# Kibana **URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=365 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 366 --- ## [Self-healing alerts in Kibana Alerts](https://discuss.elastic.co/t/self-healing-alerts-in-kibana-alerts/264350)
**Author:** [@slord](https://discuss.elastic.co/u/slord)\ **Replies:** 3\ **Last updated:** [February 15, 2021, 7:14pm UTC](https://discuss.elastic.co/t/self-healing-alerts-in-kibana-alerts/264350 "2021-02-15T19:14:32Z")
I'm using the Index action in Kibana Alerts, and I've got a metric threshold alert. I want to have something in the index to say when an alert is resolved - I've tried adding {{context.alertState}} to the payload but th… --- ## [Using aliases to optimize queries from a dashboard](https://discuss.elastic.co/t/using-aliases-to-optimize-queries-from-a-dashboard/263275)
**Author:** [@Oscar\_Lopez](https://discuss.elastic.co/u/Oscar_Lopez)\ **Replies:** 5\ **Last updated:** [February 15, 2021, 6:03pm UTC](https://discuss.elastic.co/t/using-aliases-to-optimize-queries-from-a-dashboard/263275 "2021-02-15T18:03:17Z")
Good afternoon, at the moment I am consulting what is the best way to optimize the way many users consult from the dashboard. We have index\_patterns that store information for more than one year and when users filter the… --- ## [Restoring from snapshot locally "Some repositories contain errors"](https://discuss.elastic.co/t/restoring-from-snapshot-locally-some-repositories-contain-errors/264299)
**Author:** [@Kay\_Khan](https://discuss.elastic.co/u/Kay_Khan)\ **Replies:** 5\ **Last updated:** [February 15, 2021, 4:53pm UTC](https://discuss.elastic.co/t/restoring-from-snapshot-locally-some-repositories-contain-errors/264299 "2021-02-15T16:53:26Z")
Hi, I have setup a local version of elasticsearch and kibana. I want to restore an index from production to this local version. I have created an s3 "repository" under Stack Management \> Snapshot and Restore. After c… --- ## [Kibana index pattern not saved](https://discuss.elastic.co/t/kibana-index-pattern-not-saved/264321)
**Author:** [@anoopkv](https://discuss.elastic.co/u/anoopkv)\ **Replies:** 7\ **Last updated:** [February 15, 2021, 4:09pm UTC](https://discuss.elastic.co/t/kibana-index-pattern-not-saved/264321 "2021-02-15T16:09:29Z")
I have an ELK stack running on the Kubernetes cluster with security enabled. Everything is running fine and I am able to push data to an index. After logging in to Kibana as an admin user, and I to "Discover" it asks me … --- ## [Parse a document with Painless](https://discuss.elastic.co/t/parse-a-document-with-painless/264182)
**Author:** [@Alexandros888](https://discuss.elastic.co/u/Alexandros888)\ **Replies:** 1\ **Last updated:** [February 15, 2021, 1:25pm UTC](https://discuss.elastic.co/t/parse-a-document-with-painless/264182 "2021-02-15T13:25:06Z")
Hello, In my index i have the field http.request.body.original (see also image below): {"customerNr":"9203521","sendMethod":"TOUR","partialDelivery":false,"isTourTimetable":false,"deliveryAddressId":"8100000000000154… --- ## [Unable to generate report TypeError: FieldFormat is not a constructor](https://discuss.elastic.co/t/unable-to-generate-report-typeerror-fieldformat-is-not-a-constructor/264213)
