# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=342

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 343

---

## [Kibana: Scripted Field: Dynamic date (now - 15d / now - 30d) not working](https://discuss.elastic.co/t/kibana-scripted-field-dynamic-date-now-15d-now-30d-not-working/269781)

<div class="topic-metadata">

**Author:** [@nshari.24](https://discuss.elastic.co/u/nshari.24)\
**Replies:** 4\
**Last updated:** [April 13, 2021, 11:11am UTC](https://discuss.elastic.co/t/kibana-scripted-field-dynamic-date-now-15d-now-30d-not-working/269781 "2021-04-13T11:11:47Z")

</div>

I have a scripted field of the format "Date". When I try using this field in Kibana visualization and apply a filter like "date \> now-30d", I am getting an error: caused\_by": { "type": "date\_time\_pa…

---

## [Time series kibana](https://discuss.elastic.co/t/time-series-kibana/268805)

<div class="topic-metadata">

**Author:** [@Jose\_Manuel\_Tirado](https://discuss.elastic.co/u/Jose_Manuel_Tirado)\
**Replies:** 5\
**Last updated:** [April 13, 2021, 8:24am UTC](https://discuss.elastic.co/t/time-series-kibana/268805 "2021-04-13T08:24:46Z")

</div>

Hi!!: I want to compare a data set from the last 15 min with the total mean accumulated over time. How could i do this in kibana? I have tried as TSVB and Timelion and cannot get the desired result. Can anybody help …

---

## [Display image from rows on kibana](https://discuss.elastic.co/t/display-image-from-rows-on-kibana/269927)

<div class="topic-metadata">

**Author:** [@erwan22](https://discuss.elastic.co/u/erwan22)\
**Replies:** 2\
**Last updated:** [April 13, 2021, 7:32am UTC](https://discuss.elastic.co/t/display-image-from-rows-on-kibana/269927 "2021-04-13T07:32:17Z")

</div>

Hello, I have a DataFrame (100 rows) in which i have a column dedicated to base64 encoded image. I have uploaded this dataframe in elastic and i'm able to visualise all the images in the "Discover" section for each row…

---

## [Watcher alert syntax error](https://discuss.elastic.co/t/watcher-alert-syntax-error/269920)

<div class="topic-metadata">

**Author:** [@Alexandros888](https://discuss.elastic.co/u/Alexandros888)\
**Replies:** 2\
**Last updated:** [April 13, 2021, 6:14am UTC](https://discuss.elastic.co/t/watcher-alert-syntax-error/269920 "2021-04-13T06:14:03Z")

</div>

Hello, I have the following watcher alert code. I simply want to check if 2 specific messages (at least 1 out of 2) exist in the message field of a certain facility named: galaxus-service. BUT i get the syntax er…

---

## [Plot only documents with the latest time](https://discuss.elastic.co/t/plot-only-documents-with-the-latest-time/269800)

<div class="topic-metadata">

**Author:** [@Shalhevet](https://discuss.elastic.co/u/Shalhevet)\
**Replies:** 2\
**Last updated:** [April 13, 2021, 5:42am UTC](https://discuss.elastic.co/t/plot-only-documents-with-the-latest-time/269800 "2021-04-13T05:42:46Z")

</div>

I have an index in with time field, and for each time there are multiple documents. I want to present only the results of the latest time. how can I do it? Is there a way to calculate the maximum value of the time fiel…

---

## [Issues with Canvas when using a time filter](https://discuss.elastic.co/t/issues-with-canvas-when-using-a-time-filter/269958)

<div class="topic-metadata">

**Author:** [@azulgrana](https://discuss.elastic.co/u/azulgrana)\
**Replies:** 5\
**Last updated:** [April 13, 2021, 3:48am UTC](https://discuss.elastic.co/t/issues-with-canvas-when-using-a-time-filter/269958 "2021-04-13T03:48:47Z")

</div>

Hi there! I have a Canvas workpad with a few charts (metrics, horizontal bars, pie) that was working fine until I added a time filter. I added the time filter to take advantage of a timelion query I already have on the …

