# Kibana **URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=356 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 357 --- ## [Stack Monitoring not working with Kubernetes containers](https://discuss.elastic.co/t/stack-monitoring-not-working-with-kubernetes-containers/266421)
**Author:** [@InnerJoin](https://discuss.elastic.co/u/InnerJoin)\ **Replies:** 4\ **Last updated:** [March 7, 2021, 1:38am UTC](https://discuss.elastic.co/t/stack-monitoring-not-working-with-kubernetes-containers/266421 "2021-03-07T01:38:12Z")
Hi all, I'm trying to get stack monitoring working on a cluster that I have deployed for testing in a Kubernetes cluster. I was able to get the old self monitoring to work, but if I try to monitor with metricbeat everyt… --- ## [Item 381of GeoJSON will not load?](https://discuss.elastic.co/t/item-381of-geojson-will-not-load/266414)
**Author:** [@dshashek](https://discuss.elastic.co/u/dshashek)\ **Replies:** 2\ **Last updated:** [March 6, 2021, 9:57pm UTC](https://discuss.elastic.co/t/item-381of-geojson-will-not-load/266414 "2021-03-06T21:57:47Z")
I do not understand at all what is going on here. I'm trying to load a geojson of congressional districts that I've merged with additional information about each congressman using the geopandas library. Every district … --- ## [Vega Scale Question - static mapping](https://discuss.elastic.co/t/vega-scale-question-static-mapping/266379)
**Author:** [@dandcp](https://discuss.elastic.co/u/dandcp)\ **Replies:** 2\ **Last updated:** [March 6, 2021, 1:31pm UTC](https://discuss.elastic.co/t/vega-scale-question-static-mapping/266379 "2021-03-06T13:31:47Z")
I apologize for the simplicity of this question, but I simply cannot figure it out from the Vega documentation and I suspect it's a simple answer. I have a scatter chart that I've created and one of the things I do is c… --- ## [Do you know how to solve this in logs?](https://discuss.elastic.co/t/do-you-know-how-to-solve-this-in-logs/266321)
**Author:** [@b4yu](https://discuss.elastic.co/u/b4yu)\ **Replies:** 6\ **Last updated:** [March 6, 2021, 9:47am UTC](https://discuss.elastic.co/t/do-you-know-how-to-solve-this-in-logs/266321 "2021-03-06T09:47:21Z")
i got this on kibana logs how to fix it so kibana logs can work? failed to format message from /var/log/suricata/eve.json --- ## [When it is useful to have multiple config files for a single Kibana instance?](https://discuss.elastic.co/t/when-it-is-useful-to-have-multiple-config-files-for-a-single-kibana-instance/266363)
**Author:** [@trex](https://discuss.elastic.co/u/trex)\ **Replies:** 3\ **Last updated:** [March 5, 2021, 7:04pm UTC](https://discuss.elastic.co/t/when-it-is-useful-to-have-multiple-config-files-for-a-single-kibana-instance/266363 "2021-03-05T19:04:58Z")
When is it useful to have multiple config files for a single Kibana instance? $ ./bin/kibana --help -c, --config \ Path to the config file, use multiple --config args to include multiple config files --- ## [Remove/Hide metrics column from DataTable visualization](https://discuss.elastic.co/t/remove-hide-metrics-column-from-datatable-visualization/266403)
**Author:** [@SUMANT\_MISHRA](https://discuss.elastic.co/u/SUMANT_MISHRA)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 6:44pm UTC](https://discuss.elastic.co/t/remove-hide-metrics-column-from-datatable-visualization/266403 "2021-03-05T18:44:34Z")
Hi, I need some help in structuring Datatable visualization so that I can download the CSV without Metrics column. If I try to create a DataTable visualization, it adds Mandatorily "Metrics" column. Business need is to a… --- ## [Kibana multiple user problem](https://discuss.elastic.co/t/kibana-multiple-user-problem/266351)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 4\ **Last updated:** [March 5, 2021, 4:10pm UTC](https://discuss.elastic.co/t/kibana-multiple-user-problem/266351 "2021-03-05T16:10:14Z")
I have setup two users one user is super and other one is non superuser for non superuser i have a custom role for user user2(non superuser) GET /\_security/role/pb\_log { "pb\_log" : { "cluster" : \[ "manage"… --- ## [KQL syntax for serial difference/delta filter](https://discuss.elastic.co/t/kql-syntax-for-serial-difference-delta-filter/266100)
