# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=350

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 351

---

## [Search Substring of Log Text Field](https://discuss.elastic.co/t/search-substring-of-log-text-field/267576)

<div class="topic-metadata">

**Author:** [@MCDELTAT](https://discuss.elastic.co/u/MCDELTAT)\
**Replies:** 3\
**Last updated:** [March 23, 2021, 12:08am UTC](https://discuss.elastic.co/t/search-substring-of-log-text-field/267576 "2021-03-23T00:08:54Z")

</div>

I know this has been asked a million times, but none of the solutions seem to work. I'm trying to filter for a specific, reproducible error, to find out how long it had been going on. I have the following thus far for KQ…

---

## [Bad Request when using scripted field in a table](https://discuss.elastic.co/t/bad-request-when-using-scripted-field-in-a-table/266615)

<div class="topic-metadata">

**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\
**Replies:** 2\
**Last updated:** [March 23, 2021, 12:00am UTC](https://discuss.elastic.co/t/bad-request-when-using-scripted-field-in-a-table/266615 "2021-03-23T00:00:51Z")

</div>

Hey, Creating a table visualisation with a scripted field. When I add the field parent\_name.keyword , Scripted, the table showing OK. When I remove the field parent\_name.keyword, I get the error below. Could not find…

---

## [KQL Query with wildcard and space not working (with wildcard type)](https://discuss.elastic.co/t/kql-query-with-wildcard-and-space-not-working-with-wildcard-type/267237)

<div class="topic-metadata">

**Author:** [@Sebastien\_Taniere](https://discuss.elastic.co/u/Sebastien_Taniere)\
**Replies:** 3\
**Last updated:** [March 22, 2021, 11:57pm UTC](https://discuss.elastic.co/t/kql-query-with-wildcard-and-space-not-working-with-wildcard-type/267237 "2021-03-22T23:57:29Z")

</div>

Hello, I used a wildcard field in my index mapping in order to be able to use wilcard in my logs. Now, I try to select some lines in my logs which begins with "Request finished" message:Request\* it is working but t…

---

## [Elasticsearch/Kibana 7.10.0 ILM/Rollover](https://discuss.elastic.co/t/elasticsearch-kibana-7-10-0-ilm-rollover/267989)

<div class="topic-metadata">

**Author:** [@Rollup\_eval](https://discuss.elastic.co/u/Rollup_eval)\
**Replies:** 1\
**Last updated:** [March 22, 2021, 11:06pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-7-10-0-ilm-rollover/267989 "2021-03-22T23:06:50Z")

</div>

I use elasticsearch 7.10.0 and kibana 7.10.0. I have created a simple ILM/Rollover policy by kibana interface. { "generator" : { "version" : 4, "modified\_date" : "2021-03-22T15:43:56.062Z", "policy" : { …

---

## [Display data results in Markdown visualization](https://discuss.elastic.co/t/display-data-results-in-markdown-visualization/267986)

<div class="topic-metadata">

**Author:** [@elpiloto100](https://discuss.elastic.co/u/elpiloto100)\
**Replies:** 1\
**Last updated:** [March 22, 2021, 8:31pm UTC](https://discuss.elastic.co/t/display-data-results-in-markdown-visualization/267986 "2021-03-22T20:31:27Z")

</div>

Is it possible to display results from a data query in a Markdown visualization to be used in a Kibana dashboard? For example, I want a Markdown to display Temperature: \[temp\] C Pressure: \[pres\] kPa Humidity: \[humid\] %R…

---

## [Data type unsigned long is not showing up as an option in index patterns](https://discuss.elastic.co/t/data-type-unsigned-long-is-not-showing-up-as-an-option-in-index-patterns/267893)

<div class="topic-metadata">

**Author:** [@gbandasha](https://discuss.elastic.co/u/gbandasha)\
**Replies:** 2\
**Last updated:** [March 22, 2021, 7:33pm UTC](https://discuss.elastic.co/t/data-type-unsigned-long-is-not-showing-up-as-an-option-in-index-patterns/267893 "2021-03-22T19:33:55Z")

