# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=364

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 365

---

## [Working with wildcards](https://discuss.elastic.co/t/working-with-wildcards/264583)

<div class="topic-metadata">

**Author:** [@Alexandros888](https://discuss.elastic.co/u/Alexandros888)\
**Replies:** 1\
**Last updated:** [February 18, 2021, 2:15am UTC](https://discuss.elastic.co/t/working-with-wildcards/264583 "2021-02-18T02:15:13Z")

</div>

Hello, When i search in kibana with the following expression: message: ".pdf' to SFTP rejected folder (/in/ORDERS/.rejected)" I get successfully the results that i want (see image 1) image 1 But, when i search in…

---

## [Where is watcher?](https://discuss.elastic.co/t/where-is-watcher/264627)

<div class="topic-metadata">

**Author:** [@A\_Chichi](https://discuss.elastic.co/u/A_Chichi)\
**Replies:** 2\
**Last updated:** [February 17, 2021, 11:05pm UTC](https://discuss.elastic.co/t/where-is-watcher/264627 "2021-02-17T23:05:30Z")

</div>

Hello, I would like to add alert to my ES cluster (v7.11). I have the basic licence, so normally I have access to "Watcher" feature. I've checked this link : https://www.elastic.co/guide/en/kibana/current/watcher-ui.h…

---

## [Elastic Cloud : Searchable snapshots requirements and howto?](https://discuss.elastic.co/t/elastic-cloud-searchable-snapshots-requirements-and-howto/264258)

<div class="topic-metadata">

**Author:** [@hilt86](https://discuss.elastic.co/u/hilt86)\
**Replies:** 3\
**Last updated:** [February 17, 2021, 10:14pm UTC](https://discuss.elastic.co/t/elastic-cloud-searchable-snapshots-requirements-and-howto/264258 "2021-02-17T22:14:00Z")

</div>

Hi Folks, I've been trying to get searchable snapshots working on 7.11 and have tried the setting the cold phase to take a searchable snapshot (using the found-snapshots repo - this might be a mistake) but the actions n…

---

## [Kibana Fails due to Depreciation Warning](https://discuss.elastic.co/t/kibana-fails-due-to-depreciation-warning/264413)

<div class="topic-metadata">

**Author:** [@Gosborne](https://discuss.elastic.co/u/Gosborne)\
**Replies:** 2\
**Last updated:** [February 17, 2021, 9:47pm UTC](https://discuss.elastic.co/t/kibana-fails-due-to-depreciation-warning/264413 "2021-02-17T21:47:15Z")

</div>

I have installed kibana following the elastic guide and configured it to point to my two elastic node via elasticsearch.hosts: \["https://xx.xx.xx.xx:9200","https://xx.xx.xx.xx:9200"\]. The only other settings i've changed…

---

## [Machine learning permissions failure \[Kibana Security Menu\]](https://discuss.elastic.co/t/machine-learning-permissions-failure-kibana-security-menu/264475)

<div class="topic-metadata">

**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\
**Replies:** 3\
**Last updated:** [February 17, 2021, 8:44pm UTC](https://discuss.elastic.co/t/machine-learning-permissions-failure-kibana-security-menu/264475 "2021-02-17T20:44:51Z")

</div>

Hi there, Clean install using apt repo and as soon as I try to access the security overview, it display this message: Machine learning permissions failure Not Found HttpFetchError@https://192.168.0.1:5601/37897/bundle…

---

## [Watch Execution simulation not returning results](https://discuss.elastic.co/t/watch-execution-simulation-not-returning-results/264553)

<div class="topic-metadata">

**Author:** [@Saugat\_Mukherjee](https://discuss.elastic.co/u/Saugat_Mukherjee)\
**Replies:** 2\
**Last updated:** [February 17, 2021, 6:18pm UTC](https://discuss.elastic.co/t/watch-execution-simulation-not-returning-results/264553 "2021-02-17T18:18:47Z")

</div>

Hi, I am trying to simulate a watch and see if the actions are triggering fine. But my problem is the search returns no results. My query Checks for a particular index. Checks for a range Check for the servicename fi…

