# Kibana **URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=339 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 340 --- ## [How to triggered mail in watcher if two alphanumeric key difference is more than 2 sec](https://discuss.elastic.co/t/how-to-triggered-mail-in-watcher-if-two-alphanumeric-key-difference-is-more-than-2-sec/270838)
**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\ **Replies:** 0\ **Last updated:** [April 21, 2021, 12:34pm UTC](https://discuss.elastic.co/t/how-to-triggered-mail-in-watcher-if-two-alphanumeric-key-difference-is-more-than-2-sec/270838 "2021-04-21T12:34:31Z")
Hello all, PFB two log lines: \[0915adf2-ff62-421e-97a8-0a00cbb7df7f\] \[07:53:43 Information\] SpotQuote Response "ResponseId":"5679ty678" \[0915adf2-ff62-421e-97a8-0a00cbb7df7f\] \[07:53:41 Information\] SpotQuote Request "R… --- ## [Elasticsearch Visualization Search error with empty response](https://discuss.elastic.co/t/elasticsearch-visualization-search-error-with-empty-response/270706)
**Author:** [@Kuo\_Hugo](https://discuss.elastic.co/u/Kuo_Hugo)\ **Replies:** 4\ **Last updated:** [April 21, 2021, 11:38am UTC](https://discuss.elastic.co/t/elasticsearch-visualization-search-error-with-empty-response/270706 "2021-04-21T11:38:03Z")
The batch query for rendering a visualization from the search programname:"proxy-server" AND status\_int:\[200 TO 299\] and request\_method:GET . The search works fine even with 7days period. But the visualization as below a… --- ## [Cluster Monitoring Error 7.12.0](https://discuss.elastic.co/t/cluster-monitoring-error-7-12-0/270822)
**Author:** [@spike83](https://discuss.elastic.co/u/spike83)\ **Replies:** 1\ **Last updated:** [April 21, 2021, 11:02am UTC](https://discuss.elastic.co/t/cluster-monitoring-error-7-12-0/270822 "2021-04-21T11:02:52Z")
Hi, I'm in the process of a rolling upgrade from 7.10.0 to 7.12.0 my process is to drop an ELS server from the cluster, and bring up a new blank one on the latest version and let it reassign the shards. During this pro… --- ## [Kibana field is not show on Visualization](https://discuss.elastic.co/t/kibana-field-is-not-show-on-visualization/270789)
**Author:** [@Nazakat](https://discuss.elastic.co/u/Nazakat)\ **Replies:** 7\ **Last updated:** [April 21, 2021, 9:07am UTC](https://discuss.elastic.co/t/kibana-field-is-not-show-on-visualization/270789 "2021-04-21T09:07:03Z")
Kibana field is show on discover. But It not show create visualization This is my discover page This i create visualization --- ## [Elastic Slack Configuration for 6.5.4 version on Kubernetes](https://discuss.elastic.co/t/elastic-slack-configuration-for-6-5-4-version-on-kubernetes/270198)
**Author:** [@SukeshGupta](https://discuss.elastic.co/u/SukeshGupta)\ **Replies:** 2\ **Last updated:** [April 21, 2021, 7:37am UTC](https://discuss.elastic.co/t/elastic-slack-configuration-for-6-5-4-version-on-kubernetes/270198 "2021-04-21T07:37:48Z")
Hello Team, We are trying to configure slack for sending alerts. But its throwing errors. Elastic Version - 6.5.4 Our Elastic Service is deployed via Kubernetes. Please find the slack configuration below : xpack.not… --- ## [Change date format in timepicker from 24 hr to 12 hour](https://discuss.elastic.co/t/change-date-format-in-timepicker-from-24-hr-to-12-hour/270108)
