# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=362

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 363

---

## [Export to CSV on 7.9.3](https://discuss.elastic.co/t/export-to-csv-on-7-9-3/264113)

<div class="topic-metadata">

**Author:** [@Francisco\_Navarro](https://discuss.elastic.co/u/Francisco_Navarro)\
**Replies:** 1\
**Last updated:** [February 22, 2021, 3:11pm UTC](https://discuss.elastic.co/t/export-to-csv-on-7-9-3/264113 "2021-02-22T15:11:38Z")

</div>

I'm trying to export the content of an index to CSV using Kibana 7.9.3 I've seen that this is possible on 7.10.0 but I cannot find the button on 7.9.3, is it not available? 7.10 7.9 Best regards!

---

## [Kibana Date Histogram restricting date on graph](https://discuss.elastic.co/t/kibana-date-histogram-restricting-date-on-graph/264098)

<div class="topic-metadata">

**Author:** [@Ganesh\_Rao\_B](https://discuss.elastic.co/u/Ganesh_Rao_B)\
**Replies:** 1\
**Last updated:** [February 22, 2021, 3:01pm UTC](https://discuss.elastic.co/t/kibana-date-histogram-restricting-date-on-graph/264098 "2021-02-22T15:01:01Z")

</div>

I am using Kibana visualization 'vertical bar'. In Vertical bar on x-axis i am using Date histogram and x axis minimum interval is given monthly . Data is shown in Vertical bar but its overlapped ,because X axis is shown…

---

## [TSVB Time filter question](https://discuss.elastic.co/t/tsvb-time-filter-question/264095)

<div class="topic-metadata">

**Author:** [@Vincent\_Vanclef](https://discuss.elastic.co/u/Vincent_Vanclef)\
**Replies:** 1\
**Last updated:** [February 22, 2021, 2:50pm UTC](https://discuss.elastic.co/t/tsvb-time-filter-question/264095 "2021-02-22T14:50:48Z")

</div>

I've tried finding some documentation on it, but how does the TSVB visualization calculcate its aggregation? Especially a simple "count". It shows way too high data count compared to the total documents: I am just try…

---

## [Colourful bullets in Discover section](https://discuss.elastic.co/t/colourful-bullets-in-discover-section/265062)

<div class="topic-metadata">

**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\
**Replies:** 6\
**Last updated:** [February 22, 2021, 2:35pm UTC](https://discuss.elastic.co/t/colourful-bullets-in-discover-section/265062 "2021-02-22T14:35:56Z")

</div>

Can we show the following image like bullets for particular entries? For example, I have a field to show the 'Priority' of a log such as HIGH, CRITICAL, LOW. I want to show a red bullet when priority is CRITICAL, orange …

---

## [Data is showing wrong when i add some nested fields](https://discuss.elastic.co/t/data-is-showing-wrong-when-i-add-some-nested-fields/263748)

<div class="topic-metadata">

**Author:** [@Juan\_Alvarez](https://discuss.elastic.co/u/Juan_Alvarez)\
**Replies:** 1\
**Last updated:** [February 22, 2021, 2:30pm UTC](https://discuss.elastic.co/t/data-is-showing-wrong-when-i-add-some-nested-fields/263748 "2021-02-22T14:30:48Z")

</div>

hello, i need help to visualiza the next json: { "\_index": "signaturetrace", "\_type": "\_doc", "\_id": "pFVCUHcBaUOzInAquLbu", "\_version": 17, "\_score": null, "\_source": { "contractId": "baeb4e31-56a8-4b4e-32a3-08d856…

---

## [Cors in Kibana](https://discuss.elastic.co/t/cors-in-kibana/264575)

<div class="topic-metadata">

**Author:** [@seba\_galban](https://discuss.elastic.co/u/seba_galban)\
**Replies:** 4\
**Last updated:** [February 22, 2021, 2:27pm UTC](https://discuss.elastic.co/t/cors-in-kibana/264575 "2021-02-22T14:27:33Z")

</div>

Hi Everyone, We have a problem when we want to get the cookie from Kibana 7.10.0. We have two scenarios: If we don´t use the credentials: true, In the header response we have the set-cookie attribute but the browser…

---

## [Help with configurring cross cluster on 2 kubenrtes vms](https://discuss.elastic.co/t/help-with-configurring-cross-cluster-on-2-kubenrtes-vms/263759)

