# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=363

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 364

---

## [Exchange logs](https://discuss.elastic.co/t/exchange-logs/261413)

<div class="topic-metadata">

**Author:** [@baddack](https://discuss.elastic.co/u/baddack)\
**Replies:** 4\
**Last updated:** [February 19, 2021, 3:29pm UTC](https://discuss.elastic.co/t/exchange-logs/261413 "2021-02-19T15:29:06Z")

</div>

Hello everyone ! I create this new topic today beacause I have an issue with message tracking in Exchange logs. Indeed I want to make a top10 senders for example but when I am looking to Exchange's logs there are many e…

---

## [Should we need SSl to enable Alerts in kibana(watcher)? and please share query for alerts](https://discuss.elastic.co/t/should-we-need-ssl-to-enable-alerts-in-kibana-watcher-and-please-share-query-for-alerts/262593)

<div class="topic-metadata">

**Author:** [@Srikanth\_Kesireddy](https://discuss.elastic.co/u/Srikanth_Kesireddy)\
**Replies:** 1\
**Last updated:** [February 1, 2021, 12:49am UTC](https://discuss.elastic.co/t/should-we-need-ssl-to-enable-alerts-in-kibana-watcher-and-please-share-query-for-alerts/262593 "2021-02-01T00:49:54Z")

</div>

for enabling Xpack security and alerts should we need ssl ?

---

## [Kibana: export pre-configured dashboard as pdf/png](https://discuss.elastic.co/t/kibana-export-pre-configured-dashboard-as-pdf-png/264391)

<div class="topic-metadata">

**Author:** [@eeijlar](https://discuss.elastic.co/u/eeijlar)\
**Replies:** 5\
**Last updated:** [February 19, 2021, 8:08am UTC](https://discuss.elastic.co/t/kibana-export-pre-configured-dashboard-as-pdf-png/264391 "2021-02-19T08:08:19Z")

</div>

We have the following use cases for working with Kibana: Use Case 1 We run automated performance tests using a Jenkins pipeline. We would like to be able to import a pre-configured dashboard at the start of the test, r…

---

## [Cannot create Index Patterns of remote clusters - Kibana 7.10.0](https://discuss.elastic.co/t/cannot-create-index-patterns-of-remote-clusters-kibana-7-10-0/262206)

<div class="topic-metadata">

**Author:** [@Phandora](https://discuss.elastic.co/u/Phandora)\
**Replies:** 5\
**Last updated:** [February 19, 2021, 6:48am UTC](https://discuss.elastic.co/t/cannot-create-index-patterns-of-remote-clusters-kibana-7-10-0/262206 "2021-02-19T06:48:35Z")

</div>

Hi, we are facing some problems creating index patterns in the 7.10.0 version. When trying to create the index pattern of a remote cluster we got the error No matching indices found. However, the indexes do exist (the i…

---

## [Kibana machine learning reporting (Version 7.9.3)](https://discuss.elastic.co/t/kibana-machine-learning-reporting-version-7-9-3/264523)

<div class="topic-metadata">

**Author:** [@Ingram\_Gultom](https://discuss.elastic.co/u/Ingram_Gultom)\
**Replies:** 2\
**Last updated:** [February 19, 2021, 6:21am UTC](https://discuss.elastic.co/t/kibana-machine-learning-reporting-version-7-9-3/264523 "2021-02-19T06:21:02Z")

</div>

Hi, Can we export machine learning visualization or add machine learning visualization to dashboard ? Thank you

---

## [TVSB add 12 month line to existing visualisation](https://discuss.elastic.co/t/tvsb-add-12-month-line-to-existing-visualisation/264776)

<div class="topic-metadata">

**Author:** [@johnwood](https://discuss.elastic.co/u/johnwood)\
**Replies:** 1\
**Last updated:** [February 19, 2021, 1:44am UTC](https://discuss.elastic.co/t/tvsb-add-12-month-line-to-existing-visualisation/264776 "2021-02-19T01:44:56Z")

</div>

Hi All I have an existing suite of visualizations (TSVB) that show metrics over the past week. I would like to add a line to this TSVB visualization showing the same metric over the last 12 months so current weekly ups…

---

## [Scripted field cut values in return statement](https://discuss.elastic.co/t/scripted-field-cut-values-in-return-statement/264649)

