# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=368

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 369

---

## [Rollup Job Visualisation - Top Ranking Items](https://discuss.elastic.co/t/rollup-job-visualisation-top-ranking-items/263099)

<div class="topic-metadata">

**Author:** [@michaelpietzsch](https://discuss.elastic.co/u/michaelpietzsch)\
**Replies:** 5\
**Last updated:** [February 8, 2021, 3:43pm UTC](https://discuss.elastic.co/t/rollup-job-visualisation-top-ranking-items/263099 "2021-02-08T15:43:23Z")

</div>

Hi dear Elastic and Kibana Users, i am having issues running a visualisation for the top tiers when going against a rollup dataset. This issue happens in a pie diagramm aswell as a top list. The results vary when chang…

---

## [Crating visualization with two arrays in a table](https://discuss.elastic.co/t/crating-visualization-with-two-arrays-in-a-table/263054)

<div class="topic-metadata">

**Author:** [@leinad](https://discuss.elastic.co/u/leinad)\
**Replies:** 4\
**Last updated:** [February 8, 2021, 3:22pm UTC](https://discuss.elastic.co/t/crating-visualization-with-two-arrays-in-a-table/263054 "2021-02-08T15:22:28Z")

</div>

Hi , I am trying to create a table with values from two arrays arr1\[str1,str2,str30 arr2\[val1,val2,val3\] desired table should be as str1 - val1 str2 - val2 str3 - val3 and i have multiple such arrays in the json …

---

## [Compare wildcard string to cell value and replace in canvas expression](https://discuss.elastic.co/t/compare-wildcard-string-to-cell-value-and-replace-in-canvas-expression/263234)

<div class="topic-metadata">

**Author:** [@fuzzyWedgie](https://discuss.elastic.co/u/fuzzyWedgie)\
**Replies:** 3\
**Last updated:** [February 8, 2021, 2:07pm UTC](https://discuss.elastic.co/t/compare-wildcard-string-to-cell-value-and-replace-in-canvas-expression/263234 "2021-02-08T14:07:37Z")

</div>

How can I replace all cell values in a table in canvas if it matches a wildcard string ? I want to normalize some values in the table in a way that if a table cell contains "test abc" I want the cell value to be repla…

---

## [Kibana Bulk Create API Fails To Overwrite on 7.10 returning 409](https://discuss.elastic.co/t/kibana-bulk-create-api-fails-to-overwrite-on-7-10-returning-409/262123)

<div class="topic-metadata">

**Author:** [@scott\_stash](https://discuss.elastic.co/u/scott_stash)\
**Replies:** 5\
**Last updated:** [February 8, 2021, 11:21am UTC](https://discuss.elastic.co/t/kibana-bulk-create-api-fails-to-overwrite-on-7-10-returning-409/262123 "2021-02-08T11:21:20Z")

</div>

I have been using various scripts to create dashboards and visualizations from a template successfully on 7.5. When I try the same script on 7.10 it fails, and every visualization returns a 409 conflict error. I'm post…

---

## [Custom UI Changes on local machine(server machine) is not reflecting on external IP](https://discuss.elastic.co/t/custom-ui-changes-on-local-machine-server-machine-is-not-reflecting-on-external-ip/262458)

<div class="topic-metadata">

**Author:** [@Rakesh\_Rayabarapu](https://discuss.elastic.co/u/Rakesh_Rayabarapu)\
**Replies:** 14\
**Last updated:** [February 8, 2021, 9:15am UTC](https://discuss.elastic.co/t/custom-ui-changes-on-local-machine-server-machine-is-not-reflecting-on-external-ip/262458 "2021-02-08T09:15:14Z")

</div>

Hi Team, I made custom logo changes in these files "template.js", security.chunk.4.js" and "core.entry.js" and generated the file (gz and br) with npx. \[Steps from this post - https://discuss.elastic.co/t/custom-logo-k…

---

## [Kibana Query DSL Sorting and size does not work](https://discuss.elastic.co/t/kibana-query-dsl-sorting-and-size-does-not-work/263078)

<div class="topic-metadata">

**Author:** [@Sudarshan\_Reddy](https://discuss.elastic.co/u/Sudarshan_Reddy)\
**Replies:** 4\
**Last updated:** [February 8, 2021, 7:14am UTC](https://discuss.elastic.co/t/kibana-query-dsl-sorting-and-size-does-not-work/263078 "2021-02-08T07:14:27Z")

</div>

Hi , how to make sorting works in kibana Query DSL . i am using the following script.