</div>

Hello Team, In Elastic version 7.11, you have added the support for a new Numeric Data type called unsigned long but when I try to set the index template I don't see that option in the drop-down and also I tried to set …

---

## [Custom query to create Kibana data table](https://discuss.elastic.co/t/custom-query-to-create-kibana-data-table/267919)

<div class="topic-metadata">

**Author:** [@venkat\_swaminathan](https://discuss.elastic.co/u/venkat_swaminathan)\
**Replies:** 7\
**Last updated:** [March 22, 2021, 4:01pm UTC](https://discuss.elastic.co/t/custom-query-to-create-kibana-data-table/267919 "2021-03-22T16:01:26Z")

</div>

Team, How to create a Kibana custom graph (\*in my case data table), the guidance here will be helpful. Query:: "aggs": { "group\_by\_name": { "terms": { "field": "Dimensions.keyword", …

---

## [Create programable links with enabled custom filters to Kibana Dashboard](https://discuss.elastic.co/t/create-programable-links-with-enabled-custom-filters-to-kibana-dashboard/267243)

<div class="topic-metadata">

**Author:** [@Treki](https://discuss.elastic.co/u/Treki)\
**Replies:** 4\
**Last updated:** [March 22, 2021, 3:26pm UTC](https://discuss.elastic.co/t/create-programable-links-with-enabled-custom-filters-to-kibana-dashboard/267243 "2021-03-22T15:26:53Z")

</div>

Hello, my company is testing Kibana in order to check if the programme is usable for our business case. We want to create programable links with enabled custom filters to Kibana Dashboard: I know, there is the possi…

---

## [Search\_phase\_execution\_exception and error on dashboard visualizations](https://discuss.elastic.co/t/search-phase-execution-exception-and-error-on-dashboard-visualizations/267572)

<div class="topic-metadata">

**Author:** [@ayi](https://discuss.elastic.co/u/ayi)\
**Replies:** 3\
**Last updated:** [March 22, 2021, 2:33pm UTC](https://discuss.elastic.co/t/search-phase-execution-exception-and-error-on-dashboard-visualizations/267572 "2021-03-22T14:33:32Z")

</div>

Please i a new to kibana, i am getting the error below when i try to visualise. I have no idea what the error is about. i need help solving this, please. search\_phase\_execution\_exception Error at Fetch.\_callee3$ (http…

---

## [Kibana APIs](https://discuss.elastic.co/t/kibana-apis/267067)

<div class="topic-metadata">

**Author:** [@somil\_kulshreshtha](https://discuss.elastic.co/u/somil_kulshreshtha)\
**Replies:** 1\
**Last updated:** [March 22, 2021, 2:15pm UTC](https://discuss.elastic.co/t/kibana-apis/267067 "2021-03-22T14:15:24Z")

</div>

We want to prepare an analytics dashboard in Kibana, at the same time we want to expose these APIs in other BI tools to visualize. Describe a specific use case for the feature: e.g. I have tableau and jasper reports f…

---

## [Alerts using Kibana in AWS managed Elasticsearch](https://discuss.elastic.co/t/alerts-using-kibana-in-aws-managed-elasticsearch/267974)

<div class="topic-metadata">

**Author:** [@Shalinicts](https://discuss.elastic.co/u/Shalinicts)\
**Replies:** 3\
**Last updated:** [March 22, 2021, 2:14pm UTC](https://discuss.elastic.co/t/alerts-using-kibana-in-aws-managed-elasticsearch/267974 "2021-03-22T14:14:48Z")

</div>

How can we enable alert from Kibana to Zenoss in AWS managed Elasticsearch

---

## [Kibana Dashboard, selected filters download csv from a table taking the information of filters](https://discuss.elastic.co/t/kibana-dashboard-selected-filters-download-csv-from-a-table-taking-the-information-of-filters/267394)

<div class="topic-metadata">

**Author:** [@Meroni](https://discuss.elastic.co/u/Meroni)\
**Replies:** 1\
**Last updated:** [March 22, 2021, 2:07pm UTC](https://discuss.elastic.co/t/kibana-dashboard-selected-filters-download-csv-from-a-table-taking-the-information-of-filters/267394 "2021-03-22T14:07:25Z")

