# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=30

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 31

---

## [Alerts for rules and alerts status](https://discuss.elastic.co/t/alerts-for-rules-and-alerts-status/370987)

<div class="topic-metadata">

**Author:** [@HermannSamimi](https://discuss.elastic.co/u/HermannSamimi)\
**Replies:** 0\
**Last updated:** [November 23, 2024, 11:18pm UTC](https://discuss.elastic.co/t/alerts-for-rules-and-alerts-status/370987 "2024-11-23T23:18:03Z")

</div>

Hello, I want to create an alert to check the rules and alerts health. for example i created an alert for a ML rule, i want to check the latest status(enable, disable) and other relevant data. is there any way to get s…

---

## [Kibana Canvas - Download data tables as CSV](https://discuss.elastic.co/t/kibana-canvas-download-data-tables-as-csv/370981)

<div class="topic-metadata">

**Author:** [@bjornbear](https://discuss.elastic.co/u/bjornbear)\
**Replies:** 2\
**Last updated:** [November 23, 2024, 3:26pm UTC](https://discuss.elastic.co/t/kibana-canvas-download-data-tables-as-csv/370981 "2024-11-23T15:26:02Z")

</div>

How can I download the results of a data table as CSV using Canvas?

---

## [Display another field as the result of a Lens formula](https://discuss.elastic.co/t/display-another-field-as-the-result-of-a-lens-formula/370932)

<div class="topic-metadata">

**Author:** [@snicoll](https://discuss.elastic.co/u/snicoll)\
**Replies:** 1\
**Last updated:** [November 22, 2024, 8:55am UTC](https://discuss.elastic.co/t/display-another-field-as-the-result-of-a-lens-formula/370932 "2024-11-22T08:55:43Z")

</div>

Hello, Assume an index which contains entries with a version field, something like: "version": { "properties": { "id": { "type": "keyword" }, "major": { "type": "keyword" }, "minor": {…

---

## [Option to add comments to Kibana Dashboard data table](https://discuss.elastic.co/t/option-to-add-comments-to-kibana-dashboard-data-table/370807)

<div class="topic-metadata">

**Author:** [@Sudheer\_Kumar](https://discuss.elastic.co/u/Sudheer_Kumar)\
**Replies:** 1\
**Last updated:** [November 21, 2024, 8:03pm UTC](https://discuss.elastic.co/t/option-to-add-comments-to-kibana-dashboard-data-table/370807 "2024-11-21T20:03:26Z")

</div>

Hi, I’m currently integrating ELK with our tools. For any reported issues, I need to add a textbox in each row of the data table in the Kibana dashboard for users to comment, acknowledge, or share the status. Could you p…

---

## [No option to add custom fields in agent policy](https://discuss.elastic.co/t/no-option-to-add-custom-fields-in-agent-policy/370902)

<div class="topic-metadata">

**Author:** [@Stephen\_IAnson](https://discuss.elastic.co/u/Stephen_IAnson)\
**Replies:** 2\
**Last updated:** [November 21, 2024, 5:33pm UTC](https://discuss.elastic.co/t/no-option-to-add-custom-fields-in-agent-policy/370902 "2024-11-21T17:33:37Z")

</div>

Hi, According to: Elastic Agent policies | Fleet and Elastic Agent Guide \[8.16\] | Elastic. I should be able to add custom field to agent policies. I simply don't have the option. If I try and add via an API request: P…

---

## [Kibana rules - Is it anyhow possible to source document that was hit against rule?](https://discuss.elastic.co/t/kibana-rules-is-it-anyhow-possible-to-source-document-that-was-hit-against-rule/370255)

<div class="topic-metadata">

**Author:** [@Dawid\_Popiela](https://discuss.elastic.co/u/Dawid_Popiela)\
**Replies:** 2\
**Last updated:** [November 21, 2024, 4:57pm UTC](https://discuss.elastic.co/t/kibana-rules-is-it-anyhow-possible-to-source-document-that-was-hit-against-rule/370255 "2024-11-21T16:57:06Z")

</div>

Hi, as tittle says is it possible to gather document in kibana rule that was hit? My usecase is like this that I am using inventory treshold rule for kubernetes pods to check memory usage treshold. I am ussing index con…