---

## [Audit Watchers](https://discuss.elastic.co/t/audit-watchers/264436)

<div class="topic-metadata">

**Author:** [@bmbrit](https://discuss.elastic.co/u/bmbrit)\
**Replies:** 3\
**Last updated:** [February 17, 2021, 5:36pm UTC](https://discuss.elastic.co/t/audit-watchers/264436 "2021-02-17T17:36:13Z")

</div>

Hi, Is it possible to audit the watcher changes? We want to monitor who modifies the watcher and would like to audit this information. Since we as a team have got access(admin) to the Watcher, the watcher is getting m…

---

## [Kibana on ARM](https://discuss.elastic.co/t/kibana-on-arm/264587)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 1\
**Last updated:** [February 17, 2021, 4:13pm UTC](https://discuss.elastic.co/t/kibana-on-arm/264587 "2021-02-17T16:13:47Z")

</div>

Hi, Can you give any indication of when an ARM based kibana package will become available? Thx D

---

## [Kibana bin folder contains large number of core files 7.2.0](https://discuss.elastic.co/t/kibana-bin-folder-contains-large-number-of-core-files-7-2-0/264403)

<div class="topic-metadata">

**Author:** [@gora](https://discuss.elastic.co/u/gora)\
**Replies:** 2\
**Last updated:** [February 17, 2021, 4:08pm UTC](https://discuss.elastic.co/t/kibana-bin-folder-contains-large-number-of-core-files-7-2-0/264403 "2021-02-17T16:08:37Z")

</div>

Hi Team, Getting this error in kibana startup.log "pid":123452,"message":"You should set server.basePath along with server.rewriteBasePath. Starting in 7.0, Kibana will expect that all requests start with server.basePa…

---

## [Curator instead of ILM to delete old indices](https://discuss.elastic.co/t/curator-instead-of-ilm-to-delete-old-indices/264186)

<div class="topic-metadata">

**Author:** [@Bruceclegg](https://discuss.elastic.co/u/Bruceclegg)\
**Replies:** 2\
**Last updated:** [February 17, 2021, 3:37pm UTC](https://discuss.elastic.co/t/curator-instead-of-ilm-to-delete-old-indices/264186 "2021-02-17T15:37:20Z")

</div>

I have been unable to use ILM to manage my indices. The developers have the index names hardcoded in their code and don't want to change the index names. I attempted to use curator and was only partially successful. I…

---

## [Finding count by distinct text row using Lens](https://discuss.elastic.co/t/finding-count-by-distinct-text-row-using-lens/264280)

<div class="topic-metadata">

**Author:** [@Chetan\_Madaan](https://discuss.elastic.co/u/Chetan_Madaan)\
**Replies:** 7\
**Last updated:** [February 17, 2021, 3:09pm UTC](https://discuss.elastic.co/t/finding-count-by-distinct-text-row-using-lens/264280 "2021-02-17T15:09:18Z")

</div>

Hello, I am very very new to this, Like up until 12 hours ago I hadn't even heard of elastic Search or Kibana. I do however have basic knowledge of SQL and Other Data visualization tools (including Data Studio and othe…

---

## [Data table click event](https://discuss.elastic.co/t/data-table-click-event/264443)

<div class="topic-metadata">

**Author:** [@deeksha39](https://discuss.elastic.co/u/deeksha39)\
**Replies:** 1\
**Last updated:** [February 17, 2021, 1:33pm UTC](https://discuss.elastic.co/t/data-table-click-event/264443 "2021-02-17T13:33:19Z")

</div>

Hi Everyone, I want to create a data table from kibana that shows aggregate result based on some categorical columns for e.g. aggregation based on zone, country, the city then show aggregation of numerical data for e.…

---

## [Kibana run very slow in mozilla firefox](https://discuss.elastic.co/t/kibana-run-very-slow-in-mozilla-firefox/264521)

<div class="topic-metadata">

**Author:** [@radragar](https://discuss.elastic.co/u/radragar)\
**Replies:** 2\
**Last updated:** [February 17, 2021, 8:43am UTC](https://discuss.elastic.co/t/kibana-run-very-slow-in-mozilla-firefox/264521 "2021-02-17T08:43:22Z")

</div>

Hello, Im try install kibana in production environment, with 3 node elasticsearch. 1 master and 2 datanode. but when im running kibana in mozilla firefox, its running very slow. how kibana running very slow in mozilla…