**Author:** [@Muhammad\_Faisal](https://discuss.elastic.co/u/Muhammad_Faisal)\ **Replies:** 6\ **Last updated:** [March 5, 2021, 3:39pm UTC](https://discuss.elastic.co/t/kql-syntax-for-serial-difference-delta-filter/266100 "2021-03-05T15:39:55Z")
hi guys, my numeric data is coming aggregating , so i am using aggregation "sum of serial difference of values" to take delta...how do i put this delta in KQL filter in search box... example value1 : 20 value 2: 50 … --- ## [Filter to query](https://discuss.elastic.co/t/filter-to-query/266264)
**Author:** [@paasi6666](https://discuss.elastic.co/u/paasi6666)\ **Replies:** 4\ **Last updated:** [March 5, 2021, 3:37pm UTC](https://discuss.elastic.co/t/filter-to-query/266264 "2021-03-05T15:37:13Z")
Hello I've got following Filter option (as an example): source.ip : "10.10.10.10" and from.domain : "domain.com" or source.ip: "40.40.40.40" and from.domain : "otherdomain.com" How do I "translate" this filter to an… --- ## [Monitors can only support up to 10 triggers](https://discuss.elastic.co/t/monitors-can-only-support-up-to-10-triggers/266163)
**Author:** [@larrya](https://discuss.elastic.co/u/larrya)\ **Replies:** 6\ **Last updated:** [March 5, 2021, 3:23pm UTC](https://discuss.elastic.co/t/monitors-can-only-support-up-to-10-triggers/266163 "2021-03-05T15:23:03Z")
I have a monitor with 10 triggers. When I attempt to create another trigger, I see this error message: Failed to create the trigger \[illegal\_argument\_exception\] Monitors can only support up to 10 triggers. How … --- ## [How to Create New User in Kibana](https://discuss.elastic.co/t/how-to-create-new-user-in-kibana/265826)
**Author:** [@muthug](https://discuss.elastic.co/u/muthug)\ **Replies:** 4\ **Last updated:** [March 5, 2021, 2:37pm UTC](https://discuss.elastic.co/t/how-to-create-new-user-in-kibana/265826 "2021-03-05T14:37:35Z")
Hi, I have created the new user in Kibana via kibana UI. But i am unable to login with that id. Getting Error as:- {"statusCode":403,"error":"Forbidden","message":"Forbidden"} Note:- I am able to login with System use… --- ## [Kibana Data Table visualization - advanced filter](https://discuss.elastic.co/t/kibana-data-table-visualization-advanced-filter/266358)
**Author:** [@MMH](https://discuss.elastic.co/u/MMH)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 1:39pm UTC](https://discuss.elastic.co/t/kibana-data-table-visualization-advanced-filter/266358 "2021-03-05T13:39:02Z")
I am creating Kibana Dashboard based on log data. I want to create Data Table for the most common warnings, with some stacktrace info (if exists). Each entry can contain multiple stacktrace messages, but the first one … --- ## [How does the "version" tag works in the Json export of a visualization in Kibana?](https://discuss.elastic.co/t/how-does-the-version-tag-works-in-the-json-export-of-a-visualization-in-kibana/265954)
**Author:** [@Harpreet\_Singh](https://discuss.elastic.co/u/Harpreet_Singh)\ **Replies:** 5\ **Last updated:** [March 5, 2021, 1:35pm UTC](https://discuss.elastic.co/t/how-does-the-version-tag-works-in-the-json-export-of-a-visualization-in-kibana/265954 "2021-03-05T13:35:37Z")
Hi Team, This is regarding version control of the kibana visualizations, we are planning to export the Json files and then put them into git. Now when i am exporting the files as Json, there is a version Tag there(PFA … --- ## [Beats dahsboards error \[ esaggs\] JSON parse: Unexpected chararter at line 1 column 1 of the JSON data](https://discuss.elastic.co/t/beats-dahsboards-error-esaggs-json-parse-unexpected-chararter-at-line-1-column-1-of-the-json-data/266343)
**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\ **Replies:** 2\ **Last updated:** [March 5, 2021, 1:25pm UTC](https://discuss.elastic.co/t/beats-dahsboards-error-esaggs-json-parse-unexpected-chararter-at-line-1-column-1-of-the-json-data/266343 "2021-03-05T13:25:09Z")
Hello, I am trying ELK 8.0.0 from code source as dev cluster, and used the same configuration of my prod cluster (Version 7.10.1) but when I installed beats (version 7.11.1) I am getting errors in the dashboards as you … --- ## [Cannot access kibana dashobards through iframe code after configuring TLS/SSL encryption in ELK stack](https://discuss.elastic.co/t/cannot-access-kibana-dashobards-through-iframe-code-after-configuring-tls-ssl-encryption-in-elk-stack/266346)