---

## [Kibana visualization custom count column in table](https://discuss.elastic.co/t/kibana-visualization-custom-count-column-in-table/269925)

<div class="topic-metadata">

**Author:** [@kibanaUser3](https://discuss.elastic.co/u/kibanaUser3)\
**Replies:** 1\
**Last updated:** [April 13, 2021, 2:23am UTC](https://discuss.elastic.co/t/kibana-visualization-custom-count-column-in-table/269925 "2021-04-13T02:23:24Z")

</div>

I'd like to create visualization for IIS logs group by urls with following strucutre url, total count, total count of urls with 500 status code, total count of urls with status code 200 How do I configure the Metric: C…

---

## [Display only most recent log per host - Complete Newb](https://discuss.elastic.co/t/display-only-most-recent-log-per-host-complete-newb/269712)

<div class="topic-metadata">

**Author:** [@Jspang01](https://discuss.elastic.co/u/Jspang01)\
**Replies:** 4\
**Last updated:** [April 12, 2021, 7:18pm UTC](https://discuss.elastic.co/t/display-only-most-recent-log-per-host-complete-newb/269712 "2021-04-12T19:18:54Z")

</div>

Hello There All, This is my first post. I fully admit that I am a total newb to Kibana. Up until this past month I was only using it to view data that we have. But I am slowly starting to be tasked with making up new v…

---

## [Watcher Help](https://discuss.elastic.co/t/watcher-help/269711)

<div class="topic-metadata">

**Author:** [@mdamera](https://discuss.elastic.co/u/mdamera)\
**Replies:** 4\
**Last updated:** [April 12, 2021, 4:53pm UTC](https://discuss.elastic.co/t/watcher-help/269711 "2021-04-12T16:53:04Z")

</div>

Team, I have a need to monitor "code \[" in the filebeat logs and it should trigger an email alert when it find the word "code \[" I have tried with below string, but it did not helped me, instead of looking for "code \["…

---

## [Visualizing Weighted Average Aggregation in Kibana](https://discuss.elastic.co/t/visualizing-weighted-average-aggregation-in-kibana/269901)

<div class="topic-metadata">

**Author:** [@connersexton](https://discuss.elastic.co/u/connersexton)\
**Replies:** 1\
**Last updated:** [April 12, 2021, 3:55pm UTC](https://discuss.elastic.co/t/visualizing-weighted-average-aggregation-in-kibana/269901 "2021-04-12T15:55:42Z")

</div>

I've read a lot of documentation regarding single-value weighted average aggregation in Kibana, but can't seem to find anything on the actual application of this in a dashboard or visualization. My knowledge of Kibana sy…

---

## [Collapsible TreeFlow](https://discuss.elastic.co/t/collapsible-treeflow/269283)

<div class="topic-metadata">

**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\
**Replies:** 2\
**Last updated:** [April 12, 2021, 3:05pm UTC](https://discuss.elastic.co/t/collapsible-treeflow/269283 "2021-04-12T15:05:38Z")

</div>

Kibana version : 7.9 Elasticsearch version : 7.9 APM Server version : 7.9 APM Agent language and version : java 1.8 Fresh install or upgraded from other version? fresh install Is there anything special in your setup…

---

## [Dropdown custom field aggregation](https://discuss.elastic.co/t/dropdown-custom-field-aggregation/269596)

<div class="topic-metadata">

**Author:** [@bilel\_meddeb](https://discuss.elastic.co/u/bilel_meddeb)\
**Replies:** 1\
**Last updated:** [April 12, 2021, 2:19pm UTC](https://discuss.elastic.co/t/dropdown-custom-field-aggregation/269596 "2021-04-12T14:19:51Z")

</div>

HELLO, i'm new in ELK i have table id | f1 | f2 | f3 0 | 10| 15| 2 1 | 30| 5 | 9 2 | 1 | 75| 6 i want to create a dropdown list. that list contain a multi choice (x1 x2 x3) if i choice x1 so the result should be …