</div>

Hi everyone, I'm dealing with Kibana Dashboard. Does anyone know if it is possible to download a csv from a table (part of a Kibana Dashboard), also taking the information of which filters have been selected? Thank you. …

---

## [Executing Alert has resulted in Error](https://discuss.elastic.co/t/executing-alert-has-resulted-in-error/267889)

<div class="topic-metadata">

**Author:** [@radovan](https://discuss.elastic.co/u/radovan)\
**Replies:** 9\
**Last updated:** [March 22, 2021, 1:32pm UTC](https://discuss.elastic.co/t/executing-alert-has-resulted-in-error/267889 "2021-03-22T13:32:15Z")

</div>

Hi, so I tried to setup multiple Kibana instances in our self-managed environment hoping it will improve alerting and detections performance. Together there are 4 Kibana instances, 2 were setup before (as a service with…

---

## [Kibana REST API - saved pbjects import - createNewCopies](https://discuss.elastic.co/t/kibana-rest-api-saved-pbjects-import-createnewcopies/267952)

<div class="topic-metadata">

**Author:** [@ranitg](https://discuss.elastic.co/u/ranitg)\
**Replies:** 3\
**Last updated:** [March 22, 2021, 12:40pm UTC](https://discuss.elastic.co/t/kibana-rest-api-saved-pbjects-import-createnewcopies/267952 "2021-03-22T12:40:22Z")

</div>

Hi, I'm trying to use the flag "createNewCopies" in the saved\_objects import api. I am using Kibana 7.9.3. it is documented in: but not implemented in the code... How can I import and resolve a dashboard existing co…

---

## [Link recognition in Elastic Detections emails seem wrong and confusing](https://discuss.elastic.co/t/link-recognition-in-elastic-detections-emails-seem-wrong-and-confusing/267156)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 7\
**Last updated:** [March 22, 2021, 12:25pm UTC](https://discuss.elastic.co/t/link-recognition-in-elastic-detections-emails-seem-wrong-and-confusing/267156 "2021-03-22T12:25:27Z")

</div>

Hello, While working with Elastic Emails alerts on detections, I've noticed several misrecognized links. For example: In the above example user.name is suddenly a link.., while this is just a part of a query. Anot…

---

## [Agrupar datos por característica común](https://discuss.elastic.co/t/agrupar-datos-por-caracteristica-comun/267575)

<div class="topic-metadata">

**Author:** [@andres\_brandt](https://discuss.elastic.co/u/andres_brandt)\
**Replies:** 1\
**Last updated:** [March 22, 2021, 11:55am UTC](https://discuss.elastic.co/t/agrupar-datos-por-caracteristica-comun/267575 "2021-03-22T11:55:21Z")

</div>

Amigos, necesito de su ayuda, quiero agrupar mis datos en tres mundos, y para ello quiero hacer una botonera donde al presionar uno de estos mundos me despliegue toda la info de ese mundo. 01 SOP Evento 01 SOP Falla M…

---

## [Kibana migration 7.10.2 to 7.11.2 Fleet upgrade issues](https://discuss.elastic.co/t/kibana-migration-7-10-2-to-7-11-2-fleet-upgrade-issues/267703)

<div class="topic-metadata">

**Author:** [@PublicName](https://discuss.elastic.co/u/PublicName)\
**Replies:** 1\
**Last updated:** [March 22, 2021, 11:15am UTC](https://discuss.elastic.co/t/kibana-migration-7-10-2-to-7-11-2-fleet-upgrade-issues/267703 "2021-03-22T11:15:14Z")

</div>

Has anyone found a way to upgrade Kibana from 7.10.2 to 7.11.x with Fleet running and activate agents. I have 400ish agents entering data with fleet "yes it's beta" and the upgrade can't finish. On another test cluster w…

---

## [Drawn lines disappear when zoom level less than 2.0](https://discuss.elastic.co/t/drawn-lines-disappear-when-zoom-level-less-than-2-0/267686)

