# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=379

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 380

---

## [Fatal Error in Starting Kibana for Adding New Plugin](https://discuss.elastic.co/t/fatal-error-in-starting-kibana-for-adding-new-plugin/260549)

<div class="topic-metadata">

**Author:** [@xenon-xenon](https://discuss.elastic.co/u/xenon-xenon)\
**Replies:** 5\
**Last updated:** [January 8, 2021, 5:13pm UTC](https://discuss.elastic.co/t/fatal-error-in-starting-kibana-for-adding-new-plugin/260549 "2021-01-08T17:13:39Z")

</div>

I created a plugin with plugin generator script in scripts/ folder (I used script in 7.10.1 with git checkout v7.10.1) and then i just copied it in kibana/plugins folder to check if it works on my kibana which it is vers…

---

## [How to use the last data in the Visualize?](https://discuss.elastic.co/t/how-to-use-the-last-data-in-the-visualize/260404)

<div class="topic-metadata">

**Author:** [@111395](https://discuss.elastic.co/u/111395)\
**Replies:** 5\
**Last updated:** [January 8, 2021, 4:29pm UTC](https://discuss.elastic.co/t/how-to-use-the-last-data-in-the-visualize/260404 "2021-01-08T16:29:17Z")

</div>

Kibana is usually obtained according to the time period。 But, I need the last data visualization。 You can understand it as looking for data by the number of times，such as last 1, last 5 kibana version:7.4.2 Thanks

---

## [Needed to offset the timeseries for Metricbeat dashboard visualizartions to work](https://discuss.elastic.co/t/needed-to-offset-the-timeseries-for-metricbeat-dashboard-visualizartions-to-work/260541)

<div class="topic-metadata">

**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\
**Replies:** 1\
**Last updated:** [January 8, 2021, 3:54pm UTC](https://discuss.elastic.co/t/needed-to-offset-the-timeseries-for-metricbeat-dashboard-visualizartions-to-work/260541 "2021-01-08T15:54:14Z")

</div>

Hi I just need some help to try to understand why exactly my workaround worked/as necessary. We've setup some metricbeats agents and Inoticed that every visualization of the TSVB type was not working: gauges, tables, .…

---

## [Kibana Report limit lines in PDF](https://discuss.elastic.co/t/kibana-report-limit-lines-in-pdf/260387)

<div class="topic-metadata">

**Author:** [@Tornis](https://discuss.elastic.co/u/Tornis)\
**Replies:** 2\
**Last updated:** [January 8, 2021, 3:31pm UTC](https://discuss.elastic.co/t/kibana-report-limit-lines-in-pdf/260387 "2021-01-08T15:31:28Z")

</div>

Hello guys! I have the following problem: I created a data table grouping by IP and the total number of lines exceeds 10K When generating the report in PDF it creates only with 1 page limiting in 50 lines. Is there a…

---

## [/app/kibana redirecting (302) to /app/dashboard\_mode Kibana 7.10.1](https://discuss.elastic.co/t/app-kibana-redirecting-302-to-app-dashboard-mode-kibana-7-10-1/260540)

<div class="topic-metadata">

**Author:** [@Anmol\_Deep](https://discuss.elastic.co/u/Anmol_Deep)\
**Replies:** 1\
**Last updated:** [January 8, 2021, 1:48pm UTC](https://discuss.elastic.co/t/app-kibana-redirecting-302-to-app-dashboard-mode-kibana-7-10-1/260540 "2021-01-08T13:48:07Z")

</div>

We embed Kibana within an Iframe in our application and forward the requests to Kibana server with basic authentications scheme. This used to work in version 6.8.1 but when i upgrade to 7.10.1 the request to /app/kiban…

---

## [\[ threat intelligence \]: Display the number of alerts generated by a specific rule](https://discuss.elastic.co/t/threat-intelligence-display-the-number-of-alerts-generated-by-a-specific-rule/260528)

<div class="topic-metadata">

**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\
**Replies:** 1\
**Last updated:** [January 8, 2021, 1:10pm UTC](https://discuss.elastic.co/t/threat-intelligence-display-the-number-of-alerts-generated-by-a-specific-rule/260528 "2021-01-08T13:10:45Z")