---

## [Unable to install Kibana on Windows](https://discuss.elastic.co/t/unable-to-install-kibana-on-windows/269743)

<div class="topic-metadata">

**Author:** [@hussshe](https://discuss.elastic.co/u/hussshe)\
**Replies:** 4\
**Last updated:** [April 12, 2021, 1:39pm UTC](https://discuss.elastic.co/t/unable-to-install-kibana-on-windows/269743 "2021-04-12T13:39:25Z")

</div>

Hello, Kibana Version: 7.12.0- Windows I am unable to install Kibana though the Elastic search is up and running on http://localhost:9200/. The following are the commands I ran in Command prompt C:\>cd C:\\kibana\\kiban…

---

## [Painless - New Calculated field as a .keyword extension](https://discuss.elastic.co/t/painless-new-calculated-field-as-a-keyword-extension/269632)

<div class="topic-metadata">

**Author:** [@Raynb](https://discuss.elastic.co/u/Raynb)\
**Replies:** 1\
**Last updated:** [April 12, 2021, 10:52am UTC](https://discuss.elastic.co/t/painless-new-calculated-field-as-a-keyword-extension/269632 "2021-04-12T10:52:22Z")

</div>

In our data we have a page field with URLs and some come in as /blog/really-good-content/ and others come as /blog/really-good-content (the lack of trailing slash) So in Painless I've made a scipted field to merge these…

---

## [Hiding Multi-Field Display In Discover](https://discuss.elastic.co/t/hiding-multi-field-display-in-discover/269720)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 1\
**Last updated:** [April 12, 2021, 7:24am UTC](https://discuss.elastic.co/t/hiding-multi-field-display-in-discover/269720 "2021-04-12T07:24:46Z")

</div>

Is it possible to hide the display of multi-fields in Discover for Kibana 7.12? I like the capability, but it really clutters up the display of data for regular users.

---

## [Scripted fields defined in kibana - when executed?](https://discuss.elastic.co/t/scripted-fields-defined-in-kibana-when-executed/269814)

<div class="topic-metadata">

**Author:** [@Marcin\_Kolny](https://discuss.elastic.co/u/Marcin_Kolny)\
**Replies:** 4\
**Last updated:** [April 12, 2021, 4:24am UTC](https://discuss.elastic.co/t/scripted-fields-defined-in-kibana-when-executed/269814 "2021-04-12T04:24:30Z")

</div>

Hi, I couldn't find the details in the documentation, so I hope somebody here will be able to help; I'm curious when the scripted field defined in Kibana is executed? Is it executed on each query, or does Elasticsearch …

---

## [Best workflow to update integrations](https://discuss.elastic.co/t/best-workflow-to-update-integrations/269819)

<div class="topic-metadata">

**Author:** [@nemhods](https://discuss.elastic.co/u/nemhods)\
**Replies:** 0\
**Last updated:** [April 11, 2021, 6:08pm UTC](https://discuss.elastic.co/t/best-workflow-to-update-integrations/269819 "2021-04-11T18:08:32Z")

</div>

Hey, When upgrading the stack, integrations aren't automatically updated. After updating the integration manually in fleet, all existing policies remain with their current integration version. What's the best way to up…

---

## [Kibana export issues (xpack.reporting.encryptionKey, timeout and data too large)](https://discuss.elastic.co/t/kibana-export-issues-xpack-reporting-encryptionkey-timeout-and-data-too-large/267408)

<div class="topic-metadata">

**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\
**Replies:** 4\
**Last updated:** [April 11, 2021, 2:30pm UTC](https://discuss.elastic.co/t/kibana-export-issues-xpack-reporting-encryptionkey-timeout-and-data-too-large/267408 "2021-04-11T14:30:07Z")

</div>

I have a three node cluster running in my homelab. It is a virtualised environment (ESXi) with Ubuntu server OS (LTS) & two nodes being data nodes & the third one being a voting only node. Both the data nodes run a Kiban…

