# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=331

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 332

---

## [I need pass one kibana nginx header name(testHeader1) to elasticsearch proxy. Now i use requestHeadersWhitelist which including "testHeader1" ,but it does not word](https://discuss.elastic.co/t/i-need-pass-one-kibana-nginx-header-name-testheader1-to-elasticsearch-proxy-now-i-use-requestheaderswhitelist-which-including-testheader1-but-it-does-not-word/272374)

<div class="topic-metadata">

**Author:** [@linger000](https://discuss.elastic.co/u/linger000)\
**Replies:** 1\
**Last updated:** [May 10, 2021, 12:07pm UTC](https://discuss.elastic.co/t/i-need-pass-one-kibana-nginx-header-name-testheader1-to-elasticsearch-proxy-now-i-use-requestheaderswhitelist-which-including-testheader1-but-it-does-not-word/272374 "2021-05-10T12:07:27Z")

</div>

i need pass one kibana nginx header name(testHeader1) to elasticsearch proxy. Now i use requestHeadersWhitelist which including "testHeader1" ,but it does not word. kibana version:6.8.0

---

## [\[script\_exception\] runtime error bad request](https://discuss.elastic.co/t/script-exception-runtime-error-bad-request/272394)

<div class="topic-metadata">

**Author:** [@Furman](https://discuss.elastic.co/u/Furman)\
**Replies:** 1\
**Last updated:** [May 10, 2021, 8:08am UTC](https://discuss.elastic.co/t/script-exception-runtime-error-bad-request/272394 "2021-05-10T08:08:48Z")

</div>

Hi, I am new in Kibana .So I added a scripted field in one of the index pattern. I am pretty sure the code should work fine. When I previewed the results, it works fine. However, when I tried to view it in Discover, …

---

## [Kibana hosts list](https://discuss.elastic.co/t/kibana-hosts-list/272315)

<div class="topic-metadata">

**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\
**Replies:** 5\
**Last updated:** [May 10, 2021, 7:53am UTC](https://discuss.elastic.co/t/kibana-hosts-list/272315 "2021-05-10T07:53:01Z")

</div>

Hello, I have several devices that send data to Elastic via HTTP POST. Is it possible to see them on a list somewhere? Maybe in the Security-\> Hosts section? Thank you

---

## [Panel Settings in Lens - Where have the gone?](https://discuss.elastic.co/t/panel-settings-in-lens-where-have-the-gone/272534)

<div class="topic-metadata">

**Author:** [@Matt.Wash](https://discuss.elastic.co/u/Matt.Wash)\
**Replies:** 2\
**Last updated:** [May 10, 2021, 6:56am UTC](https://discuss.elastic.co/t/panel-settings-in-lens-where-have-the-gone/272534 "2021-05-10T06:56:56Z")

</div>

When creating a vis with Lens, can someone point me in the direction where the panel settings are located? I'm trying to change the settings for the "fill missing values" Thanks in advance, Matt

---

## [Length of bar and text are not matching in bar visualization](https://discuss.elastic.co/t/length-of-bar-and-text-are-not-matching-in-bar-visualization/271539)

<div class="topic-metadata">

**Author:** [@Pranusha119](https://discuss.elastic.co/u/Pranusha119)\
**Replies:** 2\
**Last updated:** [May 10, 2021, 6:38am UTC](https://discuss.elastic.co/t/length-of-bar-and-text-are-not-matching-in-bar-visualization/271539 "2021-05-10T06:38:28Z")

</div>

Hi, In below spec though same field (a\_count) has been used for x-axis and text, text is shown correctly where as length of bars is incorrect (x-axis). May I pls know where the issue is? { "$schema": "https://vega.g…

---

## [Kibana Search Latency](https://discuss.elastic.co/t/kibana-search-latency/272493)

<div class="topic-metadata">

**Author:** [@111470](https://discuss.elastic.co/u/111470)\
**Replies:** 1\
**Last updated:** [May 10, 2021, 6:21am UTC](https://discuss.elastic.co/t/kibana-search-latency/272493 "2021-05-10T06:21:41Z")

