# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=353

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 354

---

## [Combining (grouping) two records as one in Kibana Discover](https://discuss.elastic.co/t/combining-grouping-two-records-as-one-in-kibana-discover/266937)

<div class="topic-metadata">

**Author:** [@usman1](https://discuss.elastic.co/u/usman1)\
**Replies:** 2\
**Last updated:** [March 15, 2021, 12:13pm UTC](https://discuss.elastic.co/t/combining-grouping-two-records-as-one-in-kibana-discover/266937 "2021-03-15T12:13:00Z")

</div>

Hi, I want to group (aggregate) records on the basis of a specific ID. At the moment, my data has an event START and END record identified by the IDs. START and END record have different fields in them which I want to c…

---

## [Kibana discover not showing data](https://discuss.elastic.co/t/kibana-discover-not-showing-data/265918)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 9\
**Last updated:** [March 15, 2021, 10:00am UTC](https://discuss.elastic.co/t/kibana-discover-not-showing-data/265918 "2021-03-15T10:00:25Z")

</div>

i have the following indices log-pb-flow-2021.02.22-000001 log-pb-flow-2021.02.22-000002 health status index uuid pri rep docs.count docs.deleted store.size pri.store.size gre…

---

## [FATAL Port 5601 is already in use. Another instance of Kibana may be running!](https://discuss.elastic.co/t/fatal-port-5601-is-already-in-use-another-instance-of-kibana-may-be-running/267108)

<div class="topic-metadata">

**Author:** [@Prasanth\_V](https://discuss.elastic.co/u/Prasanth_V)\
**Replies:** 2\
**Last updated:** [March 15, 2021, 9:26am UTC](https://discuss.elastic.co/t/fatal-port-5601-is-already-in-use-another-instance-of-kibana-may-be-running/267108 "2021-03-15T09:26:20Z")

</div>

Kibana is not running...Could anyone please help on this case?

---

## [I have servers data im visulaizing them in kibana. I used Top hit as the aggregation metric for last updated time. In the buckets i have other fields to look at the data like a table. But im getting duplicates how do i get rid of this](https://discuss.elastic.co/t/i-have-servers-data-im-visulaizing-them-in-kibana-i-used-top-hit-as-the-aggregation-metric-for-last-updated-time-in-the-buckets-i-have-other-fields-to-look-at-the-data-like-a-table-but-im-getting-duplicates-how-do-i-get-rid-of-this/267094)

<div class="topic-metadata">

**Author:** [@sagar\_rao](https://discuss.elastic.co/u/sagar_rao)\
**Replies:** 2\
**Last updated:** [March 15, 2021, 6:47am UTC](https://discuss.elastic.co/t/i-have-servers-data-im-visulaizing-them-in-kibana-i-used-top-hit-as-the-aggregation-metric-for-last-updated-time-in-the-buckets-i-have-other-fields-to-look-at-the-data-like-a-table-but-im-getting-duplicates-how-do-i-get-rid-of-this/267094 "2021-03-15T06:47:08Z")

</div>

---

## [Can we have default filter?](https://discuss.elastic.co/t/can-we-have-default-filter/266205)

<div class="topic-metadata">

**Author:** [@Abhishek\_Vyas1](https://discuss.elastic.co/u/Abhishek_Vyas1)\
**Replies:** 2\
**Last updated:** [March 15, 2021, 3:33am UTC](https://discuss.elastic.co/t/can-we-have-default-filter/266205 "2021-03-15T03:33:40Z")

</div>

Is it possible to have a default filter that is hidden from dash board. Mainly the need is as follows :- we have key name area which have 4 different values (as A,B,C,D). So whenever user choose a given area in front e…

---

## [Vertical Bar Unique Count all counts = 1](https://discuss.elastic.co/t/vertical-bar-unique-count-all-counts-1/264171)

<div class="topic-metadata">

**Author:** [@j4sper](https://discuss.elastic.co/u/j4sper)\
**Replies:** 6\
**Last updated:** [March 14, 2021, 6:06pm UTC](https://discuss.elastic.co/t/vertical-bar-unique-count-all-counts-1/264171 "2021-03-14T18:06:29Z")

