# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=316

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 317

---

## [Request Body is Required](https://discuss.elastic.co/t/request-body-is-required/275691)

<div class="topic-metadata">

**Author:** [@Tim\_Mobley](https://discuss.elastic.co/u/Tim_Mobley)\
**Replies:** 3\
**Last updated:** [June 15, 2021, 2:41pm UTC](https://discuss.elastic.co/t/request-body-is-required/275691 "2021-06-15T14:41:50Z")

</div>

I am attempting to use the reindex API to combine indices for the month into one single index: POST \_reindex?pretty { "conflicts": "proceed", "source": { "index": "my-index-2021.04.\*" }, "dest": { "index…

---

## [Is it necessary to give only elasticsearch master nodes in kibana config](https://discuss.elastic.co/t/is-it-necessary-to-give-only-elasticsearch-master-nodes-in-kibana-config/275543)

<div class="topic-metadata">

**Author:** [@elk11](https://discuss.elastic.co/u/elk11)\
**Replies:** 1\
**Last updated:** [June 15, 2021, 1:57pm UTC](https://discuss.elastic.co/t/is-it-necessary-to-give-only-elasticsearch-master-nodes-in-kibana-config/275543 "2021-06-15T13:57:55Z")

</div>

Elasticsearch and Kibana version: 7.3.1 I'm deploying Elasticsearch (3 nodes) and Kibana on docker. node1: elasticsearch master(data) and kibana node2: elasticsearch (data) node3: elasticsearch (data) our kibana con…

---

## [Display Top 20 Results by Event Count](https://discuss.elastic.co/t/display-top-20-results-by-event-count/275492)

<div class="topic-metadata">

**Author:** [@nazevedo3](https://discuss.elastic.co/u/nazevedo3)\
**Replies:** 1\
**Last updated:** [June 15, 2021, 11:32am UTC](https://discuss.elastic.co/t/display-top-20-results-by-event-count/275492 "2021-06-15T11:32:31Z")

</div>

Hi All, I have a dataset that returns data that includes a networks ASN. I'd like to be able to visualize a set of specific ASNs AND the top 20 of all other ASNs in my dataset based on event count. Any suggestions on …

---

## [Is it possible to leave the dashboard always fullscreen or hide the query part?](https://discuss.elastic.co/t/is-it-possible-to-leave-the-dashboard-always-fullscreen-or-hide-the-query-part/275702)

<div class="topic-metadata">

**Author:** [@francieliton\_araujo](https://discuss.elastic.co/u/francieliton_araujo)\
**Replies:** 2\
**Last updated:** [June 15, 2021, 11:11am UTC](https://discuss.elastic.co/t/is-it-possible-to-leave-the-dashboard-always-fullscreen-or-hide-the-query-part/275702 "2021-06-15T11:11:02Z")

</div>

Is it possible to leave the dashboard always fullscreen or hide the query part? as follows in the image.

---

## [Kibana Report Error: Failed to decrypt report job data](https://discuss.elastic.co/t/kibana-report-error-failed-to-decrypt-report-job-data/275657)

<div class="topic-metadata">

**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\
**Replies:** 2\
**Last updated:** [June 15, 2021, 10:56am UTC](https://discuss.elastic.co/t/kibana-report-error-failed-to-decrypt-report-job-data/275657 "2021-06-15T10:56:05Z")

</div>

Hi there, I am facing following error each time I want to generate a CSV Report from Kibana Discover Module. Either immediately or after some time (like 30 seconds or so) I see following Error: Error: Failed to decryp…

---

## [Metric value 0 breaking change (since upgrade to version 7.13)](https://discuss.elastic.co/t/metric-value-0-breaking-change-since-upgrade-to-version-7-13/275956)

<div class="topic-metadata">

**Author:** [@Chenlrv](https://discuss.elastic.co/u/Chenlrv)\
**Replies:** 5\
**Last updated:** [June 15, 2021, 10:09am UTC](https://discuss.elastic.co/t/metric-value-0-breaking-change-since-upgrade-to-version-7-13/275956 "2021-06-15T10:09:22Z")

</div>

Hello, since upgrading to version 7.13, Metric visualizations with value of 0 look like this: where before upgrade Metric visualizations showed 0. Is there any solution to this? we want to show the value 0 and not da…

