# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=302

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 303

---

## [Kibana 7.10.2 build from src code failing due to socket hang up](https://discuss.elastic.co/t/kibana-7-10-2-build-from-src-code-failing-due-to-socket-hang-up/278982)

<div class="topic-metadata">

**Author:** [@shivani\_aggarwal](https://discuss.elastic.co/u/shivani_aggarwal)\
**Replies:** 2\
**Last updated:** [July 21, 2021, 5:13am UTC](https://discuss.elastic.co/t/kibana-7-10-2-build-from-src-code-failing-due-to-socket-hang-up/278982 "2021-07-21T05:13:10Z")

</div>

Hi, Kibana version: 7.10.2 I am trying to build kibana-oss rpm from src code (for centos env) following the procedure from developer guide. The required pre-req dependencies (git,gcc etc) are installed, kibana bootstr…

---

## [Kibana dashboard multiple panels and filtering](https://discuss.elastic.co/t/kibana-dashboard-multiple-panels-and-filtering/279116)

<div class="topic-metadata">

**Author:** [@IsAa](https://discuss.elastic.co/u/IsAa)\
**Replies:** 2\
**Last updated:** [July 20, 2021, 10:43pm UTC](https://discuss.elastic.co/t/kibana-dashboard-multiple-panels-and-filtering/279116 "2021-07-20T22:43:44Z")

</div>

Hi, I have a dashboard containing multiple panels which use different indices. But when I use a filter on one of the panels. It is applied to other panels too which use different indices. Which means filter operation f…

---

## [Difference between using (in the Field Metric) Count and Unique Count](https://discuss.elastic.co/t/difference-between-using-in-the-field-metric-count-and-unique-count/278173)

<div class="topic-metadata">

**Author:** [@rosammb](https://discuss.elastic.co/u/rosammb)\
**Replies:** 3\
**Last updated:** [July 20, 2021, 7:55pm UTC](https://discuss.elastic.co/t/difference-between-using-in-the-field-metric-count-and-unique-count/278173 "2021-07-20T19:55:03Z")

</div>

Hi, I'm using 6.8.3 Elastic version. I'm having problems when I create visualizes and using the Field Metric. If I use Unique count the result is different than if I use count. My feeling is that Unique count is the co…

---

## [Kibana icon colorless](https://discuss.elastic.co/t/kibana-icon-colorless/279187)

<div class="topic-metadata">

**Author:** [@ewolfman](https://discuss.elastic.co/u/ewolfman)\
**Replies:** 1\
**Last updated:** [July 20, 2021, 7:31pm UTC](https://discuss.elastic.co/t/kibana-icon-colorless/279187 "2021-07-20T19:31:11Z")

</div>

Hi, Updated from 7.10.2 to 7.13.3. Kibana favicon seems colorless. Any specific reason? Is this an indication to a problem? Thanks.

---

## [Kibana Bar chart - Replacing alldocs name in x-axis](https://discuss.elastic.co/t/kibana-bar-chart-replacing-alldocs-name-in-x-axis/279076)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 3\
**Last updated:** [July 20, 2021, 3:07pm UTC](https://discuss.elastic.co/t/kibana-bar-chart-replacing-alldocs-name-in-x-axis/279076 "2021-07-20T15:07:31Z")

</div>

Hi all, I'm creating a bar chart with split series option instead of x-axis because i want to show all values with different colours. However, I'm unable to change "\_all All docs" name. I want it according to my name …

---

## [Direct link to doc & get index pattern ID of \*](https://discuss.elastic.co/t/direct-link-to-doc-get-index-pattern-id-of/278663)

<div class="topic-metadata">

**Author:** [@amit.haim](https://discuss.elastic.co/u/amit.haim)\
**Replies:** 2\
**Last updated:** [July 20, 2021, 1:46pm UTC](https://discuss.elastic.co/t/direct-link-to-doc-get-index-pattern-id-of/278663 "2021-07-20T13:46:22Z")

</div>

Hi everyone, I didn't found any solution online yet: Is it possible to get a direct link to elastic doc by the \_id arg? Is it possible to get the index pattern ID of \*? thank you all

---

## [How to Upload Old logs (Which are deleted/missed)](https://discuss.elastic.co/t/how-to-upload-old-logs-which-are-deleted-missed/279163)