---

## [Rule Changing By Itself?](https://discuss.elastic.co/t/rule-changing-by-itself/370787)

<div class="topic-metadata">

**Author:** [@Kris\_Felscher](https://discuss.elastic.co/u/Kris_Felscher)\
**Replies:** 1\
**Last updated:** [November 21, 2024, 3:13pm UTC](https://discuss.elastic.co/t/rule-changing-by-itself/370787 "2024-11-21T15:13:15Z")

</div>

We have a rule that seems to have modified itself somehow. Previously the filter for the rule was "healthcheckname : name and not healthstatus : Healthy" However, around midnight last night the filter got modified to: …

---

## [ES|QL Search if a value in a list is in another list](https://discuss.elastic.co/t/es-ql-search-if-a-value-in-a-list-is-in-another-list/370784)

<div class="topic-metadata">

**Author:** [@isugg](https://discuss.elastic.co/u/isugg)\
**Replies:** 2\
**Last updated:** [November 21, 2024, 2:23pm UTC](https://discuss.elastic.co/t/es-ql-search-if-a-value-in-a-list-is-in-another-list/370784 "2024-11-21T14:23:48Z")

</div>

Trying to find all instances of "-a" or "-x" in process arguments, from endpoint logs. I have the following values: process.name: "process" process.command\_line: "process -a -b -c" process.args: \["process", "-a", "-b…

---

## [Sending data to index through vega or by any other kibana feature from dahsboard](https://discuss.elastic.co/t/sending-data-to-index-through-vega-or-by-any-other-kibana-feature-from-dahsboard/370877)

<div class="topic-metadata">

**Author:** [@aman\_kumar4](https://discuss.elastic.co/u/aman_kumar4)\
**Replies:** 0\
**Last updated:** [November 21, 2024, 8:36am UTC](https://discuss.elastic.co/t/sending-data-to-index-through-vega-or-by-any-other-kibana-feature-from-dahsboard/370877 "2024-11-21T08:36:37Z")

</div>

I want to calculate that how much an user spent time on a particular dashboard i have created a timer through vega ( working) now want to send this timer data when user closes/leaves the dashboard so that I can use thi…

---

## [Kibana Dashboard with error Code 504](https://discuss.elastic.co/t/kibana-dashboard-with-error-code-504/370872)

<div class="topic-metadata">

**Author:** [@balaa](https://discuss.elastic.co/u/balaa)\
**Replies:** 0\
**Last updated:** [November 21, 2024, 4:39am UTC](https://discuss.elastic.co/t/kibana-dashboard-with-error-code-504/370872 "2024-11-21T04:39:48Z")

</div>

Hi Team, We have recently upgraded elk stack from 7.17 to 8.12 and from then onwards we are getting the below error when we run dashboards for more than 7days. Any one please suggest what could be the cause and how to …

---

## [Creating jmeter transaction comparison table using Runtime Fields](https://discuss.elastic.co/t/creating-jmeter-transaction-comparison-table-using-runtime-fields/370863)

<div class="topic-metadata">

**Author:** [@2bitlong](https://discuss.elastic.co/u/2bitlong)\
**Replies:** 0\
**Last updated:** [November 20, 2024, 11:16pm UTC](https://discuss.elastic.co/t/creating-jmeter-transaction-comparison-table-using-runtime-fields/370863 "2024-11-20T23:16:43Z")

</div>

I am trying to build a table in lens for the Jmeter test results. The table is supposed to have 4 columns: SampleLabel 90th Perc of ResponseTime for Test1 90th Perc of ResponseTime for Test2 Difference of above 2 Resp…

---

## [Option to raise a Ticket for Kibana Table Dashboard Data](https://discuss.elastic.co/t/option-to-raise-a-ticket-for-kibana-table-dashboard-data/370808)

<div class="topic-metadata">

**Author:** [@Sudheer\_Kumar](https://discuss.elastic.co/u/Sudheer_Kumar)\
**Replies:** 2\
**Last updated:** [November 20, 2024, 10:18am UTC](https://discuss.elastic.co/t/option-to-raise-a-ticket-for-kibana-table-dashboard-data/370808 "2024-11-20T10:18:53Z")