</div>

I'm trying to visualize dns log data in a vertical chart. X-axis should be remote\_host. Y-axis should be count of remote\_host. I do this by setting Data -\> Metrics -\> Y-axis -\> Aggregation to Unique Count and Field to r…

---

## [Multiple Webhook](https://discuss.elastic.co/t/multiple-webhook/267178)

<div class="topic-metadata">

**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\
**Replies:** 4\
**Last updated:** [March 14, 2021, 2:37pm UTC](https://discuss.elastic.co/t/multiple-webhook/267178 "2021-03-14T14:37:58Z")

</div>

Hi I want to make an alert(watcher) with multiple action. For example, I need to call more than two hosts(with different path and port) so I need to use my\_webhook according to the bellow page: "actions" : { "my\_we…

---

## [Conditional setting of values in VEGA (for gantt chart)](https://discuss.elastic.co/t/conditional-setting-of-values-in-vega-for-gantt-chart/266580)

<div class="topic-metadata">

**Author:** [@Nicole\_Hirshler](https://discuss.elastic.co/u/Nicole_Hirshler)\
**Replies:** 4\
**Last updated:** [March 14, 2021, 8:16am UTC](https://discuss.elastic.co/t/conditional-setting-of-values-in-vega-for-gantt-chart/266580 "2021-03-14T08:16:36Z")

</div>

I want to create gantt chat display where "end" bar is dependent on the application status. If "status" is "Running" - I want to set endTime to "now()" If "status" is "not Running" - I want to use endTime field from th…

---

## [Table in canvas not showing](https://discuss.elastic.co/t/table-in-canvas-not-showing/267148)

<div class="topic-metadata">

**Author:** [@borna\_talebi](https://discuss.elastic.co/u/borna_talebi)\
**Replies:** 2\
**Last updated:** [March 14, 2021, 6:34am UTC](https://discuss.elastic.co/t/table-in-canvas-not-showing/267148 "2021-03-14T06:34:30Z")

</div>

I'm new to canvas so my question might be stupid. I'm trying to add metricbeat data to a table using essql. In the preview data section, I can see my data but the table's empty. Here's the expression I'm using: filters…

---

## [Detection engine](https://discuss.elastic.co/t/detection-engine/266490)

<div class="topic-metadata">

**Author:** [@Liora](https://discuss.elastic.co/u/Liora)\
**Replies:** 5\
**Last updated:** [March 13, 2021, 6:26pm UTC](https://discuss.elastic.co/t/detection-engine/266490 "2021-03-13T18:26:18Z")

</div>

Hi everyone, how can i please enable the Detections feature in Kibana? Who is the user with the mentioned privileges? Thank you

---

## [Show field value as icon/svg](https://discuss.elastic.co/t/show-field-value-as-icon-svg/267050)

<div class="topic-metadata">

**Author:** [@SKiD](https://discuss.elastic.co/u/SKiD)\
**Replies:** 3\
**Last updated:** [March 13, 2021, 6:01pm UTC](https://discuss.elastic.co/t/show-field-value-as-icon-svg/267050 "2021-03-13T18:01:55Z")

</div>

Hey, I read some stuff about showing images in Kibana in the Discovery screen. Now I was curious and tested some things out. I was able to show URLs as picture, that worked great, but what I wasn't able to do is showing…

---

## [GeoIP - how to only show users who are or have logged on from multiple locations](https://discuss.elastic.co/t/geoip-how-to-only-show-users-who-are-or-have-logged-on-from-multiple-locations/266817)

<div class="topic-metadata">

**Author:** [@FinT](https://discuss.elastic.co/u/FinT)\
**Replies:** 3\
**Last updated:** [March 13, 2021, 5:50pm UTC](https://discuss.elastic.co/t/geoip-how-to-only-show-users-who-are-or-have-logged-on-from-multiple-locations/266817 "2021-03-13T17:50:35Z")

</div>

elastic stack 6.5.1. This question can be applied to any similar query to filter events. I have visualised users (donut) who have logged in remotely. The inner ring shows users, the outer shows countries. Due to the lar…