<div class="topic-metadata">

**Author:** [@rajuk](https://discuss.elastic.co/u/rajuk)\
**Replies:** 1\
**Last updated:** [July 20, 2021, 1:29pm UTC](https://discuss.elastic.co/t/how-to-upload-old-logs-which-are-deleted-missed/279163 "2021-07-20T13:29:45Z")

</div>

Hello, I am using an AWS ES, logstash, and Filebeat. Recently we lost/missed the one-week data due to the logstash down. Can someone suggest how to upload the old deleted/missed data. Appreciate Your suggestions. Th…

---

## [Filter with regex to select lines that contain a certain word type](https://discuss.elastic.co/t/filter-with-regex-to-select-lines-that-contain-a-certain-word-type/279162)

<div class="topic-metadata">

**Author:** [@boubou](https://discuss.elastic.co/u/boubou)\
**Replies:** 2\
**Last updated:** [July 20, 2021, 1:27pm UTC](https://discuss.elastic.co/t/filter-with-regex-to-select-lines-that-contain-a-certain-word-type/279162 "2021-07-20T13:27:00Z")

</div>

Hello, I would like to know if it is possible to make a filter, in kibana, which contain the word "error". Indeed, I have in a log field (named "message") lines similar to these : message: ANS2832E Incremental snapsh…

---

## [Time control panel in dashboard](https://discuss.elastic.co/t/time-control-panel-in-dashboard/278948)

<div class="topic-metadata">

**Author:** [@Jihed\_BACCOUCHE](https://discuss.elastic.co/u/Jihed_BACCOUCHE)\
**Replies:** 1\
**Last updated:** [July 20, 2021, 12:02pm UTC](https://discuss.elastic.co/t/time-control-panel-in-dashboard/278948 "2021-07-20T12:02:14Z")

</div>

hiii, please I want to add a control panel in my dashboard according to a date field in my data which is of type timestamp i want an option that give me the Opportunity to select a date from a calendar o something saim…

---

## [I want to Filter the Visualization only with one controller](https://discuss.elastic.co/t/i-want-to-filter-the-visualization-only-with-one-controller/278171)

<div class="topic-metadata">

**Author:** [@aswanth\_jabba](https://discuss.elastic.co/u/aswanth_jabba)\
**Replies:** 1\
**Last updated:** [July 20, 2021, 11:35am UTC](https://discuss.elastic.co/t/i-want-to-filter-the-visualization-only-with-one-controller/278171 "2021-07-20T11:35:55Z")

</div>

I am using TSVB for Visualization. I want the visualization should be filtered only based of the Agile Release Train and ignore remaining Filters (Program Increment, Iteration). Ignore Global Filter wouldn't work be…

---

## [How do I change text size canvas kibana filter time](https://discuss.elastic.co/t/how-do-i-change-text-size-canvas-kibana-filter-time/278828)

<div class="topic-metadata">

**Author:** [@francieliton\_araujo](https://discuss.elastic.co/u/francieliton_araujo)\
**Replies:** 1\
**Last updated:** [July 20, 2021, 11:24am UTC](https://discuss.elastic.co/t/how-do-i-change-text-size-canvas-kibana-filter-time/278828 "2021-07-20T11:24:42Z")

</div>

How do I change text size canvas kibana filter time

---

## [Does donut chart available with ranking?](https://discuss.elastic.co/t/does-donut-chart-available-with-ranking/278608)

<div class="topic-metadata">

**Author:** [@paigekim](https://discuss.elastic.co/u/paigekim)\
**Replies:** 1\
**Last updated:** [July 20, 2021, 11:12am UTC](https://discuss.elastic.co/t/does-donut-chart-available-with-ranking/278608 "2021-07-20T11:12:57Z")

</div>

Hello, I am currently drawing the top 50 revenue. I am just wondering whether I can add a ranking next to each title of legend so that it would be easier to recognize the ranking of each portion. Current legend shows it…

---

## [What happens with my message field if I use decode\_json\_fields processor?](https://discuss.elastic.co/t/what-happens-with-my-message-field-if-i-use-decode-json-fields-processor/279036)