---

## [How to write query in Dev tools to find expired date of customers by comparing current date?](https://discuss.elastic.co/t/how-to-write-query-in-dev-tools-to-find-expired-date-of-customers-by-comparing-current-date/275663)

<div class="topic-metadata">

**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\
**Replies:** 4\
**Last updated:** [June 15, 2021, 9:32am UTC](https://discuss.elastic.co/t/how-to-write-query-in-dev-tools-to-find-expired-date-of-customers-by-comparing-current-date/275663 "2021-06-15T09:32:08Z")

</div>

I have a index that contains date field of customers that contains date of customers to be expired. Now my task is you to compare that date with current date(dynamically) changes as current date change gives result "expi…

---

## [Hide the Kibana Header (black/top)](https://discuss.elastic.co/t/hide-the-kibana-header-black-top/275939)

<div class="topic-metadata">

**Author:** [@Jayanth\_Palle](https://discuss.elastic.co/u/Jayanth_Palle)\
**Replies:** 1\
**Last updated:** [June 15, 2021, 8:45am UTC](https://discuss.elastic.co/t/hide-the-kibana-header-black-top/275939 "2021-06-15T08:45:47Z")

</div>

I am new to ELK stack.The Kibana header(black/top) is good but it will be fine for us if there is an option to hide it (we aren't using it at all) so that we could use some more space.Is there a way to do so? Need to re…

---

## [Tryining to get float number in scripted filed](https://discuss.elastic.co/t/tryining-to-get-float-number-in-scripted-filed/275895)

<div class="topic-metadata">

**Author:** [@dontAskToAsk](https://discuss.elastic.co/u/dontAskToAsk)\
**Replies:** 1\
**Last updated:** [June 15, 2021, 7:50am UTC](https://discuss.elastic.co/t/tryining-to-get-float-number-in-scripted-filed/275895 "2021-06-15T07:50:36Z")

</div>

hey I am tried to run this command in a scripted filed if (doc\['tunnels\_map.rx\_stats.counters.packets\_lost'\].size() != 0 && doc\['tunnels\_map.rx\_stats.counters.packets'\].size() != 0) {doc\['tunnels\_map.rx\_stats.counters.…

---

## [Vega Error](https://discuss.elastic.co/t/vega-error/275584)

<div class="topic-metadata">

**Author:** [@Krunal](https://discuss.elastic.co/u/Krunal)\
**Replies:** 5\
**Last updated:** [June 15, 2021, 7:50am UTC](https://discuss.elastic.co/t/vega-error/275584 "2021-06-15T07:50:29Z")

</div>

Hello expert, Vega Graph is working perfectly, but getting 0 at x-axis ... why 0 ? { "$schema": "https://vega.github.io/schema/vega-lite/v5.json", "title": "Difference par Jour", "data": { "url": { "…

---

## [What is the replacement of SQL UNION in KQL?](https://discuss.elastic.co/t/what-is-the-replacement-of-sql-union-in-kql/275407)

<div class="topic-metadata">

**Author:** [@VinodKumarPotta](https://discuss.elastic.co/u/VinodKumarPotta)\
**Replies:** 5\
**Last updated:** [June 15, 2021, 7:39am UTC](https://discuss.elastic.co/t/what-is-the-replacement-of-sql-union-in-kql/275407 "2021-06-15T07:39:32Z")

</div>

Hi Team, Would like to check in this forum, Is there anyway that we can achieve UNION by using KQL? I have a requirement where I would need to build a Kibana dashboard with UNION of multiple sub-queries. Thank you!

---

## [Cannot have two kibana port-forwarded to localhost:5601 and localhost:5602](https://discuss.elastic.co/t/cannot-have-two-kibana-port-forwarded-to-localhost-5601-and-localhost-5602/275915)

<div class="topic-metadata">

**Author:** [@fzyzcjy](https://discuss.elastic.co/u/fzyzcjy)\
**Replies:** 5\
**Last updated:** [June 15, 2021, 7:33am UTC](https://discuss.elastic.co/t/cannot-have-two-kibana-port-forwarded-to-localhost-5601-and-localhost-5602/275915 "2021-06-15T07:33:47Z")

</div>

Hi thanks for the wonderful framework! I have two unrelated elastic cluster. I port-forward the kibanas to 5601 and 5602. However, when I login 5602, the 5601 automatically log out, and vise versa. Is there any way to av…

