# Kibana **URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=346 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 347 --- ## [Kibana query filter by result of another saved search object field data](https://discuss.elastic.co/t/kibana-query-filter-by-result-of-another-saved-search-object-field-data/266656)
**Author:** [@singyim817](https://discuss.elastic.co/u/singyim817)\ **Replies:** 1\ **Last updated:** [April 1, 2021, 6:27pm UTC](https://discuss.elastic.co/t/kibana-query-filter-by-result-of-another-saved-search-object-field-data/266656 "2021-04-01T18:27:20Z")
Hi, I am migrating the log reports from direct search with oracle SQL to Kibana, and I am creating the dashboard to show the existing log reports. May I know is it possible to get the result like the following query a… --- ## [Watcher, hits array empty](https://discuss.elastic.co/t/watcher-hits-array-empty/268909)
**Author:** [@dvyu](https://discuss.elastic.co/u/dvyu)\ **Replies:** 2\ **Last updated:** [April 1, 2021, 5:31pm UTC](https://discuss.elastic.co/t/watcher-hits-array-empty/268909 "2021-04-01T17:31:28Z")
Hello, I am trying to use ctx fields in watcher action but some of them is empty My watcher is: { "trigger": { "schedule": { "interval": "1m" } }, "input": { "search": { "request": { … --- ## [Watcher add field to payload](https://discuss.elastic.co/t/watcher-add-field-to-payload/269008)
**Author:** [@tomaszgorka](https://discuss.elastic.co/u/tomaszgorka)\ **Replies:** 1\ **Last updated:** [April 1, 2021, 5:16pm UTC](https://discuss.elastic.co/t/watcher-add-field-to-payload/269008 "2021-04-01T17:16:20Z")
Hi, I have a watcher that takes people's data as input. If someone is below 21 yo it triggers the watcher and fires an index action. However I now need to add an additional field to the payload, which is "watchername" an… --- ## [Post URL does not appear to be portable across environments](https://discuss.elastic.co/t/post-url-does-not-appear-to-be-portable-across-environments/269052)
**Author:** [@eeijlar](https://discuss.elastic.co/u/eeijlar)\ **Replies:** 1\ **Last updated:** [April 1, 2021, 4:52pm UTC](https://discuss.elastic.co/t/post-url-does-not-appear-to-be-portable-across-environments/269052 "2021-04-01T16:52:13Z")
I am using the following snippet to download CSV reports in Kibana: for filename in ${KIBANA\_QUERIES}/\*.rison; do echo "Processing query file: $filename" … --- ## [How to create time series bar with site names in y-axis](https://discuss.elastic.co/t/how-to-create-time-series-bar-with-site-names-in-y-axis/267700)
**Author:** [@Dvir\_Alony](https://discuss.elastic.co/u/Dvir_Alony)\ **Replies:** 12\ **Last updated:** [April 1, 2021, 4:24pm UTC](https://discuss.elastic.co/t/how-to-create-time-series-bar-with-site-names-in-y-axis/267700 "2021-04-01T16:24:41Z")
Hi, I would like to create time series bar with site names in y-axis. For each site there will be a horizontal line representing the validity of the site with colors (green, yellow, red) according to the relevant time. … --- ## [Watcher email and slack failing](https://discuss.elastic.co/t/watcher-email-and-slack-failing/268854)
**Author:** [@twilight](https://discuss.elastic.co/u/twilight)\ **Replies:** 14\ **Last updated:** [April 1, 2021, 3:33pm UTC](https://discuss.elastic.co/t/watcher-email-and-slack-failing/268854 "2021-04-01T15:33:19Z")
Hello, I am trying to configure slack and email action in watcher on my ES and Kibana 7.12 installed on Amazon Linux AMI. below are my slack settings (plus webhook url in keystore): xpack.notification.slack: default… --- ## [Need to get the list of hosts not sending the logs to kibana](https://discuss.elastic.co/t/need-to-get-the-list-of-hosts-not-sending-the-logs-to-kibana/266922)
**Author:** [@mbm\_wfm](https://discuss.elastic.co/u/mbm_wfm)\ **Replies:** 1\ **Last updated:** [April 1, 2021, 2:41pm UTC](https://discuss.elastic.co/t/need-to-get-the-list-of-hosts-not-sending-the-logs-to-kibana/266922 "2021-04-01T14:41:50Z")
Hi, I need to get list of hosts not sending logs over two days for example, a query with kibana would be awesome! --- ## [ZonedDateTime.parse function not working for custom DateTimeFormatter](https://discuss.elastic.co/t/zoneddatetime-parse-function-not-working-for-custom-datetimeformatter/268819)