<div class="topic-metadata">

**Author:** [@testisnullus](https://discuss.elastic.co/u/testisnullus)\
**Replies:** 2\
**Last updated:** [July 20, 2021, 11:07am UTC](https://discuss.elastic.co/t/what-happens-with-my-message-field-if-i-use-decode-json-fields-processor/279036 "2021-07-20T11:07:26Z")

</div>

Hi all! I have the next message field: message: {"app":"rbac","args":\[\],"commandTag":null,"fields.time":353859,"file":"adapter.go","func":"Log","level":"info","msg":"Exec","pid":28700,"sql":";","time":"2021-07-20T07:59…

---

## [Visualize - How to visualize on a field using fuzzy logic](https://discuss.elastic.co/t/visualize-how-to-visualize-on-a-field-using-fuzzy-logic/279072)

<div class="topic-metadata">

**Author:** [@MWLonKso](https://discuss.elastic.co/u/MWLonKso)\
**Replies:** 5\
**Last updated:** [July 20, 2021, 11:06am UTC](https://discuss.elastic.co/t/visualize-how-to-visualize-on-a-field-using-fuzzy-logic/279072 "2021-07-20T11:06:57Z")

</div>

Hi All This might be a bit of a strange question and hopefully someone can just point me straight at some documentation. I want to visualize on a text field where I know that part of the message will contain a fixed str…

---

## [What happens with my message field if I use decode\_json\_fields processor?](https://discuss.elastic.co/t/what-happens-with-my-message-field-if-i-use-decode-json-fields-processor/279139)

<div class="topic-metadata">

**Author:** [@testisnullus](https://discuss.elastic.co/u/testisnullus)\
**Replies:** 1\
**Last updated:** [July 20, 2021, 11:02am UTC](https://discuss.elastic.co/t/what-happens-with-my-message-field-if-i-use-decode-json-fields-processor/279139 "2021-07-20T11:02:51Z")

</div>

Greatings all! I have the next message field: message: {"app":"rbac","args":\[\],"commandTag":null,"fields.time":353859,"file":"adapter.go","func":"Log","level":"info","msg":"Exec","pid":28700,"sql":";","time":"2021-07-2…

---

## [How to split the field in Kibana?](https://discuss.elastic.co/t/how-to-split-the-field-in-kibana/279048)

<div class="topic-metadata">

**Author:** [@testisnullus](https://discuss.elastic.co/u/testisnullus)\
**Replies:** 2\
**Last updated:** [July 20, 2021, 8:22am UTC](https://discuss.elastic.co/t/how-to-split-the-field-in-kibana/279048 "2021-07-20T08:22:57Z")

</div>

Hi all! I have the message field in Kibana like this: I want to convert this field in something like: message.app: rbac message.args: \[\] message.commandTag: null message.fields.time: 330709 etc Kibana version: 7.7…

---

## [What happens with my message field if I use decode\_json\_fields processor?](https://discuss.elastic.co/t/what-happens-with-my-message-field-if-i-use-decode-json-fields-processor/279061)

<div class="topic-metadata">

**Author:** [@testisnullus](https://discuss.elastic.co/u/testisnullus)\
**Replies:** 0\
**Last updated:** [July 19, 2021, 12:48pm UTC](https://discuss.elastic.co/t/what-happens-with-my-message-field-if-i-use-decode-json-fields-processor/279061 "2021-07-19T12:48:01Z")

</div>

Greatings all! I have the next message field: message: {"app":"rbac","args":\[\],"commandTag":null,"fields.time":353859,"file":"adapter.go","func":"Log","level":"info","msg":"Exec","pid":28700,"sql":";","time":"2021-07-2…

---

## [Sending a Kibana Alert through a proxy help](https://discuss.elastic.co/t/sending-a-kibana-alert-through-a-proxy-help/279115)

<div class="topic-metadata">

**Author:** [@nigel.wadsworth](https://discuss.elastic.co/u/nigel.wadsworth)\
**Replies:** 0\
**Last updated:** [July 20, 2021, 12:39am UTC](https://discuss.elastic.co/t/sending-a-kibana-alert-through-a-proxy-help/279115 "2021-07-20T00:39:22Z")

