# Kibana **URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=371 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 372 --- ## [Alerts & Actions Server Log](https://discuss.elastic.co/t/alerts-actions-server-log/262358)
**Author:** [@Angelos](https://discuss.elastic.co/u/Angelos)\ **Replies:** 1\ **Last updated:** [February 1, 2021, 7:13am UTC](https://discuss.elastic.co/t/alerts-actions-server-log/262358 "2021-02-01T07:13:19Z")
Hi, I started using Alerts and Actions in Kibana and I have a question about Server Log action. How can get the results there? Where can I see the messages when action is triggered? Thank you in advance! /Angelos --- ## [Write Operations in Kibana](https://discuss.elastic.co/t/write-operations-in-kibana/262574)
**Author:** [@ITchandj](https://discuss.elastic.co/u/ITchandj)\ **Replies:** 1\ **Last updated:** [February 1, 2021, 7:05am UTC](https://discuss.elastic.co/t/write-operations-in-kibana/262574 "2021-02-01T07:05:12Z")
Hello people!!! please how could i write this Splunk function in kibana sum(NetTargetConnectCount) as SumNetTargetConnectCount sum(NetTargetReconnectCount) as SumNetTargetReconnectCount sum(NetTargetRetransmitCount) … --- ## [Custom Query for Range / Bucket Aggregation](https://discuss.elastic.co/t/custom-query-for-range-bucket-aggregation/262635)
**Author:** [@bhavin.shah](https://discuss.elastic.co/u/bhavin.shah)\ **Replies:** 2\ **Last updated:** [February 1, 2021, 4:08am UTC](https://discuss.elastic.co/t/custom-query-for-range-bucket-aggregation/262635 "2021-02-01T04:08:02Z")
Hi, ELK setup - 3 nodes/ 7.10.0 version Query :- I am trying to create one query for business where below is raw data and expected output as well. Left side - is raw data and final data is dealer ID wise brk\_amt wise… --- ## [Can I connect MySQL database to elastic search?](https://discuss.elastic.co/t/can-i-connect-mysql-database-to-elastic-search/262743)
**Author:** [@Arun\_Sharma](https://discuss.elastic.co/u/Arun_Sharma)\ **Replies:** 3\ **Last updated:** [February 1, 2021, 12:43am UTC](https://discuss.elastic.co/t/can-i-connect-mysql-database-to-elastic-search/262743 "2021-02-01T00:43:42Z")
Can I connect a MySQL database with elasticsearch and will I able to make a search engine for organization after learning elasticsearch? For example : if I type on the search bar "how many employees joined today from Mu… --- ## [Metricbeat for m3db](https://discuss.elastic.co/t/metricbeat-for-m3db/262605)
**Author:** [@Mohith\_Vegi](https://discuss.elastic.co/u/Mohith_Vegi)\ **Replies:** 1\ **Last updated:** [February 1, 2021, 12:27am UTC](https://discuss.elastic.co/t/metricbeat-for-m3db/262605 "2021-02-01T00:27:32Z")
how can i monitor m3db using metricbeats, since metricbeat doesn't support m3db module.. plz help --- ## [Showing document fields as tooltips](https://discuss.elastic.co/t/showing-document-fields-as-tooltips/262760)
**Author:** [@stexxen](https://discuss.elastic.co/u/stexxen)\ **Replies:** 3\ **Last updated:** [January 31, 2021, 8:07pm UTC](https://discuss.elastic.co/t/showing-document-fields-as-tooltips/262760 "2021-01-31T20:07:11Z")
I'm missing something obvious here, I know I am, but I have struggled to find an answer. I have a small index of 20 documents in ES 7.10.2 with a GeoPoint in the top level, with other fields stored as objects and nested… --- ## [Help with reducing mapping](https://discuss.elastic.co/t/help-with-reducing-mapping/262394)
