# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=352

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 353

---

## [ENOTFOUND while installing plugin from command section in deployment file](https://discuss.elastic.co/t/enotfound-while-installing-plugin-from-command-section-in-deployment-file/267553)

<div class="topic-metadata">

**Author:** [@Elyes\_Jarroudi](https://discuss.elastic.co/u/Elyes_Jarroudi)\
**Replies:** 6\
**Last updated:** [March 17, 2021, 9:06pm UTC](https://discuss.elastic.co/t/enotfound-while-installing-plugin-from-command-section-in-deployment-file/267553 "2021-03-17T21:06:15Z")

</div>

this is my code lifecycle: postStart: exec: command: - bash - -c - | bin/kibana-plugin install https://d3g5vo6xdbdb9…

---

## [Build Kibana docker image from Source](https://discuss.elastic.co/t/build-kibana-docker-image-from-source/267556)

<div class="topic-metadata">

**Author:** [@jong99](https://discuss.elastic.co/u/jong99)\
**Replies:** 2\
**Last updated:** [March 17, 2021, 7:54pm UTC](https://discuss.elastic.co/t/build-kibana-docker-image-from-source/267556 "2021-03-17T19:54:19Z")

</div>

Is there any documentation on how to build a Kibana docker image from source? I have successfully built from source with yarn build --skip-os-packages but unsure how I actually get a docker image from here. Any pointer…

---

## [Kibana did not load properly check the server output for more information - status 503](https://discuss.elastic.co/t/kibana-did-not-load-properly-check-the-server-output-for-more-information-status-503/267387)

<div class="topic-metadata">

**Author:** [@GeorgeCaraus](https://discuss.elastic.co/u/GeorgeCaraus)\
**Replies:** 1\
**Last updated:** [March 17, 2021, 7:20pm UTC](https://discuss.elastic.co/t/kibana-did-not-load-properly-check-the-server-output-for-more-information-status-503/267387 "2021-03-17T19:20:58Z")

</div>

Hi, I am having some issues with Kibana whenever I try to access it within an application, but it always works if I use the URL from kibana.yml. I can not find any 503 messages in neither kibana nor IIS logs. Any ideas w…

---

## [Change timepicker:timeDefaults to latest event date in the data](https://discuss.elastic.co/t/change-timepicker-timedefaults-to-latest-event-date-in-the-data/267104)

<div class="topic-metadata">

**Author:** [@Sandeep-Singh](https://discuss.elastic.co/u/Sandeep-Singh)\
**Replies:** 2\
**Last updated:** [March 17, 2021, 7:05pm UTC](https://discuss.elastic.co/t/change-timepicker-timedefaults-to-latest-event-date-in-the-data/267104 "2021-03-17T19:05:16Z")

</div>

Dear Community, I am trying to change 'timepicker:timeDefaults' setting value to something so that every time user logs in to the application, the time selection shows the date range from today till the last date data w…

---

## [Javascript/Python/Go SDK for Kibana, to automatically create visualisations](https://discuss.elastic.co/t/javascript-python-go-sdk-for-kibana-to-automatically-create-visualisations/267499)

<div class="topic-metadata">

**Author:** [@larsrnielsen](https://discuss.elastic.co/u/larsrnielsen)\
**Replies:** 1\
**Last updated:** [March 17, 2021, 7:03pm UTC](https://discuss.elastic.co/t/javascript-python-go-sdk-for-kibana-to-automatically-create-visualisations/267499 "2021-03-17T19:03:48Z")

</div>

Is there some Javascript/Python/Go SDK for Kibana that will allow me to automatically create visualisations in Kibana? I would like to integrate it with our CI/CD. Lars

---

## [Is it possible to have some visualizations can be viewed with login and some visualizations no need login to view them?](https://discuss.elastic.co/t/is-it-possible-to-have-some-visualizations-can-be-viewed-with-login-and-some-visualizations-no-need-login-to-view-them/267538)

<div class="topic-metadata">

**Author:** [@qub123](https://discuss.elastic.co/u/qub123)\
**Replies:** 2\
**Last updated:** [March 17, 2021, 5:43pm UTC](https://discuss.elastic.co/t/is-it-possible-to-have-some-visualizations-can-be-viewed-with-login-and-some-visualizations-no-need-login-to-view-them/267538 "2021-03-17T17:43:02Z")