</div>

Hello, I would like to display in my canvas, the number of alertes generated the last 24 hours by a specific rule (Costume rule That I have created) Could you tell me please how can I do that ? Best regards

---

## [Circuit breaker exception because of increased time range](https://discuss.elastic.co/t/circuit-breaker-exception-because-of-increased-time-range/260317)

<div class="topic-metadata">

**Author:** [@rohitarorait82](https://discuss.elastic.co/u/rohitarorait82)\
**Replies:** 3\
**Last updated:** [January 8, 2021, 11:03am UTC](https://discuss.elastic.co/t/circuit-breaker-exception-because-of-increased-time-range/260317 "2021-01-08T11:03:17Z")

</div>

Hi All, I am facing 429 circuit breaker exception when somebody selects a window of time range more than 7 days. Is there a way to lock the time filter,so that no user can search beyond 7 days.

---

## [ElasticSearch DAU and MAU](https://discuss.elastic.co/t/elasticsearch-dau-and-mau/260405)

<div class="topic-metadata">

**Author:** [@tusharnemade](https://discuss.elastic.co/u/tusharnemade)\
**Replies:** 9\
**Last updated:** [January 8, 2021, 6:34am UTC](https://discuss.elastic.co/t/elasticsearch-dau-and-mau/260405 "2021-01-08T06:34:24Z")

</div>

Hello Team In Kibana Visualisation Dashboard , we have option to get charts for DAU and MAU. I would like to check the query used by Kibana in background to get the data. My purpose is to get the query and use it in C…

---

## [Take/calculate value from dashboard](https://discuss.elastic.co/t/take-calculate-value-from-dashboard/259093)

<div class="topic-metadata">

**Author:** [@blukit](https://discuss.elastic.co/u/blukit)\
**Replies:** 4\
**Last updated:** [January 8, 2021, 5:07am UTC](https://discuss.elastic.co/t/take-calculate-value-from-dashboard/259093 "2021-01-08T05:07:21Z")

</div>

Hi guys... Is it possible to calculate value directly from a dashboard? The underlying logic of existing metrics kinda complex, so i think it would be more simple if I could take the output for other calculation. ex…

---

## [Kibana filter](https://discuss.elastic.co/t/kibana-filter/260440)

<div class="topic-metadata">

**Author:** [@vinu89](https://discuss.elastic.co/u/vinu89)\
**Replies:** 2\
**Last updated:** [January 8, 2021, 4:49am UTC](https://discuss.elastic.co/t/kibana-filter/260440 "2021-01-08T04:49:01Z")

</div>

I have a set of domain names I want only the domains names which has .in when I tried to add filter in kibana where domainname.keywors is \*.in I m not getting any results pls suggest on how to use the wildcard operator

---

## [Elk custome log](https://discuss.elastic.co/t/elk-custome-log/260407)

<div class="topic-metadata">

**Author:** [@Supun\_Madushanka](https://discuss.elastic.co/u/Supun_Madushanka)\
**Replies:** 2\
**Last updated:** [January 8, 2021, 3:35am UTC](https://discuss.elastic.co/t/elk-custome-log/260407 "2021-01-08T03:35:03Z")

</div>

Hi, I am new to elk. I have a nodejs application. current I am writing nodejs log to the log file. my log format is "type username ip eventname data". I set up filebeat in nodejs server and I setup kibana with elastic se…

---

## [Painless script for a comparison between two fields taken at interval](https://discuss.elastic.co/t/painless-script-for-a-comparison-between-two-fields-taken-at-interval/260464)

<div class="topic-metadata">

**Author:** [@CyaTo](https://discuss.elastic.co/u/CyaTo)\
**Replies:** 8\
**Last updated:** [January 7, 2021, 10:41pm UTC](https://discuss.elastic.co/t/painless-script-for-a-comparison-between-two-fields-taken-at-interval/260464 "2021-01-07T22:41:21Z")

</div>

Hello :wave: I take the ELK suite in hand and try to do a few things with it to learn. Currently I'm trying to make a scripted field that will be able to determine a change between two hashes taken at two different mom…