**Author:** [@DavidoffX](https://discuss.elastic.co/u/DavidoffX)\ **Replies:** 9\ **Last updated:** [January 31, 2021, 7:36pm UTC](https://discuss.elastic.co/t/help-with-reducing-mapping/262394 "2021-01-31T19:36:35Z")
Hi All. I'm new to the ELK stack, and am hoping I'm not trying to re-invent the wheel. Steep learning curve at the moment and am just after some help and guidance really. I'm using FileBeat to send logs out from our Ku… --- ## [Creating new user in Kibana, login fine but unable to view logs](https://discuss.elastic.co/t/creating-new-user-in-kibana-login-fine-but-unable-to-view-logs/262747)
**Author:** [@umen](https://discuss.elastic.co/u/umen)\ **Replies:** 4\ **Last updated:** [January 31, 2021, 2:03pm UTC](https://discuss.elastic.co/t/creating-new-user-in-kibana-login-fine-but-unable-to-view-logs/262747 "2021-01-31T14:03:21Z")
Hello all i created new use in kibana with kibana\_admin,kibana\_system rules but when i login to kibana with the new user, I cant view the logs which i can view with the default user of kibana . i can see all the filt… --- ## [How to create a custom field formatter plugin in 7.9.x?](https://discuss.elastic.co/t/how-to-create-a-custom-field-formatter-plugin-in-7-9-x/262093)
**Author:** [@nrt.krishna](https://discuss.elastic.co/u/nrt.krishna)\ **Replies:** 2\ **Last updated:** [January 31, 2021, 6:06am UTC](https://discuss.elastic.co/t/how-to-create-a-custom-field-formatter-plugin-in-7-9-x/262093 "2021-01-31T06:06:49Z")
Could somebody provide me an example how to create a plugin for custom field formatters? I had one for 6.x but since the architecture of the plugins changed in 7.9.x I am looking for some help to register my plugin wher… --- ## [Vega: Handle a situation where data-set returned is empty](https://discuss.elastic.co/t/vega-handle-a-situation-where-data-set-returned-is-empty/262210)
**Author:** [@ege](https://discuss.elastic.co/u/ege)\ **Replies:** 14\ **Last updated:** [January 30, 2021, 3:10pm UTC](https://discuss.elastic.co/t/vega-handle-a-situation-where-data-set-returned-is-empty/262210 "2021-01-30T15:10:06Z")
When querying for data, there are situations where the returned data-set is empty for certain time ranges. Such a situation occurred in Vega (returned an empty array) and I tried to create a condition using expressions t… --- ## [How do i get the message field?](https://discuss.elastic.co/t/how-do-i-get-the-message-field/262711)
**Author:** [@walid\_lakehal](https://discuss.elastic.co/u/walid_lakehal)\ **Replies:** 4\ **Last updated:** [January 30, 2021, 2:05pm UTC](https://discuss.elastic.co/t/how-do-i-get-the-message-field/262711 "2021-01-30T14:05:37Z")
Hello , i am trying to get the "message" field to use it in a web site dashboard , in this example it's just the result of an ls command --- ## [Where in kibana i can analyze logs coming from logstash , logs that are off line](https://discuss.elastic.co/t/where-in-kibana-i-can-analyze-logs-coming-from-logstash-logs-that-are-off-line/262705)
**Author:** [@umen](https://discuss.elastic.co/u/umen)\ **Replies:** 2\ **Last updated:** [January 30, 2021, 9:11am UTC](https://discuss.elastic.co/t/where-in-kibana-i-can-analyze-logs-coming-from-logstash-logs-that-are-off-line/262705 "2021-01-30T09:11:12Z")
Hello all i have elastic search which have 2 modes or 2 streams of logs first is the filebeat real-time logs which i can analyze in the kibana logs section. The second is online logs that are uploaded to s3 and they a… --- ## [REST API for adding users](https://discuss.elastic.co/t/rest-api-for-adding-users/262570)