</div>

We have authentication setup on Kibana, which means we need to have username and password in order to access visualizations. I am wondering if it is possible to have the option to let users access some graphs without log…

---

## [Adding new nodes to the cluster](https://discuss.elastic.co/t/adding-new-nodes-to-the-cluster/267312)

<div class="topic-metadata">

**Author:** [@adityak248](https://discuss.elastic.co/u/adityak248)\
**Replies:** 2\
**Last updated:** [March 17, 2021, 5:25pm UTC](https://discuss.elastic.co/t/adding-new-nodes-to-the-cluster/267312 "2021-03-17T17:25:56Z")

</div>

Hello team, I got a cluster running on SSL and now I want to add couple of more nodes and load balance kibana. How should I proceed. For ssl certs I have used the elasticsearch cert tool.

---

## [Automatic Dashboards](https://discuss.elastic.co/t/automatic-dashboards/267525)

<div class="topic-metadata">

**Author:** [@prakash1243](https://discuss.elastic.co/u/prakash1243)\
**Replies:** 1\
**Last updated:** [March 17, 2021, 5:01pm UTC](https://discuss.elastic.co/t/automatic-dashboards/267525 "2021-03-17T17:01:37Z")

</div>

Is there a way to automatically create the visualization/dashboards? We just trying to create same dassboards for each index? and wanted to automatically do it when we keep adding the new index. Can some one throw light…

---

## [How to change visualization color in kibana 7.11.1](https://discuss.elastic.co/t/how-to-change-visualization-color-in-kibana-7-11-1/267514)

<div class="topic-metadata">

**Author:** [@Husnain](https://discuss.elastic.co/u/Husnain)\
**Replies:** 1\
**Last updated:** [March 17, 2021, 4:48pm UTC](https://discuss.elastic.co/t/how-to-change-visualization-color-in-kibana-7-11-1/267514 "2021-03-17T16:48:50Z")

</div>

Hii.How can I change visualization color in kibana version(7.11.1)?

---

## [Stack monitoring does not show the cluster information and has some errors](https://discuss.elastic.co/t/stack-monitoring-does-not-show-the-cluster-information-and-has-some-errors/266960)

<div class="topic-metadata">

**Author:** [@dedi27](https://discuss.elastic.co/u/dedi27)\
**Replies:** 1\
**Last updated:** [March 17, 2021, 4:34pm UTC](https://discuss.elastic.co/t/stack-monitoring-does-not-show-the-cluster-information-and-has-some-errors/266960 "2021-03-17T16:34:39Z")

</div>

Hi, My Elasticsearch cluster has not shown monitoring information for some time. I tried to solve the problem by enabling metricbeat metrics, but when I activate kibana some errors appear as described below. I can't f…

---

## [Kibana and Azure SSO](https://discuss.elastic.co/t/kibana-and-azure-sso/267336)

<div class="topic-metadata">

**Author:** [@Gerrard](https://discuss.elastic.co/u/Gerrard)\
**Replies:** 2\
**Last updated:** [March 17, 2021, 2:09pm UTC](https://discuss.elastic.co/t/kibana-and-azure-sso/267336 "2021-03-17T14:09:43Z")

</div>

I'm trying to get Kibana (on elastic.co) working with Azure SSO. I've followed numerous "guides" on this, and ADFS and setting up SSO in general, and just can't figure it out. We're using elasticsearch 7.11.1, and getti…

---

## [Logstash node name show '0.0.0.0' on kibana](https://discuss.elastic.co/t/logstash-node-name-show-0-0-0-0-on-kibana/267450)

<div class="topic-metadata">

**Author:** [@KeithTt](https://discuss.elastic.co/u/KeithTt)\
**Replies:** 1\
**Last updated:** [March 17, 2021, 7:05am UTC](https://discuss.elastic.co/t/logstash-node-name-show-0-0-0-0-on-kibana/267450 "2021-03-17T07:05:13Z")

</div>

OS version: CentOS 6.9 kibana version: 6.3.0 logstash version: 6.3.0 Add two logstash nodes, one node is normal, and the other show '0.0.0.0' How does kibana get the hostname of the operation system? Thanks!!!

