# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=367

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 368

---

## [Sub-queries in KQL Kibana](https://discuss.elastic.co/t/sub-queries-in-kql-kibana/263505)

<div class="topic-metadata">

**Author:** [@Montek\_Singh](https://discuss.elastic.co/u/Montek_Singh)\
**Replies:** 2\
**Last updated:** [February 9, 2021, 11:29pm UTC](https://discuss.elastic.co/t/sub-queries-in-kql-kibana/263505 "2021-02-09T23:29:51Z")

</div>

I am using ELK stack to perform some analysis on my data. My index pattern has 2 types of data The ID of the product clicked The ID of the product sold I would like to first find all the IDs sold out and based on that…

---

## [Hour Scripted Field](https://discuss.elastic.co/t/hour-scripted-field/263416)

<div class="topic-metadata">

**Author:** [@stevezemlicka](https://discuss.elastic.co/u/stevezemlicka)\
**Replies:** 4\
**Last updated:** [February 9, 2021, 10:53pm UTC](https://discuss.elastic.co/t/hour-scripted-field/263416 "2021-02-09T22:53:33Z")

</div>

I am trying to create a scripted field that is the hourly value of each document. The ultimate goal is to filter by specific hours of the day for multiple days (hence why I can't just use the date range on the dashboard…

---

## [Color in vega map visualization](https://discuss.elastic.co/t/color-in-vega-map-visualization/263565)

<div class="topic-metadata">

**Author:** [@Pranusha119](https://discuss.elastic.co/u/Pranusha119)\
**Replies:** 6\
**Last updated:** [February 9, 2021, 5:44pm UTC](https://discuss.elastic.co/t/color-in-vega-map-visualization/263565 "2021-02-09T17:44:28Z")

</div>

{ "$schema": "https://vega.github.io/schema/vega/v5.json", "description": "A choropleth map depicting U.S. unemployment rates by county in 2009.", "width": 960, "height": 500, "autosize": "none", "data": \[ …

---

## [TSVB Metric color based on text field and numeric value](https://discuss.elastic.co/t/tsvb-metric-color-based-on-text-field-and-numeric-value/263570)

<div class="topic-metadata">

**Author:** [@Chenlrv](https://discuss.elastic.co/u/Chenlrv)\
**Replies:** 1\
**Last updated:** [February 9, 2021, 5:18pm UTC](https://discuss.elastic.co/t/tsvb-metric-color-based-on-text-field-and-numeric-value/263570 "2021-02-09T17:18:36Z")

</div>

Hi, I created a TSVB Metric widget that it's purpose is to function as a traffic light - should be red when there's an error in the system, yellow if there's a warning, and green if all is ok. The problem is, I can't…

---

## [Kibana service not running](https://discuss.elastic.co/t/kibana-service-not-running/263470)

<div class="topic-metadata">

**Author:** [@srcarter](https://discuss.elastic.co/u/srcarter)\
**Replies:** 2\
**Last updated:** [February 9, 2021, 5:18pm UTC](https://discuss.elastic.co/t/kibana-service-not-running/263470 "2021-02-09T17:18:19Z")

</div>

Hi there, I recently had our IT build me a new computer that I am dedicating for a simple elasticsearch/kibana machine. I had previously built my own machine for the same purpose and was successful, that machine was ru…

---

## [Index ".async\_search" size growing fast](https://discuss.elastic.co/t/index-async-search-size-growing-fast/261788)

<div class="topic-metadata">

**Author:** [@parallelism](https://discuss.elastic.co/u/parallelism)\
**Replies:** 2\
**Last updated:** [February 9, 2021, 5:04pm UTC](https://discuss.elastic.co/t/index-async-search-size-growing-fast/261788 "2021-02-09T17:04:17Z")

</div>

Hello everyone, On a Elasticsearch and Kibana cluster that is monitoring another Elasticsearch cluster, we found that the size of the ".async\_search" index on the monitoring cluster is growing fast (about 2GB in only on…