---

## [Kibana 7.10 custom plugin grayed out in dashboard](https://discuss.elastic.co/t/kibana-7-10-custom-plugin-grayed-out-in-dashboard/260471)

<div class="topic-metadata">

**Author:** [@ssimmons](https://discuss.elastic.co/u/ssimmons)\
**Replies:** 8\
**Last updated:** [January 7, 2021, 8:08pm UTC](https://discuss.elastic.co/t/kibana-7-10-custom-plugin-grayed-out-in-dashboard/260471 "2021-01-07T20:08:53Z")

</div>

I've create a test plugin for Kibana 7.10 using logic from a 7.8 plugin. It works fine when I create a visualization using the custom plugin. However, when I add the visualization to a dashboard everything is grayed out …

---

## [Search for String Literal in KQL](https://discuss.elastic.co/t/search-for-string-literal-in-kql/260482)

<div class="topic-metadata">

**Author:** [@Samsquantch](https://discuss.elastic.co/u/Samsquantch)\
**Replies:** 1\
**Last updated:** [January 7, 2021, 8:04pm UTC](https://discuss.elastic.co/t/search-for-string-literal-in-kql/260482 "2021-01-07T20:04:21Z")

</div>

How do I search for a literal string value? Current example query: Subject : "\[External Sender\] Test" Brings back what I'm looking for, but also the following: \[External Sender\] test-results.pdf \[External Sender\] Te…

---

## [Count fields with the same value as one](https://discuss.elastic.co/t/count-fields-with-the-same-value-as-one/260466)

<div class="topic-metadata">

**Author:** [@Angelos](https://discuss.elastic.co/u/Angelos)\
**Replies:** 1\
**Last updated:** [January 7, 2021, 7:31pm UTC](https://discuss.elastic.co/t/count-fields-with-the-same-value-as-one/260466 "2021-01-07T19:31:29Z")

</div>

Hi! I have many fields which have the same value. So let's we have those document in different time periods: @timestamp Jan 6, 2021 @ 23:00:00 field.mess value1 field.sub examp1 @timestamp Jan 6, 2021 @ 23:00:01 fie…

---

## [Help on creating a visualization of total time taken for service in Kibana](https://discuss.elastic.co/t/help-on-creating-a-visualization-of-total-time-taken-for-service-in-kibana/260401)

<div class="topic-metadata">

**Author:** [@Thols](https://discuss.elastic.co/u/Thols)\
**Replies:** 1\
**Last updated:** [January 7, 2021, 7:10pm UTC](https://discuss.elastic.co/t/help-on-creating-a-visualization-of-total-time-taken-for-service-in-kibana/260401 "2021-01-07T19:10:30Z")

</div>

Hi I am trying to create a time visualization like below Where 1 - 5 are various calls the single service travels through and come back. Each of these has a separate log source and are indexed in different patterns. …

---

## [Create visualization with actual status of process ("group by"?/subquery?)](https://discuss.elastic.co/t/create-visualization-with-actual-status-of-process-group-by-subquery/260379)

<div class="topic-metadata">

**Author:** [@Joao\_Palma](https://discuss.elastic.co/u/Joao_Palma)\
**Replies:** 3\
**Last updated:** [January 7, 2021, 4:32pm UTC](https://discuss.elastic.co/t/create-visualization-with-actual-status-of-process-group-by-subquery/260379 "2021-01-07T16:32:51Z")

</div>

Hello, I have a log file, like this : {"process": "X2", "status": "open", "@timestamp": "2021-01-05T15:34:41.061Z"} {"process": "X1", "status": "open", "@timestamp": "2021-01-05T15:35:42.061Z"} {"process": "X5", "sta…

---

## [Kibana@Docker new instances occure in stack monitoring when I reboot the Kibana node](https://discuss.elastic.co/t/kibana-docker-new-instances-occure-in-stack-monitoring-when-i-reboot-the-kibana-node/258697)

<div class="topic-metadata">

**Author:** [@Waxman](https://discuss.elastic.co/u/Waxman)\
**Replies:** 3\
**Last updated:** [January 7, 2021, 1:29pm UTC](https://discuss.elastic.co/t/kibana-docker-new-instances-occure-in-stack-monitoring-when-i-reboot-the-kibana-node/258697 "2021-01-07T13:29:14Z")

