# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=301

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 302

---

## [Can Kibana Visualise Data in Cold/Frozen Tier?](https://discuss.elastic.co/t/can-kibana-visualise-data-in-cold-frozen-tier/279453)

<div class="topic-metadata">

**Author:** [@peteryann](https://discuss.elastic.co/u/peteryann)\
**Replies:** 1\
**Last updated:** [July 23, 2021, 11:40pm UTC](https://discuss.elastic.co/t/can-kibana-visualise-data-in-cold-frozen-tier/279453 "2021-07-23T23:40:02Z")

</div>

I understand data in the cold/frozen tiers are still searchable by Elasticsearch. Can Kibana visualisations visualise data that span indices across multiple tiers (e.g. warm/cold/frozen)? Is this transparent to the Kiban…

---

## [\[error\]\[data\]\[elasticsearch\] \[version\_conflict\_engine\_exception\]: \[search-telemetry:search-telemetry\]: version conflict, required seqNo \[14477\], primary term \[48\]. current document has seqNo \[14478\] and primary term \[48\]](https://discuss.elastic.co/t/error-data-elasticsearch-version-conflict-engine-exception-search-telemetry-search-telemetry-version-conflict-required-seqno-14477-primary-term-48-current-document-has-seqno-14478-and-primary-term-48/279447)

<div class="topic-metadata">

**Author:** [@hardik.rapidops](https://discuss.elastic.co/u/hardik.rapidops)\
**Replies:** 1\
**Last updated:** [July 23, 2021, 11:29pm UTC](https://discuss.elastic.co/t/error-data-elasticsearch-version-conflict-engine-exception-search-telemetry-search-telemetry-version-conflict-required-seqno-14477-primary-term-48-current-document-has-seqno-14478-and-primary-term-48/279447 "2021-07-23T23:29:30Z")

</div>

I am using kibana 7.10.2 and I can see the following error in logs. Is there any way to fix it? server log \[06:30:40.197\] \[error\]\[data\]\[elasticsearch\] \[version\_conflict\_engine\_exception\]: \[search-telemetry:search-t…

---

## [TSVB Tophits aggregation for strings doesn't work](https://discuss.elastic.co/t/tsvb-tophits-aggregation-for-strings-doesnt-work/278802)

<div class="topic-metadata">

**Author:** [@BitBucketUser\_user](https://discuss.elastic.co/u/BitBucketUser_user)\
**Replies:** 5\
**Last updated:** [July 23, 2021, 6:31am UTC](https://discuss.elastic.co/t/tsvb-tophits-aggregation-for-strings-doesnt-work/278802 "2021-07-23T06:31:34Z")

</div>

Hello, I'm using Kibana 7.13.2. This is my data - POST tsvb/\_bulk?refresh {"index":{}} { "date":"2021-07-14T00:03:13.679+02:00","words":\["rain", "thunder"\],"type":"monsoon"} {"index":{}} {"date":"2021-07-14T00:03:13.…

---

## [Change date format in Timelion](https://discuss.elastic.co/t/change-date-format-in-timelion/279121)

<div class="topic-metadata">

**Author:** [@vikramdayma](https://discuss.elastic.co/u/vikramdayma)\
**Replies:** 2\
**Last updated:** [July 23, 2021, 5:17am UTC](https://discuss.elastic.co/t/change-date-format-in-timelion/279121 "2021-07-23T05:17:21Z")

</div>

Hi, I want to change x-axis time format in Timelion visualization like 2021-04-16 to April -2021. Here is a screenshot.

---

## [Unable To Access Kibana After Enabling Security](https://discuss.elastic.co/t/unable-to-access-kibana-after-enabling-security/279323)

<div class="topic-metadata">

**Author:** [@Jared9922](https://discuss.elastic.co/u/Jared9922)\
**Replies:** 17\
**Last updated:** [July 22, 2021, 11:36pm UTC](https://discuss.elastic.co/t/unable-to-access-kibana-after-enabling-security/279323 "2021-07-22T23:36:24Z")

</div>

Hello, I am currently trying to setup detection and monitoring for my self hosted Elasticstack. I have been following the guidelines found in this tutorial: Detections prerequisites and requirements | Elastic Security S…