---

## [Math operation on Kibana lucene query](https://discuss.elastic.co/t/math-operation-on-kibana-lucene-query/275930)

<div class="topic-metadata">

**Author:** [@niraj\_pandey](https://discuss.elastic.co/u/niraj_pandey)\
**Replies:** 1\
**Last updated:** [June 15, 2021, 5:02am UTC](https://discuss.elastic.co/t/math-operation-on-kibana-lucene-query/275930 "2021-06-15T05:02:14Z")

</div>

Hi, Just want to know can we perform math operation with lucene query in kibana. I have a variable and it's value is in GB. I want to convert it in KB in lucene query something like this. $mem = 4 Kibana lucene query…

---

## [How to get the timestamp difference](https://discuss.elastic.co/t/how-to-get-the-timestamp-difference/275746)

<div class="topic-metadata">

**Author:** [@Kiran\_manohar\_Chaval](https://discuss.elastic.co/u/Kiran_manohar_Chaval)\
**Replies:** 2\
**Last updated:** [June 15, 2021, 4:38am UTC](https://discuss.elastic.co/t/how-to-get-the-timestamp-difference/275746 "2021-06-15T04:38:27Z")

</div>

Hi All I am trying to get timestamp difference for the following kql filter Here log\_message and timestamp are fields Screenshot attached log\_message : "submit async job-514" or log\_message : "Complete async job-…

---

## [Unable to access "share" button in Discovery menu](https://discuss.elastic.co/t/unable-to-access-share-button-in-discovery-menu/275892)

<div class="topic-metadata">

**Author:** [@aerodynamic](https://discuss.elastic.co/u/aerodynamic)\
**Replies:** 1\
**Last updated:** [June 15, 2021, 1:45am UTC](https://discuss.elastic.co/t/unable-to-access-share-button-in-discovery-menu/275892 "2021-06-15T01:45:24Z")

</div>

Hello, While previously I have been able to access the "share" button in the discovery tab. I'm no longer able to. License is Platinum Version is 7.8.0 Broken in Chrome, works in Safari

---

## [How to export dashboard/visualization to another es clusters? (I have 3 isolated es clusters, and I want to sync the dashboards among them)](https://discuss.elastic.co/t/how-to-export-dashboard-visualization-to-another-es-clusters-i-have-3-isolated-es-clusters-and-i-want-to-sync-the-dashboards-among-them/275847)

<div class="topic-metadata">

**Author:** [@fzyzcjy](https://discuss.elastic.co/u/fzyzcjy)\
**Replies:** 2\
**Last updated:** [June 15, 2021, 12:55am UTC](https://discuss.elastic.co/t/how-to-export-dashboard-visualization-to-another-es-clusters-i-have-3-isolated-es-clusters-and-i-want-to-sync-the-dashboards-among-them/275847 "2021-06-15T00:55:45Z")

</div>

Hi thanks for the wonderful app! I have 3 isolated es clusters, and I want to sync the dashboards among them. Therefore, I wonder how to export dashboard/visualization to another es clusters?

---

## [Dashboard Drilldowns do not work in Data Table (7.13.1)](https://discuss.elastic.co/t/dashboard-drilldowns-do-not-work-in-data-table-7-13-1/275878)

<div class="topic-metadata">

**Author:** [@Jeffrey\_Wilk](https://discuss.elastic.co/u/Jeffrey_Wilk)\
**Replies:** 6\
**Last updated:** [June 14, 2021, 8:15pm UTC](https://discuss.elastic.co/t/dashboard-drilldowns-do-not-work-in-data-table-7-13-1/275878 "2021-06-14T20:15:26Z")

</div>

At the help page here it says that Drilldowns are supported in data tables, and the option exists when editing a table panel from a dashboard. However, it does not work. I have tried on our previous version of 7.12.1 a…

---

## [Not able to create index pattern in kibana (7.10.2)](https://discuss.elastic.co/t/not-able-to-create-index-pattern-in-kibana-7-10-2/275519)

<div class="topic-metadata">

**Author:** [@attacker](https://discuss.elastic.co/u/attacker)\
**Replies:** 3\
**Last updated:** [June 14, 2021, 9:16pm UTC](https://discuss.elastic.co/t/not-able-to-create-index-pattern-in-kibana-7-10-2/275519 "2021-06-14T21:16:29Z")

