# Kibana **URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=381 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 382 --- ## [Resizable Table Legends and Multiple Terms aggregations](https://discuss.elastic.co/t/resizable-table-legends-and-multiple-terms-aggregations/260039)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 2\ **Last updated:** [January 4, 2021, 3:40pm UTC](https://discuss.elastic.co/t/resizable-table-legends-and-multiple-terms-aggregations/260039 "2021-01-04T15:40:55Z")
Hello, In Grafana we have the option to show legends as a table, showing a lot of useful aggregated info, for example: I have tried many things to achieve the same in Kibana, but never managed to get even close to w… --- ## [Kibana map inport china\_provinces\_v1.geojson but Chinese charactor unidentifiable](https://discuss.elastic.co/t/kibana-map-inport-china-provinces-v1-geojson-but-chinese-charactor-unidentifiable/259931)
**Author:** [@yorkzhang](https://discuss.elastic.co/u/yorkzhang)\ **Replies:** 2\ **Last updated:** [January 4, 2021, 3:12pm UTC](https://discuss.elastic.co/t/kibana-map-inport-china-provinces-v1-geojson-but-chinese-charactor-unidentifiable/259931 "2021-01-04T15:12:27Z")
I used Kibana map, import geojson file download from map.elastic.co china\_provinces\_v1.geojson, but Chinese charactor unidentifiable. I get doc from Dev Tools and see unidentifiable chinese charactor. But if I use onlin… --- ## [Need help displaying two different counts on the same chart](https://discuss.elastic.co/t/need-help-displaying-two-different-counts-on-the-same-chart/259264)
**Author:** [@njanashia](https://discuss.elastic.co/u/njanashia)\ **Replies:** 3\ **Last updated:** [January 4, 2021, 1:40pm UTC](https://discuss.elastic.co/t/need-help-displaying-two-different-counts-on-the-same-chart/259264 "2021-01-04T13:40:37Z")
I want to display sales and refunds counts for the same day on the same chart like it is shown on the first picture. The corresponding date fields for sales and refunds are detail\_trans\_date and detail\_refund\_date. I ha… --- ## [Can't find data when doing simple KQL query ( can see the log in general search)](https://discuss.elastic.co/t/cant-find-data-when-doing-simple-kql-query-can-see-the-log-in-general-search/260034)
**Author:** [@umen](https://discuss.elastic.co/u/umen)\ **Replies:** 3\ **Last updated:** [January 4, 2021, 1:01pm UTC](https://discuss.elastic.co/t/cant-find-data-when-doing-simple-kql-query-can-see-the-log-in-general-search/260034 "2021-01-04T13:01:56Z")
im using the filebeat-\* index . when i watch the logs in discover i can see logs from the pods when i try to create simple query to get logs by namespace/name/container name i don't get any result i follow this threa… --- ## [Ms teams watcher](https://discuss.elastic.co/t/ms-teams-watcher/260076)
**Author:** [@Mohith\_Vegi](https://discuss.elastic.co/u/Mohith_Vegi)\ **Replies:** 5\ **Last updated:** [January 4, 2021, 12:47pm UTC](https://discuss.elastic.co/t/ms-teams-watcher/260076 "2021-01-04T12:47:54Z")
"type": "messaging\_exception", "reason": "failed to send email with subject \[mail alert\] via account \[outlook\_account\]", "caused\_by": { "type": "s\_m\_t\_p\_send\_failed\_exception", "reason": "554 5.2.0 STOREDRV.Submissio… --- ## [Max payload issue](https://discuss.elastic.co/t/max-payload-issue/260084)
**Author:** [@Dainius](https://discuss.elastic.co/u/Dainius)\ **Replies:** 1\ **Last updated:** [January 4, 2021, 11:29am UTC](https://discuss.elastic.co/t/max-payload-issue/260084 "2021-01-04T11:29:33Z")
Hey guys, I would like to sort out one issue I have. I get max payload error while trying to refresh index pattern in Kibana. Of course I have already increased server.maxPayloadBytes: value in kibana config file, but m… --- ## [Canvas drilldown](https://discuss.elastic.co/t/canvas-drilldown/257543)
**Author:** [@ravishka](https://discuss.elastic.co/u/ravishka)\ **Replies:** 5\ **Last updated:** [January 4, 2021, 9:51am UTC](https://discuss.elastic.co/t/canvas-drilldown/257543 "2021-01-04T09:51:29Z")
Is there a drilldown concept/option or similar concept on the canvas? --- ## [Kibana dashboard](https://discuss.elastic.co/t/kibana-dashboard/259983)
