# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=358

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 359

---

## [Bar chart - Aggregate by Field1 or Field2](https://discuss.elastic.co/t/bar-chart-aggregate-by-field1-or-field2/264379)

<div class="topic-metadata">

**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\
**Replies:** 2\
**Last updated:** [March 2, 2021, 11:36pm UTC](https://discuss.elastic.co/t/bar-chart-aggregate-by-field1-or-field2/264379 "2021-03-02T23:36:44Z")

</div>

Hello, I have documents with 2 fields that I would like to use for aggregation. The document will look something like "\_source" : { "name" : "name\_value", "id" : "id\_value", ... ... …

---

## [Export visualization datawith Kiabana API (data table)](https://discuss.elastic.co/t/export-visualization-datawith-kiabana-api-data-table/264451)

<div class="topic-metadata">

**Author:** [@kibana069](https://discuss.elastic.co/u/kibana069)\
**Replies:** 1\
**Last updated:** [March 2, 2021, 10:24pm UTC](https://discuss.elastic.co/t/export-visualization-datawith-kiabana-api-data-table/264451 "2021-03-02T22:24:40Z")

</div>

Hi, is it possible to export the results of a visualization with the Kibana API? I tried to use the saved objects API, but this only exports the visualization itself, but not the data of the visualization. Thanks in ad…

---

## [Index Pattern Not Refreshing](https://discuss.elastic.co/t/index-pattern-not-refreshing/265070)

<div class="topic-metadata">

**Author:** [@misterek](https://discuss.elastic.co/u/misterek)\
**Replies:** 7\
**Last updated:** [March 2, 2021, 7:38pm UTC](https://discuss.elastic.co/t/index-pattern-not-refreshing/265070 "2021-03-02T19:38:15Z")

</div>

I have an index pattern that won't refresh. I have quite a few fields that aren't recognized. When I look at the index pattern, it recognizes 3630 fields. Clicking refresh sometimes recognizes the new fields (the t…

---

## [Sum of max value](https://discuss.elastic.co/t/sum-of-max-value/265135)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 1\
**Last updated:** [March 2, 2021, 7:37pm UTC](https://discuss.elastic.co/t/sum-of-max-value/265135 "2021-03-02T19:37:35Z")

</div>

I have data coming once an hour 01am connection - 10, region1 01am connection - 20, region2 01am connection - 30, region3 02am connection - 01, region1 02am connection - 40, region2 02am connection - 50, region3 n…

---

## [Elasticsearch Cloud SSO with ActiveDirectory](https://discuss.elastic.co/t/elasticsearch-cloud-sso-with-activedirectory/265859)

<div class="topic-metadata">

**Author:** [@tchaudhry](https://discuss.elastic.co/u/tchaudhry)\
**Replies:** 7\
**Last updated:** [March 2, 2021, 7:22pm UTC](https://discuss.elastic.co/t/elasticsearch-cloud-sso-with-activedirectory/265859 "2021-03-02T19:22:49Z")

</div>

We jut subscribed to ElasticCloud. In the process of implementing SSO with Active Directory. Does SSO setup have to be done on a per deployment basis? The Kibana URLs I have used according to the following article: ar…

---

## [Failed to parse date field](https://discuss.elastic.co/t/failed-to-parse-date-field/265328)

<div class="topic-metadata">

**Author:** [@Alexandros888](https://discuss.elastic.co/u/Alexandros888)\
**Replies:** 5\
**Last updated:** [March 2, 2021, 5:36pm UTC](https://discuss.elastic.co/t/failed-to-parse-date-field/265328 "2021-03-02T17:36:07Z")

</div>

Hello, After upgrading to version 7.11 from version 7.9.3 suddenly one of my index patterns cant load properly results in kibana overview. The dark point is that it used to work fine before the update. The error mes…

---

## [How to get smaller intervals on x axis in bar visualization?](https://discuss.elastic.co/t/how-to-get-smaller-intervals-on-x-axis-in-bar-visualization/265932)

<div class="topic-metadata">

**Author:** [@NiclasK](https://discuss.elastic.co/u/NiclasK)\
**Replies:** 5\
**Last updated:** [March 2, 2021, 5:12pm UTC](https://discuss.elastic.co/t/how-to-get-smaller-intervals-on-x-axis-in-bar-visualization/265932 "2021-03-02T17:12:44Z")