---

## [How calculate session duration script field](https://discuss.elastic.co/t/how-calculate-session-duration-script-field/263313)

<div class="topic-metadata">

**Author:** [@ITchandj](https://discuss.elastic.co/u/ITchandj)\
**Replies:** 1\
**Last updated:** [February 8, 2021, 5:24am UTC](https://discuss.elastic.co/t/how-calculate-session-duration-script-field/263313 "2021-02-08T05:24:06Z")

</div>

Hi @Havana i am new to kibana and i need to create exactly one table that gives me the min and max of a session. please can you tell me how you did it. i would be very happy and thank you in advance

---

## [X-axis is not visible in vega kibana while calling through index](https://discuss.elastic.co/t/x-axis-is-not-visible-in-vega-kibana-while-calling-through-index/263088)

<div class="topic-metadata">

**Author:** [@saumya1](https://discuss.elastic.co/u/saumya1)\
**Replies:** 2\
**Last updated:** [February 8, 2021, 4:59am UTC](https://discuss.elastic.co/t/x-axis-is-not-visible-in-vega-kibana-while-calling-through-index/263088 "2021-02-08T04:59:47Z")

</div>

{ "$schema": "https://vega.github.io/schema/vega/v5.json", "autosize":"none", "height":"350", "width":"300", "padding":"30" "title": { "text": "Sample incident data", "subtitle": "timeunit test", "subtitleFontSt…

---

## [Format metricbeat field value in watcher alert](https://discuss.elastic.co/t/format-metricbeat-field-value-in-watcher-alert/263306)

<div class="topic-metadata">

**Author:** [@twilight](https://discuss.elastic.co/u/twilight)\
**Replies:** 6\
**Last updated:** [February 8, 2021, 3:05am UTC](https://discuss.elastic.co/t/format-metricbeat-field-value-in-watcher-alert/263306 "2021-02-08T03:05:23Z")

</div>

Hello, I am using a number of watcher with various conditions and alert to be sent via email and slack. I am receiving some values in the alert which are not easily readable e.g. disk free space which is sent by metric…

---

## [Error when build kibana 7.7 from source code](https://discuss.elastic.co/t/error-when-build-kibana-7-7-from-source-code/263502)

<div class="topic-metadata">

**Author:** [@Thien\_Hoang](https://discuss.elastic.co/u/Thien_Hoang)\
**Replies:** 2\
**Last updated:** [February 6, 2021, 11:13pm UTC](https://discuss.elastic.co/t/error-when-build-kibana-7-7-from-source-code/263502 "2021-02-06T23:13:51Z")

</div>

I get error about module 'static-extend' when build kibana from branch 7.7 version 7.7.2 run yarn kbn bootstrap F:\\Project\\kibana\>yarn kbn bootstrap yarn run v1.22.4 $ node scripts/kbn bootstrap F:\\Project\\kibana\\packa…

---

## [Use the index name in a scripted field](https://discuss.elastic.co/t/use-the-index-name-in-a-scripted-field/263496)

<div class="topic-metadata">

**Author:** [@Shalhevet](https://discuss.elastic.co/u/Shalhevet)\
**Replies:** 2\
**Last updated:** [February 6, 2021, 3:52pm UTC](https://discuss.elastic.co/t/use-the-index-name-in-a-scripted-field/263496 "2021-02-06T15:52:47Z")

</div>

I want to create a scripted field in an index pattern which takes the first word of the index's name and concatenate to it another value. How can I access the name of the index via painless in the scripted field? for e…

---

## [How to export \`alerts\` as backup?](https://discuss.elastic.co/t/how-to-export-alerts-as-backup/261715)

<div class="topic-metadata">

**Author:** [@fzyzcjy](https://discuss.elastic.co/u/fzyzcjy)\
**Replies:** 12\
**Last updated:** [February 6, 2021, 3:58am UTC](https://discuss.elastic.co/t/how-to-export-alerts-as-backup/261715 "2021-02-06T03:58:02Z")

