# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=308

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 309

---

## [How to fetch kibana Visualisation data to Powershell automation](https://discuss.elastic.co/t/how-to-fetch-kibana-visualisation-data-to-powershell-automation/277532)

<div class="topic-metadata">

**Author:** [@Sahithi\_V](https://discuss.elastic.co/u/Sahithi_V)\
**Replies:** 2\
**Last updated:** [July 3, 2021, 9:04am UTC](https://discuss.elastic.co/t/how-to-fetch-kibana-visualisation-data-to-powershell-automation/277532 "2021-07-03T09:04:55Z")

</div>

Continuing the discussion from Get data from visualize/ dashboard using the API: I tried to get data from visualization present in Dashboard but I am able to navigate till saved objects of visualizatin with its id but d…

---

## [Terms list might be incomplete because the request is taking too long](https://discuss.elastic.co/t/terms-list-might-be-incomplete-because-the-request-is-taking-too-long/277491)

<div class="topic-metadata">

**Author:** [@Gaurav2](https://discuss.elastic.co/u/Gaurav2)\
**Replies:** 3\
**Last updated:** [July 2, 2021, 8:13pm UTC](https://discuss.elastic.co/t/terms-list-might-be-incomplete-because-the-request-is-taking-too-long/277491 "2021-07-02T20:13:44Z")

</div>

Hi, please we need help on this. we have elasticsearch running with over 2 billion documents (32 GB ram, 4.5 cpu and 16 gb heap) and over 700 shards we tried making these changes but ended up rebuilding kibana as it wa…

---

## [Kibana Pie Chart Replace Value Names](https://discuss.elastic.co/t/kibana-pie-chart-replace-value-names/277659)

<div class="topic-metadata">

**Author:** [@azulgrana](https://discuss.elastic.co/u/azulgrana)\
**Replies:** 2\
**Last updated:** [July 2, 2021, 3:48pm UTC](https://discuss.elastic.co/t/kibana-pie-chart-replace-value-names/277659 "2021-07-02T15:48:50Z")

</div>

Hi team!, I have a Pie chart that displays severity values. The values go from 1-3. Would it be possible from within the JSON input to replace the numbered values with names. Say 1 = Low, 2 = Medium, 3 = High Thanks in…

---

## [Bulk Upload but search cant find all docs](https://discuss.elastic.co/t/bulk-upload-but-search-cant-find-all-docs/277634)

<div class="topic-metadata">

**Author:** [@GaryD](https://discuss.elastic.co/u/GaryD)\
**Replies:** 8\
**Last updated:** [July 2, 2021, 1:44pm UTC](https://discuss.elastic.co/t/bulk-upload-but-search-cant-find-all-docs/277634 "2021-07-02T13:44:44Z")

</div>

I have done a bulk upload via the API in python as follows: def to\_bulk\_doc(\_doc): return { # default value: 'index' '\_op\_type': 'index', '\_index': es\_index, '\_id'…

---

## [Structure data for a tree layout](https://discuss.elastic.co/t/structure-data-for-a-tree-layout/277347)

<div class="topic-metadata">

**Author:** [@sonik](https://discuss.elastic.co/u/sonik)\
**Replies:** 1\
**Last updated:** [July 2, 2021, 1:33pm UTC](https://discuss.elastic.co/t/structure-data-for-a-tree-layout/277347 "2021-07-02T13:33:36Z")

</div>

Hi everybody, I faced some problems with structuring my data for a tree layout. The data must be structured as follows \[ { "id": 1, "name": "flare" }, { "id": 2, "name": "analytics", "parent"…

---

## [Canvas remove custom time](https://discuss.elastic.co/t/canvas-remove-custom-time/277315)

<div class="topic-metadata">

**Author:** [@venkatesh\_prasanth](https://discuss.elastic.co/u/venkatesh_prasanth)\
**Replies:** 1\
**Last updated:** [July 2, 2021, 1:24pm UTC](https://discuss.elastic.co/t/canvas-remove-custom-time/277315 "2021-07-02T13:24:21Z")