**Author:** [@Sajal](https://discuss.elastic.co/u/Sajal)\ **Replies:** 2\ **Last updated:** [January 4, 2021, 9:36am UTC](https://discuss.elastic.co/t/kibana-dashboard/259983 "2021-01-04T09:36:56Z")
Hi Folks , Can you please help me to make Kibana dashboard . I have got below Splunk Query from which i need to make Kibana Dashboard. We are migrating from Splunk to ELK. How to create deviation and and use in where c… --- ## [Kibana 7.8.1 user interface](https://discuss.elastic.co/t/kibana-7-8-1-user-interface/259746)
**Author:** [@RickT](https://discuss.elastic.co/u/RickT)\ **Replies:** 2\ **Last updated:** [January 4, 2021, 9:35am UTC](https://discuss.elastic.co/t/kibana-7-8-1-user-interface/259746 "2021-01-04T09:35:28Z")
hi, Our technical team has updated Kibana 6.8 to 7.8.1. Today i'm very surprise about the user interface :frowning: Lot of shorts functions has disappeared, like filters action ! Now we are obliged to multiply clicks t… --- ## [Index Alias](https://discuss.elastic.co/t/index-alias/260068)
**Author:** [@tahseen\_fatima](https://discuss.elastic.co/u/tahseen_fatima)\ **Replies:** 2\ **Last updated:** [January 4, 2021, 9:21am UTC](https://discuss.elastic.co/t/index-alias/260068 "2021-01-04T09:21:49Z")
Hi, I want to create an index with name xyz-yyyy-MM. Index Name should be like : xyz-2020-01 xyz-2020-04 xyz-2020-12 xyz-2021-05 I want to add these index into one in this pattern "xyz" with "\*" Will it be possibl… --- ## [Time Filter in Kibana](https://discuss.elastic.co/t/time-filter-in-kibana/260050)
**Author:** [@Amrita\_Mahule](https://discuss.elastic.co/u/Amrita_Mahule)\ **Replies:** 4\ **Last updated:** [January 4, 2021, 9:11am UTC](https://discuss.elastic.co/t/time-filter-in-kibana/260050 "2021-01-04T09:11:58Z")
Hi Team, We have a requirement where we want to customize the time filter on Kibana. We want that a user can only view data of last 2 days and not older than that. Is there any way to achieve that without deleting the … --- ## [Group by function is not working in sql query in kibana\>dev tools](https://discuss.elastic.co/t/group-by-function-is-not-working-in-sql-query-in-kibana-dev-tools/259452)
**Author:** [@anjali28](https://discuss.elastic.co/u/anjali28)\ **Replies:** 8\ **Last updated:** [January 4, 2021, 7:43am UTC](https://discuss.elastic.co/t/group-by-function-is-not-working-in-sql-query-in-kibana-dev-tools/259452 "2021-01-04T07:43:17Z")
I am creating a query in kibana\>dev tools. Some how my SQL query is not working due to group by function in console. The SQL query is working fine in MSSQL management studio. Query: POST /\_sql?format=txt&pretty { … --- ## [Enable auto login on kibana graph](https://discuss.elastic.co/t/enable-auto-login-on-kibana-graph/259986)
**Author:** [@Ritika\_Joshi](https://discuss.elastic.co/u/Ritika_Joshi)\ **Replies:** 1\ **Last updated:** [January 3, 2021, 11:29pm UTC](https://discuss.elastic.co/t/enable-auto-login-on-kibana-graph/259986 "2021-01-03T23:29:23Z")
Hello, I am trying to skip login page of kibana graph which are embedded in my web console through iframe. I Am trying to login through XMLHttpRequest but getting following error Access to XMLHttpRequest at '\*\*\*\*\*\*\*' … --- ## [Saved search columns reset when filtering?](https://discuss.elastic.co/t/saved-search-columns-reset-when-filtering/259902)
**Author:** [@tallavi](https://discuss.elastic.co/u/tallavi)\ **Replies:** 7\ **Last updated:** [January 3, 2021, 8:05pm UTC](https://discuss.elastic.co/t/saved-search-columns-reset-when-filtering/259902 "2021-01-03T20:05:04Z")
Hi, We're on version 7.8.1 of the stack. I noticed an annoyance. I have a dashboard with a saved search at the bottom. I add/remove columns, change the order, etc, and when I filter by a value, the columns reset! It wa… --- ## [Two series linechart with time offset](https://discuss.elastic.co/t/two-series-linechart-with-time-offset/260035)
**Author:** [@lstoneir](https://discuss.elastic.co/u/lstoneir)\ **Replies:** 1\ **Last updated:** [January 3, 2021, 4:26pm UTC](https://discuss.elastic.co/t/two-series-linechart-with-time-offset/260035 "2021-01-03T16:26:21Z")
I have 2 data source first one's data is for from: now-1w / to: now second one is from: now-2w / to: now-1 I want to visualize both of them in one line chart. y axis is ratio and it's clear. but how can i define x a… --- ## [Apply filter from custom plugin onto dashboard is not working in 7.9.3](https://discuss.elastic.co/t/apply-filter-from-custom-plugin-onto-dashboard-is-not-working-in-7-9-3/257979)