---

## [Field change value](https://discuss.elastic.co/t/field-change-value/263738)

<div class="topic-metadata">

**Author:** [@paasi6666](https://discuss.elastic.co/u/paasi6666)\
**Replies:** 3\
**Last updated:** [February 9, 2021, 3:20pm UTC](https://discuss.elastic.co/t/field-change-value/263738 "2021-02-09T15:20:30Z")

</div>

I want to change the value of the field user.id , so that it only shows the username. In this example, I want to remove the "slu" so that the value only shows "AlbissR" and not "slu\\AlbissR"

---

## [Can I join an elasticsearch index with geojson to form one index to use as point to point map?](https://discuss.elastic.co/t/can-i-join-an-elasticsearch-index-with-geojson-to-form-one-index-to-use-as-point-to-point-map/263073)

<div class="topic-metadata">

**Author:** [@Mahlatse\_Wiwi](https://discuss.elastic.co/u/Mahlatse_Wiwi)\
**Replies:** 3\
**Last updated:** [February 9, 2021, 3:08pm UTC](https://discuss.elastic.co/t/can-i-join-an-elasticsearch-index-with-geojson-to-form-one-index-to-use-as-point-to-point-map/263073 "2021-02-09T15:08:12Z")

</div>

I have an index "index\_travels" which has a field "travel\_from" and "travel\_to". These fields are not geofields. However, I have imported a geojson file "Wards" that has a field "wardID" which is the same as "travel\_fro…

---

## [Elasticstack security](https://discuss.elastic.co/t/elasticstack-security/263747)

<div class="topic-metadata">

**Author:** [@PRODIPTO](https://discuss.elastic.co/u/PRODIPTO)\
**Replies:** 1\
**Last updated:** [February 9, 2021, 2:47pm UTC](https://discuss.elastic.co/t/elasticstack-security/263747 "2021-02-09T14:47:01Z")

</div>

Hi I am using a basic license and trying to enable security on a single node ELK cluster . to enable security i have added the below lines in elasticsearch.yml xpack.security.enabled: true discovery.type: single-node I…

---

## [Kibana, timelion not visualizing as expected](https://discuss.elastic.co/t/kibana-timelion-not-visualizing-as-expected/263652)

<div class="topic-metadata">

**Author:** [@sguerrero](https://discuss.elastic.co/u/sguerrero)\
**Replies:** 1\
**Last updated:** [February 9, 2021, 2:45pm UTC](https://discuss.elastic.co/t/kibana-timelion-not-visualizing-as-expected/263652 "2021-02-09T14:45:46Z")

</div>

Kibana version: v 7.6.2 Browser: Firefox OS: Centos7 Hello, I'm facing something estrange working with timelion. I expect to see all my visualizations like this: The circle can be red, green or yellow and it only …

---

## [Show an Scripted Value in a Visualization](https://discuss.elastic.co/t/show-an-scripted-value-in-a-visualization/263630)

<div class="topic-metadata">

**Author:** [@Juan\_Montoya](https://discuss.elastic.co/u/Juan_Montoya)\
**Replies:** 2\
**Last updated:** [February 9, 2021, 2:32pm UTC](https://discuss.elastic.co/t/show-an-scripted-value-in-a-visualization/263630 "2021-02-09T14:32:52Z")

</div>

Hi, I'm creating a dashboard and now I need to show the unitary value of the products, this value must be dynamical along the time, the unitary value must be calculated adding all the prices and adding all the units to …

---

## [Can We Bind Default Dashboard to custom Index pattern?](https://discuss.elastic.co/t/can-we-bind-default-dashboard-to-custom-index-pattern/263719)

<div class="topic-metadata">

**Author:** [@shaiksubhan](https://discuss.elastic.co/u/shaiksubhan)\
**Replies:** 2\
**Last updated:** [February 9, 2021, 2:08pm UTC](https://discuss.elastic.co/t/can-we-bind-default-dashboard-to-custom-index-pattern/263719 "2021-02-09T14:08:08Z")