</div>

Hello, I want to know how kibana search latency is calculated. Because I don't understand the kibana source code, so I want to ask you to help me

---

## [Dae histogram with line chart](https://discuss.elastic.co/t/dae-histogram-with-line-chart/272405)

<div class="topic-metadata">

**Author:** [@abhishek30](https://discuss.elastic.co/u/abhishek30)\
**Replies:** 1\
**Last updated:** [May 10, 2021, 6:16am UTC](https://discuss.elastic.co/t/dae-histogram-with-line-chart/272405 "2021-05-10T06:16:43Z")

</div>

The first interval values on x axis for 0-15 minutes is plotted on 00:00 rather than 00:15. How can i get it to plot on 00:15.

---

## [Kibana missing primary shards](https://discuss.elastic.co/t/kibana-missing-primary-shards/272522)

<div class="topic-metadata">

**Author:** [@Ben\_Tang](https://discuss.elastic.co/u/Ben_Tang)\
**Replies:** 7\
**Last updated:** [May 10, 2021, 1:44am UTC](https://discuss.elastic.co/t/kibana-missing-primary-shards/272522 "2021-05-10T01:44:28Z")

</div>

I have 2 Kibana nodes and the monitoring page keeps saying missing primary shard GET \_cluster/allocation/explain shows nothing to explain

---

## [Windows logs filtered with Active Directory Groups](https://discuss.elastic.co/t/windows-logs-filtered-with-active-directory-groups/272212)

<div class="topic-metadata">

**Author:** [@MitxelF](https://discuss.elastic.co/u/MitxelF)\
**Replies:** 3\
**Last updated:** [May 10, 2021, 1:08am UTC](https://discuss.elastic.co/t/windows-logs-filtered-with-active-directory-groups/272212 "2021-05-10T01:08:23Z")

</div>

Sorry if it is obvious but i'm very new with this. I would like to filter our windows security logs based in some groups manged in the active directory. I don't know how to start. Any idea for begin to think how? Tha…

---

## [Kibana failed to load policy issue](https://discuss.elastic.co/t/kibana-failed-to-load-policy-issue/272461)

<div class="topic-metadata">

**Author:** [@Mithoon](https://discuss.elastic.co/u/Mithoon)\
**Replies:** 1\
**Last updated:** [May 10, 2021, 12:28am UTC](https://discuss.elastic.co/t/kibana-failed-to-load-policy-issue/272461 "2021-05-10T00:28:10Z")

</div>

Currently using index state management created policy to delete indexes which are older than 5 days. Using templates applying policies to new index creations. The policy works well for few days and later old indexes stop…

---

## [Connecting Elasticsearch to Kibana](https://discuss.elastic.co/t/connecting-elasticsearch-to-kibana/272463)

<div class="topic-metadata">

**Author:** [@jie\_olaf](https://discuss.elastic.co/u/jie_olaf)\
**Replies:** 1\
**Last updated:** [May 10, 2021, 12:27am UTC](https://discuss.elastic.co/t/connecting-elasticsearch-to-kibana/272463 "2021-05-10T00:27:33Z")

</div>

I am trying to display the iris data in kibana by connecting to elasticsearch and creating an index called "iris" in R. I am taking the following steps: Execute elasticsearch 5.5.3 batch file (localhost:9200 displays re…

---

## [Auditbeat system overview ECS](https://discuss.elastic.co/t/auditbeat-system-overview-ecs/272469)

<div class="topic-metadata">

**Author:** [@logger](https://discuss.elastic.co/u/logger)\
**Replies:** 2\
**Last updated:** [May 9, 2021, 8:54am UTC](https://discuss.elastic.co/t/auditbeat-system-overview-ecs/272469 "2021-05-09T08:54:11Z")

</div>

Hi there, Running elasticsearch and kibana as a docker with version 7.12.1 and auditbeat on two hosts with also version 7.12.1 Everything is running fine. I just have found an issue in the Auditbeat System Overview Da…