</div>

Hi, Just upgraded Kibana to 7.11 and started using Lens to create visualizations. I'm creating a bar visualization using the interval function on the x axis. I would like to set a smaller interval than I can get using t…

---

## [Filter dashboard visualisations based on visible map area?](https://discuss.elastic.co/t/filter-dashboard-visualisations-based-on-visible-map-area/265952)

<div class="topic-metadata">

**Author:** [@rmoff](https://discuss.elastic.co/u/rmoff)\
**Replies:** 2\
**Last updated:** [March 2, 2021, 4:52pm UTC](https://discuss.elastic.co/t/filter-dashboard-visualisations-based-on-visible-map-area/265952 "2021-03-02T16:52:59Z")

</div>

In Kibana 7.11 is it possible to make visualisations on a dashboard filter based on the current visible area of a map that's present on the dashboard? I know that I can draw bounding boxes etc on the map in order to app…

---

## [Version field type shows as unknown in the index pattern](https://discuss.elastic.co/t/version-field-type-shows-as-unknown-in-the-index-pattern/265973)

<div class="topic-metadata">

**Author:** [@Dor\_Dadush](https://discuss.elastic.co/u/Dor_Dadush)\
**Replies:** 1\
**Last updated:** [March 2, 2021, 3:50pm UTC](https://discuss.elastic.co/t/version-field-type-shows-as-unknown-in-the-index-pattern/265973 "2021-03-02T15:50:11Z")

</div>

Hi everyone :slight\_smile: I have an index template which contains a mapping of the field agent.version to the type version (introduced in 7.10.X if I'm not mistaken) But, in the index pattern of the relevant index, I …

---

## [Kibana not work after upgrade](https://discuss.elastic.co/t/kibana-not-work-after-upgrade/265964)

<div class="topic-metadata">

**Author:** [@pauldon2](https://discuss.elastic.co/u/pauldon2)\
**Replies:** 4\
**Last updated:** [March 2, 2021, 3:24pm UTC](https://discuss.elastic.co/t/kibana-not-work-after-upgrade/265964 "2021-03-02T15:24:44Z")

</div>

I have ELK cluster with ver. 6.6.2-oss Works in docker. Last week I upgraded to version 6.8.14 (basic). Elasticsearch works without any problems. But any attempts to switch to kibana other than version 6.6.2-oss end i…

---

## [Two index pattern for same index, need to set different default time filter for each index pattern](https://discuss.elastic.co/t/two-index-pattern-for-same-index-need-to-set-different-default-time-filter-for-each-index-pattern/265829)

<div class="topic-metadata">

**Author:** [@qub123](https://discuss.elastic.co/u/qub123)\
**Replies:** 5\
**Last updated:** [March 2, 2021, 2:39pm UTC](https://discuss.elastic.co/t/two-index-pattern-for-same-index-need-to-set-different-default-time-filter-for-each-index-pattern/265829 "2021-03-02T14:39:35Z")

</div>

Hi, We have two timestamps in our document, during the index pattern creation we can only choose one timestamp for each index pattern, and that timestamp will affect the Kibana's Discover graph and the upper right corn…

---

## [How to get MonthYear from DateTime using Painless](https://discuss.elastic.co/t/how-to-get-monthyear-from-datetime-using-painless/264106)

<div class="topic-metadata">

**Author:** [@Rakesh\_Rayabarapu](https://discuss.elastic.co/u/Rakesh_Rayabarapu)\
**Replies:** 3\
**Last updated:** [March 2, 2021, 2:23pm UTC](https://discuss.elastic.co/t/how-to-get-monthyear-from-datetime-using-painless/264106 "2021-03-02T14:23:34Z")

</div>

Hello team, I wrote a script to get month (string) = doc\['@timstamp'\].value.getMonth(). Year=doc\['@timstamp'\].value.getYear(). Used concatenation montheYear=doc\['@timstamp'\].value.getMonth()+doc\['@timstamp'\].value.get…

---

## [Split string using Painless Scripted field](https://discuss.elastic.co/t/split-string-using-painless-scripted-field/265956)