**Author:** [@Aniket\_Salvi](https://discuss.elastic.co/u/Aniket_Salvi)\ **Replies:** 2\ **Last updated:** [February 15, 2021, 12:12pm UTC](https://discuss.elastic.co/t/unable-to-generate-report-typeerror-fieldformat-is-not-a-constructor/264213 "2021-02-15T12:12:40Z")
Hi Team, I am not able to generate CSV report from Kibana. Getting error: Couldn't create report for search TypeError: FieldFormat is not a constructor I am able to download CSV report for old saved object. Thank… --- ## [Can't open Kibana](https://discuss.elastic.co/t/cant-open-kibana/264290)
**Author:** [@SafiaSo](https://discuss.elastic.co/u/SafiaSo)\ **Replies:** 5\ **Last updated:** [February 15, 2021, 12:01pm UTC](https://discuss.elastic.co/t/cant-open-kibana/264290 "2021-02-15T12:01:11Z")
Hi, I'm running ELK on a Centos 7 . But I can't open kibana on the browser ! Systemctl status kibana shows that kibana is running . I need help please. --- ## [Fleet Admin user is invalid](https://discuss.elastic.co/t/fleet-admin-user-is-invalid/263862)
**Author:** [@Robo](https://discuss.elastic.co/u/Robo)\ **Replies:** 3\ **Last updated:** [February 15, 2021, 11:09am UTC](https://discuss.elastic.co/t/fleet-admin-user-is-invalid/263862 "2021-02-15T11:09:06Z")
I'm trying to enroll an agent using fleet, but seems there is something wrong with the api\_key. Is there a was how to initiate again the fleet setup (including user and role)? How could be below mentioned error be solv… --- ## [How to Create Threat MAP Paloalto in elasticsearch](https://discuss.elastic.co/t/how-to-create-threat-map-paloalto-in-elasticsearch/264269)
**Author:** [@syafeera](https://discuss.elastic.co/u/syafeera)\ **Replies:** 1\ **Last updated:** [February 15, 2021, 9:15am UTC](https://discuss.elastic.co/t/how-to-create-threat-map-paloalto-in-elasticsearch/264269 "2021-02-15T09:15:27Z")
Hi, May i know how to create Threat MAP in elastic-search? Before this, the threat map in the dashboard, however still no map in my dashboard.. --- ## [Delete recently viewed views](https://discuss.elastic.co/t/delete-recently-viewed-views/263665)
**Author:** [@riahc3](https://discuss.elastic.co/u/riahc3)\ **Replies:** 4\ **Last updated:** [February 15, 2021, 9:06am UTC](https://discuss.elastic.co/t/delete-recently-viewed-views/263665 "2021-02-15T09:06:50Z")
In the upper left menu, dashboards and other things appear as recently view. Is there a way to clear/remove this? --- ## [Selecting Multiple Entries in Controls Visualization](https://discuss.elastic.co/t/selecting-multiple-entries-in-controls-visualization/262221)
**Author:** [@Prithwi\_Lahiri](https://discuss.elastic.co/u/Prithwi_Lahiri)\ **Replies:** 3\ **Last updated:** [February 15, 2021, 5:22am UTC](https://discuss.elastic.co/t/selecting-multiple-entries-in-controls-visualization/262221 "2021-02-15T05:22:10Z")
Hello Everyone, I am creating a control visualization by which I can select more than 300 entries. Is there a "Select All" option in Controls? When I want to select them one by one after 6 to 7 entries the dashboard pag… --- ## [Elastic search data pod continuously restarting](https://discuss.elastic.co/t/elastic-search-data-pod-continuously-restarting/264272)
**Author:** [@jawed](https://discuss.elastic.co/u/jawed)\ **Replies:** 1\ **Last updated:** [February 15, 2021, 4:46am UTC](https://discuss.elastic.co/t/elastic-search-data-pod-continuously-restarting/264272 "2021-02-15T04:46:08Z")
\[\[/usr/share/elasticsearch/data (//fbeff48040de841b395c700.file.core.windows.net/kubernetes-dynamic-pvc-0f5e7e46-5138-45da-90e6-)\]\], net usable\_space \[37.1gb\], net total\_space \[50gb\], types \[cifs\] 2/15/2021 4:42:06 AM \[… --- ## [Elastic Role Mapping from IdP Role/Group](https://discuss.elastic.co/t/elastic-role-mapping-from-idp-role-group/263897)