**Author:** [@rahulkothanath](https://discuss.elastic.co/u/rahulkothanath)\ **Replies:** 6\ **Last updated:** [April 1, 2021, 1:36pm UTC](https://discuss.elastic.co/t/zoneddatetime-parse-function-not-working-for-custom-datetimeformatter/268819 "2021-04-01T13:36:04Z")
Below string to date time code is not working for me and it is returning empty array. script1: String datetime = '2021-03-25 08:41:22.011'; DateTimeFormatter dtf = DateTimeFormatter.ofPattern("yyyy-MM-dd HH:mm:ss.SSS… --- ## [ElasticSearch Kibana Fields with "keyword"](https://discuss.elastic.co/t/elasticsearch-kibana-fields-with-keyword/268202)
**Author:** [@miklin](https://discuss.elastic.co/u/miklin)\ **Replies:** 2\ **Last updated:** [April 1, 2021, 8:36am UTC](https://discuss.elastic.co/t/elasticsearch-kibana-fields-with-keyword/268202 "2021-04-01T08:36:43Z")
Hi, I had some questions about Kibana Data Analysis training, mainly in fields with "keyword". Why the search (occupation: "Sales") got a result of "Sales Engineer"? I thought it should be exact match for this search? … --- ## [Kibana - How to do customized sort to saved objects API](https://discuss.elastic.co/t/kibana-how-to-do-customized-sort-to-saved-objects-api/266681)
**Author:** [@saifabusaleh](https://discuss.elastic.co/u/saifabusaleh)\ **Replies:** 2\ **Last updated:** [April 1, 2021, 7:27am UTC](https://discuss.elastic.co/t/kibana-how-to-do-customized-sort-to-saved-objects-api/266681 "2021-04-01T07:27:52Z")
Hi, We use: Kibana 7.10.0 Elastic 7.10.2 We use Kibana Saved Objects Find API to get all dashboards (https://www.elastic.co/guide/en/kibana/master/saved-objects-api-find.html) We want to get this dashboard data sort… --- ## [Unique count two fields combined](https://discuss.elastic.co/t/unique-count-two-fields-combined/268987)
**Author:** [@kasun](https://discuss.elastic.co/u/kasun)\ **Replies:** 1\ **Last updated:** [April 1, 2021, 6:59am UTC](https://discuss.elastic.co/t/unique-count-two-fields-combined/268987 "2021-04-01T06:59:49Z")
Hi all, For a pie chart, I am using unique count aggregation as the metric. However, I need to get the unique count when two fields combined. Is this possible using the advanced option in kibana visualizations? As an e… --- ## [Kibana maximum results capped at 10000](https://discuss.elastic.co/t/kibana-maximum-results-capped-at-10000/267196)
**Author:** [@shamzeer](https://discuss.elastic.co/u/shamzeer)\ **Replies:** 6\ **Last updated:** [April 1, 2021, 6:58am UTC](https://discuss.elastic.co/t/kibana-maximum-results-capped-at-10000/267196 "2021-04-01T06:58:37Z")
We are using Elastic and Kibana version on 7.10. As per the documentations, the maximum results returned would be 10000. However this causes a real issue for us in the metric visualization where we use visualization to … --- ## [Changing the index pattern that a visualisation is based on](https://discuss.elastic.co/t/changing-the-index-pattern-that-a-visualisation-is-based-on/268290)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 6\ **Last updated:** [April 1, 2021, 6:49am UTC](https://discuss.elastic.co/t/changing-the-index-pattern-that-a-visualisation-is-based-on/268290 "2021-04-01T06:49:57Z")
I have found a set of visualisation on github that I want to use. But they are build around a different pattern of index name to what I have even though the mapping are the same (or at least mostly). I have the ndjson … --- ## [How to create a search saved object with kibana API](https://discuss.elastic.co/t/how-to-create-a-search-saved-object-with-kibana-api/268963)
**Author:** [@BhavyaSree](https://discuss.elastic.co/u/BhavyaSree)\ **Replies:** 1\ **Last updated:** [April 1, 2021, 5:41am UTC](https://discuss.elastic.co/t/how-to-create-a-search-saved-object-with-kibana-api/268963 "2021-04-01T05:41:00Z")
I tried to create a search saved object with kibana API. I could able to create the object with selected columns and sort, but I am unable to add filters to the search. Below is the body of POST call I used. { "attri… --- ## [Kibana : Internal Server Error](https://discuss.elastic.co/t/kibana-internal-server-error/268938)