---

## [Importing csv met date format error](https://discuss.elastic.co/t/importing-csv-met-date-format-error/272457)

<div class="topic-metadata">

**Author:** [@Jeff-Tian](https://discuss.elastic.co/u/Jeff-Tian)\
**Replies:** 3\
**Last updated:** [May 8, 2021, 2:38pm UTC](https://discuss.elastic.co/t/importing-csv-met-date-format-error/272457 "2021-05-08T14:38:26Z")

</div>

I'm quite new on kibana and I met the following error when importing csv file: File could not be read \[illegal\_argument\_exception\] failed to parse date field \[3/3/2021 21:40:25.76\] with format \[d/M/…

---

## [Error: ENOENT: no such file or directory, open 'config/kibana-server.key'](https://discuss.elastic.co/t/error-enoent-no-such-file-or-directory-open-config-kibana-server-key/272340)

<div class="topic-metadata">

**Author:** [@ograso](https://discuss.elastic.co/u/ograso)\
**Replies:** 5\
**Last updated:** [May 7, 2021, 3:04pm UTC](https://discuss.elastic.co/t/error-enoent-no-such-file-or-directory-open-config-kibana-server-key/272340 "2021-05-07T15:04:19Z")

</div>

I have an issue about setting up basic security for the Elastic Stack plus secured HTTPS traffic when I try to set on kibana.yml. Elastic is working and reachable over https but I receive an error are as follow when I t…

---

## [Create a propper X-Y Chart for continuous datasets (e.g. distance-force)](https://discuss.elastic.co/t/create-a-propper-x-y-chart-for-continuous-datasets-e-g-distance-force/272322)

<div class="topic-metadata">

**Author:** [@mathric](https://discuss.elastic.co/u/mathric)\
**Replies:** 3\
**Last updated:** [May 7, 2021, 3:44pm UTC](https://discuss.elastic.co/t/create-a-propper-x-y-chart-for-continuous-datasets-e-g-distance-force/272322 "2021-05-07T15:44:34Z")

</div>

Hey I'm trying to get things work in ELK. So far I created a index ('undefined') and also a pattern ('unde\*'). Inside the index I am having data like this: Measurement.Distance Measurement.Force Message.Timestamp Me…

---

## [Visualize difference in growth between two time series](https://discuss.elastic.co/t/visualize-difference-in-growth-between-two-time-series/272143)

<div class="topic-metadata">

**Author:** [@snicoll](https://discuss.elastic.co/u/snicoll)\
**Replies:** 9\
**Last updated:** [May 7, 2021, 2:57pm UTC](https://discuss.elastic.co/t/visualize-difference-in-growth-between-two-time-series/272143 "2021-05-07T14:57:24Z")

</div>

Hello, I have an index where each document in the index provides the number of open items and the number of closed items. I'd like to build a visualization that shows if the team is catching up closing issues or, if at …

---

## [Kibana not connecting after https setup](https://discuss.elastic.co/t/kibana-not-connecting-after-https-setup/272311)

<div class="topic-metadata">

**Author:** [@andcur](https://discuss.elastic.co/u/andcur)\
**Replies:** 6\
**Last updated:** [May 7, 2021, 10:26am UTC](https://discuss.elastic.co/t/kibana-not-connecting-after-https-setup/272311 "2021-05-07T10:26:14Z")

</div>

I have enabled https on elastic search and now kibana cannot connect. log \[15:28:25.571\] \[error\]\[elasticsearch\] Request error, retrying GET https://ukee-exp004:9200/\_xpack?accept\_enterprise=true =\> connect E…

---

## [Mapping is different then discover shows](https://discuss.elastic.co/t/mapping-is-different-then-discover-shows/272330)

<div class="topic-metadata">

**Author:** [@alidrsn](https://discuss.elastic.co/u/alidrsn)\
**Replies:** 3\
**Last updated:** [May 7, 2021, 9:31am UTC](https://discuss.elastic.co/t/mapping-is-different-then-discover-shows/272330 "2021-05-07T09:31:05Z")

</div>

Hi there, I am trying to index data which is coming from logstash and ingesting with my ingest-pipeline. I am using index template to use some mapping fields. One of them is response\_time. When i check it from dev to…

---

## [Set Kibana index per Kibana space per beat via API](https://discuss.elastic.co/t/set-kibana-index-per-kibana-space-per-beat-via-api/272395)