**Author:** [@Ong3000](https://discuss.elastic.co/u/Ong3000)\ **Replies:** 3\ **Last updated:** [February 14, 2021, 11:25pm UTC](https://discuss.elastic.co/t/elastic-role-mapping-from-idp-role-group/263897 "2021-02-14T23:25:29Z")
Hi Elastic Forum, How is the role mapping working on elastic that integrating with IdP? In the mapping rules, we have fields like username, dn, realm.name. By creating role mapping and adding realm.name on mapping rule… --- ## [How to show retrieve all data fields of 2 indexes in same data table visualization](https://discuss.elastic.co/t/how-to-show-retrieve-all-data-fields-of-2-indexes-in-same-data-table-visualization/264223)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 4\ **Last updated:** [February 14, 2021, 4:02pm UTC](https://discuss.elastic.co/t/how-to-show-retrieve-all-data-fields-of-2-indexes-in-same-data-table-visualization/264223 "2021-02-14T16:02:16Z")
Hi all, In kibana, i have 2 indexes with a common field . I want to retrieve all data fields of 2 indexes in same data table visualization based on 1 common field something like vlookup in excel. For Example, i have 2… --- ## [Kibana: can't open kibana in my web browser](https://discuss.elastic.co/t/kibana-cant-open-kibana-in-my-web-browser/263893)
**Author:** [@Liora](https://discuss.elastic.co/u/Liora)\ **Replies:** 16\ **Last updated:** [February 14, 2021, 3:35pm UTC](https://discuss.elastic.co/t/kibana-cant-open-kibana-in-my-web-browser/263893 "2021-02-14T15:35:18Z")
Hi team, I am not able to open Kibana page in my web browser. Earlier i was able to open Kibana page in my browser. Later i have uninstalled my Ubuntu server on virtualbox and reinstalled again. Then i reinstalled elas… --- ## ["diff date" and "if"](https://discuss.elastic.co/t/diff-date-and-if/264236)
**Author:** [@Sharissa](https://discuss.elastic.co/u/Sharissa)\ **Replies:** 1\ **Last updated:** [February 14, 2021, 1:22pm UTC](https://discuss.elastic.co/t/diff-date-and-if/264236 "2021-02-14T13:22:58Z")
Hello! I am trying to make a classifier where I need to see the difference of dates and determine if they are on time. I am trying to do this script but it shows error in the index, any recommendations? def diff = doc\['… --- ## [Kibana (wazuh) not working right](https://discuss.elastic.co/t/kibana-wazuh-not-working-right/264227)
**Author:** [@zitstif](https://discuss.elastic.co/u/zitstif)\ **Replies:** 1\ **Last updated:** [February 14, 2021, 1:23am UTC](https://discuss.elastic.co/t/kibana-wazuh-not-working-right/264227 "2021-02-14T01:23:16Z")
Greetings all. I've ran into a problem with my Wazuh/Kibana setup. I can't quite pin point to when the issue occurred but it wouldn't surprise me if it was some update that caused it. I run Kibana on a VM that is centos … --- ## [Can't display tooltip at all in Vega Pie Chart](https://discuss.elastic.co/t/cant-display-tooltip-at-all-in-vega-pie-chart/264056)
**Author:** [@Webtrend\_Inc](https://discuss.elastic.co/u/Webtrend_Inc)\ **Replies:** 5\ **Last updated:** [February 13, 2021, 6:44pm UTC](https://discuss.elastic.co/t/cant-display-tooltip-at-all-in-vega-pie-chart/264056 "2021-02-13T18:44:11Z")
My following vega code correctly displays the actual chart and legend. However, I have been trying to get tooltip to display some data but the tooltips are not showing at all. Here is my latest code { "$schema": "http… --- ## [Elasticsearch Alerting Watcher](https://discuss.elastic.co/t/elasticsearch-alerting-watcher/261477)