---

## [Ignore gobal filter not found](https://discuss.elastic.co/t/ignore-gobal-filter-not-found/269769)

<div class="topic-metadata">

**Author:** [@Lorenzo\_Allori](https://discuss.elastic.co/u/Lorenzo_Allori)\
**Replies:** 2\
**Last updated:** [April 11, 2021, 9:22am UTC](https://discuss.elastic.co/t/ignore-gobal-filter-not-found/269769 "2021-04-11T09:22:37Z")

</div>

Hi guys, I would like to have a dashboard with two maps (identical) on which I can indipendently slect filters from the + sign in one tooltip and have them filtered indipendently to compare visually what happens. Is it…

---

## [Kibana error - Internal Server Error](https://discuss.elastic.co/t/kibana-error-internal-server-error/269780)

<div class="topic-metadata">

**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\
**Replies:** 1\
**Last updated:** [April 10, 2021, 6:36pm UTC](https://discuss.elastic.co/t/kibana-error-internal-server-error/269780 "2021-04-10T18:36:04Z")

</div>

Whenever I try to export data from Kibana, I am getting internal service error. Following is the log entry in kibana.log. Could I kindly request someone to help me resolve this please. {"type":"log","@timestamp":"2021-…

---

## [Changing the Login screen logo and text](https://discuss.elastic.co/t/changing-the-login-screen-logo-and-text/269636)

<div class="topic-metadata">

**Author:** [@Dinesh\_Sharma](https://discuss.elastic.co/u/Dinesh_Sharma)\
**Replies:** 1\
**Last updated:** [April 10, 2021, 12:53pm UTC](https://discuss.elastic.co/t/changing-the-login-screen-logo-and-text/269636 "2021-04-10T12:53:26Z")

</div>

Hi, How can I change the login screen logo and text of kibana version 7.11. I tried with some already available post but they seems deprecated.

---

## [Zero like result in canvas](https://discuss.elastic.co/t/zero-like-result-in-canvas/269694)

<div class="topic-metadata">

**Author:** [@EduardoM](https://discuss.elastic.co/u/EduardoM)\
**Replies:** 3\
**Last updated:** [April 10, 2021, 4:56am UTC](https://discuss.elastic.co/t/zero-like-result-in-canvas/269694 "2021-04-10T04:56:05Z")

</div>

I have a question, on Metric, I can have the "0" like result because I have this symbol: and i want to have "0" instead of this symbol. Could anyone help me ? I can not it solve. filters | essql query="SELECT SUM…

---

## [Canvas multiple pages](https://discuss.elastic.co/t/canvas-multiple-pages/269754)

<div class="topic-metadata">

**Author:** [@azulgrana](https://discuss.elastic.co/u/azulgrana)\
**Replies:** 1\
**Last updated:** [April 10, 2021, 1:01am UTC](https://discuss.elastic.co/t/canvas-multiple-pages/269754 "2021-04-10T01:01:01Z")

</div>

Hi there! Is it possible to have multiple pages in Canvas? if so, how? R

---

## [Coordinate + kibana heap issues](https://discuss.elastic.co/t/coordinate-kibana-heap-issues/269738)

<div class="topic-metadata">

**Author:** [@d4nnyx](https://discuss.elastic.co/u/d4nnyx)\
**Replies:** 4\
**Last updated:** [April 9, 2021, 9:38pm UTC](https://discuss.elastic.co/t/coordinate-kibana-heap-issues/269738 "2021-04-09T21:38:17Z")

</div>

Hello, after Kibana upgrade to v7.12 Im experiencing issues with underlying coordinate-only node. It regularly crashes because of low heap memory. Before upgrade whole cluster worked like a charm. Cluster setup 3 mast…

---

## [Options list control is not case sensitive](https://discuss.elastic.co/t/options-list-control-is-not-case-sensitive/268109)

<div class="topic-metadata">

**Author:** [@larrya](https://discuss.elastic.co/u/larrya)\
**Replies:** 2\
**Last updated:** [April 9, 2021, 7:27pm UTC](https://discuss.elastic.co/t/options-list-control-is-not-case-sensitive/268109 "2021-04-09T19:27:26Z")

