# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=323

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 324

---

## [Fleet Server installation options](https://discuss.elastic.co/t/fleet-server-installation-options/274261)

<div class="topic-metadata">

**Author:** [@nemhods](https://discuss.elastic.co/u/nemhods)\
**Replies:** 4\
**Last updated:** [May 31, 2021, 6:29am UTC](https://discuss.elastic.co/t/fleet-server-installation-options/274261 "2021-05-31T06:29:59Z")

</div>

Hey, currently, the only way to install fleet server is using a subprocess of elastic agent. This is very weird to me - Elastic Agent is a client component, and Fleet Server is an infrastructure component. I typically …

---

## [Kibana is not acessible locally](https://discuss.elastic.co/t/kibana-is-not-acessible-locally/274397)

<div class="topic-metadata">

**Author:** [@hulkbuster](https://discuss.elastic.co/u/hulkbuster)\
**Replies:** 2\
**Last updated:** [May 30, 2021, 11:34pm UTC](https://discuss.elastic.co/t/kibana-is-not-acessible-locally/274397 "2021-05-30T23:34:03Z")

</div>

Hello! I'm new to Kibana and trying to setup Elastic Stack locally following this tutorial: https://www.rosehosting.com/blog/how-to-install-elk-stack-on-ubuntu-20-04/ All systemd services are running, but Kibana is not…

---

## [File structure cannot be determined. illegal\_argument\_exception](https://discuss.elastic.co/t/file-structure-cannot-be-determined-illegal-argument-exception/273858)

<div class="topic-metadata">

**Author:** [@Muhammad\_Uxman](https://discuss.elastic.co/u/Muhammad_Uxman)\
**Replies:** 2\
**Last updated:** [May 30, 2021, 6:01am UTC](https://discuss.elastic.co/t/file-structure-cannot-be-determined-illegal-argument-exception/273858 "2021-05-30T06:01:08Z")

</div>

Hi Elastic Community, I am new to Kibana and Elastic. I am following the official Elastic tutorial. In the demonstration, a file was uploaded to Data Visualizer, which was analyzed successfully, but I got the following…

---

## [Kibana | FATAL Error: HELP](https://discuss.elastic.co/t/kibana-fatal-error-help/274274)

<div class="topic-metadata">

**Author:** [@LombardoAndrea195](https://discuss.elastic.co/u/LombardoAndrea195)\
**Replies:** 6\
**Last updated:** [May 30, 2021, 12:09am UTC](https://discuss.elastic.co/t/kibana-fatal-error-help/274274 "2021-05-30T00:09:33Z")

</div>

Hi all I've obtained this error: I've created some plot through vega lite and when I execute again the script used for kibana I've this error but until some time before everthing works well. I've a node of kibana and a…

---

## [Filebeat not working](https://discuss.elastic.co/t/filebeat-not-working/274316)

<div class="topic-metadata">

**Author:** [@Drupad\_Soni](https://discuss.elastic.co/u/Drupad_Soni)\
**Replies:** 4\
**Last updated:** [May 29, 2021, 8:32pm UTC](https://discuss.elastic.co/t/filebeat-not-working/274316 "2021-05-29T20:32:24Z")

</div>

Filebeat not working ● filebeat.service - Filebeat sends log files to Logstash or directly to Elasticsearch. Loaded: loaded (/lib/systemd/system/filebeat.service; disabled; vendor preset: enabled) Active: failed (Resu…

---

## [Calculs statistiques en pourcentage (turnover)](https://discuss.elastic.co/t/calculs-statistiques-en-pourcentage-turnover/273289)

<div class="topic-metadata">

**Author:** [@crigastel](https://discuss.elastic.co/u/crigastel)\
**Replies:** 4\
**Last updated:** [May 28, 2021, 10:34pm UTC](https://discuss.elastic.co/t/calculs-statistiques-en-pourcentage-turnover/273289 "2021-05-28T22:34:59Z")