**Author:** [@fidsamurai](https://discuss.elastic.co/u/fidsamurai)\ **Replies:** 5\ **Last updated:** [April 21, 2021, 6:41am UTC](https://discuss.elastic.co/t/change-date-format-in-timepicker-from-24-hr-to-12-hour/270108 "2021-04-21T06:41:53Z")
Hi, I would like to change the time format in the date-picker in Discover, Visualizations and Dashboards from 24 hours to 12 hours eg. currently it's 15:30 16:00.... I would like it to show as 3:30 pm 4:00pm. Could som… --- ## [Clickeable element and filter accordingly](https://discuss.elastic.co/t/clickeable-element-and-filter-accordingly/270775)
**Author:** [@glitz](https://discuss.elastic.co/u/glitz)\ **Replies:** 1\ **Last updated:** [April 21, 2021, 4:56am UTC](https://discuss.elastic.co/t/clickeable-element-and-filter-accordingly/270775 "2021-04-21T04:56:30Z")
Hello, I have tried without success to make a canvas that in first page have some data, let's say a pie with 3 subnet ranges, and if a click any of them it brings me to a second page with the details of every ip within c… --- ## [Kibana 7.12 nginx reverse proxy, docker compose](https://discuss.elastic.co/t/kibana-7-12-nginx-reverse-proxy-docker-compose/270776)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 1\ **Last updated:** [April 21, 2021, 4:36am UTC](https://discuss.elastic.co/t/kibana-7-12-nginx-reverse-proxy-docker-compose/270776 "2021-04-21T04:36:46Z")
Hi Im trying to use nginx as a reverse proxy for kibana but I can make it work, this is my kibana.yml server.name: kibana server.host: "localhost" elasticsearch.hosts: \[ "https://elasticsearch:9200" \] elasticsearch.user… --- ## [Group records by geo-location on Maps](https://discuss.elastic.co/t/group-records-by-geo-location-on-maps/270759)
**Author:** [@tshayan](https://discuss.elastic.co/u/tshayan)\ **Replies:** 1\ **Last updated:** [April 21, 2021, 2:05am UTC](https://discuss.elastic.co/t/group-records-by-geo-location-on-maps/270759 "2021-04-21T02:05:11Z")
I'm wondering if it is possible to group all records that have the same geo-location on the map? For instance I have 10 records with geo\_location { "lon": "-75.9247", "lat": "44.5299" } but they show up as 10 separate do… --- ## [Filebeat Netflow Module || Kibana Dashboard Extremly Slow](https://discuss.elastic.co/t/filebeat-netflow-module-kibana-dashboard-extremly-slow/269926)
**Author:** [@albertosoares](https://discuss.elastic.co/u/albertosoares)\ **Replies:** 6\ **Last updated:** [April 21, 2021, 1:18am UTC](https://discuss.elastic.co/t/filebeat-netflow-module-kibana-dashboard-extremly-slow/269926 "2021-04-21T01:18:16Z")
I've deployed the Netflow module and when I go to the Filebeat Netflow Dashboards and I query for 24 hours, today or 4 hours the query is extremely slow. Environment ELK 7.12 3 data nodes (12 vCPU, 10 RAM -Xms5g m / -… --- ## [Formatdate markdown content](https://discuss.elastic.co/t/formatdate-markdown-content/270585)
**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\ **Replies:** 5\ **Last updated:** [April 20, 2021, 4:06pm UTC](https://discuss.elastic.co/t/formatdate-markdown-content/270585 "2021-04-20T16:06:23Z")
Hi, I have a markdown content in Canvas like this: {{#each rows}} ### {{date}} ### {{/each}} where date is, for example: 2021-04-19T13:25:00+02:00 how can i format this date (d/m/y hh:mm) and set the local timezone? … --- ## [Diagnosing slow dashboard/Viz performance in elastic cloud](https://discuss.elastic.co/t/diagnosing-slow-dashboard-viz-performance-in-elastic-cloud/270158)