</div>

pls someone ans

---

## [CSV import in KIBANA without timestamp](https://discuss.elastic.co/t/csv-import-in-kibana-without-timestamp/277352)

<div class="topic-metadata">

**Author:** [@AlexM566](https://discuss.elastic.co/u/AlexM566)\
**Replies:** 1\
**Last updated:** [July 2, 2021, 1:15pm UTC](https://discuss.elastic.co/t/csv-import-in-kibana-without-timestamp/277352 "2021-07-02T13:15:07Z")

</div>

Hello, I have a problem when I upload a CSV document in kibana. I have a Start time, duration, end time in csv: The cells are formatted dd/mm/yyyy hh:mm And in Discover menu, I do not see the timestamp and the gra…

---

## [Add filter to controls on drilldown](https://discuss.elastic.co/t/add-filter-to-controls-on-drilldown/277630)

<div class="topic-metadata">

**Author:** [@SvenSpudat](https://discuss.elastic.co/u/SvenSpudat)\
**Replies:** 1\
**Last updated:** [July 2, 2021, 12:52pm UTC](https://discuss.elastic.co/t/add-filter-to-controls-on-drilldown/277630 "2021-07-02T12:52:15Z")

</div>

Hi, I have one question. In a dashboard I have a drilldown on a pie chart to a dashboard that contains an options control element. The pie chart has buckets for field A (plant) and field B (topic). The controls object …

---

## [How to disable UI metric report API in Kibana?](https://discuss.elastic.co/t/how-to-disable-ui-metric-report-api-in-kibana/277533)

<div class="topic-metadata">

**Author:** [@HemaS](https://discuss.elastic.co/u/HemaS)\
**Replies:** 2\
**Last updated:** [July 2, 2021, 12:44pm UTC](https://discuss.elastic.co/t/how-to-disable-ui-metric-report-api-in-kibana/277533 "2021-07-02T12:44:24Z")

</div>

loaded Metric -\> (DashboardPanelVersionInUrl:7.8.0): reporter.js:260 Object { type: "loaded", appName: "DashboardPanelVersionInUrl", eventName: "7.8.0", count: 1 } ​ appName: "DashboardPanelVersionInUrl" ​ count: 1 ​ ev…

---

## [Kibana internal Server Error](https://discuss.elastic.co/t/kibana-internal-server-error/277462)

<div class="topic-metadata">

**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\
**Replies:** 2\
**Last updated:** [July 2, 2021, 12:03pm UTC](https://discuss.elastic.co/t/kibana-internal-server-error/277462 "2021-07-02T12:03:42Z")

</div>

Hello, I build ELK 8.0 from github, on Debian 10 (both elasticsearch nodes and kibana), and when I try to go to index management --\> indices I am getting an internal Error : Kibana Logs: server log \[14:51:03.4…

---

## [Kibana how sort logs](https://discuss.elastic.co/t/kibana-how-sort-logs/277595)

<div class="topic-metadata">

**Author:** [@Ilya\_21bA](https://discuss.elastic.co/u/Ilya_21bA)\
**Replies:** 1\
**Last updated:** [July 2, 2021, 9:20am UTC](https://discuss.elastic.co/t/kibana-how-sort-logs/277595 "2021-07-02T09:20:01Z")

</div>

Hello everyone Tell me how I can get a certain amount of data for a certain time range. For example, how can I get all the logs for this range. The fact is that I can't know the exact range, and therefore how can I g…

---

## [Canvas time filter](https://discuss.elastic.co/t/canvas-time-filter/277420)

<div class="topic-metadata">

**Author:** [@Mik\_a](https://discuss.elastic.co/u/Mik_a)\
**Replies:** 12\
**Last updated:** [July 2, 2021, 7:48am UTC](https://discuss.elastic.co/t/canvas-time-filter/277420 "2021-07-02T07:48:36Z")

</div>

I made a Canvas workpad showing one metric. I need dynamic filters and if I import a filter from the dashboard they seem to have no effect. When I add a time filter from canvas "add element" my metric says "Error canno…

---

## [Creating Index for different Systems is problematic](https://discuss.elastic.co/t/creating-index-for-different-systems-is-problematic/277516)

<div class="topic-metadata">

**Author:** [@Saumyadipta\_Sarkar](https://discuss.elastic.co/u/Saumyadipta_Sarkar)\
**Replies:** 9\
**Last updated:** [July 1, 2021, 5:19pm UTC](https://discuss.elastic.co/t/creating-index-for-different-systems-is-problematic/277516 "2021-07-01T17:19:09Z")