<div class="topic-metadata">

**Author:** [@Naomi](https://discuss.elastic.co/u/Naomi)\
**Replies:** 1\
**Last updated:** [February 22, 2021, 2:23pm UTC](https://discuss.elastic.co/t/help-with-configurring-cross-cluster-on-2-kubenrtes-vms/263759 "2021-02-22T14:23:39Z")

</div>

I tried to configure a cross cluster for 2 elastic 7.10.2 clusters on 2 different kubenrtes vm I configure a node port for one elastic to enable connection like below: elasticsearch-client NodePort 10.1111.…

---

## [Script on nested fileds](https://discuss.elastic.co/t/script-on-nested-fileds/263389)

<div class="topic-metadata">

**Author:** [@Giovanni\_Di\_Lembo](https://discuss.elastic.co/u/Giovanni_Di_Lembo)\
**Replies:** 1\
**Last updated:** [February 22, 2021, 2:18pm UTC](https://discuss.elastic.co/t/script-on-nested-fileds/263389 "2021-02-22T14:18:30Z")

</div>

hi all and sorry for my poor english . I have an index with this mapping "mappings":{ "properties":{ "\_class":{ "type": "text", "fields":{"keyword":{"type": "keyword", "ignore\_above": …

---

## [Kibana "Goal" Visual - how to make the end of the scale dynamic](https://discuss.elastic.co/t/kibana-goal-visual-how-to-make-the-end-of-the-scale-dynamic/264686)

<div class="topic-metadata">

**Author:** [@luca.scarpato](https://discuss.elastic.co/u/luca.scarpato)\
**Replies:** 3\
**Last updated:** [February 22, 2021, 2:04pm UTC](https://discuss.elastic.co/t/kibana-goal-visual-how-to-make-the-end-of-the-scale-dynamic/264686 "2021-02-22T14:04:42Z")

</div>

Dear Kibana & ES team, We are trying to use the Kibana Goal Visual to represents a proportion of a metrics over its total. E.g. Newly Received Emails / Total of Emails E.g. 16,700 new emails / 100,000 of total emails …

---

## [Unrecognized scale name: "child\_layer\_0\_y" error for facet dual charts](https://discuss.elastic.co/t/unrecognized-scale-name-child-layer-0-y-error-for-facet-dual-charts/263117)

<div class="topic-metadata">

**Author:** [@Pranusha119](https://discuss.elastic.co/u/Pranusha119)\
**Replies:** 1\
**Last updated:** [February 22, 2021, 1:59pm UTC](https://discuss.elastic.co/t/unrecognized-scale-name-child-layer-0-y-error-for-facet-dual-charts/263117 "2021-02-22T13:59:31Z")

</div>

{ "$schema": "https://vega.github.io/schema/vega-lite/v4.json", "data":{ "url": "data/cars.json" }, "facet":{ "column": { "field":"Origin", "type": "nominal" …

---

## [Upgrade to Kibana 7.11 results in 'Unexpected token \< in JSON at position 0' for eaggs](https://discuss.elastic.co/t/upgrade-to-kibana-7-11-results-in-unexpected-token-in-json-at-position-0-for-eaggs/264707)

<div class="topic-metadata">

**Author:** [@commandline](https://discuss.elastic.co/u/commandline)\
**Replies:** 6\
**Last updated:** [February 22, 2021, 1:53pm UTC](https://discuss.elastic.co/t/upgrade-to-kibana-7-11-results-in-unexpected-token-in-json-at-position-0-for-eaggs/264707 "2021-02-22T13:53:16Z")

</div>

Following an upgrade to 7.11 for elasticsearch and kibana there now appear many Error states on dashboard panels. Inspect shows the response for the request to be { “message”: “Unexpected token \< in JSON at position 0…

---

## [How to create visualization for displaying top requests which has maximum response time in Kibana Holmes](https://discuss.elastic.co/t/how-to-create-visualization-for-displaying-top-requests-which-has-maximum-response-time-in-kibana-holmes/263600)

<div class="topic-metadata">

**Author:** [@mskar](https://discuss.elastic.co/u/mskar)\
**Replies:** 1\
**Last updated:** [February 22, 2021, 1:52pm UTC](https://discuss.elastic.co/t/how-to-create-visualization-for-displaying-top-requests-which-has-maximum-response-time-in-kibana-holmes/263600 "2021-02-22T13:52:51Z")