</div>

Hi, I’m currently integrating ELK with our internal tools. For the Kibana dashboard table data, I would like to integrate it with our ticketing tool and have an option to "Raise a ticket." When I click on "Raise a ticket…

---

## [How create a role for creating index and ingest on it](https://discuss.elastic.co/t/how-create-a-role-for-creating-index-and-ingest-on-it/359144)

<div class="topic-metadata">

**Author:** [@sandra\_a](https://discuss.elastic.co/u/sandra_a)\
**Replies:** 1\
**Last updated:** [November 20, 2024, 7:35am UTC](https://discuss.elastic.co/t/how-create-a-role-for-creating-index-and-ingest-on-it/359144 "2024-11-20T07:35:50Z")

</div>

Hi; I want to create a role with these privileges in "Index privileges" section: \[ create\_index , create, create\_doc, index\] There is a box to select which index the role can have access: I have some agents with t…

---

## [Stack monitoring stuck at fetching data](https://discuss.elastic.co/t/stack-monitoring-stuck-at-fetching-data/370013)

<div class="topic-metadata">

**Author:** [@sandra\_a](https://discuss.elastic.co/u/sandra_a)\
**Replies:** 1\
**Last updated:** [November 20, 2024, 7:18am UTC](https://discuss.elastic.co/t/stack-monitoring-stuck-at-fetching-data/370013 "2024-11-20T07:18:24Z")

</div>

Hi. I want to use "set up with self monitoring" in stack monitoring. after enabling xpack.monitoring.collection.enabled, it cannot understand the cluster: This loop is running, but no data will be found. At the …

---

## [500 Kibana API responses resulting from 403 epr.elastic.co responses when trying to add integrations](https://discuss.elastic.co/t/500-kibana-api-responses-resulting-from-403-epr-elastic-co-responses-when-trying-to-add-integrations/370763)

<div class="topic-metadata">

**Author:** [@savemetenminutes](https://discuss.elastic.co/u/savemetenminutes)\
**Replies:** 5\
**Last updated:** [November 20, 2024, 6:21am UTC](https://discuss.elastic.co/t/500-kibana-api-responses-resulting-from-403-epr-elastic-co-responses-when-trying-to-add-integrations/370763 "2024-11-20T06:21:58Z")

</div>

I keep getting { "statusCode": 500, "error": "Internal Server Error", "message": "'403 Forbidden' error response from package registry at https://epr.elastic.co/categories?kibana.version=8.16.0" } while try…

---

## [Kibana pattern](https://discuss.elastic.co/t/kibana-pattern/370682)

<div class="topic-metadata">

**Author:** [@FJT](https://discuss.elastic.co/u/FJT)\
**Replies:** 6\
**Last updated:** [November 20, 2024, 5:46am UTC](https://discuss.elastic.co/t/kibana-pattern/370682 "2024-11-20T05:46:43Z")

</div>

Please help this poor guy. Another day of upping this. hoping someone can help me. This is what it looks like in my visualization. I cannot create a pattern in my logstash cause as you know error logs have so many. So I…

---

## [Strange Overall Average Behavior](https://discuss.elastic.co/t/strange-overall-average-behavior/370179)

<div class="topic-metadata">

**Author:** [@silentfilm](https://discuss.elastic.co/u/silentfilm)\
**Replies:** 3\
**Last updated:** [November 19, 2024, 11:17pm UTC](https://discuss.elastic.co/t/strange-overall-average-behavior/370179 "2024-11-19T23:17:23Z")

</div>

I've got a line chart that displays the average of a certain value and the Average of the Averages. This seems to display correctly. However, if I add an additional filter to the overall average line to exclude zero …

---

## [Data View name disappears](https://discuss.elastic.co/t/data-view-name-disappears/370788)

<div class="topic-metadata">

**Author:** [@TimDotZero](https://discuss.elastic.co/u/TimDotZero)\
**Replies:** 0\
**Last updated:** [November 19, 2024, 7:32pm UTC](https://discuss.elastic.co/t/data-view-name-disappears/370788 "2024-11-19T19:32:24Z")

</div>

At random, I've noticed that the name of certain Data Views disappear and leave only the pattern as the name. I'm running ES 8.15.1. I haven't been able to pinpoint a specific time when it occurs, nor a cause.