**Author:** [@umesh2020](https://discuss.elastic.co/u/umesh2020)\ **Replies:** 4\ **Last updated:** [January 29, 2021, 7:23pm UTC](https://discuss.elastic.co/t/rest-api-for-adding-users/262570 "2021-01-29T19:23:47Z")
Hi Is there a REST API for adding users provided by Kibana ? OR I can use the elasticsearch create user API to add users ? Thanks, Umesh --- ## [Filter visualisation not providing full terms list, autocomplete settings are not making any differences](https://discuss.elastic.co/t/filter-visualisation-not-providing-full-terms-list-autocomplete-settings-are-not-making-any-differences/262618)
**Author:** [@Luukv](https://discuss.elastic.co/u/Luukv)\ **Replies:** 3\ **Last updated:** [January 29, 2021, 6:29pm UTC](https://discuss.elastic.co/t/filter-visualisation-not-providing-full-terms-list-autocomplete-settings-are-not-making-any-differences/262618 "2021-01-29T18:29:42Z")
Hello, In the past months I have made several filter/control panel visualisations for multiple dashboards. These have all worked well, but with the most recent one I've ran into some problems. We were experiencing some… --- ## [Kibana scripted fields](https://discuss.elastic.co/t/kibana-scripted-fields/262675)
**Author:** [@Gokul6](https://discuss.elastic.co/u/Gokul6)\ **Replies:** 1\ **Last updated:** [January 29, 2021, 6:20pm UTC](https://discuss.elastic.co/t/kibana-scripted-fields/262675 "2021-01-29T18:20:53Z")
i have several boolean fields like weekDays.friday.is24HourService, weekDays.saturday.is24HourService in my index. i am getting the day of week using \[doc\['@timestamp'\].value.dayOfWeek\] which returns a numeric value, fo… --- ## [Delete old indexes via Index lifecycle policy doesn't work because of shards error](https://discuss.elastic.co/t/delete-old-indexes-via-index-lifecycle-policy-doesnt-work-because-of-shards-error/262619)
**Author:** [@mfa](https://discuss.elastic.co/u/mfa)\ **Replies:** 1\ **Last updated:** [January 29, 2021, 4:24pm UTC](https://discuss.elastic.co/t/delete-old-indexes-via-index-lifecycle-policy-doesnt-work-because-of-shards-error/262619 "2021-01-29T16:24:03Z")
I have read through the docs and some posts here, however my delete policy is not working as expected. Here is my policy: PUT \_ilm/policy/deleting\_policy { "policy": { "phases": { "hot": … --- ## [Need to execute watcher alert based on each element of array](https://discuss.elastic.co/t/need-to-execute-watcher-alert-based-on-each-element-of-array/262592)
**Author:** [@Sumit\_Kumar1](https://discuss.elastic.co/u/Sumit_Kumar1)\ **Replies:** 1\ **Last updated:** [January 29, 2021, 3:39pm UTC](https://discuss.elastic.co/t/need-to-execute-watcher-alert-based-on-each-element-of-array/262592 "2021-01-29T15:39:34Z")
Need to execute watcher alert based on each element of array. I am using chain input . First search provides me list of array . So, for each element of the array i need to make a search on each iteration . My result of… --- ## [Get current active users in the application using Elastic/Kibana Visualization](https://discuss.elastic.co/t/get-current-active-users-in-the-application-using-elastic-kibana-visualization/262030)
**Author:** [@SAKA\_RAM\_DEWASI](https://discuss.elastic.co/u/SAKA_RAM_DEWASI)\ **Replies:** 3\ **Last updated:** [January 29, 2021, 3:27pm UTC](https://discuss.elastic.co/t/get-current-active-users-in-the-application-using-elastic-kibana-visualization/262030 "2021-01-29T15:27:03Z")
Hi all, I am new to elastic and kibana. I want to get current active users in web application using audit logs stored in elastic index. We capture login and logout event of user in audit log and stored as document in el… --- ## [Kibana Error Alerting - Filter Similiar Error Messages | Similarity Query \[Elastalert\]](https://discuss.elastic.co/t/kibana-error-alerting-filter-similiar-error-messages-similarity-query-elastalert/262517)