</div>

Hello, Could you please share how to configure visualization for displaying top requests which has average/maximum response time in Kibana Holmes. Also i couldn't find fields such as reponseTime, bytes or time in the i…

---

## [Unable to access kibana console](https://discuss.elastic.co/t/unable-to-access-kibana-console/263734)

<div class="topic-metadata">

**Author:** [@kasim123](https://discuss.elastic.co/u/kasim123)\
**Replies:** 1\
**Last updated:** [February 22, 2021, 1:47pm UTC](https://discuss.elastic.co/t/unable-to-access-kibana-console/263734 "2021-02-22T13:47:23Z")

</div>

Hi Team, We have been using EFK stack in our environment from many months( Elasticserach, kibana verison is 7.4, Xpack security also enabled, used helm method for installation) and able to access the kibana console. No…

---

## [Filter metrics of each gridded cell](https://discuss.elastic.co/t/filter-metrics-of-each-gridded-cell/264660)

<div class="topic-metadata">

**Author:** [@Matthias3033](https://discuss.elastic.co/u/Matthias3033)\
**Replies:** 3\
**Last updated:** [February 22, 2021, 1:39pm UTC](https://discuss.elastic.co/t/filter-metrics-of-each-gridded-cell/264660 "2021-02-22T13:39:24Z")

</div>

Hello, I have the following question: I have created a layer with clusters & grids where GPS data is grouped into grid cells. Now I would like to filter these grid cells by counts, i.e. I would like to know how many dat…

---

## [TIme series Visual builder : How to do Math calculations betweent the output of two series?](https://discuss.elastic.co/t/time-series-visual-builder-how-to-do-math-calculations-betweent-the-output-of-two-series/264414)

<div class="topic-metadata">

**Author:** [@Harpreet\_Singh](https://discuss.elastic.co/u/Harpreet_Singh)\
**Replies:** 9\
**Last updated:** [February 22, 2021, 11:14am UTC](https://discuss.elastic.co/t/time-series-visual-builder-how-to-do-math-calculations-betweent-the-output-of-two-series/264414 "2021-02-22T11:14:46Z")

</div>

Hi Team, I am using Time series visual builder: Top N Chart, i am in a scenario where i am doing Math calculation in 5 different series. See below Screenshot: Pic 1: Final Chart Pic 2: Different time series i have cho…

---

## [How to filter date field by days and hours separately](https://discuss.elastic.co/t/how-to-filter-date-field-by-days-and-hours-separately/265046)

<div class="topic-metadata">

**Author:** [@Hi\_u\_Nguy\_n\_Dang](https://discuss.elastic.co/u/Hi_u_Nguy_n_Dang)\
**Replies:** 1\
**Last updated:** [February 22, 2021, 10:40am UTC](https://discuss.elastic.co/t/how-to-filter-date-field-by-days-and-hours-separately/265046 "2021-02-22T10:40:58Z")

</div>

Hi, I want to create a query that returns all the data from last 30 days and only between 09:00 AM - 18:00 PM. My date field contains both the date and the time of the day (For example "time" : "2021-02-06T06:40:55Z"). …

---

## [Way aren't Event details under security using the same query as you put in Elasticsearch indices](https://discuss.elastic.co/t/way-arent-event-details-under-security-using-the-same-query-as-you-put-in-elasticsearch-indices/265044)

<div class="topic-metadata">

**Author:** [@tellus83](https://discuss.elastic.co/u/tellus83)\
**Replies:** 0\
**Last updated:** [February 22, 2021, 9:04am UTC](https://discuss.elastic.co/t/way-arent-event-details-under-security-using-the-same-query-as-you-put-in-elasticsearch-indices/265044 "2021-02-22T09:04:01Z")

</div>

I have a soc-filebeat alias whit filter on filebeat-7.11.1-\* and use soc-\* for Elasticsearch indices in settings. And have created a user that have full access to soc-. All dashboards are OK under Security network and …

---

## [Aggregation bucket sum + max group by time with filtering](https://discuss.elastic.co/t/aggregation-bucket-sum-max-group-by-time-with-filtering/264718)

<div class="topic-metadata">

**Author:** [@Tim4](https://discuss.elastic.co/u/Tim4)\
**Replies:** 2\
**Last updated:** [February 22, 2021, 8:14am UTC](https://discuss.elastic.co/t/aggregation-bucket-sum-max-group-by-time-with-filtering/264718 "2021-02-22T08:14:23Z")