**Author:** [@Husnain](https://discuss.elastic.co/u/Husnain)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 1:14pm UTC](https://discuss.elastic.co/t/cannot-access-kibana-dashobards-through-iframe-code-after-configuring-tls-ssl-encryption-in-elk-stack/266346 "2021-03-05T13:14:01Z")
Hii.I want to share my kibana dashboards through iframe code with my colleague.When I run kibana on http everything works fine.But when I share dashboards after configuring TLS/SSL on my elk stack my colleague cannot acc… --- ## [How to fix a rule on x axis using time](https://discuss.elastic.co/t/how-to-fix-a-rule-on-x-axis-using-time/266285)
**Author:** [@bab](https://discuss.elastic.co/u/bab)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 1:13pm UTC](https://discuss.elastic.co/t/how-to-fix-a-rule-on-x-axis-using-time/266285 "2021-03-05T13:13:15Z")
hello all, I am trying to fix a fixed line to the x acse where time = 15:30 so that I can notice the bars that took longer than 15:30. what have i done wrong? tha is my Code: { "$schema": "https://vega.github.io/… --- ## [Share Kibana Dashboard](https://discuss.elastic.co/t/share-kibana-dashboard/266316)
**Author:** [@deeksha39](https://discuss.elastic.co/u/deeksha39)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 12:56pm UTC](https://discuss.elastic.co/t/share-kibana-dashboard/266316 "2021-03-05T12:56:17Z")
Hi All, I want to share my dashboard with the client without the 'Edit' button but the 'save query' button should be enabled. --- ## [Pull fields in the kibana watcher](https://discuss.elastic.co/t/pull-fields-in-the-kibana-watcher/265779)
**Author:** [@richis](https://discuss.elastic.co/u/richis)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 12:51pm UTC](https://discuss.elastic.co/t/pull-fields-in-the-kibana-watcher/265779 "2021-03-05T12:51:20Z")
Hi all, I have created a watcher. I am new to this concept so finding it difficult to achieve. The watcher is created successfully but, i am trying to get the fields that i have in my log. With the help of google search … --- ## [.monitoring-es-7-\* with Data fields conflicts](https://discuss.elastic.co/t/monitoring-es-7-with-data-fields-conflicts/265882)
**Author:** [@valleram](https://discuss.elastic.co/u/valleram)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 12:49pm UTC](https://discuss.elastic.co/t/monitoring-es-7-with-data-fields-conflicts/265882 "2021-03-05T12:49:59Z")
Hi, I've just setup up Metricbeat to start monitoring my ES cluster. I started receiving data from my Metricbeat instance, but on Kibana while trying to see that monitoring data I'm receiving bunch of data types confli… --- ## [Error in scripted field, working with arrays of objects](https://discuss.elastic.co/t/error-in-scripted-field-working-with-arrays-of-objects/265944)
**Author:** [@Casper\_Thrane](https://discuss.elastic.co/u/Casper_Thrane)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 12:48pm UTC](https://discuss.elastic.co/t/error-in-scripted-field-working-with-arrays-of-objects/265944 "2021-03-05T12:48:07Z")
Hi I think I have found an error, in the way Kibana/Scripted Fields handles arrays of objects. My example is this. My ES Data: {"@timestamp":"2021-02-28T22:59:38.786Z", "message":"ExclusionsDeparturesArrivalsExeption:… --- ## [Data Table with Document Status Counts by Month](https://discuss.elastic.co/t/data-table-with-document-status-counts-by-month/265849)
**Author:** [@Darwin](https://discuss.elastic.co/u/Darwin)\ **Replies:** 2\ **Last updated:** [March 5, 2021, 12:05pm UTC](https://discuss.elastic.co/t/data-table-with-document-status-counts-by-month/265849 "2021-03-05T12:05:58Z")
Hi all, I am new to Kibana and am having trouble creating a desired data table. In short, I have an index comprising documents representing order lifecycle, similar to the image shown below: The order documents incl… --- ## [Setting a Time Zone for a Dashboard](https://discuss.elastic.co/t/setting-a-time-zone-for-a-dashboard/265941)
**Author:** [@Rakesh\_Rayabarapu](https://discuss.elastic.co/u/Rakesh_Rayabarapu)\ **Replies:** 2\ **Last updated:** [March 5, 2021, 11:39am UTC](https://discuss.elastic.co/t/setting-a-time-zone-for-a-dashboard/265941 "2021-03-05T11:39:26Z")
Hello Team, Greetings for the Day ! I am looking if it is possible to set a time zone when creating a specific visualization/dashboard/canvas Work pad by using advanced json / css in canvas. The purpose for this is so … --- ## [Alerting elastic cloud kibana: Filter tresholds in alerts](https://discuss.elastic.co/t/alerting-elastic-cloud-kibana-filter-tresholds-in-alerts/266250)