</div>

Bonjour, Nous utilisons Kibana avec des données salariés (nom, prénom, date d'entrée, date de sortie, statut actif/inactif...). J'ai réussi à réaliser des indicateurs RH (répartition H/F, effectif par site, service, âg…

---

## [Histogram hard\_bounds not working with min\_doc\_count=0 Kibana 7.10.2](https://discuss.elastic.co/t/histogram-hard-bounds-not-working-with-min-doc-count-0-kibana-7-10-2/274375)

<div class="topic-metadata">

**Author:** [@ssimmons](https://discuss.elastic.co/u/ssimmons)\
**Replies:** 1\
**Last updated:** [May 28, 2021, 8:18pm UTC](https://discuss.elastic.co/t/histogram-hard-bounds-not-working-with-min-doc-count-0-kibana-7-10-2/274375 "2021-05-28T20:18:37Z")

</div>

I'm creating a histogram and running into issues where extended\_bounds is pulling back a lot more buckets than it should. The upper and low bounds of the histogram can vary dramatically in my plugin and the interval size…

---

## [Kibana: representing evolution of boolean field in time](https://discuss.elastic.co/t/kibana-representing-evolution-of-boolean-field-in-time/274336)

<div class="topic-metadata">

**Author:** [@mostpha456](https://discuss.elastic.co/u/mostpha456)\
**Replies:** 1\
**Last updated:** [May 28, 2021, 5:14pm UTC](https://discuss.elastic.co/t/kibana-representing-evolution-of-boolean-field-in-time/274336 "2021-05-28T17:14:47Z")

</div>

Hello, I am trying to represent the evolution over time of a boolean field. Do you have any suggestion how to do it ? Thank you

---

## [Enhanced Table](https://discuss.elastic.co/t/enhanced-table/274306)

<div class="topic-metadata">

**Author:** [@Krunal](https://discuss.elastic.co/u/Krunal)\
**Replies:** 2\
**Last updated:** [May 28, 2021, 2:15pm UTC](https://discuss.elastic.co/t/enhanced-table/274306 "2021-05-28T14:15:41Z")

</div>

Hi @fbaligand i would like to use enhanced table in 7.13 version .... will you able help me?

---

## [Export Dashboard into ELK](https://discuss.elastic.co/t/export-dashboard-into-elk/274335)

<div class="topic-metadata">

**Author:** [@ITchandj](https://discuss.elastic.co/u/ITchandj)\
**Replies:** 1\
**Last updated:** [May 28, 2021, 2:15pm UTC](https://discuss.elastic.co/t/export-dashboard-into-elk/274335 "2021-05-28T14:15:05Z")

</div>

Hello everybody... Please how I can export /import dashboard into ELk. I looking for the Workflow to do it. Thank you for answers in advance...

---

## [Is it possible to include other fields in the top level term aggregation](https://discuss.elastic.co/t/is-it-possible-to-include-other-fields-in-the-top-level-term-aggregation/273528)

<div class="topic-metadata">

**Author:** [@chapmantrain](https://discuss.elastic.co/u/chapmantrain)\
**Replies:** 4\
**Last updated:** [May 28, 2021, 2:01pm UTC](https://discuss.elastic.co/t/is-it-possible-to-include-other-fields-in-the-top-level-term-aggregation/273528 "2021-05-28T14:01:27Z")

</div>

I'm doing an aggregation on devices and calculating a metric on each. Is there a way to include other fields for the device in that top bucket like id, city, state? Each document in the vn-aggr index has those fields in …

---

## [Top 10 result in anomaly explorer tab (machine learning)](https://discuss.elastic.co/t/top-10-result-in-anomaly-explorer-tab-machine-learning/273231)

<div class="topic-metadata">

**Author:** [@abhishek30](https://discuss.elastic.co/u/abhishek30)\
**Replies:** 6\
**Last updated:** [May 28, 2021, 1:02pm UTC](https://discuss.elastic.co/t/top-10-result-in-anomaly-explorer-tab-machine-learning/273231 "2021-05-28T13:02:33Z")