**Author:** [@MartinJaskulla](https://discuss.elastic.co/u/MartinJaskulla)\ **Replies:** 2\ **Last updated:** [January 29, 2021, 2:02pm UTC](https://discuss.elastic.co/t/kibana-error-alerting-filter-similiar-error-messages-similarity-query-elastalert/262517 "2021-01-29T14:02:09Z")
My goal is to be alerted for unique error types only (Elasticsearch 6.8 + Elastalert). Example error logs (5 documents, same index, same field): Error 9837 in Component X trying to reconnect in 9.3 seconds Error 9837 … --- ## [Kibana Timezone incompatiblities](https://discuss.elastic.co/t/kibana-timezone-incompatiblities/262649)
**Author:** [@d3v3lop3r](https://discuss.elastic.co/u/d3v3lop3r)\ **Replies:** 4\ **Last updated:** [January 29, 2021, 1:21pm UTC](https://discuss.elastic.co/t/kibana-timezone-incompatiblities/262649 "2021-01-29T13:21:24Z")
Hello there, Iam trying to make my Data visible in the Discover Tab of Kibana and it's just not working out for me. Iam sitting on a project for my studies and built a weather station. The station submits its data once… --- ## [Kibana alert condition](https://discuss.elastic.co/t/kibana-alert-condition/262645)
**Author:** [@Guy\_Assaf](https://discuss.elastic.co/u/Guy_Assaf)\ **Replies:** 1\ **Last updated:** [January 29, 2021, 1:13pm UTC](https://discuss.elastic.co/t/kibana-alert-condition/262645 "2021-01-29T13:13:10Z")
See the image, I'm trying to define an alert such that a certain percentage will trigger the alert. Two issues: how to take the ERROR/SUCCESS doc from the list, I tried with (buckets{key:SUCCESS} which does not work) t… --- ## [MongoDB logs no more displayed in Kibana Filebeat MongoDB dashboard after 7.10 migration](https://discuss.elastic.co/t/mongodb-logs-no-more-displayed-in-kibana-filebeat-mongodb-dashboard-after-7-10-migration/262344)
**Author:** [@ORich](https://discuss.elastic.co/u/ORich)\ **Replies:** 5\ **Last updated:** [January 29, 2021, 7:37am UTC](https://discuss.elastic.co/t/mongodb-logs-no-more-displayed-in-kibana-filebeat-mongodb-dashboard-after-7-10-migration/262344 "2021-01-29T07:37:31Z")
Dear experts, after migration from 6.5.4 to 7.10.2, I cannot display anymore my logs collected by the default Filebeat MongoDB module in Kibana Dashboard Overview \[Filebeat MongoDB\]. I notice some updates in the provid… --- ## [How to get response header with cookie from POST request to Kibana REST API /internal/security/login](https://discuss.elastic.co/t/how-to-get-response-header-with-cookie-from-post-request-to-kibana-rest-api-internal-security-login/262530)
**Author:** [@gaetano](https://discuss.elastic.co/u/gaetano)\ **Replies:** 1\ **Last updated:** [January 29, 2021, 7:12am UTC](https://discuss.elastic.co/t/how-to-get-response-header-with-cookie-from-post-request-to-kibana-rest-api-internal-security-login/262530 "2021-01-29T07:12:27Z")
My goal is to skip login page in Kibana. With an HTTP request, I would to login in Kibana using the REST API /internal/security/login. The request is come from my Angular application and to bypass CORS and multi-origi… --- ## [High load after upgrading ElasticSearch/Kibana/Logstash from 7.5.1 to 7.9.3](https://discuss.elastic.co/t/high-load-after-upgrading-elasticsearch-kibana-logstash-from-7-5-1-to-7-9-3/261307)