---

## [How to pass urlparam value to KQL](https://discuss.elastic.co/t/how-to-pass-urlparam-value-to-kql/279172)

<div class="topic-metadata">

**Author:** [@tangkalo](https://discuss.elastic.co/u/tangkalo)\
**Replies:** 10\
**Last updated:** [July 22, 2021, 9:01pm UTC](https://discuss.elastic.co/t/how-to-pass-urlparam-value-to-kql/279172 "2021-07-22T21:01:52Z")

</div>

Hi, I read about threads related to this need and know that there is currently not a way to directly plug in the value in the KQL using urlparam; however, is there a way to do it indirectly? I am thinking about using var…

---

## [Updating kibana plugin to 7.13.3](https://discuss.elastic.co/t/updating-kibana-plugin-to-7-13-3/279081)

<div class="topic-metadata">

**Author:** [@Akhil2](https://discuss.elastic.co/u/Akhil2)\
**Replies:** 3\
**Last updated:** [July 22, 2021, 5:33pm UTC](https://discuss.elastic.co/t/updating-kibana-plugin-to-7-13-3/279081 "2021-07-22T17:33:41Z")

</div>

Hello all, First of all, I would like to thank this platform and all the volunteers for helping me getting to know Elasticstack and work with it. My question is, I have a kibana custom plugin that I am using with ver…

---

## [Slack notifications timing out](https://discuss.elastic.co/t/slack-notifications-timing-out/279366)

<div class="topic-metadata">

**Author:** [@pup\_seba](https://discuss.elastic.co/u/pup_seba)\
**Replies:** 5\
**Last updated:** [July 22, 2021, 5:10pm UTC](https://discuss.elastic.co/t/slack-notifications-timing-out/279366 "2021-07-22T17:10:44Z")

</div>

Hi, We are trying to enable the posibility to send slack messages when a condition is met, by using "Alerts and Actions". We configured the keystore with slack accounts but when testing the slack connector it fails and…

---

## [Kibana not starting fatal error is coming up](https://discuss.elastic.co/t/kibana-not-starting-fatal-error-is-coming-up/279390)

<div class="topic-metadata">

**Author:** [@0d153a83fd88577dba87](https://discuss.elastic.co/u/0d153a83fd88577dba87)\
**Replies:** 4\
**Last updated:** [July 22, 2021, 3:38pm UTC](https://discuss.elastic.co/t/kibana-not-starting-fatal-error-is-coming-up/279390 "2021-07-22T15:38:03Z")

</div>

log \[15:12:03.239\] \[fatal\]\[root\] Error: Cannot find module '../../../task\_manager/server' Require stack: - /etc/default/kibana-7.13.0-linux-x86\_64/x-pack/plugins/actions/server/cleanup\_failed\_executions/ensure\_schedule…

---

## [Gannt chart in Kibana using Vega](https://discuss.elastic.co/t/gannt-chart-in-kibana-using-vega/279241)

<div class="topic-metadata">

**Author:** [@qttv](https://discuss.elastic.co/u/qttv)\
**Replies:** 5\
**Last updated:** [July 22, 2021, 2:23pm UTC](https://discuss.elastic.co/t/gannt-chart-in-kibana-using-vega/279241 "2021-07-22T14:23:20Z")

</div>

Goog Morning. I need to create a Gannt chart using Kibana. I know the first way to do that is using the Visualization section, introducing a Vega code. I need to visualize these fields from an Elastic Search Index: Robo…

---

## [Unable to use TSVB visualization even after specifying index](https://discuss.elastic.co/t/unable-to-use-tsvb-visualization-even-after-specifying-index/279311)

<div class="topic-metadata">

**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\
**Replies:** 5\
**Last updated:** [July 22, 2021, 1:47pm UTC](https://discuss.elastic.co/t/unable-to-use-tsvb-visualization-even-after-specifying-index/279311 "2021-07-22T13:47:19Z")

</div>

I'm trying out TSVB viz on kibana, and the visualization doesnt work as expected . Are there any rules to creating a TSVB viz ? like use a particular date format or visualize only a certain data pattern ?