---

## [Kibana Data Visualization With Multiple Instances](https://discuss.elastic.co/t/kibana-data-visualization-with-multiple-instances/267076)

<div class="topic-metadata">

**Author:** [@gokhungok](https://discuss.elastic.co/u/gokhungok)\
**Replies:** 1\
**Last updated:** [March 13, 2021, 1:30pm UTC](https://discuss.elastic.co/t/kibana-data-visualization-with-multiple-instances/267076 "2021-03-13T13:30:44Z")

</div>

Hello we're searching some data visualization tools and Kibana is one of the best tools for our requirements for now. But we need to clarify one case; We'll use Kibana as feature for one of our products and this product…

---

## [Problem Posting to Kibana Shared Objects API](https://discuss.elastic.co/t/problem-posting-to-kibana-shared-objects-api/266595)

<div class="topic-metadata">

**Author:** [@brett.b](https://discuss.elastic.co/u/brett.b)\
**Replies:** 3\
**Last updated:** [March 12, 2021, 7:00pm UTC](https://discuss.elastic.co/t/problem-posting-to-kibana-shared-objects-api/266595 "2021-03-12T19:00:38Z")

</div>

Hello there - I'm trying to use the Saved Objects "import" feature, but I keep getting 415 response codes. I used the export feature to export a dashboard to a ndjson file and then I try to push that same dashboard back …

---

## [Reindex getting failed in kibana 6.8.13](https://discuss.elastic.co/t/reindex-getting-failed-in-kibana-6-8-13/266586)

<div class="topic-metadata">

**Author:** [@MdRashid](https://discuss.elastic.co/u/MdRashid)\
**Replies:** 1\
**Last updated:** [March 12, 2021, 6:45pm UTC](https://discuss.elastic.co/t/reindex-getting-failed-in-kibana-6-8-13/266586 "2021-03-12T18:45:32Z")

</div>

Hi All I have previous Data of ES v5.0.0 and i upgrade ES v5.0.0 to 6.8.13 after that i start reindex my cluster in kibana it got fail reason dont know.. I want ES to run on v7.6.3. For that i start with ES v6.8.13 My…

---

## [Kibana after logging with user name and password in going back to login screen](https://discuss.elastic.co/t/kibana-after-logging-with-user-name-and-password-in-going-back-to-login-screen/266641)

<div class="topic-metadata">

**Author:** [@sathish.mtech01](https://discuss.elastic.co/u/sathish.mtech01)\
**Replies:** 4\
**Last updated:** [March 12, 2021, 4:55pm UTC](https://discuss.elastic.co/t/kibana-after-logging-with-user-name-and-password-in-going-back-to-login-screen/266641 "2021-03-12T16:55:46Z")

</div>

Kibana after logging with user name and password in going back to login screen itself After inspecting in console there are no errors Deployed in Azure Kubernetes environment

---

## [Multi series chart in one Visualization on Kibana 7.11](https://discuss.elastic.co/t/multi-series-chart-in-one-visualization-on-kibana-7-11/266796)

<div class="topic-metadata">

**Author:** [@bab](https://discuss.elastic.co/u/bab)\
**Replies:** 4\
**Last updated:** [March 12, 2021, 4:07pm UTC](https://discuss.elastic.co/t/multi-series-chart-in-one-visualization-on-kibana-7-11/266796 "2021-03-12T16:07:53Z")

</div>

Hi All, Is it possible to create Multi series chart in a single visualization ? i want to implement a graph like below. any ideas or explanations? Thank you . die Original Data is comming from CSV file

---

## [Applying modified css](https://discuss.elastic.co/t/applying-modified-css/267101)

<div class="topic-metadata">

**Author:** [@hayzjd836](https://discuss.elastic.co/u/hayzjd836)\
**Replies:** 1\
**Last updated:** [March 12, 2021, 3:55pm UTC](https://discuss.elastic.co/t/applying-modified-css/267101 "2021-03-12T15:55:40Z")

</div>

Hello! I'm using version 7.11 of kibana I want to hide the elastic logo on the top left of kibana. So I modified the css file of kibana. (/usr/share/kibana/node\_modules/@kbn/ui-shared-deps/target/kbn-ui-shared-deps.v7…

---

## [Alerting on a specific time range](https://discuss.elastic.co/t/alerting-on-a-specific-time-range/266999)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 4\
**Last updated:** [March 12, 2021, 1:52pm UTC](https://discuss.elastic.co/t/alerting-on-a-specific-time-range/266999 "2021-03-12T13:52:19Z")

</div>

Hi is there a way to alert only on a specific time range? lets say office hours.... It is possible? how can I do this?