**Author:** [@sanju\_timsina](https://discuss.elastic.co/u/sanju_timsina)\ **Replies:** 5\ **Last updated:** [April 1, 2021, 2:29am UTC](https://discuss.elastic.co/t/kibana-internal-server-error/268938 "2021-04-01T02:29:29Z")
Hi, I am running Kibana 7.11 and I am getting this Internal Server Error when I try to get logs on the Kibana Portal. log \[11:09:04.725\] \[info\]\[listening\] Server running at http://0.0.0.0:5601 log \[11:09:05.303… --- ## [Make a pie chart based on one field where value is x, y, and z?](https://discuss.elastic.co/t/make-a-pie-chart-based-on-one-field-where-value-is-x-y-and-z/268828)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 3\ **Last updated:** [March 31, 2021, 10:06pm UTC](https://discuss.elastic.co/t/make-a-pie-chart-based-on-one-field-where-value-is-x-y-and-z/268828 "2021-03-31T22:06:28Z")
Hello I have a index pattern called my-index-x with entries and a text field that says Results. What I want to do is in a pie chart for example, make three or more slices: One slices would represent the number that "Su… --- ## [How to combine multi timelines in one vega graph using layers](https://discuss.elastic.co/t/how-to-combine-multi-timelines-in-one-vega-graph-using-layers/266932)
**Author:** [@bab](https://discuss.elastic.co/u/bab)\ **Replies:** 1\ **Last updated:** [March 31, 2021, 9:30pm UTC](https://discuss.elastic.co/t/how-to-combine-multi-timelines-in-one-vega-graph-using-layers/266932 "2021-03-31T21:30:37Z")
hi experts, am trying to combine multi time lines Vega graphic to one but i'm stock, can anyone check my code, where i missed. { $schema: https://vega.github.io/schema/vega-lite/v2.json data: { url: { %con… --- ## [Console not listing exact match above partial match](https://discuss.elastic.co/t/console-not-listing-exact-match-above-partial-match/268401)
**Author:** [@linkerc](https://discuss.elastic.co/u/linkerc)\ **Replies:** 2\ **Last updated:** [March 31, 2021, 7:12pm UTC](https://discuss.elastic.co/t/console-not-listing-exact-match-above-partial-match/268401 "2021-03-31T19:12:04Z")
Hello: Is there a way to configure kibana to list exact match first before partial match in console? I tried to delete indices with certain pattern (date time). for example: When I type "202101", I am getting a list … --- ## [How to embed visualization into my app](https://discuss.elastic.co/t/how-to-embed-visualization-into-my-app/268591)
**Author:** [@whitediver](https://discuss.elastic.co/u/whitediver)\ **Replies:** 3\ **Last updated:** [March 31, 2021, 4:48pm UTC](https://discuss.elastic.co/t/how-to-embed-visualization-into-my-app/268591 "2021-03-31T16:48:04Z")
Since the embedVisualizationWithId was removed from the Kibana, I have no way to embed visualization into my Kibana app. Does anybody know what I should use instead? --- ## [Using ILP with rollup](https://discuss.elastic.co/t/using-ilp-with-rollup/267204)
**Author:** [@vishal\_ramanlal](https://discuss.elastic.co/u/vishal_ramanlal)\ **Replies:** 1\ **Last updated:** [March 31, 2021, 4:21pm UTC](https://discuss.elastic.co/t/using-ilp-with-rollup/267204 "2021-03-31T16:21:57Z")
I am trying to configure Kibana to use a rollup to parse and simplify apache James data. I can currently push data to an index which sets the data according to a template. I can also use rollup to get and simplify the da… --- ## [Discover JSON missing \_source field](https://discuss.elastic.co/t/discover-json-missing-source-field/268922)
**Author:** [@frebri](https://discuss.elastic.co/u/frebri)\ **Replies:** 2\ **Last updated:** [March 31, 2021, 4:01pm UTC](https://discuss.elastic.co/t/discover-json-missing-source-field/268922 "2021-03-31T16:01:47Z")
Hi, We reinstalled Kibana and Elastic with 7.12 and are accustomed to look at certain documents through just pure json, since it has a specific order and grouping. After the upgrade, the JSON tab seems to "pretty print"… --- ## [Tabelle in Vega](https://discuss.elastic.co/t/tabelle-in-vega/268793)
**Author:** [@bab](https://discuss.elastic.co/u/bab)\ **Replies:** 5\ **Last updated:** [March 31, 2021, 3:35pm UTC](https://discuss.elastic.co/t/tabelle-in-vega/268793 "2021-03-31T15:35:36Z")
hello guys, I have a requirement, looks like this scenario, from a CSV file 5 columns are imported into kibana and the expected visualization of it data is to create kind of table Visia.. where the values of the fields… --- ## [Kibana change of decimal values in colour](https://discuss.elastic.co/t/kibana-change-of-decimal-values-in-colour/266327)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 3\ **Last updated:** [March 31, 2021, 3:12pm UTC](https://discuss.elastic.co/t/kibana-change-of-decimal-values-in-colour/266327 "2021-03-31T15:12:08Z")