<div class="topic-metadata">

**Author:** [@gaurav1](https://discuss.elastic.co/u/gaurav1)\
**Replies:** 1\
**Last updated:** [March 2, 2021, 2:04pm UTC](https://discuss.elastic.co/t/split-string-using-painless-scripted-field/265956 "2021-03-02T14:04:57Z")

</div>

I recently started working on Kibana, had a query regarding scripted field. Can scripted field return multiple value at same time? I have a field named Tags like "Tags": "Release-102;Release-103;version.1.0". I want to c…

---

## [Kibana not able to load Map tiles from maptiler](https://discuss.elastic.co/t/kibana-not-able-to-load-map-tiles-from-maptiler/263865)

<div class="topic-metadata">

**Author:** [@AlanMark](https://discuss.elastic.co/u/AlanMark)\
**Replies:** 2\
**Last updated:** [March 2, 2021, 11:48am UTC](https://discuss.elastic.co/t/kibana-not-able-to-load-map-tiles-from-maptiler/263865 "2021-03-02T11:48:30Z")

</div>

I've set up a Maptiler server with a world map as my environment is airgapped. In my Kibana.yml config i have: map.includeElasticMapsService: false map.tilemap.url: "localhost:3650/api/maps/streets/{z}/{x}/{y}.png" map…

---

## [Set vega background color with threshold](https://discuss.elastic.co/t/set-vega-background-color-with-threshold/265038)

<div class="topic-metadata">

**Author:** [@111439](https://discuss.elastic.co/u/111439)\
**Replies:** 3\
**Last updated:** [March 2, 2021, 11:11am UTC](https://discuss.elastic.co/t/set-vega-background-color-with-threshold/265038 "2021-03-02T11:11:11Z")

</div>

Hello Everybody, I have question with vega visualize (pie chart). I want to set background color on vega visualize by condition using data. {"key": "tier1", "doc\_count": 1}, {"key": "tier2", "doc\_count": 2}, {"key": …

---

## [Kibana is way too slow. and failed to load response data](https://discuss.elastic.co/t/kibana-is-way-too-slow-and-failed-to-load-response-data/265888)

<div class="topic-metadata">

**Author:** [@nugg](https://discuss.elastic.co/u/nugg)\
**Replies:** 5\
**Last updated:** [March 2, 2021, 4:29am UTC](https://discuss.elastic.co/t/kibana-is-way-too-slow-and-failed-to-load-response-data/265888 "2021-03-02T04:29:07Z")

</div>

I want to know the reason why kibana is way too slow. when i refresh the dashboard and canvas. I run kibana on 2 cpu core and 4Gi memory pod. I didn't use any custom plugins. what could be the problem?

---

## [Kibana OAuth 2 flow](https://discuss.elastic.co/t/kibana-oauth-2-flow/265697)

<div class="topic-metadata">

**Author:** [@horatiu](https://discuss.elastic.co/u/horatiu)\
**Replies:** 10\
**Last updated:** [March 2, 2021, 4:16am UTC](https://discuss.elastic.co/t/kibana-oauth-2-flow/265697 "2021-03-02T04:16:23Z")

</div>

Hello, I'm trying to figure out if my understanding of the implementation of OAuth2 in Kibana is correct. I've got an ES domain deployed on AWS with Cognito authentication via "Authorization code grant" flow. My unders…

---

## [Can I use SQL EXCEPT to compare fields present in two indexes?](https://discuss.elastic.co/t/can-i-use-sql-except-to-compare-fields-present-in-two-indexes/265245)

<div class="topic-metadata">

**Author:** [@CoffeeRecon](https://discuss.elastic.co/u/CoffeeRecon)\
**Replies:** 4\
**Last updated:** [March 1, 2021, 9:31pm UTC](https://discuss.elastic.co/t/can-i-use-sql-except-to-compare-fields-present-in-two-indexes/265245 "2021-03-01T21:31:42Z")

</div>

Hello! I have two indexes that I'd like to compare: winlogbeat-\* winlogbeat\_rollup winlogbeat\_rollup is the rollup of winlogbeat-\* and contains its historical data. What I'm looking to do is to compare these two inde…

---

## [Kibana 7.11.1 - ie11 - bootstrap error (html5)](https://discuss.elastic.co/t/kibana-7-11-1-ie11-bootstrap-error-html5/265856)