---

## [Transform and get previous row value](https://discuss.elastic.co/t/transform-and-get-previous-row-value/262881)

<div class="topic-metadata">

**Author:** [@wicka](https://discuss.elastic.co/u/wicka)\
**Replies:** 3\
**Last updated:** [February 17, 2021, 7:23am UTC](https://discuss.elastic.co/t/transform-and-get-previous-row-value/262881 "2021-02-17T07:23:21Z")

</div>

I've got elasticsearch setup to collect log from Jenkins. I want to visualize the duration on each build stage. However Jenkins logs is really unstructured, I find many difference way in elasticsearch and still not able …

---

## [How can I do a full backup?](https://discuss.elastic.co/t/how-can-i-do-a-full-backup/264486)

<div class="topic-metadata">

**Author:** [@Solknaar](https://discuss.elastic.co/u/Solknaar)\
**Replies:** 6\
**Last updated:** [February 16, 2021, 11:31pm UTC](https://discuss.elastic.co/t/how-can-i-do-a-full-backup/264486 "2021-02-16T23:31:00Z")

</div>

Hi everyone !!! I use Elasticsearch 7.9.2, with Kibana and Beats, (lucene\_version = 8.6.2) in a Linux server (Red Hat Enterprise Linux Server 7.4), with a single node. I got help to make a full backup, but, if possible…

---

## [Unable to see any data in Consumer Partition Reassignments visualization for \[Metricbeat Kafka\] dashboard in kibana](https://discuss.elastic.co/t/unable-to-see-any-data-in-consumer-partition-reassignments-visualization-for-metricbeat-kafka-dashboard-in-kibana/264489)

<div class="topic-metadata">

**Author:** [@Usman18](https://discuss.elastic.co/u/Usman18)\
**Replies:** 0\
**Last updated:** [February 16, 2021, 10:30pm UTC](https://discuss.elastic.co/t/unable-to-see-any-data-in-consumer-partition-reassignments-visualization-for-metricbeat-kafka-dashboard-in-kibana/264489 "2021-02-16T22:30:02Z")

</div>

I am unable to see any data in the Consumer Partition Reassignments visualization in \[Metricbeat Kafka\] dashboard in kibana. My configuration for the kafka module that I have written in metricbeat.yml is given below: - …

---

## [Difference b/w Aggregate & joinaggregate in vega-lite](https://discuss.elastic.co/t/difference-b-w-aggregate-joinaggregate-in-vega-lite/263826)

<div class="topic-metadata">

**Author:** [@Yashaswini](https://discuss.elastic.co/u/Yashaswini)\
**Replies:** 1\
**Last updated:** [February 16, 2021, 4:12pm UTC](https://discuss.elastic.co/t/difference-b-w-aggregate-joinaggregate-in-vega-lite/263826 "2021-02-16T16:12:16Z")

</div>

When I use aggregate i'm getting value as 0, but when I use joinaggregate i'm proper value. Why is this happening ? { "$schema": "https://vega.github.io/schema/vega-lite/v4.json", "width": 400, data: { …

---

## [Difference between sharing dashboard as snapshot and saved object](https://discuss.elastic.co/t/difference-between-sharing-dashboard-as-snapshot-and-saved-object/264385)

<div class="topic-metadata">

**Author:** [@BitBucketUser\_user](https://discuss.elastic.co/u/BitBucketUser_user)\
**Replies:** 1\
**Last updated:** [February 16, 2021, 12:33pm UTC](https://discuss.elastic.co/t/difference-between-sharing-dashboard-as-snapshot-and-saved-object/264385 "2021-02-16T12:33:23Z")

</div>

Hello All, I use Kibana version 7.9.0. I would like to know the actual difference between sharing/embedding a dashboard URL as a snapshot or a saved object According to the pop-up info : For snapshot, the pop-up says…

---

## [“Error” message creates a pop-up \[esaggs\]\>](https://discuss.elastic.co/t/error-message-creates-a-pop-up-esaggs/260803)