<div class="topic-metadata">

**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\
**Replies:** 3\
**Last updated:** [February 18, 2021, 11:09pm UTC](https://discuss.elastic.co/t/scripted-field-cut-values-in-return-statement/264649 "2021-02-18T23:09:00Z")

</div>

Hello This is my script if(!doc\['field1'\].empty) { return doc\['filed1'\].value; } else if(!doc\['field2'\].empty) { return doc\['field2'\].value; } else return "N/A"; I see that the field in the second condition is cut. F…

---

## [Guidance setting up Kibana alarms on other cluster's metrics](https://discuss.elastic.co/t/guidance-setting-up-kibana-alarms-on-other-clusters-metrics/264498)

<div class="topic-metadata">

**Author:** [@omora\_ando](https://discuss.elastic.co/u/omora_ando)\
**Replies:** 3\
**Last updated:** [February 18, 2021, 10:53pm UTC](https://discuss.elastic.co/t/guidance-setting-up-kibana-alarms-on-other-clusters-metrics/264498 "2021-02-18T22:53:11Z")

</div>

Hello, We are an Elastic Service Premium subscriber. I have two Deployments setup, for non-prod and prod workloads. Both clusters are using ES 7.9.3. I followed this documentation to setup a monitoring cluster with ES …

---

## [Collapse is not working Discover-Kibana](https://discuss.elastic.co/t/collapse-is-not-working-discover-kibana/264747)

<div class="topic-metadata">

**Author:** [@ssarnava](https://discuss.elastic.co/u/ssarnava)\
**Replies:** 2\
**Last updated:** [February 18, 2021, 10:21pm UTC](https://discuss.elastic.co/t/collapse-is-not-working-discover-kibana/264747 "2021-02-18T22:21:19Z")

</div>

My Requirement : Display latest entry (createdAt field) corresponding to a "trade.execID" in Kibana Discover. When I trigger this query from dev tools, getting expected result (single record) but when trying to use same …

---

## [Elasticsearch backup & restore from one server to another](https://discuss.elastic.co/t/elasticsearch-backup-restore-from-one-server-to-another/264748)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 1\
**Last updated:** [February 18, 2021, 9:47pm UTC](https://discuss.elastic.co/t/elasticsearch-backup-restore-from-one-server-to-another/264748 "2021-02-18T21:47:46Z")

</div>

Hi , I'm trying to backup one of index from one kibana server and restore it in another server. Should we copy the snapshot folder from server 1 to server 2 and then try to restore it? Can someone tell me how to go a…

---

## [Drilldown filtering does not make sense](https://discuss.elastic.co/t/drilldown-filtering-does-not-make-sense/264361)

<div class="topic-metadata">

**Author:** [@Webtrend\_Inc](https://discuss.elastic.co/u/Webtrend_Inc)\
**Replies:** 1\
**Last updated:** [February 18, 2021, 9:26pm UTC](https://discuss.elastic.co/t/drilldown-filtering-does-not-make-sense/264361 "2021-02-18T21:26:13Z")

</div>

I am trying to use the new drilldown feature for the Kibana dashboards. I have 2 dashboards Abusive IPs : This dashboard shows a table of IPs that are showing abusive behavior Drilldown IP: This dashboard shows a time…

---

## [Error: We Couldn´t activate monitoring](https://discuss.elastic.co/t/error-we-couldn-t-activate-monitoring/261427)

<div class="topic-metadata">

**Author:** [@wleandro](https://discuss.elastic.co/u/wleandro)\
**Replies:** 6\
**Last updated:** [February 18, 2021, 8:07pm UTC](https://discuss.elastic.co/t/error-we-couldn-t-activate-monitoring/261427 "2021-02-18T20:07:38Z")

</div>

Hi everyone I need to learned about Activate Monitoring, but present error on display. "We Couldn´t activate monitoring" Is my first support on tecnology Elastic Search on Kibana. Thank you for much.