---

## [Possible to have {{context.hits}} return as an array?](https://discuss.elastic.co/t/possible-to-have-context-hits-return-as-an-array/277583)

<div class="topic-metadata">

**Author:** [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)\
**Replies:** 1\
**Last updated:** [July 22, 2021, 1:35pm UTC](https://discuss.elastic.co/t/possible-to-have-context-hits-return-as-an-array/277583 "2021-07-22T13:35:33Z")

</div>

Dear all =) I would like to have {{context.hits}} as a JSON array, so I have tried different things. If I put the following in a Kibana rule body {"documents":"{{context.hits}}"} then all the documents are stored as …

---

## [Field expansion for \[\*\] matches too many fields, limit: 1024, got: 1998](https://discuss.elastic.co/t/field-expansion-for-matches-too-many-fields-limit-1024-got-1998/279168)

<div class="topic-metadata">

**Author:** [@vaishno.avi](https://discuss.elastic.co/u/vaishno.avi)\
**Replies:** 1\
**Last updated:** [July 22, 2021, 10:27am UTC](https://discuss.elastic.co/t/field-expansion-for-matches-too-many-fields-limit-1024-got-1998/279168 "2021-07-22T10:27:12Z")

</div>

Hello, We have recently moved from AWS ES 5.x to 7.10. While performing search operation I go get the above error. In total my fields are between 2500 to 4000 for now. I know these values are not good, but this somehow …

---

## [Unable to Fetch data from rollups collector - OFFLINE INSTALL](https://discuss.elastic.co/t/unable-to-fetch-data-from-rollups-collector-offline-install/278953)

<div class="topic-metadata">

**Author:** [@Karevavery](https://discuss.elastic.co/u/Karevavery)\
**Replies:** 1\
**Last updated:** [July 22, 2021, 10:20am UTC](https://discuss.elastic.co/t/unable-to-fetch-data-from-rollups-collector-offline-install/278953 "2021-07-22T10:20:16Z")

</div>

Hi, my kibana service is showing logged warnings and I cannot access the webpage either. error log stating: Cannot read property ‘id’ of undefined\\n at id (/usr/share/kibana/x-pack/legacy/plugins/rollup/server/usage/col…

---

## [Query using ESSQL Conditional (CASE) Function missing some records](https://discuss.elastic.co/t/query-using-essql-conditional-case-function-missing-some-records/278552)

<div class="topic-metadata">

**Author:** [@girvandip](https://discuss.elastic.co/u/girvandip)\
**Replies:** 1\
**Last updated:** [July 22, 2021, 10:15am UTC](https://discuss.elastic.co/t/query-using-essql-conditional-case-function-missing-some-records/278552 "2021-07-22T10:15:47Z")

</div>

Hello, I am working with Canvas in Kibana. Below is the example of the data in tabular format: | timestamp | Id | message | --------------------------------- | 08:49:10 | 1 | TE | | 08:50:20 |…

---

## [File structure cannot be determined on data visualizer](https://discuss.elastic.co/t/file-structure-cannot-be-determined-on-data-visualizer/277070)

<div class="topic-metadata">

**Author:** [@Adrienb02](https://discuss.elastic.co/u/Adrienb02)\
**Replies:** 1\
**Last updated:** [July 22, 2021, 10:05am UTC](https://discuss.elastic.co/t/file-structure-cannot-be-determined-on-data-visualizer/277070 "2021-07-22T10:05:58Z")

</div>

Hello everyone ! In advance, sorry for my english. I have an issue with the Data Visualizer. In my case, I have created a json file. My problem is that the data visualizer doesn't want my file as an input. The error …

---

## [Is it possible for kibana to start with blank page before selecting options in control](https://discuss.elastic.co/t/is-it-possible-for-kibana-to-start-with-blank-page-before-selecting-options-in-control/279289)

<div class="topic-metadata">

**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\
**Replies:** 3\
**Last updated:** [July 22, 2021, 7:12am UTC](https://discuss.elastic.co/t/is-it-possible-for-kibana-to-start-with-blank-page-before-selecting-options-in-control/279289 "2021-07-22T07:12:47Z")

</div>

I ingested a couple of log files, and it gets populated on the "maps" visualization perfectly . however i wanted to know if its possible for kibana to start with no plots on the map and have it plot only when we choo…

---

## [Issues with signals in VEGA visualization](https://discuss.elastic.co/t/issues-with-signals-in-vega-visualization/279222)

<div class="topic-metadata">

**Author:** [@elad\_sheinfeld](https://discuss.elastic.co/u/elad_sheinfeld)\
**Replies:** 3\
**Last updated:** [July 22, 2021, 4:18am UTC](https://discuss.elastic.co/t/issues-with-signals-in-vega-visualization/279222 "2021-07-22T04:18:25Z")

