# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=330

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 331

---

## [Plugin installation was unsuccessful due to error "ENOENT: no such file or directory, mkdir"](https://discuss.elastic.co/t/plugin-installation-was-unsuccessful-due-to-error-enoent-no-such-file-or-directory-mkdir/272539)

<div class="topic-metadata">

**Author:** [@Pratiks](https://discuss.elastic.co/u/Pratiks)\
**Replies:** 1\
**Last updated:** [May 12, 2021, 12:49pm UTC](https://discuss.elastic.co/t/plugin-installation-was-unsuccessful-due-to-error-enoent-no-such-file-or-directory-mkdir/272539 "2021-05-12T12:49:08Z")

</div>

I am trying to install enhance table plugin which is available in the github here GitHub - fbaligand/kibana-enhanced-table: Kibana visualization like a Data Table, but with enhanced features like computed columns, filter…

---

## [Date fields comparison](https://discuss.elastic.co/t/date-fields-comparison/272724)

<div class="topic-metadata">

**Author:** [@g\_k\_b](https://discuss.elastic.co/u/g_k_b)\
**Replies:** 2\
**Last updated:** [May 12, 2021, 12:32pm UTC](https://discuss.elastic.co/t/date-fields-comparison/272724 "2021-05-12T12:32:58Z")

</div>

Hi There! I would desire to create a scripted field comparing 2 date fields in Kibana, in particular: I want to use current date ( new Date().getTime() ) and a date field I indexed already (named expiring date). The co…

---

## [Bar charts as percentage no longer clickable in Kibana 7.12.1](https://discuss.elastic.co/t/bar-charts-as-percentage-no-longer-clickable-in-kibana-7-12-1/272745)

<div class="topic-metadata">

**Author:** [@alrubaa](https://discuss.elastic.co/u/alrubaa)\
**Replies:** 1\
**Last updated:** [May 12, 2021, 11:55am UTC](https://discuss.elastic.co/t/bar-charts-as-percentage-no-longer-clickable-in-kibana-7-12-1/272745 "2021-05-12T11:55:54Z")

</div>

Hi All, I have just update Elasticsearch and Kibana from 7.11 to 7.12.1 and I noticed that any bar chart I have that is displaying percentage is no longer clickable. If I change the bar chart from percentage to normal, …

---

## [Import Canvas to dashboard](https://discuss.elastic.co/t/import-canvas-to-dashboard/272684)

<div class="topic-metadata">

**Author:** [@Mik\_a](https://discuss.elastic.co/u/Mik_a)\
**Replies:** 3\
**Last updated:** [May 12, 2021, 6:56am UTC](https://discuss.elastic.co/t/import-canvas-to-dashboard/272684 "2021-05-12T06:56:31Z")

</div>

I need images and custom icons in the dashboard. In the canvas editor I can do that. However, is it possible to import the canvas to a dashboard?

---

## [Exclude weekends(Saturdays and Sundays) from my dashboard view](https://discuss.elastic.co/t/exclude-weekends-saturdays-and-sundays-from-my-dashboard-view/272757)

<div class="topic-metadata">

**Author:** [@mohanss08](https://discuss.elastic.co/u/mohanss08)\
**Replies:** 10\
**Last updated:** [May 12, 2021, 4:31am UTC](https://discuss.elastic.co/t/exclude-weekends-saturdays-and-sundays-from-my-dashboard-view/272757 "2021-05-12T04:31:26Z")

</div>

I am using ELK – 7.12.1 version and currently I am looking for a way to filter-out the weekends(Saturdays and Sundays) from my dashboard view. On my Dashboard I have (Vertical Bar, Line, Data table, Pie & Gauge) chart v…

---

## [Modsecurity logs to kibana dashboard](https://discuss.elastic.co/t/modsecurity-logs-to-kibana-dashboard/272726)

<div class="topic-metadata">

**Author:** [@Kenny188](https://discuss.elastic.co/u/Kenny188)\
**Replies:** 1\
**Last updated:** [May 11, 2021, 11:08pm UTC](https://discuss.elastic.co/t/modsecurity-logs-to-kibana-dashboard/272726 "2021-05-11T23:08:33Z")

</div>

HI , I'm currently working on WAF (web application firewall) ModSecurity , and I'm trying to forward the logs files of modsec into kibana so it can be visualise from there and be more untestable . My first time worki…