</div>

Hi Team, Can we Bind Default Beats Dashboards to Custom index pattern through logstash ?? Actually I am trying to Bind the Default Dashboards to custom Index pattern but Unfortunately I am unable to find anything on I…

---

## [Date, Scripted Fields](https://discuss.elastic.co/t/date-scripted-fields/263341)

<div class="topic-metadata">

**Author:** [@Rajasekhar\_Muthamset](https://discuss.elastic.co/u/Rajasekhar_Muthamset)\
**Replies:** 3\
**Last updated:** [February 9, 2021, 1:49pm UTC](https://discuss.elastic.co/t/date-scripted-fields/263341 "2021-02-09T13:49:06Z")

</div>

Hello All, I'm getting data as below from my application ....."extraParams":\[{"name":"Item","value":"item1"},{"name":"DateTime","value":"0001519156380000"},.... I would like the data of the field value as Date instead…

---

## [Kibana services not running in ubuntu 18.04](https://discuss.elastic.co/t/kibana-services-not-running-in-ubuntu-18-04/263680)

<div class="topic-metadata">

**Author:** [@Abhiranjan\_Singh](https://discuss.elastic.co/u/Abhiranjan_Singh)\
**Replies:** 4\
**Last updated:** [February 9, 2021, 12:40pm UTC](https://discuss.elastic.co/t/kibana-services-not-running-in-ubuntu-18-04/263680 "2021-02-09T12:40:42Z")

</div>

Kibana services not running in ubuntu 18.04, earlier it was working fine since i have updated , it is not working now , getting below error at Module.require (internal/modules/cjs/loader.js:637:17)"} {"type":"log","@ti…

---

## [KIbana reporting problem](https://discuss.elastic.co/t/kibana-reporting-problem/263410)

<div class="topic-metadata">

**Author:** [@Ged](https://discuss.elastic.co/u/Ged)\
**Replies:** 3\
**Last updated:** [February 9, 2021, 11:58am UTC](https://discuss.elastic.co/t/kibana-reporting-problem/263410 "2021-02-09T11:58:10Z")

</div>

Hi Team, I've problem when generating CSV report based on search result. I've two Kibanas (7.8.0) connected to one Elasticsearch cluster so I've added the same xpack.reporting.encryptionKey in both instances as describ…

---

## [Its always necesary to use throttling in watcher alerts?](https://discuss.elastic.co/t/its-always-necesary-to-use-throttling-in-watcher-alerts/263409)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 1\
**Last updated:** [February 9, 2021, 11:42am UTC](https://discuss.elastic.co/t/its-always-necesary-to-use-throttling-in-watcher-alerts/263409 "2021-02-09T11:42:01Z")

</div>

Hi, Im using this schedule in my watcher alert "trigger" : { "schedule" : { "daily" : { "at" : "17:00" } } } so I was wandering if it is necesary to use throttling in the watchers.

---

## [Kibana Alert on missing process](https://discuss.elastic.co/t/kibana-alert-on-missing-process/263495)

<div class="topic-metadata">

**Author:** [@norgro2601](https://discuss.elastic.co/u/norgro2601)\
**Replies:** 1\
**Last updated:** [February 9, 2021, 11:36am UTC](https://discuss.elastic.co/t/kibana-alert-on-missing-process/263495 "2021-02-09T11:36:15Z")

</div>

Hi, I've a question about setting up an alert on a missing process on several hosts I'm monitoring. I've setup a Metric threshold alert with instances on hostnames, which should do the job, but I don't think, this aler…

---

## [Not able to change Kibana custom logo in 7.10](https://discuss.elastic.co/t/not-able-to-change-kibana-custom-logo-in-7-10/263374)

<div class="topic-metadata">

**Author:** [@shehzadshaikh](https://discuss.elastic.co/u/shehzadshaikh)\
**Replies:** 2\
**Last updated:** [February 9, 2021, 11:33am UTC](https://discuss.elastic.co/t/not-able-to-change-kibana-custom-logo-in-7-10/263374 "2021-02-09T11:33:13Z")