---

## [How to enable the mapper-size plugin within an INDEX TEMPLATE](https://discuss.elastic.co/t/how-to-enable-the-mapper-size-plugin-within-an-index-template/263646)

<div class="topic-metadata">

**Author:** [@ericjogonzalez](https://discuss.elastic.co/u/ericjogonzalez)\
**Replies:** 3\
**Last updated:** [February 18, 2021, 6:53pm UTC](https://discuss.elastic.co/t/how-to-enable-the-mapper-size-plugin-within-an-index-template/263646 "2021-02-18T18:53:07Z")

</div>

Hello, I am struggling to enable the mapper-size plugin within an index template in kibana. A bit of background: The mapper-size plugin is installed on all ES hosts on the cluster All hosts have been restarted since t…

---

## [Enrich data to send to connectors on Watcher](https://discuss.elastic.co/t/enrich-data-to-send-to-connectors-on-watcher/264428)

<div class="topic-metadata">

**Author:** [@alfredo.deluca](https://discuss.elastic.co/u/alfredo.deluca)\
**Replies:** 3\
**Last updated:** [February 18, 2021, 6:34pm UTC](https://discuss.elastic.co/t/enrich-data-to-send-to-connectors-on-watcher/264428 "2021-02-18T18:34:58Z")

</div>

Hi all. I am using elastic Cloud and I have metricbeat sending data to the elasticsearch. I also created an alert in watcher when a POD is unavailable the send alert to OPSGenie. It works fine but I'd like to have the …

---

## [How to get Data Table Visualization with Top Hit show the last result for the bucket?](https://discuss.elastic.co/t/how-to-get-data-table-visualization-with-top-hit-show-the-last-result-for-the-bucket/264491)

<div class="topic-metadata">

**Author:** [@Chris\_Portka](https://discuss.elastic.co/u/Chris_Portka)\
**Replies:** 4\
**Last updated:** [February 18, 2021, 5:47pm UTC](https://discuss.elastic.co/t/how-to-get-data-table-visualization-with-top-hit-show-the-last-result-for-the-bucket/264491 "2021-02-18T17:47:33Z")

</div>

I have documents coming into elasticsearch that have a host field (string) and an update timestamp (string). I want to show a table of all unique hosts with their last update time. I created a data table visualization …

---

## [Can't Get Timestamp Transform To Work For A Basic Vega Scatter Plot](https://discuss.elastic.co/t/cant-get-timestamp-transform-to-work-for-a-basic-vega-scatter-plot/264254)

<div class="topic-metadata">

**Author:** [@Webtrend\_Inc](https://discuss.elastic.co/u/Webtrend_Inc)\
**Replies:** 7\
**Last updated:** [February 18, 2021, 5:43pm UTC](https://discuss.elastic.co/t/cant-get-timestamp-transform-to-work-for-a-basic-vega-scatter-plot/264254 "2021-02-18T17:43:33Z")

</div>

Here is my Vega code { "$schema": "https://vega.github.io/schema/vega/v4.json", "description": "A basic scatter plot", "padding": 5, "data": { "name": "source", "url": { "%context%": "true", …

---

## [Share a dashboard to an external website without logging in](https://discuss.elastic.co/t/share-a-dashboard-to-an-external-website-without-logging-in/264739)

<div class="topic-metadata">

**Author:** [@Luis\_Pizarro](https://discuss.elastic.co/u/Luis_Pizarro)\
**Replies:** 1\
**Last updated:** [February 18, 2021, 5:35pm UTC](https://discuss.elastic.co/t/share-a-dashboard-to-an-external-website-without-logging-in/264739 "2021-02-18T17:35:03Z")

</div>

I am trying to share a kibana dashboard through embed code but repeatedly it asks for access attached to it. \<!DOCTYPE HTML\> \<html lang=es\> \<head\> \<title\>Tutorial de HTML para dummies\</title\> \<me…

---

## [Kibana 7.11.0 kibana.pid en kibana.json not created in configured locations](https://discuss.elastic.co/t/kibana-7-11-0-kibana-pid-en-kibana-json-not-created-in-configured-locations/264694)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 2\
**Last updated:** [February 18, 2021, 5:23pm UTC](https://discuss.elastic.co/t/kibana-7-11-0-kibana-pid-en-kibana-json-not-created-in-configured-locations/264694 "2021-02-18T17:23:47Z")

</div>

Hello, On our DV Elastic, we tested 7.11 and noticed the Kibana logs were no longer generated in the expected location. After some debuging, it seems the logs are written to the default path /var/log/kibana/kibana.log i…

---

## [Kibana alerting message with query results](https://discuss.elastic.co/t/kibana-alerting-message-with-query-results/264075)