</div>

Hi, I have a standalone setup of ELK 7.10.2 on CentOS Server. I have ingested data into elasticsearch using logstash, but the problem here is after ingesting data into elasticsearch the kibana UI is not allowing me the …

---

## [Unique count per fieldA by FieldB and sum this total per fieldC + graphing](https://discuss.elastic.co/t/unique-count-per-fielda-by-fieldb-and-sum-this-total-per-fieldc-graphing/275359)

<div class="topic-metadata">

**Author:** [@KS\_123](https://discuss.elastic.co/u/KS_123)\
**Replies:** 3\
**Last updated:** [June 14, 2021, 9:02pm UTC](https://discuss.elastic.co/t/unique-count-per-fielda-by-fieldb-and-sum-this-total-per-fieldc-graphing/275359 "2021-06-14T21:02:04Z")

</div>

I want to do a unique count per fieldA(serialNumber) by FieldB(CommandID) and sum this total per fieldC(farmID). Which I can do in Kibana, but then I want to be able to collapse the rows to just show the FieldC(farmID) …

---

## [Metricbeat to Logstash to ElasticSearch - Cannot See Any Hosts Defined, But Data Is Definitely Coming In](https://discuss.elastic.co/t/metricbeat-to-logstash-to-elasticsearch-cannot-see-any-hosts-defined-but-data-is-definitely-coming-in/275715)

<div class="topic-metadata">

**Author:** [@jthart](https://discuss.elastic.co/u/jthart)\
**Replies:** 8\
**Last updated:** [June 14, 2021, 7:46pm UTC](https://discuss.elastic.co/t/metricbeat-to-logstash-to-elasticsearch-cannot-see-any-hosts-defined-but-data-is-definitely-coming-in/275715 "2021-06-14T19:46:03Z")

</div>

For background information, I've tried following instructions in these posts and am still encountering an issue: Kibana Metrics – 500 Internal Server Error Host data wont populate in dashboards when upgrading beats fro…

---

## [By terms grouped data show the same value in time series](https://discuss.elastic.co/t/by-terms-grouped-data-show-the-same-value-in-time-series/275422)

<div class="topic-metadata">

**Author:** [@Michael\_Kramer](https://discuss.elastic.co/u/Michael_Kramer)\
**Replies:** 1\
**Last updated:** [June 14, 2021, 4:09pm UTC](https://discuss.elastic.co/t/by-terms-grouped-data-show-the-same-value-in-time-series/275422 "2021-06-14T16:09:31Z")

</div>

So I am trying to show the size of multiple folders over time in a time series diagram. The Data is formated like this: "Folder": \[ {"ID":1, "Path":"/boot", "Size\_in\_B":139174528 }, {"ID":2, "Path":"/bin", "Size\_in\_B":…

---

## [Why flebeat Tomcat dashboard is not in my kibana](https://discuss.elastic.co/t/why-flebeat-tomcat-dashboard-is-not-in-my-kibana/275641)

<div class="topic-metadata">

**Author:** [@venkatesh\_prasanth](https://discuss.elastic.co/u/venkatesh_prasanth)\
**Replies:** 1\
**Last updated:** [June 14, 2021, 3:25pm UTC](https://discuss.elastic.co/t/why-flebeat-tomcat-dashboard-is-not-in-my-kibana/275641 "2021-06-14T15:25:32Z")

</div>

Hello, when i give log path to tomcat.yml in filebeat , where my logs will visualize. i cant able to find a seperate dashboard for fiilebeat tomcat in kibana.

---

## [Reporting from kibana max size 10mb](https://discuss.elastic.co/t/reporting-from-kibana-max-size-10mb/275550)

<div class="topic-metadata">

**Author:** [@Matteo\_Rainieri](https://discuss.elastic.co/u/Matteo_Rainieri)\
**Replies:** 1\
**Last updated:** [June 14, 2021, 3:04pm UTC](https://discuss.elastic.co/t/reporting-from-kibana-max-size-10mb/275550 "2021-06-14T15:04:02Z")

</div>

Good morning. I have a question: we tried to export several days of logs from the share\>csv report in kibana's interface. We only got 45 minutes of logs (instead on 1 month) cause the max size appears to be 10mb. I tr…

---

## [Display a gauge from the time of the last received log](https://discuss.elastic.co/t/display-a-gauge-from-the-time-of-the-last-received-log/274088)