---

## [Control filter and VEGA lite not working](https://discuss.elastic.co/t/control-filter-and-vega-lite-not-working/370370)

<div class="topic-metadata">

**Author:** [@Arshukla](https://discuss.elastic.co/u/Arshukla)\
**Replies:** 4\
**Last updated:** [November 19, 2024, 2:58pm UTC](https://discuss.elastic.co/t/control-filter-and-vega-lite-not-working/370370 "2024-11-19T14:58:54Z")

</div>

Hello Team, I am using v8.14 of Kibana, and building tabular dashboard using VEGA-lite, however I want to use external Kibana controls for filtering option, however its not working. What changes are required in VEGA lit…

---

## [Kerberos Authentication checksum failed error](https://discuss.elastic.co/t/kerberos-authentication-checksum-failed-error/370771)

<div class="topic-metadata">

**Author:** [@Maretti](https://discuss.elastic.co/u/Maretti)\
**Replies:** 0\
**Last updated:** [November 19, 2024, 2:33pm UTC](https://discuss.elastic.co/t/kerberos-authentication-checksum-failed-error/370771 "2024-11-19T14:33:38Z")

</div>

Hi all, I'm trying to setup Kerberos authentication on Kibana, when logging in I get the following error \[2024-11-19T14:13:25.734+00:00\]\[INFO \]\[plugins.security.authentication\] Performing login attempt with "kerb1" pro…

---

## [Kibana doesn't load integrations, and gets stuck loading them](https://discuss.elastic.co/t/kibana-doesnt-load-integrations-and-gets-stuck-loading-them/368913)

<div class="topic-metadata">

**Author:** [@slapjackuser](https://discuss.elastic.co/u/slapjackuser)\
**Replies:** 7\
**Last updated:** [November 19, 2024, 10:54am UTC](https://discuss.elastic.co/t/kibana-doesnt-load-integrations-and-gets-stuck-loading-them/368913 "2024-11-19T10:54:08Z")

</div>

Hey I have a problem that has been bothering me for sometime now and I would really use some help here. I am running elk stack using docker on an amazon ec2 instance (ubuntu 22.04) as a siem, the problem is when I try t…

---

## [Conditional formatting in tabular cells using CSS](https://discuss.elastic.co/t/conditional-formatting-in-tabular-cells-using-css/370711)

<div class="topic-metadata">

**Author:** [@Arshukla](https://discuss.elastic.co/u/Arshukla)\
**Replies:** 0\
**Last updated:** [November 18, 2024, 5:51pm UTC](https://discuss.elastic.co/t/conditional-formatting-in-tabular-cells-using-css/370711 "2024-11-18T17:51:40Z")

</div>

Hi team, I am currently building a Canvas workpad and using a Data Table visualization. I’ve successfully constructed the table using Elastic SQL. However, I have two queries regarding the table in Canvas: Is it possi…

---

## [Kibana Dashboard Login without login credentials](https://discuss.elastic.co/t/kibana-dashboard-login-without-login-credentials/370449)

<div class="topic-metadata">

**Author:** [@baskarsp](https://discuss.elastic.co/u/baskarsp)\
**Replies:** 3\
**Last updated:** [November 18, 2024, 5:32pm UTC](https://discuss.elastic.co/t/kibana-dashboard-login-without-login-credentials/370449 "2024-11-18T17:32:46Z")

</div>

Hello Team, We are using the latest version of ECK (open source). We have an admin portal application where our users log in using our own authentication provider credentials. I would like to allow users to access the K…

---

## [Can Visualizations be open in view mode?](https://discuss.elastic.co/t/can-visualizations-be-open-in-view-mode/370676)

<div class="topic-metadata">

**Author:** [@Sinchana\_P](https://discuss.elastic.co/u/Sinchana_P)\
**Replies:** 1\
**Last updated:** [November 18, 2024, 2:56pm UTC](https://discuss.elastic.co/t/can-visualizations-be-open-in-view-mode/370676 "2024-11-18T14:56:18Z")