</div>

Hi, I'm in need of some help. Let's start of with some sample data: Datetime \_\_\_\_\_\_\_\_\_\_\_\_| User | Mbps 18/02/2021 12:00:00 | a \_\_\_ | 10 18/02/2021 12:00:00 | b \_\_\_ | 5 18/02/2021 12:20:00 | a …

---

## [Kibana to access data from multiple Elastic Search Clusters](https://discuss.elastic.co/t/kibana-to-access-data-from-multiple-elastic-search-clusters/265027)

<div class="topic-metadata">

**Author:** [@Sudarshan\_Reddy](https://discuss.elastic.co/u/Sudarshan_Reddy)\
**Replies:** 1\
**Last updated:** [February 22, 2021, 5:28am UTC](https://discuss.elastic.co/t/kibana-to-access-data-from-multiple-elastic-search-clusters/265027 "2021-02-22T05:28:41Z")

</div>

Hi, we are building dashboard for test results . Same test cases execute in multiple k8s clusters ( we organized as devus1, qaus1, produs1,prodeu1 ,prodanz1 ) . each environment we have seperate elastic search instance r…

---

## [How i can store field in kibana](https://discuss.elastic.co/t/how-i-can-store-field-in-kibana/263950)

<div class="topic-metadata">

**Author:** [@Nazakat](https://discuss.elastic.co/u/Nazakat)\
**Replies:** 4\
**Last updated:** [February 22, 2021, 4:41am UTC](https://discuss.elastic.co/t/how-i-can-store-field-in-kibana/263950 "2021-02-22T04:41:51Z")

</div>

How i can store field in kibana?

---

## [Search For a string in scripted index](https://discuss.elastic.co/t/search-for-a-string-in-scripted-index/264506)

<div class="topic-metadata">

**Author:** [@yash\_gupta](https://discuss.elastic.co/u/yash_gupta)\
**Replies:** 11\
**Last updated:** [February 22, 2021, 1:19am UTC](https://discuss.elastic.co/t/search-for-a-string-in-scripted-index/264506 "2021-02-22T01:19:25Z")

</div>

Hi, I need to search for a string in a field of an index using a scripted filed, below is how it looks like. build\_info.causes { "cause\_class": "some vaue", "short\_description": "Triggered by Gerrit: some value ." } …

---

## [Kibana has stopped](https://discuss.elastic.co/t/kibana-has-stopped/264882)

<div class="topic-metadata">

**Author:** [@Prabhath\_samarasingh](https://discuss.elastic.co/u/Prabhath_samarasingh)\
**Replies:** 1\
**Last updated:** [February 22, 2021, 12:44am UTC](https://discuss.elastic.co/t/kibana-has-stopped/264882 "2021-02-22T00:44:19Z")

</div>

Hi, I'm very new to elk and configured stack.Work fine. So I ship my syslog data to stack and now kibana stops. Stack run on Ubunto 20.04 AMD 64 server. cat /var/log/elasticsearch/elasticsearch.log \[2021-02-19T21:29…

---

## [Kibana 7.11 Legacy GUI](https://discuss.elastic.co/t/kibana-7-11-legacy-gui/265009)

<div class="topic-metadata">

**Author:** [@lamp123432](https://discuss.elastic.co/u/lamp123432)\
**Replies:** 2\
**Last updated:** [February 21, 2021, 9:46pm UTC](https://discuss.elastic.co/t/kibana-7-11-legacy-gui/265009 "2021-02-21T21:46:53Z")

</div>

Any way to change the UI to Legacy in 7.11? I don't like the big black bar at the top, we embed Kibana in our client portal and now the clients see 3 bars, it's too much.

---

## [Can you export the data from a bar chart into a csv?](https://discuss.elastic.co/t/can-you-export-the-data-from-a-bar-chart-into-a-csv/265007)

<div class="topic-metadata">

**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\
**Replies:** 1\
**Last updated:** [February 21, 2021, 9:44pm UTC](https://discuss.elastic.co/t/can-you-export-the-data-from-a-bar-chart-into-a-csv/265007 "2021-02-21T21:44:11Z")

</div>

Like tables visuals, I was hoping there would be a nice link in the bar chart visual to down the data to CSV. Any thought how I can download the data for a char chart? Ideally a link in the visual would be preferred. M…