<div class="topic-metadata">

**Author:** [@gulshann](https://discuss.elastic.co/u/gulshann)\
**Replies:** 5\
**Last updated:** [February 16, 2021, 11:15am UTC](https://discuss.elastic.co/t/error-message-creates-a-pop-up-esaggs/260803 "2021-02-16T11:15:18Z")

</div>

Hi, if I am ideal for more than 10 minutes and then try to interact Dashboard then I am getting a error pop up msg in my widget. I am using kibana v 7.10

---

## [How to build visualizations based on String fields](https://discuss.elastic.co/t/how-to-build-visualizations-based-on-string-fields/264000)

<div class="topic-metadata">

**Author:** [@ThePreMan](https://discuss.elastic.co/u/ThePreMan)\
**Replies:** 2\
**Last updated:** [February 16, 2021, 10:42am UTC](https://discuss.elastic.co/t/how-to-build-visualizations-based-on-string-fields/264000 "2021-02-16T10:42:52Z")

</div>

Hi there. I am trying to figure out a way to work with our data in kibana. Problem is, even tough we have a lot of diffrent lines within the Payload part of our logs wich means its kind of difficult to build filters in …

---

## [Fleet Agent on Windows goes 'Unhealthy' after 7.11 upgrade](https://discuss.elastic.co/t/fleet-agent-on-windows-goes-unhealthy-after-7-11-upgrade/264286)

<div class="topic-metadata">

**Author:** [@hermlam](https://discuss.elastic.co/u/hermlam)\
**Replies:** 6\
**Last updated:** [February 16, 2021, 10:14am UTC](https://discuss.elastic.co/t/fleet-agent-on-windows-goes-unhealthy-after-7-11-upgrade/264286 "2021-02-16T10:14:19Z")

</div>

After upgrading Elastic-Agent to 7.11 Windows machines get a 'Unhealty' state in Fleet. Even installing Elastic-Agent on a clean installed Windows machine will get this issue. The 4 Ubuntu servers are doing well. Than…

---

## [How to change max payload size on cloud Kibana](https://discuss.elastic.co/t/how-to-change-max-payload-size-on-cloud-kibana/264308)

<div class="topic-metadata">

**Author:** [@harmanpa](https://discuss.elastic.co/u/harmanpa)\
**Replies:** 4\
**Last updated:** [February 16, 2021, 7:11am UTC](https://discuss.elastic.co/t/how-to-change-max-payload-size-on-cloud-kibana/264308 "2021-02-16T07:11:59Z")

</div>

I am trying to use filebeat to send logs to elastic cloud, however on calling "filebeat setup" I get the following error: Response: {"statusCode":413,"error":"Request Entity Too Large","message":"Payload content length …

---

## [Transform Hour and date](https://discuss.elastic.co/t/transform-hour-and-date/264347)

<div class="topic-metadata">

**Author:** [@Jelssy\_Pomar\_Alvan](https://discuss.elastic.co/u/Jelssy_Pomar_Alvan)\
**Replies:** 3\
**Last updated:** [February 16, 2021, 5:13am UTC](https://discuss.elastic.co/t/transform-hour-and-date/264347 "2021-02-16T05:13:39Z")

</div>

Hello, I am new to Kibana, I have a Table with 2 columns (dateini and date end) with format "dd / mm / yyyy hh: mm: ss". I need to change this format to "hh: mm: ss" and then do a subtraction of these 2 fields and displa…

---

## [Formato de Hora y Fecha](https://discuss.elastic.co/t/formato-de-hora-y-fecha/264346)

<div class="topic-metadata">

**Author:** [@Jelssy\_Pomar\_Alvan](https://discuss.elastic.co/u/Jelssy_Pomar_Alvan)\
**Replies:** 1\
**Last updated:** [February 16, 2021, 4:55am UTC](https://discuss.elastic.co/t/formato-de-hora-y-fecha/264346 "2021-02-16T04:55:44Z")

</div>

Hola, soy nueva en Kibana, tengo una Tabla con 2 columnas (fechaini y fechafin) con formato "dd/mm/yyyy hh:mm:ss" . Necesito cambiar este formato a "hh:mm:ss" y luego hacer una resta de estos 2 campos. Por ejemplo: 19:…

---

## [Creating a visualization for Top CPU hits over last 24 hours](https://discuss.elastic.co/t/creating-a-visualization-for-top-cpu-hits-over-last-24-hours/264374)