</div>

Hey all, I'm using ELK version 7.13.3 Using the code below, I'm trying to draw nodes connected to networks. The default fill of the nodes is blue, but when a user is clicking a node, it will be filled with red and the…

---

## ["add panel" in dashboard edit view never loads](https://discuss.elastic.co/t/add-panel-in-dashboard-edit-view-never-loads/277976)

<div class="topic-metadata">

**Author:** [@bacony0atmeal](https://discuss.elastic.co/u/bacony0atmeal)\
**Replies:** 27\
**Last updated:** [July 22, 2021, 3:46am UTC](https://discuss.elastic.co/t/add-panel-in-dashboard-edit-view-never-loads/277976 "2021-07-22T03:46:45Z")

</div>

kibana version 7.9.1. recently migrated from 6.8.x. steps taken to recreate: kibana home -\> dashboards -\> open up existing dashboard -\> click "Add" -\> "Add panels" pane never populates with any saved visualizations. …

---

## [SIEM Signals Index and Component Templates](https://discuss.elastic.co/t/siem-signals-index-and-component-templates/279313)

<div class="topic-metadata">

**Author:** [@MakoWish](https://discuss.elastic.co/u/MakoWish)\
**Replies:** 1\
**Last updated:** [July 21, 2021, 10:35pm UTC](https://discuss.elastic.co/t/siem-signals-index-and-component-templates/279313 "2021-07-21T22:35:55Z")

</div>

I have started translating and migrating all my legacy Index Templates over to the new Component Templates, but when I got to the .siem-signals-\<space\> template, I am now getting an error: An error occurred during rule …

---

## [Displaying time series in Canvas](https://discuss.elastic.co/t/displaying-time-series-in-canvas/279208)

<div class="topic-metadata">

**Author:** [@gabor](https://discuss.elastic.co/u/gabor)\
**Replies:** 3\
**Last updated:** [July 21, 2021, 8:04pm UTC](https://discuss.elastic.co/t/displaying-time-series-in-canvas/279208 "2021-07-21T20:04:28Z")

</div>

Hi, I have a data set based on some server logs containing sent- and received amount of data and client IPs. The dataset is a collection of these documents: { .. server\_ip: IP1, client\_ip: IP2, read: 2232323234, write:…

---

## [Query two separate indices, perform calculations on the results, graph result of calculation](https://discuss.elastic.co/t/query-two-separate-indices-perform-calculations-on-the-results-graph-result-of-calculation/279292)

<div class="topic-metadata">

**Author:** [@eeijlar](https://discuss.elastic.co/u/eeijlar)\
**Replies:** 3\
**Last updated:** [July 21, 2021, 5:47pm UTC](https://discuss.elastic.co/t/query-two-separate-indices-perform-calculations-on-the-results-graph-result-of-calculation/279292 "2021-07-21T17:47:59Z")

</div>

I would like to query two separate indices. I would like to do the following: Query 1: Query metricbeat which returns a figure say for arguments sake 2,500,000. I would like to divide this by 1,000,000 which gives me a…

---

## [Import CSV data to Elastic search but \_source missing](https://discuss.elastic.co/t/import-csv-data-to-elastic-search-but-source-missing/279233)

<div class="topic-metadata">

**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\
**Replies:** 10\
**Last updated:** [July 21, 2021, 4:53pm UTC](https://discuss.elastic.co/t/import-csv-data-to-elastic-search-but-source-missing/279233 "2021-07-21T16:53:35Z")

</div>

Kibana version : 7.13 Elasticsearch version : 7.13 APM Server version : 7.13 APM Agent language and version : java 1.8 Fresh install or upgraded from other version? fresh install Is there anything special in your se…

---

## [Import CSV with json data](https://discuss.elastic.co/t/import-csv-with-json-data/279226)

<div class="topic-metadata">

**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\
**Replies:** 3\
**Last updated:** [July 21, 2021, 3:13pm UTC](https://discuss.elastic.co/t/import-csv-with-json-data/279226 "2021-07-21T15:13:37Z")

</div>

Kibana version : 7.13 Elasticsearch version : 7.13 APM Server version : 7.13 APM Agent language and version : java 1.8 Fresh install or upgraded from other version? fresh install Is there anything special in your se…

---

## [Issues creating Index patterns in Kibana](https://discuss.elastic.co/t/issues-creating-index-patterns-in-kibana/278725)