**Author:** [@linfordwoode](https://discuss.elastic.co/u/linfordwoode)\ **Replies:** 3\ **Last updated:** [February 12, 2021, 10:05pm UTC](https://discuss.elastic.co/t/elasticsearch-alerting-watcher/261477 "2021-02-12T22:05:09Z")
Hello, I have a watcher sending email notifications with a log file attachment. I was hoping to add a url to the notification alert which will direct the email recipient to the errors received. When the url is clicked, … --- ## [How to convert two inserted values in kibana in a single Geopoint](https://discuss.elastic.co/t/how-to-convert-two-inserted-values-in-kibana-in-a-single-geopoint/264153)
**Author:** [@Mheni](https://discuss.elastic.co/u/Mheni)\ **Replies:** 3\ **Last updated:** [February 12, 2021, 4:30pm UTC](https://discuss.elastic.co/t/how-to-convert-two-inserted-values-in-kibana-in-a-single-geopoint/264153 "2021-02-12T16:30:33Z")
I Insert 2 values(Lat and Long) in Kibana and I want to convert them in a single Geopoint . The Aim is to present them using a heatMap. --- ## [Kibana 7.4.0 all indices vanish at the end of each day](https://discuss.elastic.co/t/kibana-7-4-0-all-indices-vanish-at-the-end-of-each-day/264148)
**Author:** [@Josh\_Creek](https://discuss.elastic.co/u/Josh_Creek)\ **Replies:** 7\ **Last updated:** [February 12, 2021, 4:08pm UTC](https://discuss.elastic.co/t/kibana-7-4-0-all-indices-vanish-at-the-end-of-each-day/264148 "2021-02-12T16:08:14Z")
I have been using ELK in Docker for several years now, with zero issues. I am currently running a couple of entirely separate Dockerized ELK stacks, on entirely different servers running different environments, and am ex… --- ## [Use Tool tip with Grid Aggregations on Map](https://discuss.elastic.co/t/use-tool-tip-with-grid-aggregations-on-map/264142)
**Author:** [@Baptiste\_Orsoni](https://discuss.elastic.co/u/Baptiste_Orsoni)\ **Replies:** 1\ **Last updated:** [February 12, 2021, 3:03pm UTC](https://discuss.elastic.co/t/use-tool-tip-with-grid-aggregations-on-map/264142 "2021-02-12T15:03:52Z")
Hello Everyone, I'm using maps in Kibana, precisely the Grid Aggregations because I'll like to see my hits with circle markers whose size depends of the count. But I'd also like to see some informations on the tooltip o… --- ## [Use 2 variable in a math expression](https://discuss.elastic.co/t/use-2-variable-in-a-math-expression/264041)
**Author:** [@Mike\_Clarke](https://discuss.elastic.co/u/Mike_Clarke)\ **Replies:** 4\ **Last updated:** [February 12, 2021, 12:17pm UTC](https://discuss.elastic.co/t/use-2-variable-in-a-math-expression/264041 "2021-02-12T12:17:09Z")
I am running 7.9.1 and am trying to perform math with 2 variables like below. Is this possible? filters | timefilter field="@timestamp" from="now-1d" to="now" | var\_set name="completed" value={escount index="index\_1" q… --- ## [Vega-Lite bar chart doesn't show anything for filters aggregation](https://discuss.elastic.co/t/vega-lite-bar-chart-doesnt-show-anything-for-filters-aggregation/263882)
**Author:** [@grra](https://discuss.elastic.co/u/grra)\ **Replies:** 1\ **Last updated:** [February 12, 2021, 9:38am UTC](https://discuss.elastic.co/t/vega-lite-bar-chart-doesnt-show-anything-for-filters-aggregation/263882 "2021-02-12T09:38:13Z")
Hello, In my Vega-Lit spec I do a query which returns the following response: "aggregations" : { "my-groups" : { "buckets" : { "group-1" : { "doc\_count" : 16958 }, "group-2… --- ## [Kibana bar chart doesn't work for filters aggregation](https://discuss.elastic.co/t/kibana-bar-chart-doesnt-work-for-filters-aggregation/263633)