<div class="topic-metadata">

**Author:** [@phlegx](https://discuss.elastic.co/u/phlegx)\
**Replies:** 0\
**Last updated:** [May 7, 2021, 9:06am UTC](https://discuss.elastic.co/t/set-kibana-index-per-kibana-space-per-beat-via-api/272395 "2021-05-07T09:06:01Z")

</div>

It is possible to set the index per Kibana space for logAlias and metricAlias like this: $ curl -X POST http://your-kibana.example.com/s/\<space\_id\>/api/saved\_objects/infrastructure-ui-source/default -H 'kbn-xsrf: true'…

---

## [Cannot read property 'get' of undefined](https://discuss.elastic.co/t/cannot-read-property-get-of-undefined/272199)

<div class="topic-metadata">

**Author:** [@Aqib\_Rehman](https://discuss.elastic.co/u/Aqib_Rehman)\
**Replies:** 3\
**Last updated:** [May 6, 2021, 1:47pm UTC](https://discuss.elastic.co/t/cannot-read-property-get-of-undefined/272199 "2021-05-06T13:47:12Z")

</div>

Hi, I'm using Suricata to collect logs on Kibana, after connecting Suricata with Elastic via filebeat, Kibana cannot visualize logs with following error: Cannot read property 'get' of undefined. It receives data but cann…

---

## [Configure Open ID connect using Azure AD roles](https://discuss.elastic.co/t/configure-open-id-connect-using-azure-ad-roles/272137)

<div class="topic-metadata">

**Author:** [@nityaraj06](https://discuss.elastic.co/u/nityaraj06)\
**Replies:** 2\
**Last updated:** [May 6, 2021, 12:17pm UTC](https://discuss.elastic.co/t/configure-open-id-connect-using-azure-ad-roles/272137 "2021-05-06T12:17:19Z")

</div>

Hi, Is it possible to map the azure roles in kibana role mapping since my organisation does not allow azure groups to be enabled in the token response. The only possible fields seem to be username, groups, realm and dn.…

---

## [Last record for each unique value](https://discuss.elastic.co/t/last-record-for-each-unique-value/271077)

<div class="topic-metadata">

**Author:** [@JeremyLoyd](https://discuss.elastic.co/u/JeremyLoyd)\
**Replies:** 2\
**Last updated:** [May 6, 2021, 11:11am UTC](https://discuss.elastic.co/t/last-record-for-each-unique-value/271077 "2021-05-06T11:11:15Z")

</div>

Hello, Our company changed to Elastic few months ago. before then we used to log a lot of things to one simple SQL table. in SQL i was able to find for each unique identifier last value that was recorded with simple Que…

---

## [Pie chart with percentage](https://discuss.elastic.co/t/pie-chart-with-percentage/272168)

<div class="topic-metadata">

**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\
**Replies:** 1\
**Last updated:** [May 6, 2021, 11:08am UTC](https://discuss.elastic.co/t/pie-chart-with-percentage/272168 "2021-05-06T11:08:31Z")

</div>

Hi, I've written this query: SELECT idMaxNet,COUNT(tagId) as num FROM "itt\_data\_bridgenuzoo" WHERE date \>= CURRENT\_DATE - INTERVAL '7' DAY AND idMaxNet!=0 AND (idMaxNet=128 OR idMaxNet=129 OR idMaxNet=130 OR idMaxNet=1…

---

## [Colouring text result from query](https://discuss.elastic.co/t/colouring-text-result-from-query/272149)

<div class="topic-metadata">

**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\
**Replies:** 1\
**Last updated:** [May 6, 2021, 11:05am UTC](https://discuss.elastic.co/t/colouring-text-result-from-query/272149 "2021-05-06T11:05:00Z")

</div>

Hi, I'm trying to color text that is result from a query: filters | essql query="SELECT date + interval '2' hour as dateNew, DATEDIFF('minute',date, CURRENT\_TIMESTAMP()) as diff FROM device\_data\_eggy ORDER BY date D…