<div class="topic-metadata">

**Author:** [@earlsanchez](https://discuss.elastic.co/u/earlsanchez)\
**Replies:** 6\
**Last updated:** [February 18, 2021, 5:19pm UTC](https://discuss.elastic.co/t/kibana-alerting-message-with-query-results/264075 "2021-02-18T17:19:08Z")

</div>

I have a Kibana monitor setup with a trigger and actions. In the actions email message I can email the alert query results for 1 document with these ctx parameters: - Hostname: {{ctx.results.0.hits.hits.0.\_source.host.n…

---

## [Data in my index](https://discuss.elastic.co/t/data-in-my-index/264688)

<div class="topic-metadata">

**Author:** [@Gharsa\_Khouloud](https://discuss.elastic.co/u/Gharsa_Khouloud)\
**Replies:** 1\
**Last updated:** [February 18, 2021, 5:15pm UTC](https://discuss.elastic.co/t/data-in-my-index/264688 "2021-02-18T17:15:23Z")

</div>

last day i created new index and also i manipulate that index with dashboard , but today when i wake up i didn't find any data i didn't find that index any explanation for that ???

---

## [POST Url encoding: how do I encode portions of the URL?](https://discuss.elastic.co/t/post-url-encoding-how-do-i-encode-portions-of-the-url/264658)

<div class="topic-metadata">

**Author:** [@eeijlar](https://discuss.elastic.co/u/eeijlar)\
**Replies:** 1\
**Last updated:** [February 18, 2021, 5:07pm UTC](https://discuss.elastic.co/t/post-url-encoding-how-do-i-encode-portions-of-the-url/264658 "2021-02-18T17:07:55Z")

</div>

With reference to the following documentation: In it, you can copy a POST Url. I would like to add this url to a file, and then tokenise parts of it so that it can be re-used across multiple runs of a Jenkins pipeline. …

---

## [Kibana - '?\_g=' and '&\_a=' Parameters in the Dashboards URL String](https://discuss.elastic.co/t/kibana-g-and-a-parameters-in-the-dashboards-url-string/264642)

<div class="topic-metadata">

**Author:** [@scott\_stash](https://discuss.elastic.co/u/scott_stash)\
**Replies:** 1\
**Last updated:** [February 18, 2021, 4:40pm UTC](https://discuss.elastic.co/t/kibana-g-and-a-parameters-in-the-dashboards-url-string/264642 "2021-02-18T16:40:51Z")

</div>

I'm struggling to find documentation on this, if I load up a dashboard their appears to be two query parameters we can add: '?\_g=' and '&\_a=' Currently I have a string like this on the end of my Kibana URL: /app/dashb…

---

## [Everything is broken after upgrade to 7.11](https://discuss.elastic.co/t/everything-is-broken-after-upgrade-to-7-11/263973)

<div class="topic-metadata">

**Author:** [@hermlam](https://discuss.elastic.co/u/hermlam)\
**Replies:** 14\
**Last updated:** [February 18, 2021, 4:17pm UTC](https://discuss.elastic.co/t/everything-is-broken-after-upgrade-to-7-11/263973 "2021-02-18T16:17:44Z")

</div>

After upgrade to 7.11 everything is broken: -Elastic-agent in Fleet stopped every agent; -Stack management won't open; -Trying to read logs in Discover gives an error: 'Wrapper@https://2e233a9cadac49f5b5e52ee324f8e04…

---

## [Unable to initialize Fleet - An internal server error occurred](https://discuss.elastic.co/t/unable-to-initialize-fleet-an-internal-server-error-occurred/264368)

<div class="topic-metadata">

**Author:** [@searchtool](https://discuss.elastic.co/u/searchtool)\
**Replies:** 9\
**Last updated:** [February 18, 2021, 4:09pm UTC](https://discuss.elastic.co/t/unable-to-initialize-fleet-an-internal-server-error-occurred/264368 "2021-02-18T16:09:42Z")

</div>

Hi, I'm a bit at a los here, today i upgrade my 7.10.0 dev-cluster to 7.11.0 and when i go to fleet in kibana i get en nice red box "Unable to initialize Fleet - An internal server error occurred". Lets rewind a bit, i…

---

## [Time elapsed difference between two events tagged as start and stop](https://discuss.elastic.co/t/time-elapsed-difference-between-two-events-tagged-as-start-and-stop/262588)