---

## [Documents not showing Discover, show in queries and document counts](https://discuss.elastic.co/t/documents-not-showing-discover-show-in-queries-and-document-counts/272740)

<div class="topic-metadata">

**Author:** [@LoganS](https://discuss.elastic.co/u/LoganS)\
**Replies:** 2\
**Last updated:** [May 11, 2021, 8:35pm UTC](https://discuss.elastic.co/t/documents-not-showing-discover-show-in-queries-and-document-counts/272740 "2021-05-11T20:35:01Z")

</div>

I have some documents that were created via Elastic's REST API. When logged into Kibana to view these records, I am able to see them in the results using a GET or PUT request in Dev Tools and in the document count for t…

---

## [Automatically visualize data on kibana from input?](https://discuss.elastic.co/t/automatically-visualize-data-on-kibana-from-input/271613)

<div class="topic-metadata">

**Author:** [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\
**Replies:** 14\
**Last updated:** [May 11, 2021, 7:41pm UTC](https://discuss.elastic.co/t/automatically-visualize-data-on-kibana-from-input/271613 "2021-05-11T19:41:03Z")

</div>

I'm wondering if there's a way to automatically visualize data on KIBANA. ? My logstash will receive frequent new inputs, and i need to know if there's way to automatically create dashboards ? may be a way to define in…

---

## [Can we edit Kibana's own fancy dashboards or make similar?](https://discuss.elastic.co/t/can-we-edit-kibanas-own-fancy-dashboards-or-make-similar/272718)

<div class="topic-metadata">

**Author:** [@Mark\_Duncan](https://discuss.elastic.co/u/Mark_Duncan)\
**Replies:** 2\
**Last updated:** [May 11, 2021, 5:39pm UTC](https://discuss.elastic.co/t/can-we-edit-kibanas-own-fancy-dashboards-or-make-similar/272718 "2021-05-11T17:39:12Z")

</div>

Is it possible to make pages like these ourselves in Kibana, i.e. these layouts, and the nice min/max/current views? thanks in advance! Mark

---

## [Error: Failed to decrypt report job data. Please ensure that xpack.reporting.encryptionKey is set and re-generate this report. Error: Unsupported state or unable to authenticate data](https://discuss.elastic.co/t/error-failed-to-decrypt-report-job-data-please-ensure-that-xpack-reporting-encryptionkey-is-set-and-re-generate-this-report-error-unsupported-state-or-unable-to-authenticate-data/272713)

<div class="topic-metadata">

**Author:** [@testsemd\_email](https://discuss.elastic.co/u/testsemd_email)\
**Replies:** 1\
**Last updated:** [May 11, 2021, 4:02pm UTC](https://discuss.elastic.co/t/error-failed-to-decrypt-report-job-data-please-ensure-that-xpack-reporting-encryptionkey-is-set-and-re-generate-this-report-error-unsupported-state-or-unable-to-authenticate-data/272713 "2021-05-11T16:02:59Z")

</div>

Hi, I'm using elastic open source version 7.10.1 in my elastic cluster. xpack.reporting.encryptionKey has configured in kibana.yml I got this error while generating a CSV file using kibana. Also it occurs randomly. …

---

## [\[7.12.0\] Kibana Line Chart creates Duplicates when more than 10 lines](https://discuss.elastic.co/t/7-12-0-kibana-line-chart-creates-duplicates-when-more-than-10-lines/272640)

<div class="topic-metadata">

**Author:** [@pruoff](https://discuss.elastic.co/u/pruoff)\
**Replies:** 2\
**Last updated:** [May 11, 2021, 3:46pm UTC](https://discuss.elastic.co/t/7-12-0-kibana-line-chart-creates-duplicates-when-more-than-10-lines/272640 "2021-05-11T15:46:45Z")

</div>

Hi! When creating a Kibana Line Chart Visualization in v7.12.0 or v7.12.1, I encounter an issue that duplicate lines are shown, when adding an eleventh line. In my case, I have 3 y-axes but I observe the same issue for …

---

## [Kibana Sort in visualization is not correct](https://discuss.elastic.co/t/kibana-sort-in-visualization-is-not-correct/272607)