</div>

I see in Kibana, whenever visualization is opened. it opens in edit mode. The url is https://host:port/app/visualize#/edit/693397f0-99b5-11e9-a464-ff522372e30f? Dashboards are open in view mode Url: https://host:port/a…

---

## [Kinaba pattern or using a machine learning?](https://discuss.elastic.co/t/kinaba-pattern-or-using-a-machine-learning/370596)

<div class="topic-metadata">

**Author:** [@FJT](https://discuss.elastic.co/u/FJT)\
**Replies:** 0\
**Last updated:** [November 15, 2024, 9:14am UTC](https://discuss.elastic.co/t/kinaba-pattern-or-using-a-machine-learning/370596 "2024-11-15T09:14:38Z")

</div>

Hello Everyone, I am evaluating the Machine Learning capabilities in Kibana for our error log analysis and visualization. If the system can handle our requirements, we plan to purchase a subscription for the company. I'…

---

## [Api key management unresponsive - 502 Bad Gateway](https://discuss.elastic.co/t/api-key-management-unresponsive-502-bad-gateway/370667)

<div class="topic-metadata">

**Author:** [@Cashmay0r](https://discuss.elastic.co/u/Cashmay0r)\
**Replies:** 0\
**Last updated:** [November 18, 2024, 3:03am UTC](https://discuss.elastic.co/t/api-key-management-unresponsive-502-bad-gateway/370667 "2024-11-18T03:03:57Z")

</div>

Hey, I'm having issues creating and deleting api keys. When I go to create an api key, either through the kibana interface or dev tools, after a minute or so, I eventually get a 502 Bad Gateway response. All other …

---

## [Streaming in ai assistant](https://discuss.elastic.co/t/streaming-in-ai-assistant/370650)

<div class="topic-metadata">

**Author:** [@Vajihe\_Nikkhah](https://discuss.elastic.co/u/Vajihe_Nikkhah)\
**Replies:** 3\
**Last updated:** [November 17, 2024, 10:10am UTC](https://discuss.elastic.co/t/streaming-in-ai-assistant/370650 "2024-11-17T10:10:47Z")

</div>

I connected elastic ai assistant to my local llm. when I active streaming control in ai assistant settings, this error is shown: Error: Response from LLM API is empty or undefined. I check the request which is sent to l…

---

## [SLO screen report generation](https://discuss.elastic.co/t/slo-screen-report-generation/370649)

<div class="topic-metadata">

**Author:** [@Vijayakumar\_Kannan](https://discuss.elastic.co/u/Vijayakumar_Kannan)\
**Replies:** 0\
**Last updated:** [November 17, 2024, 5:44am UTC](https://discuss.elastic.co/t/slo-screen-report-generation/370649 "2024-11-17T05:44:31Z")

</div>

In elasticstack version 8.15 , Option SLO screen has any report generation functionality. we have requirement to send the history report SLI to application owners. Regards, Vijay

---

## [Kibana server is not ready yet](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/370637)

<div class="topic-metadata">

**Author:** [@Vo\_Phan](https://discuss.elastic.co/u/Vo_Phan)\
**Replies:** 1\
**Last updated:** [November 16, 2024, 10:21am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet/370637 "2024-11-16T10:21:03Z")

</div>

my server is down need urgent support

---

## [Can not create SSL for Elasticsearch and Kibana when deploying in AWS lighsail using docker](https://discuss.elastic.co/t/can-not-create-ssl-for-elasticsearch-and-kibana-when-deploying-in-aws-lighsail-using-docker/370629)

<div class="topic-metadata">

**Author:** [@Vamsi\_Popuri](https://discuss.elastic.co/u/Vamsi_Popuri)\
**Replies:** 0\
**Last updated:** [November 15, 2024, 10:28pm UTC](https://discuss.elastic.co/t/can-not-create-ssl-for-elasticsearch-and-kibana-when-deploying-in-aws-lighsail-using-docker/370629 "2024-11-15T22:28:42Z")

</div>

Hi all, I am trying to deploy Elasticsearch and Kibana in Ubuntu lightsail instance using docker. This might be very minor issue, but i am trying different methods from past 2 days and i am struck and any help will be a…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=29)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=31)