</div>

Hi There, I'm running on elk 7.9.2 with two kibana's nodes. I'm noticing some interesting behaviour in the stack monitoring . When I reboot one of two kibana's node then I've lost my monitoring graphs and I start…

---

## [KQL query to retrieve list of servers which are running metricbeat](https://discuss.elastic.co/t/kql-query-to-retrieve-list-of-servers-which-are-running-metricbeat/260336)

<div class="topic-metadata">

**Author:** [@Sergius92](https://discuss.elastic.co/u/Sergius92)\
**Replies:** 4\
**Last updated:** [January 7, 2021, 9:11am UTC](https://discuss.elastic.co/t/kql-query-to-retrieve-list-of-servers-which-are-running-metricbeat/260336 "2021-01-07T09:11:22Z")

</div>

Hello, I am trying to retrieve the list of servers which are running metricbeat. At this moment I have build an query but I don't know how to get the output with every host.name and the number of hits in the last minut…

---

## [Using a threshold on doc\_count within a nested aggregation](https://discuss.elastic.co/t/using-a-threshold-on-doc-count-within-a-nested-aggregation/260357)

<div class="topic-metadata">

**Author:** [@pschwippert](https://discuss.elastic.co/u/pschwippert)\
**Replies:** 4\
**Last updated:** [January 7, 2021, 9:06am UTC](https://discuss.elastic.co/t/using-a-threshold-on-doc-count-within-a-nested-aggregation/260357 "2021-01-07T09:06:10Z")

</div>

Hi, I am currnetly working on a watcher that send out an alert when a user has too many failed login attempts. I am aggregating the documents first based on the realm then based on the username. Now within the compare …

---

## [Kibana granted document for where condition](https://discuss.elastic.co/t/kibana-granted-document-for-where-condition/260282)

<div class="topic-metadata">

**Author:** [@anjali28](https://discuss.elastic.co/u/anjali28)\
**Replies:** 2\
**Last updated:** [January 7, 2021, 4:33am UTC](https://discuss.elastic.co/t/kibana-granted-document-for-where-condition/260282 "2021-01-07T04:33:35Z")

</div>

I have requirment for the granted document query level in kibana roles tab. For Example: User1 should be restricted to customer id: 1 and installation id: 1 and Stage id: {1,2,3} n granted document query. Applied with…

---

## [Can't opne kibana 7.10.1 on firfox](https://discuss.elastic.co/t/cant-opne-kibana-7-10-1-on-firfox/260399)

<div class="topic-metadata">

**Author:** [@YunZhe](https://discuss.elastic.co/u/YunZhe)\
**Replies:** 2\
**Last updated:** [January 7, 2021, 4:03am UTC](https://discuss.elastic.co/t/cant-opne-kibana-7-10-1-on-firfox/260399 "2021-01-07T04:03:15Z")

</div>

I installed elasticsearch with version 7.10.1 and kibana 7.10.1 on my local ubuntu machine. { "name" : "validation-es", "cluster\_name" : "validation-es-cluster", "cluster\_uuid" : "QhjLeuvZQVGA9Str2lc8Wg", "version" …

---

## [Kibana Alert Webhook behind proxy](https://discuss.elastic.co/t/kibana-alert-webhook-behind-proxy/260324)

<div class="topic-metadata">

**Author:** [@aoi1](https://discuss.elastic.co/u/aoi1)\
**Replies:** 2\
**Last updated:** [January 7, 2021, 3:55am UTC](https://discuss.elastic.co/t/kibana-alert-webhook-behind-proxy/260324 "2021-01-07T03:55:15Z")

</div>

Hi! I would like to use the Kibana Alert Webhook behind proxy (such as using slack). Is there a way to set proxy using WebUI or yaml? Thanks.