Hi all, I'm a float numeric field which i have values like 21.283774493. I have managed to limit to 2 digits like 21.28. Now the problem is when i use conditional colour for my number in edit field option, format goes… --- ## [Kibana (7.11.1) isn't showing logs](https://discuss.elastic.co/t/kibana-7-11-1-isnt-showing-logs/268399)
**Author:** [@AnneHermann](https://discuss.elastic.co/u/AnneHermann)\ **Replies:** 13\ **Last updated:** [March 31, 2021, 3:11pm UTC](https://discuss.elastic.co/t/kibana-7-11-1-isnt-showing-logs/268399 "2021-03-31T15:11:44Z")
Hi, I have an index, that is containing log data, but the data can't be seen under Observability -\> Logs. I have also created an index pattern and choose a time field. I adjusted the settings of Observability -\> Logs t… --- ## [Heatmap with custom space](https://discuss.elastic.co/t/heatmap-with-custom-space/268902)
**Author:** [@Eddie\_Adams](https://discuss.elastic.co/u/Eddie_Adams)\ **Replies:** 1\ **Last updated:** [March 31, 2021, 2:42pm UTC](https://discuss.elastic.co/t/heatmap-with-custom-space/268902 "2021-03-31T14:42:54Z")
{"timestamp": "2021-03-31T14:07:50.465", "key": "h", "code": "4", "type": "\[down\]"} {"timestamp": "2021-03-31T14:07:50.592", "key": "e", "code": "14", "type": "\[down\]"} {"timestamp": "2021-03-31T14:07:50.697", "key": "… --- ## [Flare.json not loading for TREEMAP](https://discuss.elastic.co/t/flare-json-not-loading-for-treemap/268869)
**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Replies:** 1\ **Last updated:** [March 31, 2021, 11:50am UTC](https://discuss.elastic.co/t/flare-json-not-loading-for-treemap/268869 "2021-03-31T11:50:13Z")
Kibana version : 7.9 Elasticsearch version : 7.9 APM Server version : 7.9 APM Agent language and version : java 1.8 Fresh install or upgraded from other version? fresh install Is there anything special in your setup… --- ## [Trying to build a table visualization with multiple aggregations](https://discuss.elastic.co/t/trying-to-build-a-table-visualization-with-multiple-aggregations/268288)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 1\ **Last updated:** [March 31, 2021, 9:28am UTC](https://discuss.elastic.co/t/trying-to-build-a-table-visualization-with-multiple-aggregations/268288 "2021-03-31T09:28:18Z")
I want to build a table of alerts from and IDS where the rows are keyed on a term (alert name) then in the first column, the second column I want the alert category then I want then number of unique src IP addresses and … --- ## [Wont be able to generate .csv file](https://discuss.elastic.co/t/wont-be-able-to-generate-csv-file/268798)
**Author:** [@Kaustubh20](https://discuss.elastic.co/u/Kaustubh20)\ **Replies:** 4\ **Last updated:** [March 31, 2021, 7:01am UTC](https://discuss.elastic.co/t/wont-be-able-to-generate-csv-file/268798 "2021-03-31T07:01:42Z")
Hi , i am using kibana version 6.4 and Wont be able to generate .csv file. sometimes it work automatically and sometimes not. It showing me error that field format is not a constructor. Please suggest me --- ## [How to create Tile maps visualization in kibana using tile map service?](https://discuss.elastic.co/t/how-to-create-tile-maps-visualization-in-kibana-using-tile-map-service/268789)
**Author:** [@Husnain](https://discuss.elastic.co/u/Husnain)\ **Replies:** 2\ **Last updated:** [March 31, 2021, 6:54am UTC](https://discuss.elastic.co/t/how-to-create-tile-maps-visualization-in-kibana-using-tile-map-service/268789 "2021-03-31T06:54:23Z")
Hello.I am using Kibana version 7.12.0. I want to create Tile map visualization using tile map service for my logs.It ask's three things i.e "Url","Attribution text","Attribution link".What things we have to specify here… --- ## [Attaching a drill down to a table panel](https://discuss.elastic.co/t/attaching-a-drill-down-to-a-table-panel/268691)
**Author:** [@Russell\_Fulton](https://discuss.elastic.co/u/Russell_Fulton)\ **Replies:** 2\ **Last updated:** [March 31, 2021, 1:50am UTC](https://discuss.elastic.co/t/attaching-a-drill-down-to-a-table-panel/268691 "2021-03-31T01:50:52Z")
Kibana 7 I have a table visualisation with with a total column and two Unique counts. I now want to be able to drill down into the cells to see a further level of detail for each of those cells. Signature … [Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=345) [Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=347)