \* Examples: \* OperatingSystem------ general\_availability------end\_of\_life \* RHEL 7.9----------------------… --- ## [Mapping: How to do your own calculations](https://discuss.elastic.co/t/mapping-how-to-do-your-own-calculations/280641)
**Author:** [@NoobUser404](https://discuss.elastic.co/u/NoobUser404)\ **Replies:** 2\ **Last updated:** [August 6, 2021, 9:59pm UTC](https://discuss.elastic.co/t/mapping-how-to-do-your-own-calculations/280641 "2021-08-06T21:59:45Z")
How can we do our own calculations through mappings? I've try this configuration but I get an error: PUT nameIndex/\_mapping { "runtime": { "cpuIndex": { "type": "long", "script": { "source": "e… --- ## [Kibana detections doesn't generate signals ( Query Result available at Discover )](https://discuss.elastic.co/t/kibana-detections-doesnt-generate-signals-query-result-available-at-discover/280682)
**Author:** [@soufiane\_adn](https://discuss.elastic.co/u/soufiane_adn)\ **Replies:** 0\ **Last updated:** [August 6, 2021, 7:44pm UTC](https://discuss.elastic.co/t/kibana-detections-doesnt-generate-signals-query-result-available-at-discover/280682 "2021-08-06T19:44:27Z")
Hello Team, any help concerning detection signals. we have result available on discover and rule query created on KIBANA but without any alert generated. on rule creation, we tried Quick query preview and it give us r… --- ## [Wazuh manager failed to start](https://discuss.elastic.co/t/wazuh-manager-failed-to-start/280626)
**Author:** [@Jedrick](https://discuss.elastic.co/u/Jedrick)\ **Replies:** 2\ **Last updated:** [August 6, 2021, 1:57pm UTC](https://discuss.elastic.co/t/wazuh-manager-failed-to-start/280626 "2021-08-06T13:57:26Z")
For your kind assistance regarding my kibana that is not working. I already tried to restart all services. kibana, filebeat, elasticsearch, wazuh-manager. There status are all ok and active running. But once a access … --- ## [Finding Duplicates from an index with nested field](https://discuss.elastic.co/t/finding-duplicates-from-an-index-with-nested-field/280634)
**Author:** [@fastkt](https://discuss.elastic.co/u/fastkt)\ **Replies:** 0\ **Last updated:** [August 6, 2021, 9:37am UTC](https://discuss.elastic.co/t/finding-duplicates-from-an-index-with-nested-field/280634 "2021-08-06T09:37:33Z")
Hi I am fairly new to ES and need some help. I have an index { "shop\_index": { "properties": { "shop\_key": { "type": "nested", "properties": { "shop\_id": "keyword", "shop… --- ## [Kibana on Arch Linux: "NetworkError when attempting to fetch resource."](https://discuss.elastic.co/t/kibana-on-arch-linux-networkerror-when-attempting-to-fetch-resource/280413)
**Author:** [@brian.rene](https://discuss.elastic.co/u/brian.rene)\ **Replies:** 4\ **Last updated:** [August 6, 2021, 8:07am UTC](https://discuss.elastic.co/t/kibana-on-arch-linux-networkerror-when-attempting-to-fetch-resource/280413 "2021-08-06T08:07:26Z")
Hello everyone, I have been tasked with setting up a self-hosted instance of ELK in a KVM environment using Arch Linux. The root filesystem is write-protected (at runtime) and any directories or files that services need… --- ## [Subtract @timestamp between two events in Visualize on kibana](https://discuss.elastic.co/t/subtract-timestamp-between-two-events-in-visualize-on-kibana/280479)
**Author:** [@Adixon\_Diaz](https://discuss.elastic.co/u/Adixon_Diaz)\ **Replies:** 3\ **Last updated:** [August 5, 2021, 7:44pm UTC](https://discuss.elastic.co/t/subtract-timestamp-between-two-events-in-visualize-on-kibana/280479 "2021-08-05T19:44:26Z")
Hi Elastic Team, I want to be able to subtract the field @timestamp for two events. For exmample, i recieve 1 event by second, so, i would like to subtract the last event to arrive against the penultimate event to arriv… --- ## [Enhanced Table Plugin Installation Error](https://discuss.elastic.co/t/enhanced-table-plugin-installation-error/280481)
**Author:** [@marija.timovska.iw](https://discuss.elastic.co/u/marija.timovska.iw)\ **Replies:** 3\ **Last updated:** [August 5, 2021, 6:03pm UTC](https://discuss.elastic.co/t/enhanced-table-plugin-installation-error/280481 "2021-08-05T18:03:10Z")
@fbaligand Hello I am in need of your assistance regarding the run of enhanced-table plugin in development mode. When I use the to yarn kbn bootstrap command I get this error. --- ## [Loading Vega-lite schema + data from local](https://discuss.elastic.co/t/loading-vega-lite-schema-data-from-local/280249)
**Author:** [@sohenrane](https://discuss.elastic.co/u/sohenrane)\ **Replies:** 6\ **Last updated:** [August 5, 2021, 5:22pm UTC](https://discuss.elastic.co/t/loading-vega-lite-schema-data-from-local/280249 "2021-08-05T17:22:31Z")
{ "$schema": "file:///C:/Users/custom4me/Downloads/ELK/v5.json", "title": "Event counts from MAIN index", "data": { "url": "file:///C:/Users/custom4me/Downloads/ELK/seattle-weather.csv" } } How to load from local … --- ## [Making nested , flattened fields searchable](https://discuss.elastic.co/t/making-nested-flattened-fields-searchable/280570)
**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Replies:** 0\ **Last updated:** [August 5, 2021, 5:21pm UTC](https://discuss.elastic.co/t/making-nested-flattened-fields-searchable/280570 "2021-08-05T17:21:54Z")
Kibana version : 7.13 Elasticsearch version : 7.13 APM Server version : 7.13 APM Agent language and version : java 1.8 Fresh install or upgraded from other version? fresh install Is there anything special in your se… --- ## [How to create Hyperlinked visualization in kibana](https://discuss.elastic.co/t/how-to-create-hyperlinked-visualization-in-kibana/279053)
**Author:** [@Rana\_M\_Zubair](https://discuss.elastic.co/u/Rana_M_Zubair)\ **Replies:** 3\ **Last updated:** [August 5, 2021, 3:31pm UTC](https://discuss.elastic.co/t/how-to-create-hyperlinked-visualization-in-kibana/279053 "2021-08-05T15:31:50Z")
I want to create a type of drilled down dashboard. Like a main dashboard in which I want to create hyperlinked visualization, the link of which will take me to the more detailed dashboard. My Findings: There is a markd… [Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=295) [Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=297)