</div>

Hi thanks for the lib! I am trying to monitor my server by using monitoring and alerting. When, for example, CPU is too high or memory is almost full, I want to send an email to myself. Thus I use Kibana Alerting (is it …

---

## [Custom coloring in Kibana Visualize? e.g. the "failed" tag is red, "success" is green](https://discuss.elastic.co/t/custom-coloring-in-kibana-visualize-e-g-the-failed-tag-is-red-success-is-green/263346)

<div class="topic-metadata">

**Author:** [@fzyzcjy](https://discuss.elastic.co/u/fzyzcjy)\
**Replies:** 2\
**Last updated:** [February 6, 2021, 1:04am UTC](https://discuss.elastic.co/t/custom-coloring-in-kibana-visualize-e-g-the-failed-tag-is-red-success-is-green/263346 "2021-02-06T01:04:23Z")

</div>

Hi thanks for the lib! I wonder how can I custom the coloringin Kibana Visualize? e.g. the "failed" tag is red, "success" is green. Currently I cannot control it. See the following figure: where the "failed" and "suc…

---

## [Time of Day filter](https://discuss.elastic.co/t/time-of-day-filter/263277)

<div class="topic-metadata">

**Author:** [@stevezemlicka](https://discuss.elastic.co/u/stevezemlicka)\
**Replies:** 4\
**Last updated:** [February 5, 2021, 11:20pm UTC](https://discuss.elastic.co/t/time-of-day-filter/263277 "2021-02-05T23:20:15Z")

</div>

I am trying to produce a dashboard that has some visualizations but also some data tables. In order to produce the results I need in the data tables, there are times that I must filter based on the time of day. For exa…

---

## [KQL to filter for documents where a field exists and its value is less than a fixed number?](https://discuss.elastic.co/t/kql-to-filter-for-documents-where-a-field-exists-and-its-value-is-less-than-a-fixed-number/262385)

<div class="topic-metadata">

**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\
**Replies:** 20\
**Last updated:** [February 5, 2021, 9:45pm UTC](https://discuss.elastic.co/t/kql-to-filter-for-documents-where-a-field-exists-and-its-value-is-less-than-a-fixed-number/262385 "2021-02-05T21:45:16Z")

</div>

In Kibana 7.7.1, is it possible to specify a KQL filter that selects only the documents where both of the following conditions are true: Field XYZ exists The value of field XYZ (the same field) is less than some fixed …

---

## [Kibana specific dashboard show for users](https://discuss.elastic.co/t/kibana-specific-dashboard-show-for-users/263449)

<div class="topic-metadata">

**Author:** [@Shayan\_Delavarkhan](https://discuss.elastic.co/u/Shayan_Delavarkhan)\
**Replies:** 1\
**Last updated:** [February 5, 2021, 6:46pm UTC](https://discuss.elastic.co/t/kibana-specific-dashboard-show-for-users/263449 "2021-02-05T18:46:22Z")

</div>

Dear guys, I wanna set a permission for a user which can see only single specific dashboard instead of list of all dashboards. My question is that how can I achieve this view? thanks in advanced

---

## [Pie graph color change magically after refresh the page. Please help how to resolve this issue](https://discuss.elastic.co/t/pie-graph-color-change-magically-after-refresh-the-page-please-help-how-to-resolve-this-issue/263291)

<div class="topic-metadata">

**Author:** [@Satish\_Yadav](https://discuss.elastic.co/u/Satish_Yadav)\
**Replies:** 3\
**Last updated:** [February 5, 2021, 3:22pm UTC](https://discuss.elastic.co/t/pie-graph-color-change-magically-after-refresh-the-page-please-help-how-to-resolve-this-issue/263291 "2021-02-05T15:22:10Z")

</div>

---

## [Can we access a scripted field with a scripted field](https://discuss.elastic.co/t/can-we-access-a-scripted-field-with-a-scripted-field/263388)