**Author:** [@avanlieshout](https://discuss.elastic.co/u/avanlieshout)\ **Replies:** 3\ **Last updated:** [March 5, 2021, 11:33am UTC](https://discuss.elastic.co/t/alerting-elastic-cloud-kibana-filter-tresholds-in-alerts/266250 "2021-03-05T11:33:01Z")
Hi all, Is there a way to add a filter to alerting? As een example we we don’t want group per “action\_name” with one condition as below, but uphold different conditions for different “action\_name”’s (action\_1 \> 100, ac… --- ## [Watcher webhook url has no port](https://discuss.elastic.co/t/watcher-webhook-url-has-no-port/266279)
**Author:** [@chapmantrain](https://discuss.elastic.co/u/chapmantrain)\ **Replies:** 2\ **Last updated:** [March 5, 2021, 11:07am UTC](https://discuss.elastic.co/t/watcher-webhook-url-has-no-port/266279 "2021-03-05T11:07:16Z")
I have an api endpoint that does not have a port. I can hit the endpoint with java but the webhook requires a port. Is there a work around for this issue? --- ## [Unable to use Top hit for ip address in pie chart](https://discuss.elastic.co/t/unable-to-use-top-hit-for-ip-address-in-pie-chart/266054)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 2\ **Last updated:** [March 5, 2021, 5:44am UTC](https://discuss.elastic.co/t/unable-to-use-top-hit-for-ip-address-in-pie-chart/266054 "2021-03-05T05:44:05Z")
Hi all, I'm trying to give a pie chart in kibana for ip address to monitor the up/down status of a device. SO many times, device ip may be down, but currently it is up. SO i want to give top hit of ip ordered by time… --- ## [Can I define color range in Object](https://discuss.elastic.co/t/can-i-define-color-range-in-object/266095)
**Author:** [@ChrisaT](https://discuss.elastic.co/u/ChrisaT)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 4:17am UTC](https://discuss.elastic.co/t/can-i-define-color-range-in-object/266095 "2021-03-05T04:17:06Z")
Hi, im having issues with visualisations and defining colour ranges. Although I can override the colour via the legend in the visualisation adding this into a Canvas ignores the colours I set. It reverts to the default g… --- ## [Elasticstack Audit Logging](https://discuss.elastic.co/t/elasticstack-audit-logging/266093)
**Author:** [@Ingram\_Gultom](https://discuss.elastic.co/u/Ingram_Gultom)\ **Replies:** 2\ **Last updated:** [March 5, 2021, 2:01am UTC](https://discuss.elastic.co/t/elasticstack-audit-logging/266093 "2021-03-05T02:01:42Z")
Hello, Is there any audit configuration for elastic stack to know which user change dynamic cluster configuration or add/delete dashboard at kibana ? Thank you --- ## [Visualization in Kibana for Custome field](https://discuss.elastic.co/t/visualization-in-kibana-for-custome-field/265993)
**Author:** [@Subrat\_Dash](https://discuss.elastic.co/u/Subrat_Dash)\ **Replies:** 1\ **Last updated:** [March 5, 2021, 2:00am UTC](https://discuss.elastic.co/t/visualization-in-kibana-for-custome-field/265993 "2021-03-05T02:00:24Z")
HI All, We have application log in JSON format with key value pair and those keys are coming as Fields in Kibana GUI. WIth this field I am able to parse in text filter but those field does not have virtualization option… --- ## [Kibana instance with multi node elastic cluster](https://discuss.elastic.co/t/kibana-instance-with-multi-node-elastic-cluster/266297)
**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\ **Replies:** 1\ **Last updated:** [March 4, 2021, 11:53pm UTC](https://discuss.elastic.co/t/kibana-instance-with-multi-node-elastic-cluster/266297 "2021-03-04T23:53:42Z")
Hi Elastic 7.11.1 Lets' say I have 3 node elastic cluster and I would like to access this cluster through kibana. node-1 node-2 node-3 How should I proceed, I mean, should I: install kibana on each of these 3 serv… --- ## [Sort by string in kibana's discover (search)](https://discuss.elastic.co/t/sort-by-string-in-kibanas-discover-search/266284)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 5\ **Last updated:** [March 4, 2021, 10:15pm UTC](https://discuss.elastic.co/t/sort-by-string-in-kibanas-discover-search/266284 "2021-03-04T22:15:43Z")
When I go to Kiban's discover and add fields I can sort on date field or Number field but I can't on string. is this by design or I have to change some setting to enable this I am using version 7.10.1 [Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=355) [Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=357)