<div class="topic-metadata">

**Author:** [@lachlann562](https://discuss.elastic.co/u/lachlann562)\
**Replies:** 3\
**Last updated:** [May 11, 2021, 3:11pm UTC](https://discuss.elastic.co/t/kibana-sort-in-visualization-is-not-correct/272607 "2021-05-11T15:11:10Z")

</div>

In some visualizations, the sorting appears to not respect the selected values. for example, when using metricbeat i have a scripted field for "hour of day", "day of week" and "sundayOfWeek". Depending on how i filter my…

---

## [Graphing Interface Utilization with Timelion or TVSB](https://discuss.elastic.co/t/graphing-interface-utilization-with-timelion-or-tvsb/272459)

<div class="topic-metadata">

**Author:** [@nickr](https://discuss.elastic.co/u/nickr)\
**Replies:** 5\
**Last updated:** [May 11, 2021, 2:37pm UTC](https://discuss.elastic.co/t/graphing-interface-utilization-with-timelion-or-tvsb/272459 "2021-05-11T14:37:55Z")

</div>

Hi, I'm trying to follow this blogpost to normalize network traffic collected by the SNMP filter (ifHCInOctects/ifHCOutOctets) on a 7.12 stack. I'm sure I had this working on a previous version 6 months or so ago. At …

---

## [Combine different log events in one data table](https://discuss.elastic.co/t/combine-different-log-events-in-one-data-table/272403)

<div class="topic-metadata">

**Author:** [@bab](https://discuss.elastic.co/u/bab)\
**Replies:** 1\
**Last updated:** [May 11, 2021, 2:04pm UTC](https://discuss.elastic.co/t/combine-different-log-events-in-one-data-table/272403 "2021-05-11T14:04:40Z")

</div>

Hi all, given are two log files from two different sources. log 1 2021-05-03 10:00:38,656 INFO \[Service TP\] : | M\_ID(3867) | ABC trade received from AFG via MM 2021-05-03 10:00:38,662 INFO \[Service TP\] : | M\_ID(3…

---

## [How can I delete an index after one month automatically?](https://discuss.elastic.co/t/how-can-i-delete-an-index-after-one-month-automatically/272695)

<div class="topic-metadata">

**Author:** [@Martin\_perez](https://discuss.elastic.co/u/Martin_perez)\
**Replies:** 1\
**Last updated:** [May 11, 2021, 12:47pm UTC](https://discuss.elastic.co/t/how-can-i-delete-an-index-after-one-month-automatically/272695 "2021-05-11T12:47:22Z")

</div>

Hello everybody. I have a docker mounted elk stack server, which collects logs from various filebeats from other servers. Every month, I start a new index pattern,and I would like to make the previous index pattern auto…

---

## [Kibana Dashboard Drilldown](https://discuss.elastic.co/t/kibana-dashboard-drilldown/272554)

<div class="topic-metadata">

**Author:** [@Nisha2297](https://discuss.elastic.co/u/Nisha2297)\
**Replies:** 6\
**Last updated:** [May 11, 2021, 11:20am UTC](https://discuss.elastic.co/t/kibana-dashboard-drilldown/272554 "2021-05-11T11:20:54Z")

</div>

Is it possible to create drilldowns on a Table visualization in Kibana version 7.11? I want to create a drilldown on a table viz which redirects me to another table containing details in the same dashboard.

---

## [Machine learning - Data visualiser unable to determine file structure](https://discuss.elastic.co/t/machine-learning-data-visualiser-unable-to-determine-file-structure/272654)

<div class="topic-metadata">

**Author:** [@AQ\_Amra](https://discuss.elastic.co/u/AQ_Amra)\
**Replies:** 2\
**Last updated:** [May 11, 2021, 9:56am UTC](https://discuss.elastic.co/t/machine-learning-data-visualiser-unable-to-determine-file-structure/272654 "2021-05-11T09:56:18Z")

</div>

Hi, I am attempting to load a CSV using the Machine learning - Data visualiser, however if i upload a file with more than 30K records, the Machine learning - Data visualiser fails to determine the file structure. I hav…

---

## [KQL and scripted fields](https://discuss.elastic.co/t/kql-and-scripted-fields/272260)

<div class="topic-metadata">

**Author:** [@thomasv95](https://discuss.elastic.co/u/thomasv95)\
**Replies:** 5\
**Last updated:** [May 11, 2021, 8:15am UTC](https://discuss.elastic.co/t/kql-and-scripted-fields/272260 "2021-05-11T08:15:41Z")