---

## [ML job error : Failed to launch autodetect for job](https://discuss.elastic.co/t/ml-job-error-failed-to-launch-autodetect-for-job/260243)

<div class="topic-metadata">

**Author:** [@kimi89](https://discuss.elastic.co/u/kimi89)\
**Replies:** 6\
**Last updated:** [January 6, 2021, 9:30pm UTC](https://discuss.elastic.co/t/ml-job-error-failed-to-launch-autodetect-for-job/260243 "2021-01-06T21:30:00Z")

</div>

Unexpected job state \[failed\] while waiting for job to be opened Error Log: " Failed to launch autodetect for job jobname"

---

## [What is missing to include field values in search?](https://discuss.elastic.co/t/what-is-missing-to-include-field-values-in-search/260300)

<div class="topic-metadata">

**Author:** [@ksuess](https://discuss.elastic.co/u/ksuess)\
**Replies:** 1\
**Last updated:** [January 6, 2021, 8:58pm UTC](https://discuss.elastic.co/t/what-is-missing-to-include-field-values-in-search/260300 "2021-01-06T20:58:45Z")

</div>

Kibana screenshot I get the test manual when I search for "Nullam", but do not get any result when I search for "Zeilen" which is in manualfile\_\_extracted.content. Why is this?

---

## [CORS headers missing 'Access-Control-Allow-Origin'](https://discuss.elastic.co/t/cors-headers-missing-access-control-allow-origin/260320)

<div class="topic-metadata">

**Author:** [@elastic\_study](https://discuss.elastic.co/u/elastic_study)\
**Replies:** 1\
**Last updated:** [January 6, 2021, 8:37pm UTC](https://discuss.elastic.co/t/cors-headers-missing-access-control-allow-origin/260320 "2021-01-06T20:37:34Z")

</div>

how can i CORS Kibana？ cors headers miss 'Access-Control-Allow-Origin'

---

## [Error importing Kibana dashboards](https://discuss.elastic.co/t/error-importing-kibana-dashboards/260382)

<div class="topic-metadata">

**Author:** [@KelvUK](https://discuss.elastic.co/u/KelvUK)\
**Replies:** 2\
**Last updated:** [January 6, 2021, 8:34pm UTC](https://discuss.elastic.co/t/error-importing-kibana-dashboards/260382 "2021-01-06T20:34:27Z")

</div>

Hi, I'm new to Elastic & Kibana so this I expect is very much bad config but I can't figure out what I've gotten wrong with this. Everything is in docker, I've a single-node deployment with transport security configured…

---

## [Getting total sum of all buckets in Kibana](https://discuss.elastic.co/t/getting-total-sum-of-all-buckets-in-kibana/260380)

<div class="topic-metadata">

**Author:** [@schwalbe](https://discuss.elastic.co/u/schwalbe)\
**Replies:** 4\
**Last updated:** [January 6, 2021, 8:03pm UTC](https://discuss.elastic.co/t/getting-total-sum-of-all-buckets-in-kibana/260380 "2021-01-06T20:03:55Z")

</div>

Hi there, I am very new and unexperienced in ELK. What I am searching for is a way to get the total sum of values (rows) in a table. With the result of this I want to calculate e.g. the ratio of the total average and a s…

---

## [How to run a DSL query in scripted filed](https://discuss.elastic.co/t/how-to-run-a-dsl-query-in-scripted-filed/260359)

<div class="topic-metadata">

**Author:** [@learn\_and\_try](https://discuss.elastic.co/u/learn_and_try)\
**Replies:** 3\
**Last updated:** [January 6, 2021, 5:17pm UTC](https://discuss.elastic.co/t/how-to-run-a-dsl-query-in-scripted-filed/260359 "2021-01-06T17:17:32Z")

</div>

I am tried to create a scripted filed that return me a number with all the executed queries I try to execute my query in scripted filed in kibana help me plz to fix it or something else how to do that "query": { "bo…

---

## [(7.10) alert status meaning](https://discuss.elastic.co/t/7-10-alert-status-meaning/260095)

<div class="topic-metadata">

**Author:** [@dao](https://discuss.elastic.co/u/dao)\
**Replies:** 1\
**Last updated:** [January 6, 2021, 4:58pm UTC](https://discuss.elastic.co/t/7-10-alert-status-meaning/260095 "2021-01-06T16:58:27Z")

</div>

Hello, I am playing with the alert feature of kibana (beta). My alert is in the pending status. What is the meaning? I'd like to see it as active More generally, I did not find a documentation on the status meaning

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=378)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=380)