---

## [Customize dashboard \[Filebeat Nginx\] Overview ECS to point to fbeat-\* instead of filebeat-\* pattern](https://discuss.elastic.co/t/customize-dashboard-filebeat-nginx-overview-ecs-to-point-to-fbeat-instead-of-filebeat-pattern/266906)

<div class="topic-metadata">

**Author:** [@ORich](https://discuss.elastic.co/u/ORich)\
**Replies:** 3\
**Last updated:** [March 12, 2021, 12:41pm UTC](https://discuss.elastic.co/t/customize-dashboard-filebeat-nginx-overview-ecs-to-point-to-fbeat-instead-of-filebeat-pattern/266906 "2021-03-12T12:41:57Z")

</div>

Dear experts, could you please tell me the way to customize the amazing dashboards like Filebeat Nginx ECS ones to point to a different index pattern ? By default, it looks like that these dashboards do collect data fr…

---

## [Custom formatting for boolean fields](https://discuss.elastic.co/t/custom-formatting-for-boolean-fields/266949)

<div class="topic-metadata">

**Author:** [@bg.andrew](https://discuss.elastic.co/u/bg.andrew)\
**Replies:** 2\
**Last updated:** [March 12, 2021, 10:49am UTC](https://discuss.elastic.co/t/custom-formatting-for-boolean-fields/266949 "2021-03-12T10:49:54Z")

</div>

Hi, should be quite a simple question. I'm using kibana with elasticsearch service in AWS. Does anybody knows what is the best way to customise the look of a boolean field values in kibana? The client wants to see those …

---

## [Region join a multivalued field (maps)](https://discuss.elastic.co/t/region-join-a-multivalued-field-maps/266845)

<div class="topic-metadata">

**Author:** [@Rom1](https://discuss.elastic.co/u/Rom1)\
**Replies:** 2\
**Last updated:** [March 12, 2021, 10:08am UTC](https://discuss.elastic.co/t/region-join-a-multivalued-field-maps/266845 "2021-03-12T10:08:00Z")

</div>

Hi everyone, Playing with maps on ES 7.10.2, I'm stuck and I need help. I have a first index containing areas and sub areas (geojson) with a code (ID). I have another index containing documents (with a field area\_id) …

---

## [Increase the precision\_threshold in TSVB](https://discuss.elastic.co/t/increase-the-precision-threshold-in-tsvb/267070)

<div class="topic-metadata">

**Author:** [@zevodku](https://discuss.elastic.co/u/zevodku)\
**Replies:** 1\
**Last updated:** [March 12, 2021, 9:53am UTC](https://discuss.elastic.co/t/increase-the-precision-threshold-in-tsvb/267070 "2021-03-12T09:53:18Z")

</div>

Hi, I cannot find a way to increase the precision\_threshold in TSVB when using cardinality agg. How can I do that ? Thanks

---

## [How to test EUI changes in Kibana(7.10.x) during development?](https://discuss.elastic.co/t/how-to-test-eui-changes-in-kibana-7-10-x-during-development/266114)

<div class="topic-metadata">

**Author:** [@hardik.rapidops](https://discuss.elastic.co/u/hardik.rapidops)\
**Replies:** 6\
**Last updated:** [March 12, 2021, 6:18am UTC](https://discuss.elastic.co/t/how-to-test-eui-changes-in-kibana-7-10-x-during-development/266114 "2021-03-12T06:18:36Z")