</div>

I am trying to customize the Kibana UI with custom message and logo, i tried following the guide published here - https://discuss.elastic.co/t/custom-logo-kibana-7-10-0-guide/257686 However, when run the npx command aft…

---

## [Line Graphs with Values](https://discuss.elastic.co/t/line-graphs-with-values/263677)

<div class="topic-metadata">

**Author:** [@vikramnr](https://discuss.elastic.co/u/vikramnr)\
**Replies:** 1\
**Last updated:** [February 9, 2021, 11:20am UTC](https://discuss.elastic.co/t/line-graphs-with-values/263677 "2021-02-09T11:20:18Z")

</div>

I was just wondering if there is any way to display values in line graph. Currently if we hover over the data points, it displays the corresponding values. I'm open to using any extensions as well. Please let me know

---

## [Generate http certificate non-interactive](https://discuss.elastic.co/t/generate-http-certificate-non-interactive/263685)

<div class="topic-metadata">

**Author:** [@mysil](https://discuss.elastic.co/u/mysil)\
**Replies:** 1\
**Last updated:** [February 9, 2021, 11:09am UTC](https://discuss.elastic.co/t/generate-http-certificate-non-interactive/263685 "2021-02-09T11:09:20Z")

</div>

Hi, I need to script generation of a certificate using 'elasticsearch-certutil http'. Is that even possible? I managed to do this with 'elasticsearch-certutil ca'. I need this to enable Alerts in my Kibana. Running on …

---

## [How to enable/disable custom plugin for particular user/spaces?](https://discuss.elastic.co/t/how-to-enable-disable-custom-plugin-for-particular-user-spaces/263546)

<div class="topic-metadata">

**Author:** [@Akhil\_Kaithoju](https://discuss.elastic.co/u/Akhil_Kaithoju)\
**Replies:** 4\
**Last updated:** [February 9, 2021, 10:09am UTC](https://discuss.elastic.co/t/how-to-enable-disable-custom-plugin-for-particular-user-spaces/263546 "2021-02-09T10:09:53Z")

</div>

Hi, I'm currently using Kibana 7.10, where I created a custom plugin that reflects the side navigation bar. Now I want to allow access for a specific user or space. Previously it was available for Kibana 7.6, now it has …

---

## [Timestamp for Max value](https://discuss.elastic.co/t/timestamp-for-max-value/263477)

<div class="topic-metadata">

**Author:** [@stevezemlicka](https://discuss.elastic.co/u/stevezemlicka)\
**Replies:** 3\
**Last updated:** [February 9, 2021, 9:07am UTC](https://discuss.elastic.co/t/timestamp-for-max-value/263477 "2021-02-09T09:07:19Z")

</div>

I have a data table showing individual devices and two metrics for each device. Average value and Max Value. I wish to output the date/time of the max value occurrence as well. I have tried adding a max bucket metric …

---

## [Kibana Index Patterns without Index](https://discuss.elastic.co/t/kibana-index-patterns-without-index/263681)

<div class="topic-metadata">

**Author:** [@smm](https://discuss.elastic.co/u/smm)\
**Replies:** 1\
**Last updated:** [February 9, 2021, 9:04am UTC](https://discuss.elastic.co/t/kibana-index-patterns-without-index/263681 "2021-02-09T09:04:08Z")

</div>

It just hit my attention: I have Kibana index patterns with no index. Do you agree on this, that in case you once had a index and defined a pattern, but after that the data stream ends and curator over time deletes one…

---

## [Integration with LDAP](https://discuss.elastic.co/t/integration-with-ldap/263576)

<div class="topic-metadata">

**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\
**Replies:** 6\
**Last updated:** [February 9, 2021, 4:09am UTC](https://discuss.elastic.co/t/integration-with-ldap/263576 "2021-02-09T04:09:33Z")

</div>

can ELK stack integrate with LDAP? if can, how is it?