</div>

When I create an Index in Kibana and Search specific logs using query its giving me correct response. But Then if I want to open the URL composed with queries from any other system then its asking me to create an Index a…

---

## [Unable to push documents and index patterns in indexes in kibana plugin using core api](https://discuss.elastic.co/t/unable-to-push-documents-and-index-patterns-in-indexes-in-kibana-plugin-using-core-api/277508)

<div class="topic-metadata">

**Author:** [@kibanaPluginDev](https://discuss.elastic.co/u/kibanaPluginDev)\
**Replies:** 3\
**Last updated:** [July 1, 2021, 3:38pm UTC](https://discuss.elastic.co/t/unable-to-push-documents-and-index-patterns-in-indexes-in-kibana-plugin-using-core-api/277508 "2021-07-01T15:38:52Z")

</div>

I am unable to push the documents in the newly created index and add new fields to it using the kibana core API . Although I was able to do it with the dev tool. i want to implement this feature in my plugin to add docum…

---

## [How to create a user defined data table visualization](https://discuss.elastic.co/t/how-to-create-a-user-defined-data-table-visualization/277540)

<div class="topic-metadata">

**Author:** [@abhinav3](https://discuss.elastic.co/u/abhinav3)\
**Replies:** 3\
**Last updated:** [July 1, 2021, 3:06pm UTC](https://discuss.elastic.co/t/how-to-create-a-user-defined-data-table-visualization/277540 "2021-07-01T15:06:26Z")

</div>

Hi I have been using Kibana dashboard to monitor my Raspberry Pi devices health. Each raspberry pi sends its health log to elasticsearch and from their I have dashboard which then have multiple visualization to monitor …

---

## [How to create a master list of devices and compare with the input logs to show in Kibana](https://discuss.elastic.co/t/how-to-create-a-master-list-of-devices-and-compare-with-the-input-logs-to-show-in-kibana/277569)

<div class="topic-metadata">

**Author:** [@abhinav3](https://discuss.elastic.co/u/abhinav3)\
**Replies:** 0\
**Last updated:** [July 1, 2021, 2:59pm UTC](https://discuss.elastic.co/t/how-to-create-a-master-list-of-devices-and-compare-with-the-input-logs-to-show-in-kibana/277569 "2021-07-01T14:59:43Z")

</div>

Hi I have 20 Raspberry Pi devices installed. They all are uploading data to elasticsearch and I can see the online devices in kibana dashboard. But along with online, I also want to see the list of device name which are…

---

## [Data Table - Display count as a metric and split it by filters](https://discuss.elastic.co/t/data-table-display-count-as-a-metric-and-split-it-by-filters/277259)

<div class="topic-metadata">

**Author:** [@prashu421](https://discuss.elastic.co/u/prashu421)\
**Replies:** 4\
**Last updated:** [July 1, 2021, 2:25pm UTC](https://discuss.elastic.co/t/data-table-display-count-as-a-metric-and-split-it-by-filters/277259 "2021-07-01T14:25:10Z")

</div>

Hello, I am working with Kibana through Elasticsearch version 7.4 (AWS Elasticsearch Service), and hoping to build a data table that looks similar to this - Before splitting the count by pipeline id, I am trying to c…

---

## [Programmatically rename (re-title) Kibana index patterns](https://discuss.elastic.co/t/programmatically-rename-re-title-kibana-index-patterns/277398)

<div class="topic-metadata">

**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\
**Replies:** 3\
**Last updated:** [July 1, 2021, 1:40pm UTC](https://discuss.elastic.co/t/programmatically-rename-re-title-kibana-index-patterns/277398 "2021-07-01T13:40:38Z")

</div>

I've developed a set of Kibana dashboards that use about a dozen index patterns with the following structure: product\_x-table\_name-\* where product\_x is a fixed string and table\_name has a dozen or so values. Example in…

---

## [Hide time interval text](https://discuss.elastic.co/t/hide-time-interval-text/277431)

<div class="topic-metadata">

**Author:** [@Mik\_a](https://discuss.elastic.co/u/Mik_a)\
**Replies:** 8\
**Last updated:** [July 1, 2021, 11:19am UTC](https://discuss.elastic.co/t/hide-time-interval-text/277431 "2021-07-01T11:19:27Z")