</div>

Hello, I've been having issues with KQL queries using scripted fields. Specifically, queries on numerical fields using operators such as "\<=" or "\>" throw the following error when using a Lens : \[lens\_merge\_tables\] \> \[e…

---

## [String Scripted field conversion to keyword](https://discuss.elastic.co/t/string-scripted-field-conversion-to-keyword/272531)

<div class="topic-metadata">

**Author:** [@SHUBHAM\_SALUNKHE](https://discuss.elastic.co/u/SHUBHAM_SALUNKHE)\
**Replies:** 5\
**Last updated:** [May 11, 2021, 5:35am UTC](https://discuss.elastic.co/t/string-scripted-field-conversion-to-keyword/272531 "2021-05-11T05:35:40Z")

</div>

Hi, I have created one scripted field of string format. Need to convert that in keyword format to perform aggregation operation on that scripted field. How can I convert that string? Thanks in advance.

---

## [Need curl/kibana command which returns "same ids" which are present in 2 different indexes](https://discuss.elastic.co/t/need-curl-kibana-command-which-returns-same-ids-which-are-present-in-2-different-indexes/272529)

<div class="topic-metadata">

**Author:** [@Rinku\_Gulia](https://discuss.elastic.co/u/Rinku_Gulia)\
**Replies:** 5\
**Last updated:** [May 11, 2021, 4:43am UTC](https://discuss.elastic.co/t/need-curl-kibana-command-which-returns-same-ids-which-are-present-in-2-different-indexes/272529 "2021-05-11T04:43:58Z")

</div>

We have a requirement where we are generating 2 indexes one is open index ,another is closed index. we want to know if same data/id exists in both of them( we are inserting bulk data through one job and at the same time…

---

## [After enabling xPack ssl I am now receiving an error with monitoring failed to flush export bulks](https://discuss.elastic.co/t/after-enabling-xpack-ssl-i-am-now-receiving-an-error-with-monitoring-failed-to-flush-export-bulks/272630)

<div class="topic-metadata">

**Author:** [@cheeks5281](https://discuss.elastic.co/u/cheeks5281)\
**Replies:** 2\
**Last updated:** [May 11, 2021, 4:30am UTC](https://discuss.elastic.co/t/after-enabling-xpack-ssl-i-am-now-receiving-an-error-with-monitoring-failed-to-flush-export-bulks/272630 "2021-05-11T04:30:13Z")

</div>

the yaml with my basic auth was working before on my ElasticSearch/Kibana 7.1 cluster. Within my pod for the data nodes I have I am now seeing the following message org.elasticsearch.xpack.monitoring.exporter.ExportExce…

---

## [How to create by fields sending data through elasticsearch](https://discuss.elastic.co/t/how-to-create-by-fields-sending-data-through-elasticsearch/272615)

<div class="topic-metadata">

**Author:** [@bruno\_aleixo](https://discuss.elastic.co/u/bruno_aleixo)\
**Replies:** 4\
**Last updated:** [May 11, 2021, 2:40am UTC](https://discuss.elastic.co/t/how-to-create-by-fields-sending-data-through-elasticsearch/272615 "2021-05-11T02:40:54Z")

</div>

I know sending by through logstash, creating a grok pattern within the pippeline configuration follows example created by going through logstash, I would like to reply in the same way sending through elasticsearch, is …

---

## [How do i create a visualisation/dashboard with all data from yesterday](https://discuss.elastic.co/t/how-do-i-create-a-visualisation-dashboard-with-all-data-from-yesterday/272623)

<div class="topic-metadata">

**Author:** [@KS\_123](https://discuss.elastic.co/u/KS_123)\
**Replies:** 1\
**Last updated:** [May 11, 2021, 1:04am UTC](https://discuss.elastic.co/t/how-do-i-create-a-visualisation-dashboard-with-all-data-from-yesterday/272623 "2021-05-11T01:04:57Z")

</div>

how do i create a visualisation/dashboard with all data from yesterday? So in the date picker it will always default to yesterday whenever I look at the visualisation or the dashboard.