**Author:** [@nrt.krishna](https://discuss.elastic.co/u/nrt.krishna)\ **Replies:** 2\ **Last updated:** [January 3, 2021, 8:10am UTC](https://discuss.elastic.co/t/apply-filter-from-custom-plugin-onto-dashboard-is-not-working-in-7-9-3/257979 "2021-01-03T08:10:27Z")
Hi, I am trying to apply filter from custom plugin on to dashboard. It used to work with belowcode snippet with old version. Now I am migrating my plugin to 7.9.3. As soon as I apply filter using below code the filter i… --- ## [Kibana API Result format](https://discuss.elastic.co/t/kibana-api-result-format/259989)
**Author:** [@shiv97](https://discuss.elastic.co/u/shiv97)\ **Replies:** 1\ **Last updated:** [January 1, 2021, 11:06pm UTC](https://discuss.elastic.co/t/kibana-api-result-format/259989 "2021-01-01T23:06:35Z")
Hi Everyone, I write one query in the Kibana console that provides me some JSON result I want to know about some insight into the Json result { "took" : 11, "timed\_out" : false, "\_shards" : { "total" : 10, "succes… --- ## [How to compile Vega-Lite project to Vega?](https://discuss.elastic.co/t/how-to-compile-vega-lite-project-to-vega/259837)
**Author:** [@Ganymede](https://discuss.elastic.co/u/Ganymede)\ **Replies:** 4\ **Last updated:** [January 1, 2021, 6:50pm UTC](https://discuss.elastic.co/t/how-to-compile-vega-lite-project-to-vega/259837 "2021-01-01T18:50:18Z")
Hello all, Literally title. I have a working project in Vega-Lite and want to add "Vega only features" ontop of it. Is it possible to compile the Vega-Lite script and look at the resulting Vega output? As far as I'm … --- ## [Best practice to install Kibana,Should it be on data, client or master node](https://discuss.elastic.co/t/best-practice-to-install-kibana-should-it-be-on-data-client-or-master-node/259951)
**Author:** [@atulthakre](https://discuss.elastic.co/u/atulthakre)\ **Replies:** 1\ **Last updated:** [December 31, 2020, 6:13pm UTC](https://discuss.elastic.co/t/best-practice-to-install-kibana-should-it-be-on-data-client-or-master-node/259951 "2020-12-31T18:13:03Z")
Currently we have created 8 Elastic Search machine.In that, we created 3 master node, 2 client-node and 3 data-node. we build separate machine and installed kibana. After that ,we point all 8 Elastic machine IP In yml f… --- ## [Sort on specific keyword in Discover using KQL](https://discuss.elastic.co/t/sort-on-specific-keyword-in-discover-using-kql/259948)
**Author:** [@dontask](https://discuss.elastic.co/u/dontask)\ **Replies:** 1\ **Last updated:** [December 31, 2020, 6:12pm UTC](https://discuss.elastic.co/t/sort-on-specific-keyword-in-discover-using-kql/259948 "2020-12-31T18:12:04Z")
Hello, I would like to sort on a specific (ascending / descending) on a column matching a specific keyword. The column is returning OK or ERROR and I would like the ERROR to be on top instead of the OK, but I still wan… --- ## [Custom visualisation with Kibana](https://discuss.elastic.co/t/custom-visualisation-with-kibana/259876)
**Author:** [@BenoitSERRA](https://discuss.elastic.co/u/BenoitSERRA)\ **Replies:** 10\ **Last updated:** [December 31, 2020, 7:42am UTC](https://discuss.elastic.co/t/custom-visualisation-with-kibana/259876 "2020-12-31T07:42:01Z")
Hello, I'm planning to use Kibana to display the worst screens displayed by users. I load the data from our transaction monitors in Elasticsearch using logstash. For each transaction, I have the duration of it loaded. … --- ## [Is there way to sort graphs in visualization?](https://discuss.elastic.co/t/is-there-way-to-sort-graphs-in-visualization/258425)
**Author:** [@jhagen92](https://discuss.elastic.co/u/jhagen92)\ **Replies:** 7\ **Last updated:** [December 30, 2020, 9:10pm UTC](https://discuss.elastic.co/t/is-there-way-to-sort-graphs-in-visualization/258425 "2020-12-30T21:10:48Z")
Hi. I have a heatmap in one visualization. I have 3 sources, so I split chart by column by source, which creates 3 heatmaps. Let's say source A, B, and C. Currently, order is A,B,C. I can change using Order, but it onl… --- ## [Disable "Add data" tab in kibana](https://discuss.elastic.co/t/disable-add-data-tab-in-kibana/259914)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 1\ **Last updated:** [December 30, 2020, 8:52pm UTC](https://discuss.elastic.co/t/disable-add-data-tab-in-kibana/259914 "2020-12-30T20:52:56Z")