</div>

I want to have a table showing the created at date for the data and would like to customize the text for the time interval. How do I hide the "per week", "per month" and so on? I want to only show the label

---

## [Kibana multiple conditions not working](https://discuss.elastic.co/t/kibana-multiple-conditions-not-working/277539)

<div class="topic-metadata">

**Author:** [@PatrikM](https://discuss.elastic.co/u/PatrikM)\
**Replies:** 0\
**Last updated:** [July 1, 2021, 10:25am UTC](https://discuss.elastic.co/t/kibana-multiple-conditions-not-working/277539 "2021-07-01T10:25:56Z")

</div>

My Kibana version is 7.9.3 Every 60 seconds I'm sending data to elasticsearch. I can see those logs in the observability log section and the series of logs that should trigger the alert, but when I create the alert it …

---

## [Why we need index template?](https://discuss.elastic.co/t/why-we-need-index-template/277523)

<div class="topic-metadata">

**Author:** [@Nisha2297](https://discuss.elastic.co/u/Nisha2297)\
**Replies:** 6\
**Last updated:** [July 1, 2021, 9:26am UTC](https://discuss.elastic.co/t/why-we-need-index-template/277523 "2021-07-01T09:26:51Z")

</div>

Why we need to create index template when we can simply define the fields and there datatype in the logstash itself using below syntax: mutate {convert =\> \["field\_name", "data\_type"\]

---

## [Kibana advanced search split by](https://discuss.elastic.co/t/kibana-advanced-search-split-by/277473)

<div class="topic-metadata">

**Author:** [@Alex112345](https://discuss.elastic.co/u/Alex112345)\
**Replies:** 2\
**Last updated:** [July 1, 2021, 7:42am UTC](https://discuss.elastic.co/t/kibana-advanced-search-split-by/277473 "2021-07-01T07:42:12Z")

</div>

Hi all, I'm quite new to Elastic & Kibana. I've used Splunk in the past and I was wondering if someone could point me in the right direction to do something as below Let's say we have an indexed field called users. The…

---

## [Config Error 403: "error":{"message":"blocked by: \[FORBIDDEN/8/index write (api)\];: \[cluster\_block\_exception\] blocked by: \[FORBIDDEN/8/index write (api)\];","name":"Error","stack":"\[cluster\_block\_exception\] blocked by: \[FORBIDDEN/8/index write (api)\]](https://discuss.elastic.co/t/config-error-403-error-message-blocked-by-forbidden-8-index-write-api-cluster-block-exception-blocked-by-forbidden-8-index-write-api-name-error-stack-cluster-block-exception-blocked-by-forbidden-8-index-write-api/277512)

<div class="topic-metadata">

**Author:** [@Ashish\_Manjrekar](https://discuss.elastic.co/u/Ashish_Manjrekar)\
**Replies:** 2\
**Last updated:** [July 1, 2021, 7:31am UTC](https://discuss.elastic.co/t/config-error-403-error-message-blocked-by-forbidden-8-index-write-api-cluster-block-exception-blocked-by-forbidden-8-index-write-api-name-error-stack-cluster-block-exception-blocked-by-forbidden-8-index-write-api/277512 "2021-07-01T07:31:58Z")

</div>

Can someone help me understand the below issue. Also, if any resolution available. {"type":"error","@timestamp":"2021-04-25T01:41:28Z","tags":,"pid":3076,"level":"error","error":{"message":"blocked by: \[FORBIDDEN/8/inde…

---

## [Kibana dashboard shards failed](https://discuss.elastic.co/t/kibana-dashboard-shards-failed/277285)

<div class="topic-metadata">

**Author:** [@Amudhan\_P](https://discuss.elastic.co/u/Amudhan_P)\
**Replies:** 5\
**Last updated:** [July 1, 2021, 5:28am UTC](https://discuss.elastic.co/t/kibana-dashboard-shards-failed/277285 "2021-07-01T05:28:25Z")