</div>

Hi, I have a small setup of elk stack of 7.9.0. I created a ML job on the basis of my data and wanted to remove pagination from anomaly explorer tab. Also want to show top 10 anomaly in anomaly explorer. Also attached…

---

## [Index pattern for data stream](https://discuss.elastic.co/t/index-pattern-for-data-stream/274264)

<div class="topic-metadata">

**Author:** [@anmmok](https://discuss.elastic.co/u/anmmok)\
**Replies:** 2\
**Last updated:** [May 28, 2021, 11:23am UTC](https://discuss.elastic.co/t/index-pattern-for-data-stream/274264 "2021-05-28T11:23:15Z")

</div>

I'm trying to visualize the data from the data stream in Kibana. So I’ve created an index template “api-logs” with the index pattern “api-logs\*” and add some documents to the new data stream: PUT api-logs/\_bulk { "cr…

---

## [Accessing event data in an Kibana Alerts](https://discuss.elastic.co/t/accessing-event-data-in-an-kibana-alerts/271541)

<div class="topic-metadata">

**Author:** [@dcamozzato](https://discuss.elastic.co/u/dcamozzato)\
**Replies:** 4\
**Last updated:** [May 28, 2021, 10:35am UTC](https://discuss.elastic.co/t/accessing-event-data-in-an-kibana-alerts/271541 "2021-05-28T10:35:06Z")

</div>

I am trying to create a Kibana alert for a syslog that is captured by logstash and minimally parsed. The format is this: \<syslog\_priority\>process\_name\[pid\]: message The "message" portion is not parsed further, but it …

---

## [Load Cloud Kibana dashboard in iframe with API KEY or credentials](https://discuss.elastic.co/t/load-cloud-kibana-dashboard-in-iframe-with-api-key-or-credentials/274307)

<div class="topic-metadata">

**Author:** [@kwoxer](https://discuss.elastic.co/u/kwoxer)\
**Replies:** 2\
**Last updated:** [May 28, 2021, 9:59am UTC](https://discuss.elastic.co/t/load-cloud-kibana-dashboard-in-iframe-with-api-key-or-credentials/274307 "2021-05-28T09:59:11Z")

</div>

Well there are different way how to do the auth in on-prem Elastic and Kibana: But is this somehow also possible in Elastic Cloud? I cannot find a way doing that. I simply need a iframe that links to a specific Dashb…

---

## [Omit pinned filters that are inappropriate to a dashboard?](https://discuss.elastic.co/t/omit-pinned-filters-that-are-inappropriate-to-a-dashboard/273901)

<div class="topic-metadata">

**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\
**Replies:** 6\
**Last updated:** [May 28, 2021, 9:38am UTC](https://discuss.elastic.co/t/omit-pinned-filters-that-are-inappropriate-to-a-dashboard/273901 "2021-05-28T09:38:14Z")

</div>

I have developed a set of dashboards. At the top of each dashboard is a Markdown panel that contains a row of links to those dashboards. Some dashboards can be usefully filtered by the job\_name field, so it makes sense …

---

## [Timelion](https://discuss.elastic.co/t/timelion/274147)

<div class="topic-metadata">

**Author:** [@Krunal](https://discuss.elastic.co/u/Krunal)\
**Replies:** 7\
**Last updated:** [May 28, 2021, 8:45am UTC](https://discuss.elastic.co/t/timelion/274147 "2021-05-28T08:45:36Z")

</div>

how i can implement formula of simple interest in timelion graph?