**Author:** [@johnwood](https://discuss.elastic.co/u/johnwood)\ **Replies:** 8\ **Last updated:** [April 20, 2021, 2:41pm UTC](https://discuss.elastic.co/t/diagnosing-slow-dashboard-viz-performance-in-elastic-cloud/270158 "2021-04-20T14:41:43Z")
Hi - I am looking for some pointers or starting places to diagnose our slow dashboards. If I look at a visualization (they are all 'slow' to render in kibana) by going to inspect\>request\>statistics I see two timing numb… --- ## [Sorting in KQL](https://discuss.elastic.co/t/sorting-in-kql/270711)
**Author:** [@mortenb123](https://discuss.elastic.co/u/mortenb123)\ **Replies:** 2\ **Last updated:** [April 20, 2021, 2:08pm UTC](https://discuss.elastic.co/t/sorting-in-kql/270711 "2021-04-20T14:08:00Z")
Hi, I know I can sort in Elastic api and in kibana, but now I have to use an api which only have KQL input which it encodes in base64 and send to elasticsearch. (external service) I've tried all instances of id: desc\`\`s… --- ## [Multiple sheets in Kibana Table](https://discuss.elastic.co/t/multiple-sheets-in-kibana-table/270702)
**Author:** [@Vivekks](https://discuss.elastic.co/u/Vivekks)\ **Replies:** 1\ **Last updated:** [April 20, 2021, 1:48pm UTC](https://discuss.elastic.co/t/multiple-sheets-in-kibana-table/270702 "2021-04-20T13:48:22Z")
Hi, I'm new to Kibana I want to create multiple sheets in Kibana table just like in excel sheet. Is it possible in Kibana ? --- ## [How to split the JSON field in kibana?](https://discuss.elastic.co/t/how-to-split-the-json-field-in-kibana/270687)
**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\ **Replies:** 1\ **Last updated:** [April 20, 2021, 10:55am UTC](https://discuss.elastic.co/t/how-to-split-the-json-field-in-kibana/270687 "2021-04-20T10:55:23Z")
I recently upgraded to version 7.12, and I found that kibana recombined all fields into JSON arrays, but this would cause me trouble. I need to copy the original JSON format. I checked the configuration on the kibana pag… --- ## [TSVB terms visualization](https://discuss.elastic.co/t/tsvb-terms-visualization/269843)
**Author:** [@oshtman](https://discuss.elastic.co/u/oshtman)\ **Replies:** 4\ **Last updated:** [April 20, 2021, 10:25am UTC](https://discuss.elastic.co/t/tsvb-terms-visualization/269843 "2021-04-20T10:25:26Z")
Hi, I'm fairly new to Kibana and I'm attempting to setup a visualization where I have fields of the form ("my\_field\_name" + "custom\_part"): my\_field\_name\_custom\_part1=true my\_field\_name\_custom\_part1=false ... etc W… --- ## [Chnge Datetime format to MMMM yyyy](https://discuss.elastic.co/t/chnge-datetime-format-to-mmmm-yyyy/270376)
**Author:** [@varunbsgaur](https://discuss.elastic.co/u/varunbsgaur)\ **Replies:** 4\ **Last updated:** [April 20, 2021, 10:16am UTC](https://discuss.elastic.co/t/chnge-datetime-format-to-mmmm-yyyy/270376 "2021-04-20T10:16:31Z")
Hi Team, We need to change the format of timestamp to MMMM yyyy . I have tried datetimeformater but it's not working. The result that I got is not aggregated . Kindly help me with this. my scripted field:- ZonedDateTi… --- ## [How to pass dynamic username-password through nginx for authenticating embedded iframe](https://discuss.elastic.co/t/how-to-pass-dynamic-username-password-through-nginx-for-authenticating-embedded-iframe/270485)