---

## [data-error-message="Elastic did not load properly. Check the server output for more information. kbn\_legacy\_browser\_error](https://discuss.elastic.co/t/data-error-message-elastic-did-not-load-properly-check-the-server-output-for-more-information-kbn-legacy-browser-error/267337)

<div class="topic-metadata">

**Author:** [@Satyasree](https://discuss.elastic.co/u/Satyasree)\
**Replies:** 3\
**Last updated:** [March 17, 2021, 5:45am UTC](https://discuss.elastic.co/t/data-error-message-elastic-did-not-load-properly-check-the-server-output-for-more-information-kbn-legacy-browser-error/267337 "2021-03-17T05:45:01Z")

</div>

Hi All I have enabled Xpack security for Elasticsearch and Kibana which are hosted in IBM Cloud Kubernetes environment. Please find elasticsearch values.yml file clusterName: "elasticsearch" nodeGroup: "master" mast…

---

## [Resource not found exception in discovery](https://discuss.elastic.co/t/resource-not-found-exception-in-discovery/266613)

<div class="topic-metadata">

**Author:** [@Charles\_Ferguson](https://discuss.elastic.co/u/Charles_Ferguson)\
**Replies:** 2\
**Last updated:** [March 17, 2021, 4:38am UTC](https://discuss.elastic.co/t/resource-not-found-exception-in-discovery/266613 "2021-03-17T04:38:03Z")

</div>

Hello, We are starting to get lots of reports of random resource not found errors when searching in discovery. It looks like the issue goes back to a version conflict for the search on elasticsearch. I am little bit of…

---

## [First time seen value](https://discuss.elastic.co/t/first-time-seen-value/267420)

<div class="topic-metadata">

**Author:** [@cyberzlo](https://discuss.elastic.co/u/cyberzlo)\
**Replies:** 3\
**Last updated:** [March 17, 2021, 1:54am UTC](https://discuss.elastic.co/t/first-time-seen-value/267420 "2021-03-17T01:54:36Z")

</div>

Hi, is this possible to somehow find first time seen value, or new value for field etc? I would like to find on my dashboard only unknow values for specific field (but sometimes I have like 200 values so building query I…

---

## [Kibana Alerting](https://discuss.elastic.co/t/kibana-alerting/266590)

<div class="topic-metadata">

**Author:** [@Roey](https://discuss.elastic.co/u/Roey)\
**Replies:** 1\
**Last updated:** [March 17, 2021, 1:45am UTC](https://discuss.elastic.co/t/kibana-alerting/266590 "2021-03-17T01:45:49Z")

</div>

Hey, I'm using Kibana 7.9.1 and recently I've started to explore Monitoring and Alerting, I have few questions: I have a monitor with an active trigger, the alert has been triggered for some reason only once. Besides,…

---

## [Elastic Mail Watcher escape html in logs](https://discuss.elastic.co/t/elastic-mail-watcher-escape-html-in-logs/266374)

<div class="topic-metadata">

**Author:** [@rLenhard](https://discuss.elastic.co/u/rLenhard)\
**Replies:** 1\
**Last updated:** [March 17, 2021, 1:35am UTC](https://discuss.elastic.co/t/elastic-mail-watcher-escape-html-in-logs/266374 "2021-03-17T01:35:40Z")

</div>

Hi, I created an email watcher witch html-body. Some of the logs I am returning with ctx.payload.hits.hits have html tags in their value: Is there a way to escape the return so the tags in the value are displayed as ta…

---

## [Visualization using one field as term but label with another field](https://discuss.elastic.co/t/visualization-using-one-field-as-term-but-label-with-another-field/267429)

<div class="topic-metadata">

**Author:** [@gnumoksha](https://discuss.elastic.co/u/gnumoksha)\
**Replies:** 1\
**Last updated:** [March 16, 2021, 11:23pm UTC](https://discuss.elastic.co/t/visualization-using-one-field-as-term-but-label-with-another-field/267429 "2021-03-16T23:23:17Z")

</div>

Hello. Like in here I want to use a different display label for the X-axis. How can I do that?