---

## [Control visualization](https://discuss.elastic.co/t/control-visualization/272158)

<div class="topic-metadata">

**Author:** [@graimato](https://discuss.elastic.co/u/graimato)\
**Replies:** 9\
**Last updated:** [May 6, 2021, 10:37am UTC](https://discuss.elastic.co/t/control-visualization/272158 "2021-05-06T10:37:59Z")

</div>

Dear all, it is possible to use Control visualization to filter on group of parameters? Suppose that there are: Test ServerTest-1 ServerTest-2 Prod ServerProd-1 ServerProd-2 It is possible to have Control …

---

## [Log Segregation](https://discuss.elastic.co/t/log-segregation/272254)

<div class="topic-metadata">

**Author:** [@Mukund\_Anand](https://discuss.elastic.co/u/Mukund_Anand)\
**Replies:** 1\
**Last updated:** [May 6, 2021, 8:34am UTC](https://discuss.elastic.co/t/log-segregation/272254 "2021-05-06T08:34:51Z")

</div>

Hi, I have requirement to segregate the logs what different users can see. I have a log file as a source with all the logs. But, half of those logs has to be seen by one user and other half has to be seen by the other u…

---

## [Logstash/kibana timezone issue](https://discuss.elastic.co/t/logstash-kibana-timezone-issue/272139)

<div class="topic-metadata">

**Author:** [@edvrfn](https://discuss.elastic.co/u/edvrfn)\
**Replies:** 3\
**Last updated:** [May 6, 2021, 8:07am UTC](https://discuss.elastic.co/t/logstash-kibana-timezone-issue/272139 "2021-05-06T08:07:52Z")

</div>

Below is the sample log message \<12\>May 5 00:10:28 UDM,50c9676c6d24,udm-1.9.3.3438 kernel: \[522844.682013\] IN=br30 OUT=eth4 MAC=76:ac:b9:1e:f2:fc:dc:a6:32:eb:22:ac:08:00 SRC=192.168.3.53 DST=132.145.110.200 LEN=61 TOS=…

---

## [Slow search process in kibana Discover](https://discuss.elastic.co/t/slow-search-process-in-kibana-discover/272188)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 4\
**Last updated:** [May 6, 2021, 6:23am UTC](https://discuss.elastic.co/t/slow-search-process-in-kibana-discover/272188 "2021-05-06T06:23:54Z")

</div>

I am using elk 7.11..i am searching an index size of 100gb but it taking long time more than 5 minutes or i can say it is not showing me the data it can show me only 7 days data although it contain last 30 days data but…

---

## [Add custom field and its value needs to be derived from one of the source field](https://discuss.elastic.co/t/add-custom-field-and-its-value-needs-to-be-derived-from-one-of-the-source-field/272229)

<div class="topic-metadata">

**Author:** [@AnamikaN](https://discuss.elastic.co/u/AnamikaN)\
**Replies:** 2\
**Last updated:** [May 6, 2021, 4:47am UTC](https://discuss.elastic.co/t/add-custom-field-and-its-value-needs-to-be-derived-from-one-of-the-source-field/272229 "2021-05-06T04:47:15Z")

</div>

I need to add one custom field 'log.level' into filebeat.yml. ITs value needs to be derived from one of source field 'message'. I need to extract log level (INFO or DEBUG or ERROR etc.) from message. Message field looks …

---

## [Add custom field and its value needs to be derived from one of the source field](https://discuss.elastic.co/t/add-custom-field-and-its-value-needs-to-be-derived-from-one-of-the-source-field/272119)

<div class="topic-metadata">

**Author:** [@AnamikaN](https://discuss.elastic.co/u/AnamikaN)\
**Replies:** 5\
**Last updated:** [May 6, 2021, 4:48am UTC](https://discuss.elastic.co/t/add-custom-field-and-its-value-needs-to-be-derived-from-one-of-the-source-field/272119 "2021-05-06T04:48:03Z")

</div>

I need to add one custom field 'log.level' into filebeat.yml. ITs value needs to be derived from one of source field 'message'. I need to extract log level (INFO or DEBUG or ERROR etc.) from message. Message field looks …

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=330)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=332)