<div class="topic-metadata">

**Author:** [@snorlax](https://discuss.elastic.co/u/snorlax)\
**Replies:** 5\
**Last updated:** [March 1, 2021, 8:48pm UTC](https://discuss.elastic.co/t/kibana-7-11-1-ie11-bootstrap-error-html5/265856 "2021-03-01T20:48:06Z")

</div>

Hello, We have upgraded kibana/elasticsearch/logstash to version 7.11.1. Everything works fine on chrome and we get errors on ie11. SCRIPT1003: Expected ':' File: bootstrap.js, Line: 18, Column: 20 When I check line 1…

---

## [How do I enable TLS1.2 only and disable weak ssl ciphers in Kibana 7.0?](https://discuss.elastic.co/t/how-do-i-enable-tls1-2-only-and-disable-weak-ssl-ciphers-in-kibana-7-0/265845)

<div class="topic-metadata">

**Author:** [@rahulj](https://discuss.elastic.co/u/rahulj)\
**Replies:** 1\
**Last updated:** [March 1, 2021, 8:08pm UTC](https://discuss.elastic.co/t/how-do-i-enable-tls1-2-only-and-disable-weak-ssl-ciphers-in-kibana-7-0/265845 "2021-03-01T20:08:37Z")

</div>

Our InfoSec scans report that Kibana 7.0 service is supporting weak protocols and weak cipher suites. I am trying to find how to disable TLS 1.1 and below protocols and remove specific ciphers from Kibana service. Any h…

---

## [Spontaneously duplicated logs - need advice - thanks](https://discuss.elastic.co/t/spontaneously-duplicated-logs-need-advice-thanks/265731)

<div class="topic-metadata">

**Author:** [@Datakids](https://discuss.elastic.co/u/Datakids)\
**Replies:** 3\
**Last updated:** [March 1, 2021, 7:42pm UTC](https://discuss.elastic.co/t/spontaneously-duplicated-logs-need-advice-thanks/265731 "2021-03-01T19:42:15Z")

</div>

Hi there, I have following setup: version 7.3.1 A Live System logs into a csv With xcopy.bat I copy this csv every 5 Minutes to my ES Server to a specific folder. Beats is whatching to that csv file in that specific …

---

## [Is Kibana supported on GKE through default google ingress ? doesn't seem so](https://discuss.elastic.co/t/is-kibana-supported-on-gke-through-default-google-ingress-doesnt-seem-so/264067)

<div class="topic-metadata">

**Author:** [@rubans](https://discuss.elastic.co/u/rubans)\
**Replies:** 14\
**Last updated:** [March 1, 2021, 7:21pm UTC](https://discuss.elastic.co/t/is-kibana-supported-on-gke-through-default-google-ingress-doesnt-seem-so/264067 "2021-03-01T19:21:45Z")

</div>

I have deployed Elastic Search and Kibana on GKE. However unable to get ingress working as it seems to report Kibana service as unhealthy. I assume this is due to the root url redirecting with http 302 and GKE LB L7 ex…

---

## [Resizing of visualization whenever size of visualization is changed in dashboard](https://discuss.elastic.co/t/resizing-of-visualization-whenever-size-of-visualization-is-changed-in-dashboard/263594)

<div class="topic-metadata">

**Author:** [@Pranusha119](https://discuss.elastic.co/u/Pranusha119)\
**Replies:** 4\
**Last updated:** [March 1, 2021, 5:36pm UTC](https://discuss.elastic.co/t/resizing-of-visualization-whenever-size-of-visualization-is-changed-in-dashboard/263594 "2021-03-01T17:36:13Z")

</div>

{ "$schema": "https://vega.github.io/schema/vega-lite/v4.json", "data": {"url": "https://vega.github.io/vega-lite/data/barley.json"}, "width": 300, "height":300, "mark": "bar", "encoding": { "column": {"fi…

---

## [Search Error Unexpected token ' in JSON at position N](https://discuss.elastic.co/t/search-error-unexpected-token-in-json-at-position-n/265692)

<div class="topic-metadata">

**Author:** [@chatim](https://discuss.elastic.co/u/chatim)\
**Replies:** 6\
**Last updated:** [March 1, 2021, 5:24pm UTC](https://discuss.elastic.co/t/search-error-unexpected-token-in-json-at-position-n/265692 "2021-03-01T17:24:00Z")