<div class="topic-metadata">

**Author:** [@mikeg123](https://discuss.elastic.co/u/mikeg123)\
**Replies:** 11\
**Last updated:** [July 21, 2021, 3:13pm UTC](https://discuss.elastic.co/t/issues-creating-index-patterns-in-kibana/278725 "2021-07-21T15:13:29Z")

</div>

Hello, I've created a new index and index pattern in filebeat.yml file and send data to Elastic search running in aws container. when I go to Kibana I can see the new index getting created under 'Index Management', but…

---

## [Fail to enroll: fail to execute request to Kibana: Status code: 404, Kibana returned an error: Not Found, message: Not Found](https://discuss.elastic.co/t/fail-to-enroll-fail-to-execute-request-to-kibana-status-code-404-kibana-returned-an-error-not-found-message-not-found/278720)

<div class="topic-metadata">

**Author:** [@RaonyO](https://discuss.elastic.co/u/RaonyO)\
**Replies:** 4\
**Last updated:** [July 21, 2021, 3:05pm UTC](https://discuss.elastic.co/t/fail-to-enroll-fail-to-execute-request-to-kibana-status-code-404-kibana-returned-an-error-not-found-message-not-found/278720 "2021-07-21T15:05:51Z")

</div>

when i execute " .\\elastic-agent.exe install -f --url=https://xx.xx.xxx.xxx:5601 --enrollment-token=Q0REZW9Ib...== --insecure" this message appears 2021-07-14T18:47:12.757-0300 DEBUG kibana/client.go:170 Re…

---

## [Lock certain dashboard and saved searches](https://discuss.elastic.co/t/lock-certain-dashboard-and-saved-searches/279276)

<div class="topic-metadata">

**Author:** [@Saeed\_Ektesabi1](https://discuss.elastic.co/u/Saeed_Ektesabi1)\
**Replies:** 1\
**Last updated:** [July 21, 2021, 2:40pm UTC](https://discuss.elastic.co/t/lock-certain-dashboard-and-saved-searches/279276 "2021-07-21T14:40:54Z")

</div>

Hello, I have a Kibana environment in which I have created several dashboards and saved searches. My Kibana also has several users which they can create their own dashboards or saved search. Is there a way for me to "…

---

## [How to create a text box in a visualization in kibana vega](https://discuss.elastic.co/t/how-to-create-a-text-box-in-a-visualization-in-kibana-vega/277256)

<div class="topic-metadata">

**Author:** [@Juan\_David\_Jaramillo](https://discuss.elastic.co/u/Juan_David_Jaramillo)\
**Replies:** 2\
**Last updated:** [July 21, 2021, 2:10pm UTC](https://discuss.elastic.co/t/how-to-create-a-text-box-in-a-visualization-in-kibana-vega/277256 "2021-07-21T14:10:07Z")

</div>

Hello, I have a visualization in kibana - vega, I already made a graph, but now I want to add a text below the "Estado" bar, I do not know if there is the possibility of putting some text there already having a graph, I …

---

## [Unable to show empty buckets when using Date Histogram on @timestamp field](https://discuss.elastic.co/t/unable-to-show-empty-buckets-when-using-date-histogram-on-timestamp-field/279238)

<div class="topic-metadata">

**Author:** [@prathamesh7](https://discuss.elastic.co/u/prathamesh7)\
**Replies:** 4\
**Last updated:** [July 21, 2021, 10:32am UTC](https://discuss.elastic.co/t/unable-to-show-empty-buckets-when-using-date-histogram-on-timestamp-field/279238 "2021-07-21T10:32:00Z")

</div>

Hi Team, I am retrieving results of a query for last 7 days in visualisation, but in the response i am not seeing results for empty buckets i.e its not showing any result for that day when there is no data. There is no …

---

## [Change interval while viewing a dashboard, without editing?](https://discuss.elastic.co/t/change-interval-while-viewing-a-dashboard-without-editing/279158)

<div class="topic-metadata">

**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\
**Replies:** 2\
**Last updated:** [July 21, 2021, 7:50am UTC](https://discuss.elastic.co/t/change-interval-while-viewing-a-dashboard-without-editing/279158 "2021-07-21T07:50:26Z")

</div>

Background to this question Feedback from a user viewing a Kibana dashboard I've developed: can we set the interval of time-based charts to 1 hour? An excerpt of my response: Yes. However, I have deliberately set t…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=300)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=302)