<div class="topic-metadata">

**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\
**Replies:** 1\
**Last updated:** [February 5, 2021, 2:19pm UTC](https://discuss.elastic.co/t/can-we-access-a-scripted-field-with-a-scripted-field/263388 "2021-02-05T14:19:05Z")

</div>

Kibana version : 7.9 Elasticsearch version : 7.9 APM Server version : 7.9 APM Agent language and version : java 1.8 Fresh install or upgraded from other version? fresh install Is there anything special in your setup…

---

## [Kibana doubt about removing visualizations](https://discuss.elastic.co/t/kibana-doubt-about-removing-visualizations/263109)

<div class="topic-metadata">

**Author:** [@Jose\_Angel\_Morena\_Si](https://discuss.elastic.co/u/Jose_Angel_Morena_Si)\
**Replies:** 2\
**Last updated:** [February 5, 2021, 11:45am UTC](https://discuss.elastic.co/t/kibana-doubt-about-removing-visualizations/263109 "2021-02-05T11:45:50Z")

</div>

Hello there, I am trying to remove all objects in Kibana that meet the following two conditions: They are visualizations. They do not contain "Apache". I am using Kibana UI, Saved Objects. I am using the following qu…

---

## [Kibana role based access on remote cluster](https://discuss.elastic.co/t/kibana-role-based-access-on-remote-cluster/263235)

<div class="topic-metadata">

**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\
**Replies:** 2\
**Last updated:** [February 5, 2021, 6:18am UTC](https://discuss.elastic.co/t/kibana-role-based-access-on-remote-cluster/263235 "2021-02-05T06:18:46Z")

</div>

Hi All, We are trying to provide role based access to our partners for few indexes. It is working for the current cluster and consumer is able to see data only for allocated index. However consumer is able to see all r…

---

## [How to display only positive values after a tophit (latest) aggregation](https://discuss.elastic.co/t/how-to-display-only-positive-values-after-a-tophit-latest-aggregation/262997)

<div class="topic-metadata">

**Author:** [@Ricks](https://discuss.elastic.co/u/Ricks)\
**Replies:** 3\
**Last updated:** [February 5, 2021, 8:05am UTC](https://discuss.elastic.co/t/how-to-display-only-positive-values-after-a-tophit-latest-aggregation/262997 "2021-02-05T08:05:01Z")

</div>

Hi, currently I am exporting (once per hour) certificate expiration data to elasticsearch and visualize it with Kibana. So far so good, but I can't figure out to properly display certificates that are within 30 days to …

---

## [Geoip conflict when splitting the index by day](https://discuss.elastic.co/t/geoip-conflict-when-splitting-the-index-by-day/263226)

<div class="topic-metadata">

**Author:** [@testsoft](https://discuss.elastic.co/u/testsoft)\
**Replies:** 2\
**Last updated:** [February 5, 2021, 7:27am UTC](https://discuss.elastic.co/t/geoip-conflict-when-splitting-the-index-by-day/263226 "2021-02-05T07:27:20Z")

</div>

Good afternoon. Please help with the following question. I use the following standard output config: elasticsearch { hosts =\> \["localhost:9200"\] manage\_template =\> false index =\> "…

---

## [Dropdown in Kibana](https://discuss.elastic.co/t/dropdown-in-kibana/263217)

<div class="topic-metadata">

**Author:** [@ITchandj](https://discuss.elastic.co/u/ITchandj)\
**Replies:** 2\
**Last updated:** [February 4, 2021, 11:13pm UTC](https://discuss.elastic.co/t/dropdown-in-kibana/263217 "2021-02-04T23:13:00Z")

</div>

How to make a drop-down in Kibana. In reality i want to get realised a drop-down list with the information as in the following photo. Thank you all

---

## [Can ES host a form that posts to an API?](https://discuss.elastic.co/t/can-es-host-a-form-that-posts-to-an-api/263070)

<div class="topic-metadata">

**Author:** [@irwazr](https://discuss.elastic.co/u/irwazr)\
**Replies:** 2\
**Last updated:** [February 4, 2021, 10:58pm UTC](https://discuss.elastic.co/t/can-es-host-a-form-that-posts-to-an-api/263070 "2021-02-04T22:58:14Z")