<div class="topic-metadata">

**Author:** [@satred](https://discuss.elastic.co/u/satred)\
**Replies:** 3\
**Last updated:** [February 18, 2021, 3:08pm UTC](https://discuss.elastic.co/t/time-elapsed-difference-between-two-events-tagged-as-start-and-stop/262588 "2021-02-18T15:08:06Z")

</div>

I am trying to calculate the time duration difference between two events tagged as start and stop. From message using grok pattern created two filters process id and process type which are common in both the messages an…

---

## [Kibana with ingress getting ERR\_TOO\_MANY\_REDIRECTS 302](https://discuss.elastic.co/t/kibana-with-ingress-getting-err-too-many-redirects-302/264448)

<div class="topic-metadata">

**Author:** [@rubans](https://discuss.elastic.co/u/rubans)\
**Replies:** 7\
**Last updated:** [February 18, 2021, 2:30pm UTC](https://discuss.elastic.co/t/kibana-with-ingress-getting-err-too-many-redirects-302/264448 "2021-02-18T14:30:37Z")

</div>

When I try and expose the Kibana UI externally using ingress, getting ERR\_TOO\_MANY\_REDIRECTS 302 using https. Kibana v 7.8.1 Seems to get into an infinite loop. Works without any issues with port-forward on http://loc…

---

## [Kibana - APM UI - JVMs - Listing (Empty) JVM](https://discuss.elastic.co/t/kibana-apm-ui-jvms-listing-empty-jvm/264618)

<div class="topic-metadata">

**Author:** [@chandra2037](https://discuss.elastic.co/u/chandra2037)\
**Replies:** 4\
**Last updated:** [February 18, 2021, 1:35pm UTC](https://discuss.elastic.co/t/kibana-apm-ui-jvms-listing-empty-jvm/264618 "2021-02-18T13:35:14Z")

</div>

Hi, Elasticsearch - v7.10.1 Kibana - V7.10.1 APM Server - V7.10.1 APM Java agent - V1.20.0 Recently upgraded to Elastic stack to 7.10.1. In Kibana APM JVM UI, apart from the actual JVM there is an (Empty) JVM is sh…

---

## [Changes are not reflecting on the browser - (Kibana 7.10- Customization)](https://discuss.elastic.co/t/changes-are-not-reflecting-on-the-browser-kibana-7-10-customization/264504)

<div class="topic-metadata">

**Author:** [@Akhil\_Kaithoju](https://discuss.elastic.co/u/Akhil_Kaithoju)\
**Replies:** 6\
**Last updated:** [February 18, 2021, 12:45pm UTC](https://discuss.elastic.co/t/changes-are-not-reflecting-on-the-browser-kibana-7-10-customization/264504 "2021-02-18T12:45:24Z")

</div>

Hi, When i make any changes in kibana 7.10.1 build those changes are not reflecting on the browser. Earlier in 7.6 i was able to make it successfully by removing the /optimize/bundles. Now it has been deprecated in Kiba…

---

## [Can Kibana mutate documents?](https://discuss.elastic.co/t/can-kibana-mutate-documents/264580)

<div class="topic-metadata">

**Author:** [@trympet](https://discuss.elastic.co/u/trympet)\
**Replies:** 6\
**Last updated:** [February 18, 2021, 11:39am UTC](https://discuss.elastic.co/t/can-kibana-mutate-documents/264580 "2021-02-18T11:39:56Z")

</div>

I am building a dashboard to track and correlate exceptions and events in a desktop application. Previously, I was using Visual Studio App Center, but since they enforce limits on the number of events per day, I switched…

---

## [Best visualization for showing single image from url formatted field?](https://discuss.elastic.co/t/best-visualization-for-showing-single-image-from-url-formatted-field/264502)

<div class="topic-metadata">

**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Replies:** 1\
**Last updated:** [February 18, 2021, 2:40am UTC](https://discuss.elastic.co/t/best-visualization-for-showing-single-image-from-url-formatted-field/264502 "2021-02-18T02:40:28Z")

</div>

Hi, I'm using a scripted field formatted as a url to display some images. This works surprisingly well except outside of discovery the only visualization I seem to be able to use with this field is the table visualizati…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=362)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=364)