</div>

I have a visualization using an Options list control with multiselect (Kibana 7.9.1). The field contains upper and lower case values of the same word, such as AAA, aaa, BBB, and bbb. When the control is used on a dashboa…

---

## [Visibility Monitoring - Have Kibana Ingest a File that Contains a List of Log Sources and Have Kibana Compare that List to What Sources Are Actually Being Collected](https://discuss.elastic.co/t/visibility-monitoring-have-kibana-ingest-a-file-that-contains-a-list-of-log-sources-and-have-kibana-compare-that-list-to-what-sources-are-actually-being-collected/269734)

<div class="topic-metadata">

**Author:** [@Log\_Gobbler](https://discuss.elastic.co/u/Log_Gobbler)\
**Replies:** 0\
**Last updated:** [April 9, 2021, 4:47pm UTC](https://discuss.elastic.co/t/visibility-monitoring-have-kibana-ingest-a-file-that-contains-a-list-of-log-sources-and-have-kibana-compare-that-list-to-what-sources-are-actually-being-collected/269734 "2021-04-09T16:47:59Z")

</div>

Hi Everybody. We're new to ELK but not new to SIEMs. We're trying to improve our visibility by creating something in the ELK stack that might be considered "Visibility Monitoring". Our "Visibility Monitoring" comes with …

---

## [Russian symbols in kibana](https://discuss.elastic.co/t/russian-symbols-in-kibana/268742)

<div class="topic-metadata">

**Author:** [@ajdanoff](https://discuss.elastic.co/u/ajdanoff)\
**Replies:** 3\
**Last updated:** [April 9, 2021, 3:29pm UTC](https://discuss.elastic.co/t/russian-symbols-in-kibana/268742 "2021-04-09T15:29:59Z")

</div>

Hello, I have the following question. I have created an index in kibana, which contains a "description" field. The field contains texts in Russian. When discovering this index in kibana, Russian letters are displayed a…

---

## [Full Export Saved Objects -\> Import](https://discuss.elastic.co/t/full-export-saved-objects-import/269628)

<div class="topic-metadata">

**Author:** [@Luis\_Garcia](https://discuss.elastic.co/u/Luis_Garcia)\
**Replies:** 2\
**Last updated:** [April 9, 2021, 3:17pm UTC](https://discuss.elastic.co/t/full-export-saved-objects-import/269628 "2021-04-09T15:17:06Z")

</div>

Hi from Argentina. I've exported all my saved objects using Elastic/Kibana 7.10, the result was a 12 MB ndjson file. Now I'm trying to import it using Kibana/Elastic 7.12 hosted in GKE Google Kubernetes Engine ("build…

---

## [Kibana maps does not show index pattern](https://discuss.elastic.co/t/kibana-maps-does-not-show-index-pattern/269312)

<div class="topic-metadata">

**Author:** [@jungsoo](https://discuss.elastic.co/u/jungsoo)\
**Replies:** 3\
**Last updated:** [April 9, 2021, 12:51pm UTC](https://discuss.elastic.co/t/kibana-maps-does-not-show-index-pattern/269312 "2021-04-09T12:51:32Z")

</div>

Hello, I was testing maps feature and got problem. Symptom: Kibana Maps \> add layers \> documents It does not show any index pattern, although I have kibana sample data with index pattern which has geo\_point. How I…

---

## [Calculation of Average](https://discuss.elastic.co/t/calculation-of-average/269325)

<div class="topic-metadata">

**Author:** [@vivekshukla](https://discuss.elastic.co/u/vivekshukla)\
**Replies:** 2\
**Last updated:** [April 9, 2021, 11:23am UTC](https://discuss.elastic.co/t/calculation-of-average/269325 "2021-04-09T11:23:36Z")

</div>

Hi Team, I am using Metric Bar to find the average time for below scenario: Need to find Average time = Sum of Duration / Sum( Number of Attempts) Provided Aggregation are not helpful in Metric Bar for above calcula…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=341)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=343)