</div>

Hello I'm running an elasticsearch cluster with kibana in docker. when i'm trying to create a pie chart and use Terms aggregation i got this error : Search Error Unexpected token ' in JSON at position 433 same thing …

---

## [TSVB Drill Down using Item URL](https://discuss.elastic.co/t/tsvb-drill-down-using-item-url/265744)

<div class="topic-metadata">

**Author:** [@Jesse-ECS](https://discuss.elastic.co/u/Jesse-ECS)\
**Replies:** 2\
**Last updated:** [March 1, 2021, 4:38pm UTC](https://discuss.elastic.co/t/tsvb-drill-down-using-item-url/265744 "2021-03-01T16:38:34Z")

</div>

Is it possible to access the event context from the "Item URL" optional parameter in the Panel Options screen of TSVB? I need to send the index pattern id from the current context with the resulting URL I am building. …

---

## [I deleted the indices and tried to restart kibana but it failed with this error](https://discuss.elastic.co/t/i-deleted-the-indices-and-tried-to-restart-kibana-but-it-failed-with-this-error/265807)

<div class="topic-metadata">

**Author:** [@ajeetsingh193](https://discuss.elastic.co/u/ajeetsingh193)\
**Replies:** 1\
**Last updated:** [March 1, 2021, 4:13pm UTC](https://discuss.elastic.co/t/i-deleted-the-indices-and-tried-to-restart-kibana-but-it-failed-with-this-error/265807 "2021-03-01T16:13:09Z")

</div>

{"type":"log","@timestamp":"2021-03-01T13:34:37Z","tags":\["fatal","root"\],"pid":56422,"message":"Error: Unable to write Kibana UUID file, please check the uuid.server configuration value in kibana.yml and ensure Kibana h…

---

## [Kibana Alerts issue](https://discuss.elastic.co/t/kibana-alerts-issue/265784)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 1\
**Last updated:** [March 1, 2021, 3:56pm UTC](https://discuss.elastic.co/t/kibana-alerts-issue/265784 "2021-03-01T15:56:57Z")

</div>

Hi all, I'm trying to configure Kibana Alerts in one of the kibana servers. The issue is that server is configured with Kibana 7.4.1 which doesn't have alerts feature. We are not allowed to upgrade the Kibana version …

---

## [Kibana Discover and Visualization screen is not showing correct results for the values provided via filters](https://discuss.elastic.co/t/kibana-discover-and-visualization-screen-is-not-showing-correct-results-for-the-values-provided-via-filters/265806)

<div class="topic-metadata">

**Author:** [@Mohitj252](https://discuss.elastic.co/u/Mohitj252)\
**Replies:** 1\
**Last updated:** [March 1, 2021, 2:33pm UTC](https://discuss.elastic.co/t/kibana-discover-and-visualization-screen-is-not-showing-correct-results-for-the-values-provided-via-filters/265806 "2021-03-01T14:33:30Z")

</div>

Hi, I have few queries related to discover page and visualization page. I am trying to explain the different scenarios which I observed. Scenario 1. In the discover screen, there are counter values (counter\_value is a…

---

## [Kibana\_system user management](https://discuss.elastic.co/t/kibana-system-user-management/265793)

<div class="topic-metadata">

**Author:** [@dimm](https://discuss.elastic.co/u/dimm)\
**Replies:** 2\
**Last updated:** [March 1, 2021, 1:58pm UTC](https://discuss.elastic.co/t/kibana-system-user-management/265793 "2021-03-01T13:58:52Z")

</div>

Hi, I'm faced with strange situation while trying to change password for reserved kibana\_system user: This is looks like vicious circle, when I'm trying to update password I'm getting: "roles are missing" when I'm tr…

---

## [Limit size of a data field in kibana](https://discuss.elastic.co/t/limit-size-of-a-data-field-in-kibana/265804)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 1\
**Last updated:** [March 1, 2021, 1:33pm UTC](https://discuss.elastic.co/t/limit-size-of-a-data-field-in-kibana/265804 "2021-03-01T13:33:04Z")

</div>

Hi all, I'm trying to restrict value of data entry(value) of my field to 30 characters in my kibana visualizations I think there is some advanced json method by painless to do this,but i'm unable to figure out command. …

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=357)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=359)