---

## [Setting custom date format from kibana for index template](https://discuss.elastic.co/t/setting-custom-date-format-from-kibana-for-index-template/272611)

<div class="topic-metadata">

**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\
**Replies:** 6\
**Last updated:** [May 11, 2021, 12:54am UTC](https://discuss.elastic.co/t/setting-custom-date-format-from-kibana-for-index-template/272611 "2021-05-11T00:54:13Z")

</div>

I there a was to include a date format in an index template mapping using Kibaba? I can select from the standard ones but I there is no option for entering a custom format. Noe of the standard formats seem to support d…

---

## [Can I press enter in a Kibana Search and not do a search it just moves the text to a new line](https://discuss.elastic.co/t/can-i-press-enter-in-a-kibana-search-and-not-do-a-search-it-just-moves-the-text-to-a-new-line/272618)

<div class="topic-metadata">

**Author:** [@KS\_123](https://discuss.elastic.co/u/KS_123)\
**Replies:** 1\
**Last updated:** [May 10, 2021, 11:05pm UTC](https://discuss.elastic.co/t/can-i-press-enter-in-a-kibana-search-and-not-do-a-search-it-just-moves-the-text-to-a-new-line/272618 "2021-05-10T23:05:26Z")

</div>

Can I press enter in a Kibana Search and not do a search it just moves the text to a new line? So my data appears like this, that is not one big long text in one line and rather 4 different lines: eventType:DeviceReque…

---

## [Alerts an Action 7.12 not working](https://discuss.elastic.co/t/alerts-an-action-7-12-not-working/271806)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 4\
**Last updated:** [May 10, 2021, 8:16pm UTC](https://discuss.elastic.co/t/alerts-an-action-7-12-not-working/271806 "2021-05-10T20:16:23Z")

</div>

Hi, I have create some alerts for ML jobs, and is not sending mails, I have tested the send email action and it works, I have set the alerts to the lowest level of anomaly score, both bucket and record (on separated aler…

---

## [Static lookup empty field value not showing in Kibana](https://discuss.elastic.co/t/static-lookup-empty-field-value-not-showing-in-kibana/272428)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 2\
**Last updated:** [May 10, 2021, 3:16pm UTC](https://discuss.elastic.co/t/static-lookup-empty-field-value-not-showing-in-kibana/272428 "2021-05-10T15:16:06Z")

</div>

Hi all, I'm using Currency field with option of Static lookup to change values . But I'm not able to change values for empty field values. Below screenshot. Empty fields are not showing unknown. Still they are emp…

---

## [Kibana increasing memory usage](https://discuss.elastic.co/t/kibana-increasing-memory-usage/272171)

<div class="topic-metadata">

**Author:** [@radovan](https://discuss.elastic.co/u/radovan)\
**Replies:** 4\
**Last updated:** [May 10, 2021, 2:03pm UTC](https://discuss.elastic.co/t/kibana-increasing-memory-usage/272171 "2021-05-10T14:03:05Z")

</div>

Hi, after upgrading to 7.12.0 a strange problem started occuring. Kibana keeps consuming more and more RAM until it goes to swap and then I have to restart kibana service because the performance goes wildly off. We have…

---

## [Kibana Sorting out Array values](https://discuss.elastic.co/t/kibana-sorting-out-array-values/272266)

<div class="topic-metadata">

**Author:** [@kanikasingla](https://discuss.elastic.co/u/kanikasingla)\
**Replies:** 4\
**Last updated:** [May 10, 2021, 1:35pm UTC](https://discuss.elastic.co/t/kibana-sorting-out-array-values/272266 "2021-05-10T13:35:13Z")

</div>

Hi Team, I am working with Elastic FunctionBeat to send logs from AWS CloudWatch Logs. I am able to create data tables, graphs etc. There is one issue when I am trying to show field which is nested array (nestedResults…

---

## [Dashboard or Canvas with a drop down for filters for a data table](https://discuss.elastic.co/t/dashboard-or-canvas-with-a-drop-down-for-filters-for-a-data-table/272310)

<div class="topic-metadata">

**Author:** [@chapmantrain](https://discuss.elastic.co/u/chapmantrain)\
**Replies:** 4\
**Last updated:** [May 10, 2021, 1:32pm UTC](https://discuss.elastic.co/t/dashboard-or-canvas-with-a-drop-down-for-filters-for-a-data-table/272310 "2021-05-10T13:32:43Z")

</div>

I have some network utilization data that I need to filter by all hours, prime business hours, non business hours. The filters are not straight forward as I'm dealing with local times across time zones. The prime filter …

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=329)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=331)