---

## [Can a normal user get API read/write permissions?](https://discuss.elastic.co/t/can-a-normal-user-get-api-read-write-permissions/274066)

<div class="topic-metadata">

**Author:** [@Sandra\_Schlichting](https://discuss.elastic.co/u/Sandra_Schlichting)\
**Replies:** 2\
**Last updated:** [May 28, 2021, 8:35am UTC](https://discuss.elastic.co/t/can-a-normal-user-get-api-read-write-permissions/274066 "2021-05-28T08:35:08Z")

</div>

Dear all =) Is it possible for a normal Kibana user to have API read/write permissions? What I would like to be to do is create and delete Kibana Alerts, but when I do $ curl -u sandra -X POST "https://kibana.example.…

---

## [How to cut syslog/sophos filebeat output into pieces?](https://discuss.elastic.co/t/how-to-cut-syslog-sophos-filebeat-output-into-pieces/274301)

<div class="topic-metadata">

**Author:** [@3lastic](https://discuss.elastic.co/u/3lastic)\
**Replies:** 0\
**Last updated:** [May 28, 2021, 8:19am UTC](https://discuss.elastic.co/t/how-to-cut-syslog-sophos-filebeat-output-into-pieces/274301 "2021-05-28T08:19:06Z")

</div>

Hello all, I'm completely new to Elastic/ELK. Currently I'm playing arround with some syslog output from a Sophos UTM network firewall. I successfully get the data via filebeat module for sophos into the stack. But m…

---

## [Sum 2 queries in Canvas element](https://discuss.elastic.co/t/sum-2-queries-in-canvas-element/272763)

<div class="topic-metadata">

**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\
**Replies:** 5\
**Last updated:** [May 28, 2021, 8:04am UTC](https://discuss.elastic.co/t/sum-2-queries-in-canvas-element/272763 "2021-05-28T08:04:36Z")

</div>

Hello, I need to sum up 2 numbers from 2 different queries. I read this post but was not able to achieve any result. Can someone please focus me on the solution? Need to achieve something like this: select amount fr…

---

## [Share canvas embed on website](https://discuss.elastic.co/t/share-canvas-embed-on-website/273006)

<div class="topic-metadata">

**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\
**Replies:** 26\
**Last updated:** [May 28, 2021, 7:32am UTC](https://discuss.elastic.co/t/share-canvas-embed-on-website/273006 "2021-05-28T07:32:30Z")

</div>

Hello, Isn't it really possible to embed a canvas workpad on a site, but it shows live data? Thank you

---

## [Geopoint based pie chart map for success and failed results?](https://discuss.elastic.co/t/geopoint-based-pie-chart-map-for-success-and-failed-results/273842)

<div class="topic-metadata">

**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\
**Replies:** 10\
**Last updated:** [May 28, 2021, 6:31am UTC](https://discuss.elastic.co/t/geopoint-based-pie-chart-map-for-success-and-failed-results/273842 "2021-05-28T06:31:06Z")

</div>

Hello I have a index with geopoints and a result which is either "failure" or "success". I would like to draw points on the map with each result but red points are failures and green points are successful. The issue is…

---

## [Creating custom runtime field which does a reverse dns lookup of another field](https://discuss.elastic.co/t/creating-custom-runtime-field-which-does-a-reverse-dns-lookup-of-another-field/274258)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 2\
**Last updated:** [May 28, 2021, 5:57am UTC](https://discuss.elastic.co/t/creating-custom-runtime-field-which-does-a-reverse-dns-lookup-of-another-field/274258 "2021-05-28T05:57:05Z")

</div>

Hello, Is it possible to do a (reverse) DNS lookup in a runtime field? How would I do this? Best regards, Willem

---

## [How to create onClick event in Kibana?](https://discuss.elastic.co/t/how-to-create-onclick-event-in-kibana/274039)

<div class="topic-metadata">

**Author:** [@padamrai](https://discuss.elastic.co/u/padamrai)\
**Replies:** 2\
**Last updated:** [May 28, 2021, 5:41am UTC](https://discuss.elastic.co/t/how-to-create-onclick-event-in-kibana/274039 "2021-05-28T05:41:20Z")

</div>

It is possible to create event when clicking on the table row in kibana, it send some data from that table to another index?