</div>

Hi, I am running an ELK cluster in Elastic.io I am having a problem in Kibana, visualization it's showing shards failed. Visualization is been configured to show a field from my APM data. I don't find any error msg fr…

---

## [Unable to install kibana-plugin](https://discuss.elastic.co/t/unable-to-install-kibana-plugin/277304)

<div class="topic-metadata">

**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\
**Replies:** 4\
**Last updated:** [July 1, 2021, 5:27am UTC](https://discuss.elastic.co/t/unable-to-install-kibana-plugin/277304 "2021-07-01T05:27:28Z")

</div>

Hello team, I am unable to install kibana plugin on my local. Can you please help me on this OS: Windows Kiban Version: 7.9 Below is the error: PS C:\\WINDOWS\\system32\> cd C:\\Users\\mangeshsuresh.jadhav\\Downloads\\EKL\\…

---

## [Elasticsearch is down and data are messing, how to recover it!](https://discuss.elastic.co/t/elasticsearch-is-down-and-data-are-messing-how-to-recover-it/277202)

<div class="topic-metadata">

**Author:** [@bab](https://discuss.elastic.co/u/bab)\
**Replies:** 3\
**Last updated:** [July 1, 2021, 2:06am UTC](https://discuss.elastic.co/t/elasticsearch-is-down-and-data-are-messing-how-to-recover-it/277202 "2021-07-01T02:06:31Z")

</div>

Hey, how can I recover data that I lost while my Elasticsearch was down. see the screen below. thank you.

---

## [Why query works in DevTools but not in a Rule?](https://discuss.elastic.co/t/why-query-works-in-devtools-but-not-in-a-rule/277467)

<div class="topic-metadata">

**Author:** [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)\
**Replies:** 3\
**Last updated:** [July 1, 2021, 12:20am UTC](https://discuss.elastic.co/t/why-query-works-in-devtools-but-not-in-a-rule/277467 "2021-07-01T00:20:16Z")

</div>

Dear all =) Here is an odd one! If I in Dev Tools do GET \_search { "query": { "query\_string": { "query": "besked:\*" } } } then I get lots of results. If I do the same in a rule, I don't get any results. Are extra…

---

## [Exporting to CSV missing values in fields](https://discuss.elastic.co/t/exporting-to-csv-missing-values-in-fields/277389)

<div class="topic-metadata">

**Author:** [@jasieltego](https://discuss.elastic.co/u/jasieltego)\
**Replies:** 4\
**Last updated:** [June 30, 2021, 7:49pm UTC](https://discuss.elastic.co/t/exporting-to-csv-missing-values-in-fields/277389 "2021-06-30T19:49:28Z")

</div>

Hi All, Wondering if I can get some help. Currently from Kibana I'm running some Discover Reports, I can see all the fields and information in Kibana, however when I export it to CSV, 4 columns out of 6 have no values a…

---

## [Create split series / aggregation based on json message](https://discuss.elastic.co/t/create-split-series-aggregation-based-on-json-message/277401)

<div class="topic-metadata">

**Author:** [@gandhz](https://discuss.elastic.co/u/gandhz)\
**Replies:** 3\
**Last updated:** [June 30, 2021, 4:40pm UTC](https://discuss.elastic.co/t/create-split-series-aggregation-based-on-json-message/277401 "2021-06-30T16:40:18Z")

</div>

Hi, I have service logs which contains json message like example below: { "caller\_method\_name": "transferConfirmation", "caller\_line\_number": 328, "message": "Transfer via virtual : {"transferRef":"22151","…

---

## [Can't get fields with an empty date to show up in a data table](https://discuss.elastic.co/t/cant-get-fields-with-an-empty-date-to-show-up-in-a-data-table/276052)

<div class="topic-metadata">

**Author:** [@dandcp](https://discuss.elastic.co/u/dandcp)\
**Replies:** 2\
**Last updated:** [June 30, 2021, 4:27pm UTC](https://discuss.elastic.co/t/cant-get-fields-with-an-empty-date-to-show-up-in-a-data-table/276052 "2021-06-30T16:27:48Z")

</div>

I have a data table (and I've done this before) let's say the fields are: Name Quantity End of Support Date End of Contract Date There are 30 records in the dataset right now. Of those 30 maybe 15 have the end of s…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=307)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=309)