**Author:** [@Ram\_Chaudhari](https://discuss.elastic.co/u/Ram_Chaudhari)\ **Replies:** 1\ **Last updated:** [April 20, 2021, 7:42am UTC](https://discuss.elastic.co/t/how-to-pass-dynamic-username-password-through-nginx-for-authenticating-embedded-iframe/270485 "2021-04-20T07:42:11Z")
I have a web application created using angular 8 in which I want to embed a kibana iframe. it should auto signin once the user logs in. I have done it using nginx reverse proxy method for one user. But I have to show dif… --- ## [Bulk renaming of fields in Kibana saved objects?](https://discuss.elastic.co/t/bulk-renaming-of-fields-in-kibana-saved-objects/270642)
**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\ **Replies:** 1\ **Last updated:** [April 20, 2021, 7:17am UTC](https://discuss.elastic.co/t/bulk-renaming-of-fields-in-kibana-saved-objects/270642 "2021-04-20T07:17:08Z")
I'm developing Kibana (7.11.2) dashboards based on JSON Lines data that is forwarded by a (proprietary) application that I'm also involved in developing. I'm currently using the application to forward data with "compact… --- ## [Kibana map](https://discuss.elastic.co/t/kibana-map/269552)
**Author:** [@Nazakat](https://discuss.elastic.co/u/Nazakat)\ **Replies:** 4\ **Last updated:** [April 20, 2021, 5:46am UTC](https://discuss.elastic.co/t/kibana-map/269552 "2021-04-20T05:46:14Z")
The image of the map on kibana is not showing after connected to VPN? --- ## [Winlogbeat to Kibana api/failed](https://discuss.elastic.co/t/winlogbeat-to-kibana-api-failed/270530)
**Author:** [@Coeus.IT](https://discuss.elastic.co/u/Coeus.IT)\ **Replies:** 4\ **Last updated:** [April 20, 2021, 5:24am UTC](https://discuss.elastic.co/t/winlogbeat-to-kibana-api-failed/270530 "2021-04-20T05:24:21Z")
Hi, I have setup a Ubuntu server for centralized logs. Installed: Elasticsearch Kibana Logstash Now, when I wants to run ".\\winlogbeat.exe setup --dashboard" from Windows 10 machine, it shows "error connecting to k… --- ## [Export to PDF option missing from dashboards](https://discuss.elastic.co/t/export-to-pdf-option-missing-from-dashboards/270435)
**Author:** [@azulgrana](https://discuss.elastic.co/u/azulgrana)\ **Replies:** 9\ **Last updated:** [April 19, 2021, 11:38pm UTC](https://discuss.elastic.co/t/export-to-pdf-option-missing-from-dashboards/270435 "2021-04-19T23:38:56Z")
Hi team, I have a Kibana instance w/ a platinum license and when I'm under Dashboards and I go to the share menu I don't see the option to export to PDF. I have tried enabling xpack.reporting.enabled: true on the kib… --- ## [Missing logs randomly on kibana](https://discuss.elastic.co/t/missing-logs-randomly-on-kibana/270329)
**Author:** [@danushkalakmina](https://discuss.elastic.co/u/danushkalakmina)\ **Replies:** 1\ **Last updated:** [April 19, 2021, 11:32pm UTC](https://discuss.elastic.co/t/missing-logs-randomly-on-kibana/270329 "2021-04-19T23:32:37Z")
Hi My Kibana logs are missing randomly from every log bulk. But the raw log is in the original log location on the application server. --- ## [Conversion of hexadecimal to integer](https://discuss.elastic.co/t/conversion-of-hexadecimal-to-integer/270615)
**Author:** [@Sruthi1](https://discuss.elastic.co/u/Sruthi1)\ **Replies:** 1\ **Last updated:** [April 19, 2021, 9:14pm UTC](https://discuss.elastic.co/t/conversion-of-hexadecimal-to-integer/270615 "2021-04-19T21:14:01Z")
Hiiii I am using kibana 7.2.0. I have used the function Integer.parseInt() to convert the hexadecimal to integer value, but it is throwing runtime error. if(doc\['hex\_value'\]!=null){return Integer.parseInt(doc\['hex\_valu… --- ## [Kibana date shows up as plus one](https://discuss.elastic.co/t/kibana-date-shows-up-as-plus-one/270614)