---

## [Enabling security in Kibana without X-pack](https://discuss.elastic.co/t/enabling-security-in-kibana-without-x-pack/274155)

<div class="topic-metadata">

**Author:** [@Ashwin\_Srivastav](https://discuss.elastic.co/u/Ashwin_Srivastav)\
**Replies:** 2\
**Last updated:** [May 28, 2021, 5:12am UTC](https://discuss.elastic.co/t/enabling-security-in-kibana-without-x-pack/274155 "2021-05-28T05:12:37Z")

</div>

I am new to Elasticsearch and Kibana. I am using version 6.8.0 for both Kibana and Elasticsearch. I have a multi-node cluster and I want to add security to Kibana. So after reading the documentation, I got to know that i…

---

## [Update from 7.8 to 7.12.1](https://discuss.elastic.co/t/update-from-7-8-to-7-12-1/274172)

<div class="topic-metadata">

**Author:** [@Lorenzo\_Allori](https://discuss.elastic.co/u/Lorenzo_Allori)\
**Replies:** 1\
**Last updated:** [May 28, 2021, 3:36am UTC](https://discuss.elastic.co/t/update-from-7-8-to-7-12-1/274172 "2021-05-28T03:36:52Z")

</div>

Hello! I updated from 7.8 to 7.12.1 and imported by dashboards to the system. Everything seemed fine but some problems are showing: the filters are not applying globally but only on some map layers, I had to create …

---

## [Defining drill-downs per visualization a tad tedious?](https://discuss.elastic.co/t/defining-drill-downs-per-visualization-a-tad-tedious/274143)

<div class="topic-metadata">

**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\
**Replies:** 2\
**Last updated:** [May 28, 2021, 3:03am UTC](https://discuss.elastic.co/t/defining-drill-downs-per-visualization-a-tad-tedious/274143 "2021-05-28T03:03:35Z")

</div>

...or am I just lazy? I have several dashboards that show various metrics, such as memory usage and CPU usage, by "job" name. Each dashboard has several "... by Job Name" visualizations. For each ".. by Job Name" viz, …

---

## [About Kibana version compatibility with ElasticSearch version upgrade](https://discuss.elastic.co/t/about-kibana-version-compatibility-with-elasticsearch-version-upgrade/274176)

<div class="topic-metadata">

**Author:** [@k-narazaki](https://discuss.elastic.co/u/k-narazaki)\
**Replies:** 4\
**Last updated:** [May 28, 2021, 2:32am UTC](https://discuss.elastic.co/t/about-kibana-version-compatibility-with-elasticsearch-version-upgrade/274176 "2021-05-28T02:32:20Z")

</div>

I have a question about compatibility between ElasticSearch and Kibana versions. ElasticSearch has been upgraded as follows. (Old) 6.5.4 (New) 7.8.0 I was wondering if it would be necessary to upgrade Kibana with the…

---

## [You do not have permission to access requested page Kibana: Help](https://discuss.elastic.co/t/you-do-not-have-permission-to-access-requested-page-kibana-help/274253)

<div class="topic-metadata">

**Author:** [@jasieltego](https://discuss.elastic.co/u/jasieltego)\
**Replies:** 3\
**Last updated:** [May 28, 2021, 2:16am UTC](https://discuss.elastic.co/t/you-do-not-have-permission-to-access-requested-page-kibana-help/274253 "2021-05-28T02:16:43Z")

</div>

Hi, I have followed the guide on this site for security integration. Now When I restarted Kibana I'm entering kibana\_system as the username and the password I created but after the login I get a message stating You do …

---

## [Need help with filebeat and Kibana index pattern creation](https://discuss.elastic.co/t/need-help-with-filebeat-and-kibana-index-pattern-creation/274243)

<div class="topic-metadata">

**Author:** [@byoungman](https://discuss.elastic.co/u/byoungman)\
**Replies:** 1\
**Last updated:** [May 27, 2021, 11:42pm UTC](https://discuss.elastic.co/t/need-help-with-filebeat-and-kibana-index-pattern-creation/274243 "2021-05-27T23:42:07Z")

</div>

I was out on vacation last week and while I was out there was an issue with one of our kibana index patterns getting corrupted (for lack of a better term). We have a 'responseTime' stamp in our incoming payload that we …

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=322)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=324)