I have user and associated roles with it. these users are only allowed to read some index and create visulization and dashboard. but on main screen it has "Add Data" which then shows what kind of logs and metric you ca… --- ## [Timelion cusum not working with log?](https://discuss.elastic.co/t/timelion-cusum-not-working-with-log/259645)
**Author:** [@georgeRD](https://discuss.elastic.co/u/georgeRD)\ **Replies:** 4\ **Last updated:** [December 30, 2020, 7:51pm UTC](https://discuss.elastic.co/t/timelion-cusum-not-working-with-log/259645 "2020-12-30T19:51:44Z")
I have created a graph in timelion that generates daily returns using data from an index that keeps the daily balance of an account. The code is the following: .es(index=daily\_account,q="account:1794",metric=sum:daily\_p… --- ## [Create bar visualization with count multiple boolean variables](https://discuss.elastic.co/t/create-bar-visualization-with-count-multiple-boolean-variables/259904)
**Author:** [@Joao\_Palma](https://discuss.elastic.co/u/Joao_Palma)\ **Replies:** 3\ **Last updated:** [December 30, 2020, 7:24pm UTC](https://discuss.elastic.co/t/create-bar-visualization-with-count-multiple-boolean-variables/259904 "2020-12-30T19:24:00Z")
Hello, I have an log like this: {"option1":"false", "option2":"true", "option3":"false"} {"option1":"true", "option2":"true", "option3":"false"} {"option1":"false", "option2":"true", "option3":"true"} ... And… --- ## [Difficulty displaying all hits in kibana](https://discuss.elastic.co/t/difficulty-displaying-all-hits-in-kibana/259790)
**Author:** [@Falikou1](https://discuss.elastic.co/u/Falikou1)\ **Replies:** 13\ **Last updated:** [December 30, 2020, 7:19pm UTC](https://discuss.elastic.co/t/difficulty-displaying-all-hits-in-kibana/259790 "2020-12-30T19:19:45Z")
Hello, I send the logs continuously to logstash. But, the logs are not displayed continuously in kibana. It shows me 8 hits over the last 7 days. While logs logs have been sent continuously for 7 days. Can you help m… --- ## [Is it possible to remove unrelated y-axis value in visualization?](https://discuss.elastic.co/t/is-it-possible-to-remove-unrelated-y-axis-value-in-visualization/259818)
**Author:** [@jhagen92](https://discuss.elastic.co/u/jhagen92)\ **Replies:** 1\ **Last updated:** [December 30, 2020, 7:01pm UTC](https://discuss.elastic.co/t/is-it-possible-to-remove-unrelated-y-axis-value-in-visualization/259818 "2020-12-30T19:01:11Z")
Hi, I have a log coming in from different sources with exitCode. I created a heatmap to show how many exitCode happened in specific source. However, sometimes one of the source doesn't have some of the exitCode, but it… --- ## [Kibana "count by" in Alert monitor/trigger](https://discuss.elastic.co/t/kibana-count-by-in-alert-monitor-trigger/259757)
**Author:** [@biker2o](https://discuss.elastic.co/u/biker2o)\ **Replies:** 1\ **Last updated:** [December 30, 2020, 5:59pm UTC](https://discuss.elastic.co/t/kibana-count-by-in-alert-monitor-trigger/259757 "2020-12-30T17:59:10Z")
Hello. I am trying to figure out how to turn this Splunk alert into a kibana alert. Essentially, I want to be notified by Kibana when the count of ClientRequestHost is greater than 300 in a 1min period (or time span) for… --- ## [Timelion query on nested field](https://discuss.elastic.co/t/timelion-query-on-nested-field/259396)
**Author:** [@fran6ssl](https://discuss.elastic.co/u/fran6ssl)\ **Replies:** 1\ **Last updated:** [December 30, 2020, 5:16pm UTC](https://discuss.elastic.co/t/timelion-query-on-nested-field/259396 "2020-12-30T17:16:33Z")
Hi, I have an index temple that defines a nested field as follows : "equipments": { "type": "nested", "properties": { "label": { "type": "keyword" }, … --- ## [How to create chart for User Growth Rate in kibana](https://discuss.elastic.co/t/how-to-create-chart-for-user-growth-rate-in-kibana/258692)
**Author:** [@dharanesh](https://discuss.elastic.co/u/dharanesh)\ **Replies:** 3\ **Last updated:** [December 30, 2020, 5:05pm UTC](https://discuss.elastic.co/t/how-to-create-chart-for-user-growth-rate-in-kibana/258692 "2020-12-30T17:05:12Z")
I have user logs i need to find user growth rate how to do this in kibana. [Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=380) [Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=382)