<div class="topic-metadata">

**Author:** [@gohovd](https://discuss.elastic.co/u/gohovd)\
**Replies:** 2\
**Last updated:** [March 22, 2021, 11:10am UTC](https://discuss.elastic.co/t/drawn-lines-disappear-when-zoom-level-less-than-2-0/267686 "2021-03-22T11:10:15Z")

</div>

Hi all, Elasticsearch: v7.9.1 Kibana: v7.8.2 The title sums up it; I draw lines (linestring) between points (coordinates) on the map showing the path of various entities. When I adjust zoom to a level below 2.0 the li…

---

## [How to overcome letter cropping issue in kibana](https://discuss.elastic.co/t/how-to-overcome-letter-cropping-issue-in-kibana/267969)

<div class="topic-metadata">

**Author:** [@Yashaswini](https://discuss.elastic.co/u/Yashaswini)\
**Replies:** 1\
**Last updated:** [March 22, 2021, 11:03am UTC](https://discuss.elastic.co/t/how-to-overcome-letter-cropping-issue-in-kibana/267969 "2021-03-22T11:03:01Z")

</div>

---

## [Vega scatterplot with scripted field](https://discuss.elastic.co/t/vega-scatterplot-with-scripted-field/267613)

<div class="topic-metadata">

**Author:** [@Shalhevet](https://discuss.elastic.co/u/Shalhevet)\
**Replies:** 1\
**Last updated:** [March 22, 2021, 10:48am UTC](https://discuss.elastic.co/t/vega-scatterplot-with-scripted-field/267613 "2021-03-22T10:48:39Z")

</div>

Hi, I am trying to use a scripted field ("RGBstring") for my visualization but it doesn't work. I can't find the reason. this is the script: { "$schema": "https://vega.github.io/schema/vega-lite/v2.json", "data…

---

## [Heatmap with time spans calculated out of documents](https://discuss.elastic.co/t/heatmap-with-time-spans-calculated-out-of-documents/266669)

<div class="topic-metadata">

**Author:** [@cop077](https://discuss.elastic.co/u/cop077)\
**Replies:** 1\
**Last updated:** [March 22, 2021, 10:32am UTC](https://discuss.elastic.co/t/heatmap-with-time-spans-calculated-out-of-documents/266669 "2021-03-22T10:32:35Z")

</div>

Hi everyone. I have documents that look like this: { "resource":"xyz", "started\_at":"2020-01-01T10:00:00Z", "finished\_at":"2020-01-01T14:23:54Z" } What I want to do is creating a heatmap which uses the resource for…

---

## [Metric visualization with date range calculation](https://discuss.elastic.co/t/metric-visualization-with-date-range-calculation/267644)

<div class="topic-metadata">

**Author:** [@alytkowski](https://discuss.elastic.co/u/alytkowski)\
**Replies:** 1\
**Last updated:** [March 22, 2021, 10:15am UTC](https://discuss.elastic.co/t/metric-visualization-with-date-range-calculation/267644 "2021-03-22T10:15:07Z")

</div>

I have a metric type data that I get every 10s from the EMS Server and one of the properties is: inbound message count. It's a total inbound message count for the EMS server. What I'd like to achieve is to create a metri…

---

## [Query: Field A contains Field B\`s value](https://discuss.elastic.co/t/query-field-a-contains-field-b-s-value/267505)

<div class="topic-metadata">

**Author:** [@ksremo](https://discuss.elastic.co/u/ksremo)\
**Replies:** 1\
**Last updated:** [March 22, 2021, 9:57am UTC](https://discuss.elastic.co/t/query-field-a-contains-field-b-s-value/267505 "2021-03-22T09:57:52Z")

</div>

Hello, i unsuccessfully try to query a document with his field a contains (not is equal) the value of field b. then negate this. can anybody help? here an example to clarify: fieldA:"test-MATCH", fieldB:"MATCH" -\> no…

---

## [Kibana - Timelion](https://discuss.elastic.co/t/kibana-timelion/267676)

<div class="topic-metadata">

**Author:** [@jaispirit](https://discuss.elastic.co/u/jaispirit)\
**Replies:** 1\
**Last updated:** [March 22, 2021, 9:55am UTC](https://discuss.elastic.co/t/kibana-timelion/267676 "2021-03-22T09:55:33Z")