</div>

We want to be able to create a form in ES/Kibana that allows users to select an option from a dropdown list, and then click a button to make a POST to an API. Is this possible in ES or Kibana? If so, how? Thanks heaps…

---

## [Create Field for Control Visualization](https://discuss.elastic.co/t/create-field-for-control-visualization/261025)

<div class="topic-metadata">

**Author:** [@stevezemlicka](https://discuss.elastic.co/u/stevezemlicka)\
**Replies:** 2\
**Last updated:** [February 4, 2021, 10:10pm UTC](https://discuss.elastic.co/t/create-field-for-control-visualization/261025 "2021-02-04T22:10:55Z")

</div>

I am looking at creating a friendly ID for use in the Controls Visualization to aid in filtering dashboard results. For some reason, I can't seem to create a field which is available in the Field selector of that visual…

---

## [Kibana plugin standalone build](https://discuss.elastic.co/t/kibana-plugin-standalone-build/263282)

<div class="topic-metadata">

**Author:** [@zixon89](https://discuss.elastic.co/u/zixon89)\
**Replies:** 2\
**Last updated:** [February 4, 2021, 8:56pm UTC](https://discuss.elastic.co/t/kibana-plugin-standalone-build/263282 "2021-02-04T20:56:52Z")

</div>

Hi there, I'm still fresh with Kibana plugin development, so currently I'm doing building by using this (Getting started | Kibana Guide \[7.10\] | Elastic) guide: Clone Kibana repo Set my plugin inside kibana's plugin f…

---

## [Add Date and Time on TSVB Graph](https://discuss.elastic.co/t/add-date-and-time-on-tsvb-graph/263239)

<div class="topic-metadata">

**Author:** [@pavansh](https://discuss.elastic.co/u/pavansh)\
**Replies:** 1\
**Last updated:** [February 4, 2021, 7:00pm UTC](https://discuss.elastic.co/t/add-date-and-time-on-tsvb-graph/263239 "2021-02-04T19:00:04Z")

</div>

Check this Screenshot, Is there any way to add Date and Time on TSVB Graph?

---

## [Values near to 0 are not visible in histogram](https://discuss.elastic.co/t/values-near-to-0-are-not-visible-in-histogram/263229)

<div class="topic-metadata">

**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\
**Replies:** 1\
**Last updated:** [February 4, 2021, 6:30pm UTC](https://discuss.elastic.co/t/values-near-to-0-are-not-visible-in-histogram/263229 "2021-02-04T18:30:23Z")

</div>

Hi, In an histogram visualization, when the values of the field of the Metrics are near to 0, you can hardly see them. Is there any way to zoom also in x-axis except of the zoom in y-axis you can now do? Or other way to…

---

## [Unable to add cross-cluster index pattern](https://discuss.elastic.co/t/unable-to-add-cross-cluster-index-pattern/263014)

<div class="topic-metadata">

**Author:** [@jim1](https://discuss.elastic.co/u/jim1)\
**Replies:** 2\
**Last updated:** [February 4, 2021, 5:16pm UTC](https://discuss.elastic.co/t/unable-to-add-cross-cluster-index-pattern/263014 "2021-02-04T17:16:17Z")

</div>

Hello, I set up two Elasticsearch clusters (cluster\_a, cluster\_b) and I was able to set cluster\_a as a remote cluster on cluster\_b and vice versa. Using the dev CLI feature, I am also able to query indexes of cluster\_a…

---

## [Is it possible to get the length of the dataset of its own?](https://discuss.elastic.co/t/is-it-possible-to-get-the-length-of-the-dataset-of-its-own/263079)

<div class="topic-metadata">

**Author:** [@m-amano](https://discuss.elastic.co/u/m-amano)\
**Replies:** 1\
**Last updated:** [February 4, 2021, 4:44pm UTC](https://discuss.elastic.co/t/is-it-possible-to-get-the-length-of-the-dataset-of-its-own/263079 "2021-02-04T16:44:20Z")

</div>

I am using Elasticsearch v.7.10.2 and Vega version is v.4.3.0. I tried the code below to get the size of the dataset itself and got an error. "data": \[ { "name": "dataset1", "values": \[{...},{...}\], "transfo…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=367)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=369)