<div class="topic-metadata">

**Author:** [@ATEADSGEO](https://discuss.elastic.co/u/ATEADSGEO)\
**Replies:** 2\
**Last updated:** [June 14, 2021, 2:59pm UTC](https://discuss.elastic.co/t/display-a-gauge-from-the-time-of-the-last-received-log/274088 "2021-06-14T14:59:26Z")

</div>

Hello, I am begining in kibana/ELK. In a monitoring dashboard, I would like to display an 'alert' if the last received log is becoming old. The gauge seems to be adapted : green if last log is newer than 1 minute, then…

---

## [Vega visualization issue](https://discuss.elastic.co/t/vega-visualization-issue/275230)

<div class="topic-metadata">

**Author:** [@Nisha2297](https://discuss.elastic.co/u/Nisha2297)\
**Replies:** 2\
**Last updated:** [June 14, 2021, 2:45pm UTC](https://discuss.elastic.co/t/vega-visualization-issue/275230 "2021-06-14T14:45:34Z")

</div>

I am facing issue with Vega visualization. It is showing error as "EsError". Can anybody let me know what this error means and how to rectify it?

---

## [How to calculate cumulative sum on date/time difference?](https://discuss.elastic.co/t/how-to-calculate-cumulative-sum-on-date-time-difference/275707)

<div class="topic-metadata">

**Author:** [@nilei](https://discuss.elastic.co/u/nilei)\
**Replies:** 1\
**Last updated:** [June 14, 2021, 2:34pm UTC](https://discuss.elastic.co/t/how-to-calculate-cumulative-sum-on-date-time-difference/275707 "2021-06-14T14:34:16Z")

</div>

Dear all, I have documents in my index with two Date/Time fields: "Created" and "Closed". Now I want to know how many documents exist at a time on a timeline where the relative time, that is the one currently displayed/…

---

## [Use field of a document as range's value in a Goal Visualization](https://discuss.elastic.co/t/use-field-of-a-document-as-ranges-value-in-a-goal-visualization/275799)

<div class="topic-metadata">

**Author:** [@mar-ro](https://discuss.elastic.co/u/mar-ro)\
**Replies:** 4\
**Last updated:** [June 14, 2021, 2:14pm UTC](https://discuss.elastic.co/t/use-field-of-a-document-as-ranges-value-in-a-goal-visualization/275799 "2021-06-14T14:14:09Z")

</div>

Good morning! I would like to know if it's possible to use a field's value of a document as superior range's value in a Goal Visualization. My intention is indicate the total number of monitors in that field of the Goa…

---

## [Generate CSR / Template to the SSL certificate](https://discuss.elastic.co/t/generate-csr-template-to-the-ssl-certificate/275761)

<div class="topic-metadata">

**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\
**Replies:** 1\
**Last updated:** [June 14, 2021, 2:13pm UTC](https://discuss.elastic.co/t/generate-csr-template-to-the-ssl-certificate/275761 "2021-06-14T14:13:03Z")

</div>

Hi, I have a question about adding non self-sign certificates to Elastic Stack. What is the issue of generating CSRs and what is required in the template for certifications for Elastic Stack? What encryption with cert…

---

## [Deploying Kibana build without test script](https://discuss.elastic.co/t/deploying-kibana-build-without-test-script/275782)

<div class="topic-metadata">

**Author:** [@ravi\_yadav2](https://discuss.elastic.co/u/ravi_yadav2)\
**Replies:** 1\
**Last updated:** [June 14, 2021, 2:07pm UTC](https://discuss.elastic.co/t/deploying-kibana-build-without-test-script/275782 "2021-06-14T14:07:08Z")

</div>

Hi Team, I want to understand , is there any risk of commenting out test cases in kibana 7.10.2 "test": "grunt test"

---

## [How can i make exactly same table as this table in kibana with that line graph included in datatable](https://discuss.elastic.co/t/how-can-i-make-exactly-same-table-as-this-table-in-kibana-with-that-line-graph-included-in-datatable/273166)

<div class="topic-metadata">

**Author:** [@Jay\_Gajjar](https://discuss.elastic.co/u/Jay_Gajjar)\
**Replies:** 3\
**Last updated:** [June 14, 2021, 1:28pm UTC](https://discuss.elastic.co/t/how-can-i-make-exactly-same-table-as-this-table-in-kibana-with-that-line-graph-included-in-datatable/273166 "2021-06-14T13:28:53Z")

</div>

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=315)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=317)