</div>

Hi there We have an OT environment that has a requirement to create incidents in a cloud-based ServiceNow instance. To do this, we have to go through a proxy which requires kibana.yml to be modified to allow this. We …

---

## [Kibana 7.11.0 with authentication is failing to connect to ES cluster](https://discuss.elastic.co/t/kibana-7-11-0-with-authentication-is-failing-to-connect-to-es-cluster/278419)

<div class="topic-metadata">

**Author:** [@imranrehman5155](https://discuss.elastic.co/u/imranrehman5155)\
**Replies:** 8\
**Last updated:** [July 19, 2021, 11:25pm UTC](https://discuss.elastic.co/t/kibana-7-11-0-with-authentication-is-failing-to-connect-to-es-cluster/278419 "2021-07-19T23:25:17Z")

</div>

I have a Elastic Search set up with 2 nodes and running 7.11.0 version with TLS configured I have kibana-7.11.0 installed in a docker image. when I am trying to bring up the kibana, its is failing to connect to the ES …

---

## [Elasticsearch mapping](https://discuss.elastic.co/t/elasticsearch-mapping/278860)

<div class="topic-metadata">

**Author:** [@varsha\_patil](https://discuss.elastic.co/u/varsha_patil)\
**Replies:** 1\
**Last updated:** [July 19, 2021, 8:18pm UTC](https://discuss.elastic.co/t/elasticsearch-mapping/278860 "2021-07-19T20:18:48Z")

</div>

RequestError(400, 'mapper\_parsing\_exception', 'Root mapping definition has unsupported parameters: Facing such issue while adding mapping and creating index. Using elasticsearch version 7.13.2

---

## [The index-pattern does not work on the 7.13.3 but 7.10 works well](https://discuss.elastic.co/t/the-index-pattern-does-not-work-on-the-7-13-3-but-7-10-works-well/278810)

<div class="topic-metadata">

**Author:** [@harry\_010](https://discuss.elastic.co/u/harry_010)\
**Replies:** 2\
**Last updated:** [July 19, 2021, 8:17pm UTC](https://discuss.elastic.co/t/the-index-pattern-does-not-work-on-the-7-13-3-but-7-10-works-well/278810 "2021-07-19T20:17:32Z")

</div>

I used the following json to create the index-pattern, the index-pattern is empty but the name. no fields in it. { "attributes": { "fields": "\[{"name":"@timestamp","type":"date","esTypes":\["date"\],"count":0,"scripted"…

---

## [Creating pattern issue from 7.11.0](https://discuss.elastic.co/t/creating-pattern-issue-from-7-11-0/278822)

<div class="topic-metadata">

**Author:** [@harry\_010](https://discuss.elastic.co/u/harry_010)\
**Replies:** 1\
**Last updated:** [July 19, 2021, 8:14pm UTC](https://discuss.elastic.co/t/creating-pattern-issue-from-7-11-0/278822 "2021-07-19T20:14:40Z")

</div>

if still supporting the field entry when creating the index pattern. "attributes": { "fields": "\[{"name":"@timestamp","type":"date","esTypes":\["date"\],"count":0,"scripted":false,"searchable":true,"aggregatable":true,"r…

---

## [Connecting excel sheet to kibana](https://discuss.elastic.co/t/connecting-excel-sheet-to-kibana/278784)

<div class="topic-metadata">

**Author:** [@cass](https://discuss.elastic.co/u/cass)\
**Replies:** 1\
**Last updated:** [July 19, 2021, 8:13pm UTC](https://discuss.elastic.co/t/connecting-excel-sheet-to-kibana/278784 "2021-07-19T20:13:19Z")

</div>

Hi everyone, I was wondering: is there a way to connect automatically a local excel sheet directly to Kibana? To illustrate, each time that I will modify a sheet, there is an update on all the visualisations that use th…

---

## [How to build Kibana-OSS from source code 7.10.2?](https://discuss.elastic.co/t/how-to-build-kibana-oss-from-source-code-7-10-2/279019)

<div class="topic-metadata">

**Author:** [@kkhadka](https://discuss.elastic.co/u/kkhadka)\
**Replies:** 1\
**Last updated:** [July 19, 2021, 8:10pm UTC](https://discuss.elastic.co/t/how-to-build-kibana-oss-from-source-code-7-10-2/279019 "2021-07-19T20:10:18Z")