---

## [Persist Kibana Session across browser restart](https://discuss.elastic.co/t/persist-kibana-session-across-browser-restart/261718)

<div class="topic-metadata">

**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\
**Replies:** 4\
**Last updated:** [February 9, 2021, 3:01am UTC](https://discuss.elastic.co/t/persist-kibana-session-across-browser-restart/261718 "2021-02-09T03:01:21Z")

</div>

My kibana session expires if I close the browser and restart it. I am wondering if there's a way for me to persist the Kibana session across a browser restart so that I don't have to re-login if I close and re-launch my …

---

## [Show Country wise breakup in horizontal bar chart](https://discuss.elastic.co/t/show-country-wise-breakup-in-horizontal-bar-chart/263627)

<div class="topic-metadata">

**Author:** [@ankitdevnalkar](https://discuss.elastic.co/u/ankitdevnalkar)\
**Replies:** 1\
**Last updated:** [February 9, 2021, 2:28am UTC](https://discuss.elastic.co/t/show-country-wise-breakup-in-horizontal-bar-chart/263627 "2021-02-09T02:28:42Z")

</div>

I want to show the country-wise breakup bar chart for the data showing in the above image. One bar should show a sum of all value belongs to Singapore and so on for other countries. Is it possible to show in such visu…

---

## [Generate PDF Report Fails](https://discuss.elastic.co/t/generate-pdf-report-fails/263537)

<div class="topic-metadata">

**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\
**Replies:** 3\
**Last updated:** [February 8, 2021, 10:56pm UTC](https://discuss.elastic.co/t/generate-pdf-report-fails/263537 "2021-02-08T22:56:55Z")

</div>

Hello, I have checked previous posts but still cannot find a solution. Kibana/Elastic version - 7.9.1 5 Elastic nodes 2 Kibana nodes Platinum licenses When I try to generate a pdf report, it fails. I also have a s…

---

## [Dynamic index name in DSL](https://discuss.elastic.co/t/dynamic-index-name-in-dsl/263580)

<div class="topic-metadata">

**Author:** [@Ninja\_Ninja](https://discuss.elastic.co/u/Ninja_Ninja)\
**Replies:** 1\
**Last updated:** [February 8, 2021, 10:42pm UTC](https://discuss.elastic.co/t/dynamic-index-name-in-dsl/263580 "2021-02-08T22:42:17Z")

</div>

I have created indexes based on year and month. For ex: idx202001, idx202002,... In the dashboard, based on the time filter selected, I would like to query particular indices only. Like { "query": { "match": { "\_…

---

## [Persistent Kibana shard failure error for oldest shown data](https://discuss.elastic.co/t/persistent-kibana-shard-failure-error-for-oldest-shown-data/262910)

<div class="topic-metadata">

**Author:** [@cealliance](https://discuss.elastic.co/u/cealliance)\
**Replies:** 3\
**Last updated:** [February 8, 2021, 8:41pm UTC](https://discuss.elastic.co/t/persistent-kibana-shard-failure-error-for-oldest-shown-data/262910 "2021-02-08T20:41:32Z")

</div>

When opening any visualization, dashboard, or the discover tab, an error appears explaining that ~%80 of shards failed. Unless the time span is set to very small increments, e.g. 15 minutes, the oldest %80 of data never …

---

## [Kibana isn't being displayed in web browser](https://discuss.elastic.co/t/kibana-isnt-being-displayed-in-web-browser/263553)

<div class="topic-metadata">

**Author:** [@ROPA8](https://discuss.elastic.co/u/ROPA8)\
**Replies:** 1\
**Last updated:** [February 8, 2021, 5:06pm UTC](https://discuss.elastic.co/t/kibana-isnt-being-displayed-in-web-browser/263553 "2021-02-08T17:06:22Z")

</div>

Hi all, I have a problem with my Kibana. Elastic Search and Kibana run well but kibana isn't loaded in web browser and it just shows white page at localhost:5602. kibana console last messages: before starting saved o…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=366)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=368)