</div>

Hi there, I am using Kibana 7.11 (current) - Timelion. With following I get the NGINX Request Time of a bunch of servers: .es(index=filebeat\*, timefield=@timestamp, metric=max:nginx.request.request\_time).lines(fill=1,…

---

## [Combine 2 or more beats in one panel / visualization](https://discuss.elastic.co/t/combine-2-or-more-beats-in-one-panel-visualization/267596)

<div class="topic-metadata">

**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\
**Replies:** 7\
**Last updated:** [March 22, 2021, 9:54am UTC](https://discuss.elastic.co/t/combine-2-or-more-beats-in-one-panel-visualization/267596 "2021-03-22T09:54:55Z")

</div>

i have 2 beats. filebeat and auditbeat, can i combine that 2 index in 1 panel visualization.

---

## [How can I filter from other index?](https://discuss.elastic.co/t/how-can-i-filter-from-other-index/266653)

<div class="topic-metadata">

**Author:** [@111450](https://discuss.elastic.co/u/111450)\
**Replies:** 1\
**Last updated:** [March 22, 2021, 9:44am UTC](https://discuss.elastic.co/t/how-can-i-filter-from-other-index/266653 "2021-03-22T09:44:00Z")

</div>

Hello, I am new to kibana and have a question. I want to filter specific IDs when I aggregate cardinality. For example, there are \[1,2,3\](this is ID list) in Index A and \[1,2,4,4,5,6,7,7\] in Index B, I want the cardina…

---

## [Browser cache when delivering a custom kibana plugin](https://discuss.elastic.co/t/browser-cache-when-delivering-a-custom-kibana-plugin/267719)

<div class="topic-metadata">

**Author:** [@weand](https://discuss.elastic.co/u/weand)\
**Replies:** 1\
**Last updated:** [March 22, 2021, 9:41am UTC](https://discuss.elastic.co/t/browser-cache-when-delivering-a-custom-kibana-plugin/267719 "2021-03-22T09:41:36Z")

</div>

Hi, this is about kibana and browser cache when delivering a custom kibana plugin regulary into production. we have a custom kibana plugin and integrated it into our CI/CD. when it comes to production, browser clients …

---

## [Dynamic time period in datatable visulisation](https://discuss.elastic.co/t/dynamic-time-period-in-datatable-visulisation/266968)

<div class="topic-metadata">

**Author:** [@anjilinga](https://discuss.elastic.co/u/anjilinga)\
**Replies:** 1\
**Last updated:** [March 22, 2021, 9:32am UTC](https://discuss.elastic.co/t/dynamic-time-period-in-datatable-visulisation/266968 "2021-03-22T09:32:35Z")

</div>

Hi, How can the Datehistogram period can be configured dynamically. curently the histogram is configured as 1d. to see the data for 1 week, the data is displaying in multiple rows. is there any way to display the data…

---

## [Export option missing from Kibana Vizualizations](https://discuss.elastic.co/t/export-option-missing-from-kibana-vizualizations/267458)

<div class="topic-metadata">

**Author:** [@gyterpena](https://discuss.elastic.co/u/gyterpena)\
**Replies:** 1\
**Last updated:** [March 22, 2021, 8:36am UTC](https://discuss.elastic.co/t/export-option-missing-from-kibana-vizualizations/267458 "2021-03-22T08:36:12Z")

</div>

Hello We upgraded our stack to 7.11.2 from 7.10.2 and export option on kibana visualizations is missing for new data table visualizations. I can still export from visualizations created on older versions. Is this expec…

---

## [Elastic cloud email reporting](https://discuss.elastic.co/t/elastic-cloud-email-reporting/267685)

<div class="topic-metadata">

**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\
**Replies:** 2\
**Last updated:** [March 22, 2021, 8:01am UTC](https://discuss.elastic.co/t/elastic-cloud-email-reporting/267685 "2021-03-22T08:01:46Z")

</div>

Hello, I am using Elastic Cloud and I was trying to set up a Watcher to send a pdf (generated from a dashboard) via email. I have some questions: can I create a watcher who, every 7 days, automatically sends this repo…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=349)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=351)