---

## [Scripted field to calculate](https://discuss.elastic.co/t/scripted-field-to-calculate/264754)

<div class="topic-metadata">

**Author:** [@ITchandj](https://discuss.elastic.co/u/ITchandj)\
**Replies:** 2\
**Last updated:** [February 21, 2021, 9:25am UTC](https://discuss.elastic.co/t/scripted-field-to-calculate/264754 "2021-02-21T09:25:21Z")

</div>

Hello community!! please how can i write a Scripted fields that calculed in follow operation. thanks for your advice Lifetime = ProcStartTimeRelativeMs + ";" + ProcLifetimeMs + ";" + TotalBootDurationMs + ";" + ProcNa…

---

## [Kibana Authentication from AWS cognito](https://discuss.elastic.co/t/kibana-authentication-from-aws-cognito/264956)

<div class="topic-metadata">

**Author:** [@Dhamodharan](https://discuss.elastic.co/u/Dhamodharan)\
**Replies:** 0\
**Last updated:** [February 20, 2021, 5:54pm UTC](https://discuss.elastic.co/t/kibana-authentication-from-aws-cognito/264956 "2021-02-20T17:54:59Z")

</div>

Hi All, I am trying to authenticate kibana from AWS cognito user pool, I have got the procedure to connect AWS elasticsearch service from cognito. But my kibana is running on my own ec2 server. Can someone help me to co…

---

## [Unable to create filebeat-\* index pattern in kibana 7.11 after running filebeat](https://discuss.elastic.co/t/unable-to-create-filebeat-index-pattern-in-kibana-7-11-after-running-filebeat/264781)

<div class="topic-metadata">

**Author:** [@Malcolm\_Haak](https://discuss.elastic.co/u/Malcolm_Haak)\
**Replies:** 17\
**Last updated:** [February 20, 2021, 3:53pm UTC](https://discuss.elastic.co/t/unable-to-create-filebeat-index-pattern-in-kibana-7-11-after-running-filebeat/264781 "2021-02-20T15:53:41Z")

</div>

I can see the filebeat index. I go to make an index pattern with @timestamp and it just won't complete. The logs are clean on ES and Kibana. So yeah I click Create Index pattern and It just goes to the spinny thing an…

---

## [Kibana, unique or distinct count alerting](https://discuss.elastic.co/t/kibana-unique-or-distinct-count-alerting/263803)

<div class="topic-metadata">

**Author:** [@earlsanchez](https://discuss.elastic.co/u/earlsanchez)\
**Replies:** 5\
**Last updated:** [February 20, 2021, 2:04am UTC](https://discuss.elastic.co/t/kibana-unique-or-distinct-count-alerting/263803 "2021-02-20T02:04:39Z")

</div>

Hello, Using Kibana Discovery and then Alerting is it possible to create an alert based on the count of a unique field value during a particular time period? For instance, in Splunk I can alarm a query such as this: in…

---

## [Combine data from multiple rows based on aggregation](https://discuss.elastic.co/t/combine-data-from-multiple-rows-based-on-aggregation/264608)

<div class="topic-metadata">

**Author:** [@hayo](https://discuss.elastic.co/u/hayo)\
**Replies:** 6\
**Last updated:** [February 19, 2021, 6:07pm UTC](https://discuss.elastic.co/t/combine-data-from-multiple-rows-based-on-aggregation/264608 "2021-02-19T18:07:02Z")

</div>

I have searched but was not able to find the answer or i just didnt see it! I have data like: BookTitle | Author | Category A | Writer1 | Thriller A | Writer1 | Action B | Writer1 | Science fiction B …

---

## [Vega chart in Kibana 7.9 doesn't change with different date ranges](https://discuss.elastic.co/t/vega-chart-in-kibana-7-9-doesnt-change-with-different-date-ranges/264783)

<div class="topic-metadata">

**Author:** [@ElasticQuestion\_1234](https://discuss.elastic.co/u/ElasticQuestion_1234)\
**Replies:** 1\
**Last updated:** [February 19, 2021, 3:53pm UTC](https://discuss.elastic.co/t/vega-chart-in-kibana-7-9-doesnt-change-with-different-date-ranges/264783 "2021-02-19T15:53:04Z")

</div>

I used Vega-lite command to create a time series chart. However, the chart doesn't change no matter which date range I select. It always show the whole set of data. I set "%timefield%": "timestamp", which is the name of …

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=361)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=363)