</div>

I want to integrate eui with my local kibana, Is there any way to integrate eui with link e.g @elastic/eui": "link:\<eui repo path\> in package.json in kibana 7.10.x version ? I have tried it. It's not working. Can anyon…

---

## [Kibana Plugin Link](https://discuss.elastic.co/t/kibana-plugin-link/266884)

<div class="topic-metadata">

**Author:** [@hayzjd836](https://discuss.elastic.co/u/hayzjd836)\
**Replies:** 2\
**Last updated:** [March 12, 2021, 5:45am UTC](https://discuss.elastic.co/t/kibana-plugin-link/266884 "2021-03-12T05:45:42Z")

</div>

Hello I'm trying to get access to my own dashboard from the sidebar. For example, if there's a "my\_dashboard" in the sidebar and you click on it, you can go to the "app/dashboard/...". So I created the plug-in accordi…

---

## [Kibana handle multiple authentication methods](https://discuss.elastic.co/t/kibana-handle-multiple-authentication-methods/265202)

<div class="topic-metadata">

**Author:** [@anon42972578](https://discuss.elastic.co/u/anon42972578)\
**Replies:** 2\
**Last updated:** [March 12, 2021, 5:33am UTC](https://discuss.elastic.co/t/kibana-handle-multiple-authentication-methods/265202 "2021-03-12T05:33:54Z")

</div>

Hello, we have some questions about how to handle multiple authentication methods in Kibana. It would be great if we can learn from you and your solutions or your ideas. at the moment we can offer three different authe…

---

## [Problem in kibana (web browser not working)](https://discuss.elastic.co/t/problem-in-kibana-web-browser-not-working/267022)

<div class="topic-metadata">

**Author:** [@gregory7](https://discuss.elastic.co/u/gregory7)\
**Replies:** 2\
**Last updated:** [March 12, 2021, 4:13am UTC](https://discuss.elastic.co/t/problem-in-kibana-web-browser-not-working/267022 "2021-03-12T04:13:13Z")

</div>

Hi, I installed elasticsearch and kibana on my local pc with virtualbox machine. They are works good. later, I install same application on linux server, they are not working. The linux server cannot access internet c…

---

## [Filter for value Button in Discovery](https://discuss.elastic.co/t/filter-for-value-button-in-discovery/266807)

<div class="topic-metadata">

**Author:** [@logger](https://discuss.elastic.co/u/logger)\
**Replies:** 3\
**Last updated:** [March 11, 2021, 7:30pm UTC](https://discuss.elastic.co/t/filter-for-value-button-in-discovery/266807 "2021-03-11T19:30:29Z")

</div>

Hi there, I have a question about the layout. Is there a way to set the position of the "filter for value" button. Because we upgraded from 7.8.1 to 7.11.1 and now the filtering is quite difficult. We have experienced…

---

## [Modify Denominator in Average Metric](https://discuss.elastic.co/t/modify-denominator-in-average-metric/266603)

<div class="topic-metadata">

**Author:** [@bsmith](https://discuss.elastic.co/u/bsmith)\
**Replies:** 3\
**Last updated:** [March 11, 2021, 6:38pm UTC](https://discuss.elastic.co/t/modify-denominator-in-average-metric/266603 "2021-03-11T18:38:45Z")

</div>

Oracle has recently integrated the elastic stack into one of their products, but it unfortunately does not support visual builder or timelion at the moment. I've tried my best to restore functionality myself from my own …

---

## [Email and Slack alerts based on logs in Elasticsearch](https://discuss.elastic.co/t/email-and-slack-alerts-based-on-logs-in-elasticsearch/266888)

<div class="topic-metadata">

**Author:** [@pks](https://discuss.elastic.co/u/pks)\
**Replies:** 2\
**Last updated:** [March 11, 2021, 5:29pm UTC](https://discuss.elastic.co/t/email-and-slack-alerts-based-on-logs-in-elasticsearch/266888 "2021-03-11T17:29:42Z")

</div>

Hi! I am unable to figure out from the pricing page whether or not alerting from Kibana based on patterns found in Elasticsearch logs is free. I want to create alerts from Kibana to monitor application logs and send aler…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=352)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=354)