**Author:** [@stideswell](https://discuss.elastic.co/u/stideswell)\ **Replies:** 8\ **Last updated:** [January 29, 2021, 1:14am UTC](https://discuss.elastic.co/t/high-load-after-upgrading-elasticsearch-kibana-logstash-from-7-5-1-to-7-9-3/261307 "2021-01-29T01:14:43Z")
Hello I've upgraded an ElasticSearch server running on Ubuntu 18 from version 7.5.1 to 7.9.3. I use ES, Kibana and Logstash on this server. The load was immediately much higher after the upgrade and this has persisted. … --- ## [How do I make a Kibana histogram that plots the distribution of the average of key A for each distinct value of key B?](https://discuss.elastic.co/t/how-do-i-make-a-kibana-histogram-that-plots-the-distribution-of-the-average-of-key-a-for-each-distinct-value-of-key-b/262541)
**Author:** [@eric4](https://discuss.elastic.co/u/eric4)\ **Replies:** 5\ **Last updated:** [January 28, 2021, 9:36pm UTC](https://discuss.elastic.co/t/how-do-i-make-a-kibana-histogram-that-plots-the-distribution-of-the-average-of-key-a-for-each-distinct-value-of-key-b/262541 "2021-01-28T21:36:32Z")
This applies to any Kibana graph but the one I am interested in is a Histogram. My data is structured like this: \[ { "user\_id" : 3, "score" : 10 }, { "user\_id" : 1, "score" : 20 }, { "user\_id" : 2, "score" : 60 }… --- ## [Watcher Actions Greyed Out](https://discuss.elastic.co/t/watcher-actions-greyed-out/261956)
**Author:** [@teej](https://discuss.elastic.co/u/teej)\ **Replies:** 2\ **Last updated:** [January 28, 2021, 9:10pm UTC](https://discuss.elastic.co/t/watcher-actions-greyed-out/261956 "2021-01-28T21:10:13Z")
Hi, I am trying to edit email field in the Watcher actions as super user but the fields are greyed out and I am wondering why and how I may fix that? Thank you. --- ## [Kibana Dashboard Links for a PDF](https://discuss.elastic.co/t/kibana-dashboard-links-for-a-pdf/262543)
**Author:** [@teej](https://discuss.elastic.co/u/teej)\ **Replies:** 2\ **Last updated:** [January 28, 2021, 9:07pm UTC](https://discuss.elastic.co/t/kibana-dashboard-links-for-a-pdf/262543 "2021-01-28T21:07:12Z")
Hi, I've created a dashboard in kibana (7.6.2) but wanted to edit the dashboard to include links to help PDFs that expalin how to use the dashboard. Question is... Is there a way to get the Dashboard links to bring u… --- ## [Ingest Pipeline: drop processor: compile error](https://discuss.elastic.co/t/ingest-pipeline-drop-processor-compile-error/262548)
**Author:** [@asc-adean](https://discuss.elastic.co/u/asc-adean)\ **Replies:** 3\ **Last updated:** [January 28, 2021, 7:45pm UTC](https://discuss.elastic.co/t/ingest-pipeline-drop-processor-compile-error/262548 "2021-01-28T19:45:42Z")
As documented here https://www.elastic.co/guide/en/elasticsearch/reference/current/drop-processor.html I want to be able to drop a document when matching on a field, like so { "processors": \[ { "js… --- ## [Kibana](https://discuss.elastic.co/t/kibana/261795)
**Author:** [@ITchandj](https://discuss.elastic.co/u/ITchandj)\ **Replies:** 5\ **Last updated:** [January 28, 2021, 7:32pm UTC](https://discuss.elastic.co/t/kibana/261795 "2021-01-28T19:32:34Z")
hi guys. the Linzensen can be found in kibana under LicensingState. But i only want to issue unlicensed host. how can i do that ? thank you. --- ## [Kibana returns no data. Error: 70 of 2425 shards failed](https://discuss.elastic.co/t/kibana-returns-no-data-error-70-of-2425-shards-failed/262514)
**Author:** [@dorinand](https://discuss.elastic.co/u/dorinand)\ **Replies:** 2\ **Last updated:** [January 28, 2021, 6:40pm UTC](https://discuss.elastic.co/t/kibana-returns-no-data-error-70-of-2425-shards-failed/262514 "2021-01-28T18:40:08Z")
I encounter an error, when I trying to show messages from my index pattern. After short time, I am receiving error: 70 of 2425 shards failed This message cant be enlarged, I can't click on it so basically, I do not kno… [Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=370) [Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=372)