---

## [Kibana 7.11.2 fails to start post upgrade](https://discuss.elastic.co/t/kibana-7-11-2-fails-to-start-post-upgrade/266926)

<div class="topic-metadata">

**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\
**Replies:** 6\
**Last updated:** [March 16, 2021, 5:55pm UTC](https://discuss.elastic.co/t/kibana-7-11-2-fails-to-start-post-upgrade/266926 "2021-03-16T17:55:11Z")

</div>

I just upgraded my stack to 7.11.2 and kibana is not starting. My elasticsearch status is green. I have rebooted the host and the problem persists. Mar 11 09:59:01 hostname systemd\[1\]: kibana.service: State 'stop-sigter…

---

## [Export and Import Index Patterns using elasticdump in ELK ver 7](https://discuss.elastic.co/t/export-and-import-index-patterns-using-elasticdump-in-elk-ver-7/267302)

<div class="topic-metadata">

**Author:** [@nguyenduyhung1979](https://discuss.elastic.co/u/nguyenduyhung1979)\
**Replies:** 13\
**Last updated:** [March 16, 2021, 3:16pm UTC](https://discuss.elastic.co/t/export-and-import-index-patterns-using-elasticdump-in-elk-ver-7/267302 "2021-03-16T15:16:26Z")

</div>

I try setup automation system which has the workflow: Have server where ELK stack has been installed and has basic configuration Import the index into ElasticSearch (ES), next Kibana can use that index for Visualize F…

---

## [Disable adding filter upon click on a bar chart](https://discuss.elastic.co/t/disable-adding-filter-upon-click-on-a-bar-chart/267350)

<div class="topic-metadata">

**Author:** [@kasun](https://discuss.elastic.co/u/kasun)\
**Replies:** 3\
**Last updated:** [March 16, 2021, 12:47pm UTC](https://discuss.elastic.co/t/disable-adding-filter-upon-click-on-a-bar-chart/267350 "2021-03-16T12:47:40Z")

</div>

Hi all, In above chart when I click on bars it will automatically add a filter to the entire dashboard. As an example when I click on the first bar it will add a filter as in below. Is there a way to disable this …

---

## [Colors in Elastic Detections Alert Emails](https://discuss.elastic.co/t/colors-in-elastic-detections-alert-emails/267155)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 3\
**Last updated:** [March 16, 2021, 12:05pm UTC](https://discuss.elastic.co/t/colors-in-elastic-detections-alert-emails/267155 "2021-03-16T12:05:59Z")

</div>

Hello, Can we use colors in Elastic Detections Alert Emails? Willem

---

## [Show date with correct timezone in Kibana alert emails](https://discuss.elastic.co/t/show-date-with-correct-timezone-in-kibana-alert-emails/267159)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 2\
**Last updated:** [March 16, 2021, 10:58am UTC](https://discuss.elastic.co/t/show-date-with-correct-timezone-in-kibana-alert-emails/267159 "2021-03-16T10:58:10Z")

</div>

Hello, In Elastic SIEM alert emails, we can use {{date}} as date in email alerts. But the problem is that date is in GMT and my timezone is GMT+1. Is there a way to be able to show the correct date in Kibana alert email…

---

## [Filter in Kibana Visualization on values with spaces in it](https://discuss.elastic.co/t/filter-in-kibana-visualization-on-values-with-spaces-in-it/267288)

<div class="topic-metadata">

**Author:** [@Philbert](https://discuss.elastic.co/u/Philbert)\
**Replies:** 2\
**Last updated:** [March 16, 2021, 10:36am UTC](https://discuss.elastic.co/t/filter-in-kibana-visualization-on-values-with-spaces-in-it/267288 "2021-03-16T10:36:59Z")

</div>

We use Kibana to analyse the HTTP logs of on our CDN. One important field is the user agent. From the user agent I can see which device was requesting an HTTP request from the CDN. I would like to gather statistics on …

---

## [パスワード変更の禁止](https://discuss.elastic.co/t/topic/264210)

<div class="topic-metadata">

**Author:** [@syogo](https://discuss.elastic.co/u/syogo)\
**Replies:** 3\
**Last updated:** [March 16, 2021, 3:31am UTC](https://discuss.elastic.co/t/topic/264210 "2021-03-16T03:31:11Z")