<div class="topic-metadata">

**Author:** [@kamal\_thapa](https://discuss.elastic.co/u/kamal_thapa)\
**Replies:** 4\
**Last updated:** [February 16, 2021, 4:23am UTC](https://discuss.elastic.co/t/creating-a-visualization-for-top-cpu-hits-over-last-24-hours/264374 "2021-02-16T04:23:33Z")

</div>

Hello, I am new to Elasticsearch. We have 50 servers to monitor and It is essential for us to find the top CPU hits over last 24 hours. The diagram should show the top CPU hit with timestamp. What visualization would be …

---

## [Customise labels of pie in AWS ES Kibana](https://discuss.elastic.co/t/customise-labels-of-pie-in-aws-es-kibana/264372)

<div class="topic-metadata">

**Author:** [@markk](https://discuss.elastic.co/u/markk)\
**Replies:** 2\
**Last updated:** [February 16, 2021, 1:12am UTC](https://discuss.elastic.co/t/customise-labels-of-pie-in-aws-es-kibana/264372 "2021-02-16T01:12:00Z")

</div>

Good day, I am using AWS ES Kibana and I created a pie chart to figure out the number of 1's and 0's of a certain field ("approved"). This was created with Metrics - Aggregation: Count, Buckets - Split Slices, Aggregati…

---

## [How to set Kibana Discover startpage to do 'nothing'](https://discuss.elastic.co/t/how-to-set-kibana-discover-startpage-to-do-nothing/264334)

<div class="topic-metadata">

**Author:** [@DanielV](https://discuss.elastic.co/u/DanielV)\
**Replies:** 1\
**Last updated:** [February 15, 2021, 7:54pm UTC](https://discuss.elastic.co/t/how-to-set-kibana-discover-startpage-to-do-nothing/264334 "2021-02-15T19:54:03Z")

</div>

My company's Kibana startpage is "Discover". By default no index is selected. Default timeframe is now - 15m. Some users complain that it takes long to load the first page. It takes about 21 seconds for this default que…

---

## [Kibana error - more issues found during setup](https://discuss.elastic.co/t/kibana-error-more-issues-found-during-setup/264125)

<div class="topic-metadata">

**Author:** [@rubans](https://discuss.elastic.co/u/rubans)\
**Replies:** 3\
**Last updated:** [February 15, 2021, 7:46pm UTC](https://discuss.elastic.co/t/kibana-error-more-issues-found-during-setup/264125 "2021-02-15T19:46:46Z")

</div>

Using Kibana: v7.10.2 ElasticSearch:7.10.2 When trying to create an Index, I go to the indices option on Index Management page and get the following error: Error Loading indices Cannot read property 'aliases' of unde…

---

## [Kibana shows browser compatibity issue](https://discuss.elastic.co/t/kibana-shows-browser-compatibity-issue/264252)

<div class="topic-metadata">

**Author:** [@Dhamodharan](https://discuss.elastic.co/u/Dhamodharan)\
**Replies:** 4\
**Last updated:** [February 15, 2021, 7:37pm UTC](https://discuss.elastic.co/t/kibana-shows-browser-compatibity-issue/264252 "2021-02-15T19:37:34Z")

</div>

My kibana is running on ubuntu box and properly configured the kibana.yml, but when i browse the UI, it shows your browser does not meet the security requirements for kibana My browser is already latest version. Can som…

---

## [Kibana Scripted - How to get a string between the second and the third slash](https://discuss.elastic.co/t/kibana-scripted-how-to-get-a-string-between-the-second-and-the-third-slash/264188)

<div class="topic-metadata">

**Author:** [@linfordwoode](https://discuss.elastic.co/u/linfordwoode)\
**Replies:** 3\
**Last updated:** [February 15, 2021, 7:34pm UTC](https://discuss.elastic.co/t/kibana-scripted-how-to-get-a-string-between-the-second-and-the-third-slash/264188 "2021-02-15T19:34:59Z")

</div>

Hey Guys, I am trying to get a string from a file path field in Kibana. I am not quite sure how to go about it. C:/path/\[application\]/file.log. The first two slashes are constant however, the slashes after \[applicatio…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=363)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=365)