**Author:** [@gbandasha](https://discuss.elastic.co/u/gbandasha)\ **Replies:** 3\ **Last updated:** [April 19, 2021, 7:50pm UTC](https://discuss.elastic.co/t/kibana-date-shows-up-as-plus-one/270614 "2021-04-19T19:50:23Z")
Hello Team, My dates are showing up as minus one in comparison to the raw JSON, when I click on discover and search a record it shows up as 20210410 (see snippet attached) but when I check the raw JSON it is 20210411 … --- ## [Canvas conditional statement](https://discuss.elastic.co/t/canvas-conditional-statement/270495)
**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\ **Replies:** 9\ **Last updated:** [April 19, 2021, 6:24pm UTC](https://discuss.elastic.co/t/canvas-conditional-statement/270495 "2021-04-19T18:24:15Z")
Hi, Is it possible to add, on the canvas, an element that, based on the value of a field of an index, shows an image instead of another? Thank you --- ## [Restore kibana from a snapshot](https://discuss.elastic.co/t/restore-kibana-from-a-snapshot/270517)
**Author:** [@NightSpark](https://discuss.elastic.co/u/NightSpark)\ **Replies:** 1\ **Last updated:** [April 19, 2021, 6:11pm UTC](https://discuss.elastic.co/t/restore-kibana-from-a-snapshot/270517 "2021-04-19T18:11:54Z")
Hi, Is it possible to just restore the .kibana system index from a snapshot? This is in the event that, through human error, an alert is modified and we wish to restore the original without losing other data that may h… --- ## [Kibana setting Alerts/Anomalies to email](https://discuss.elastic.co/t/kibana-setting-alerts-anomalies-to-email/270590)
**Author:** [@miklin](https://discuss.elastic.co/u/miklin)\ **Replies:** 1\ **Last updated:** [April 19, 2021, 6:01pm UTC](https://discuss.elastic.co/t/kibana-setting-alerts-anomalies-to-email/270590 "2021-04-19T18:01:35Z")
Hi, I'm taking the Kibana training courses and have a quick question. Is it possible to set an email alert on Kibana? If it's doable, how can I set up? (There are training sessions on Machine learning in Elastic Stack a… --- ## [Unable to receive source fields over email from Watcher alerting](https://discuss.elastic.co/t/unable-to-receive-source-fields-over-email-from-watcher-alerting/269914)
**Author:** [@arunhk3](https://discuss.elastic.co/u/arunhk3)\ **Replies:** 5\ **Last updated:** [April 19, 2021, 3:44pm UTC](https://discuss.elastic.co/t/unable-to-receive-source-fields-over-email-from-watcher-alerting/269914 "2021-04-19T15:44:06Z")
Hi All, I have been trying for nearly 4 hours already to get an email alert with data table using Watcher, despite receiving the email it fails to send the data using the \_source fields specified. My Watcher alert is as… --- ## [How to create a comma separated KQL filter of field values with a colon](https://discuss.elastic.co/t/how-to-create-a-comma-separated-kql-filter-of-field-values-with-a-colon/270487)
**Author:** [@DanielV](https://discuss.elastic.co/u/DanielV)\ **Replies:** 3\ **Last updated:** [April 19, 2021, 3:30pm UTC](https://discuss.elastic.co/t/how-to-create-a-comma-separated-kql-filter-of-field-values-with-a-colon/270487 "2021-04-19T15:30:28Z")
One of the fields of the index I'm querying is 'sessionid' , it also has a sessionid.keyword field variant. Values contain a colon. Examples: 136:11 99:5 What I'm trying to accomplish is a filter in the KQL-query bar… [Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=338) [Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=340)