</div>

\[kibana\_dashboard\_only\_user\]を持っているAというアカウントでログインしたとき，図のAccountSettingsページに移動させないためにはどうしたらいいですか？最終的にパスワード変更ができないようにしたいです．また，リバースプロキシでNGINXを使用しています．versinは6.8.13であり，ライセンスはBasicです．

---

## [Field added by Logstash Grok can't be used in Kibana filters](https://discuss.elastic.co/t/field-added-by-logstash-grok-cant-be-used-in-kibana-filters/267122)

<div class="topic-metadata">

**Author:** [@b133](https://discuss.elastic.co/u/b133)\
**Replies:** 4\
**Last updated:** [March 15, 2021, 7:46pm UTC](https://discuss.elastic.co/t/field-added-by-logstash-grok-cant-be-used-in-kibana-filters/267122 "2021-03-15T19:46:48Z")

</div>

I added a hostname field to my index using Logstash Grok: grok { match =\> { "originsicname" =\> "CN=%{HOSTNAME:hostname}," } ... For some reason I cannot use this hostname field as a filter on my dashboards. …

---

## [After changing the server ip address , Kibana does not work](https://discuss.elastic.co/t/after-changing-the-server-ip-address-kibana-does-not-work/265840)

<div class="topic-metadata">

**Author:** [@John\_biryon](https://discuss.elastic.co/u/John_biryon)\
**Replies:** 9\
**Last updated:** [March 15, 2021, 7:15pm UTC](https://discuss.elastic.co/t/after-changing-the-server-ip-address-kibana-does-not-work/265840 "2021-03-15T19:15:47Z")

</div>

Where do i go about to update the Kibana for the new IP address ? the ip address of the server had to be changed . Microsoft Windows 2012 r2, was working nicly before the change. many thanks John

---

## [Kibana Tag Description on Hover](https://discuss.elastic.co/t/kibana-tag-description-on-hover/267125)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 3\
**Last updated:** [March 15, 2021, 3:02pm UTC](https://discuss.elastic.co/t/kibana-tag-description-on-hover/267125 "2021-03-15T15:02:14Z")

</div>

Hello, Nice work with the Kibana tags in 7.11, that will be useful. :slight\_smile: But I was thinking that it would be nice if the description was shown when hovering over the tag. For example: In the above screens…

---

## [I have hypen separated in one column and i want to use that column in elastic search. Mapping created with type. Need to escape the hypen and get the whole value](https://discuss.elastic.co/t/i-have-hypen-separated-in-one-column-and-i-want-to-use-that-column-in-elastic-search-mapping-created-with-type-need-to-escape-the-hypen-and-get-the-whole-value/266998)

<div class="topic-metadata">

**Author:** [@Sreenath\_G](https://discuss.elastic.co/u/Sreenath_G)\
**Replies:** 3\
**Last updated:** [March 15, 2021, 2:15pm UTC](https://discuss.elastic.co/t/i-have-hypen-separated-in-one-column-and-i-want-to-use-that-column-in-elastic-search-mapping-created-with-type-need-to-escape-the-hypen-and-get-the-whole-value/266998 "2021-03-15T14:15:03Z")

</div>

Below is mapping: "TestID" : { "type" : "text", "fielddata" : true Example value of ID is "12333-1arerd-2333d-rrrrrwwqq" In the scripted field of the Index pattern i have given the below Script: if (doc\['TestID'\] …

---

## [Kibana not working](https://discuss.elastic.co/t/kibana-not-working/264907)

<div class="topic-metadata">

**Author:** [@realtech2338](https://discuss.elastic.co/u/realtech2338)\
**Replies:** 2\
**Last updated:** [March 15, 2021, 2:13pm UTC](https://discuss.elastic.co/t/kibana-not-working/264907 "2021-03-15T14:13:52Z")

</div>

i have installed elasticsearch and it is running but kibana is throwing below error: log \[00:40:42.667\] \[warning\]\[savedobjects-service\] Unable to connect to Elasticsearch. Error: resource\_already\_exists\_exception log…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=351)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=353)