</div>

Hi, i am trying to build kibana from the source code for version 7.10.2 i am able to build kibana by following this is there any way to build kibana-OSS from the source code? Cheers, Krishna

---

## [Funnel in Kibana](https://discuss.elastic.co/t/funnel-in-kibana/279073)

<div class="topic-metadata">

**Author:** [@Rafael\_Almeida1](https://discuss.elastic.co/u/Rafael_Almeida1)\
**Replies:** 1\
**Last updated:** [July 19, 2021, 8:07pm UTC](https://discuss.elastic.co/t/funnel-in-kibana/279073 "2021-07-19T20:07:16Z")

</div>

Hi, I want know if Kibana will add a Visualization of Funnel in your option of graphs. I know about Vega option but need learn about so will very welcome a option of funnel inside kibana

---

## [Pie Chart Query Question](https://discuss.elastic.co/t/pie-chart-query-question/279101)

<div class="topic-metadata">

**Author:** [@JDMurph](https://discuss.elastic.co/u/JDMurph)\
**Replies:** 2\
**Last updated:** [July 19, 2021, 6:27pm UTC](https://discuss.elastic.co/t/pie-chart-query-question/279101 "2021-07-19T18:27:58Z")

</div>

Is it possible to do a pie chart that gives the following with the below instance? Sum up the errors per factory and if the error count is equal to 3 or greater it would be classified as "Failing". If it's greater than …

---

## [Kibana Metrics (take percentage of the sum of a field)](https://discuss.elastic.co/t/kibana-metrics-take-percentage-of-the-sum-of-a-field/278925)

<div class="topic-metadata">

**Author:** [@creativeguitar](https://discuss.elastic.co/u/creativeguitar)\
**Replies:** 2\
**Last updated:** [July 19, 2021, 6:02pm UTC](https://discuss.elastic.co/t/kibana-metrics-take-percentage-of-the-sum-of-a-field/278925 "2021-07-19T18:02:13Z")

</div>

I am new to ELK and I could use some help. I have a field named VM that has true and false values. If the system is a physical server then the value is false, otherwise if it is a VM it is true. I need to take a percen…

---

## [Watcher Webhook s\_s\_l\_handshake\_exception](https://discuss.elastic.co/t/watcher-webhook-s-s-l-handshake-exception/278551)

<div class="topic-metadata">

**Author:** [@yoli1888](https://discuss.elastic.co/u/yoli1888)\
**Replies:** 4\
**Last updated:** [July 19, 2021, 5:52pm UTC](https://discuss.elastic.co/t/watcher-webhook-s-s-l-handshake-exception/278551 "2021-07-19T17:52:20Z")

</div>

I am using 7.9.1. Kibana is running in a docker container. Trying to setup a Webhook action in Watcher with the following code: "webhook\_2" : { "webhook" : { "scheme" : "https", "host" : "e…

---

## [Short URL for public users](https://discuss.elastic.co/t/short-url-for-public-users/277266)

<div class="topic-metadata">

**Author:** [@martinsz](https://discuss.elastic.co/u/martinsz)\
**Replies:** 2\
**Last updated:** [July 19, 2021, 5:00pm UTC](https://discuss.elastic.co/t/short-url-for-public-users/277266 "2021-07-19T17:00:41Z")

</div>

Hello, we're having an issue trying to generate short permalinks for our public users. Our set-up is login via header in an nginx proxy for the public user and the public space, which are very restricted. But the links …

---

## [Finding the parent id/ session id of an activity (logs)](https://discuss.elastic.co/t/finding-the-parent-id-session-id-of-an-activity-logs/279091)

<div class="topic-metadata">

**Author:** [@NoviceESCoder](https://discuss.elastic.co/u/NoviceESCoder)\
**Replies:** 0\
**Last updated:** [July 19, 2021, 4:17pm UTC](https://discuss.elastic.co/t/finding-the-parent-id-session-id-of-an-activity-logs/279091 "2021-07-19T16:17:15Z")

</div>

Is there a way to find parent id/session id that measures from the start to the end of an activity in Elasticsearch. I was reading up on spans and how they can help with this. However, besides using APM, does elasticsear…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=301)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=303)