**Author:** [@elster](https://discuss.elastic.co/u/elster)\ **Replies:** 10\ **Last updated:** [February 12, 2021, 9:31am UTC](https://discuss.elastic.co/t/kibana-bar-chart-doesnt-work-for-filters-aggregation/263633 "2021-02-12T09:31:00Z")
Dear experts, I created several Vega (lite) barcharts using this code: { $schema: https://vega.github.io/schema/vega-lite/v2.json title: Login Method Distribution data: { url: { } format: {property: "aggr… --- ## [How to enable kibana\_system user for kibana application](https://discuss.elastic.co/t/how-to-enable-kibana-system-user-for-kibana-application/263949)
**Author:** [@kasim123](https://discuss.elastic.co/u/kasim123)\ **Replies:** 6\ **Last updated:** [February 12, 2021, 5:20am UTC](https://discuss.elastic.co/t/how-to-enable-kibana-system-user-for-kibana-application/263949 "2021-02-12T05:20:00Z")
Hi Team, We have one EFK stack running on 7.4.X version with X-pack security enabled and we defined elastic user for kibana application and everything works so far. Now we are trying to use 7.9 version of EFK with same… --- ## [SAML Returning 304 Error](https://discuss.elastic.co/t/saml-returning-304-error/264033)
**Author:** [@teej](https://discuss.elastic.co/u/teej)\ **Replies:** 1\ **Last updated:** [February 11, 2021, 11:53pm UTC](https://discuss.elastic.co/t/saml-returning-304-error/264033 "2021-02-11T23:53:52Z")
Hi, I have a system currently using AD to authenticate users. Recently, they've asked for SAML to be used as a primary realm. Problem is when I try to bring up Kibana I get "Error 403 - Forbidden". The logs show: {"ty… --- ## [Anamoly Initialize issues/ Create Trigger give authorization error](https://discuss.elastic.co/t/anamoly-initialize-issues-create-trigger-give-authorization-error/263796)
**Author:** [@Vimal\_Bagmar](https://discuss.elastic.co/u/Vimal_Bagmar)\ **Replies:** 1\ **Last updated:** [February 11, 2021, 7:13pm UTC](https://discuss.elastic.co/t/anamoly-initialize-issues-create-trigger-give-authorization-error/263796 "2021-02-11T19:13:59Z")
Am using Kibana endpoint from ElasticSearch cluster. Was able to create Visuals. But when I create Anamoly , I have 2 issues Anamoly is still in initialize phase since 24hr. Creating Trigger (Alerting-\>Monitors-\>N… --- ## [Tooltip in Vega](https://discuss.elastic.co/t/tooltip-in-vega/263886)
**Author:** [@Pranath](https://discuss.elastic.co/u/Pranath)\ **Replies:** 5\ **Last updated:** [February 11, 2021, 5:27pm UTC](https://discuss.elastic.co/t/tooltip-in-vega/263886 "2021-02-11T17:27:38Z")
Here I wanted to show distinct 'd' field values for each 'a' field in tooltip. For text it's giving correct but A and B are overlapping and in tooltip it's giving only B. { "$schema": "https://vega.github.io/schema/ve… --- ## [Newly added Field Not available for aggregations](https://discuss.elastic.co/t/newly-added-field-not-available-for-aggregations/261050)
**Author:** [@lzukel](https://discuss.elastic.co/u/lzukel)\ **Replies:** 7\ **Last updated:** [February 11, 2021, 5:21pm UTC](https://discuss.elastic.co/t/newly-added-field-not-available-for-aggregations/261050 "2021-02-11T17:21:29Z")
Elasticsearch 7.9.1 Kibana 7.9.1 - 4 docker containers Updated the index mapping to add new field of type keyword. Waited for new index to be created. Refreshed the index pattern in Kibana. Searched for that field i… [Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=364) [Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=366)