# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=387

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 388

---

## [Tophits on transform group by a field not all field](https://discuss.elastic.co/t/tophits-on-transform-group-by-a-field-not-all-field/258373)

<div class="topic-metadata">

**Author:** [@charles97](https://discuss.elastic.co/u/charles97)\
**Replies:** 15\
**Last updated:** [December 15, 2020, 7:59am UTC](https://discuss.elastic.co/t/tophits-on-transform-group-by-a-field-not-all-field/258373 "2020-12-15T07:59:00Z")

</div>

So I have this case where I need to use top hits on transformation I want to show data based on I have this data email col2 col3 col4 col5 Time a.com a a a a 11:00 a.com a …

---

## [Save a "discover" configuration](https://discuss.elastic.co/t/save-a-discover-configuration/258513)

<div class="topic-metadata">

**Author:** [@Francisco\_Navarro](https://discuss.elastic.co/u/Francisco_Navarro)\
**Replies:** 4\
**Last updated:** [December 15, 2020, 7:28am UTC](https://discuss.elastic.co/t/save-a-discover-configuration/258513 "2020-12-15T07:28:14Z")

</div>

Hello there! When I use Kibana discover with an index it generates something like this by default: It is not useful for me to visualize this in that way. So I configure the shown fields to have this: I would like …

---

## [Pie chart of element count of an array](https://discuss.elastic.co/t/pie-chart-of-element-count-of-an-array/258612)

<div class="topic-metadata">

**Author:** [@NiclasK](https://discuss.elastic.co/u/NiclasK)\
**Replies:** 1\
**Last updated:** [December 15, 2020, 6:14am UTC](https://discuss.elastic.co/t/pie-chart-of-element-count-of-an-array/258612 "2020-12-15T06:14:21Z")

</div>

Hi, I'm indexing a documents that can look like this: { "ProcessID": "id1", "ErrorList": \[{ "ErrorCode": 123, "Time": "2020-01-01T12:23:45" }, { "ErrorCode": 123, "Time": "2020-01-01T12:44:00" }, …

---

## [Searchable snapshots hidden in the UI?](https://discuss.elastic.co/t/searchable-snapshots-hidden-in-the-ui/258674)

<div class="topic-metadata">

**Author:** [@hilt86](https://discuss.elastic.co/u/hilt86)\
**Replies:** 2\
**Last updated:** [December 15, 2020, 5:50am UTC](https://discuss.elastic.co/t/searchable-snapshots-hidden-in-the-ui/258674 "2020-12-15T05:50:58Z")

</div>

Is the searchable snapshots feature available in Kibana / UI? I don't have a "searchable snapshot" action in Kibana 7.10.1 on Elastic cloud..?

---

## [Diff documents](https://discuss.elastic.co/t/diff-documents/258565)

<div class="topic-metadata">

**Author:** [@pskhanapur](https://discuss.elastic.co/u/pskhanapur)\
**Replies:** 1\
**Last updated:** [December 15, 2020, 12:36am UTC](https://discuss.elastic.co/t/diff-documents/258565 "2020-12-15T00:36:19Z")

</div>

Is there a way to show diff between two documents in Kibana? Ref. example attached screenshot. Any visualizations or any plugg-in that can do that sort of the diff? Json in the screenshot is just an example, basically …

---

## [Index pattern's Time Filter on multiple fields](https://discuss.elastic.co/t/index-patterns-time-filter-on-multiple-fields/258644)

<div class="topic-metadata">

**Author:** [@Qazeer](https://discuss.elastic.co/u/Qazeer)\
**Replies:** 1\
**Last updated:** [December 15, 2020, 12:29am UTC](https://discuss.elastic.co/t/index-patterns-time-filter-on-multiple-fields/258644 "2020-12-15T00:29:02Z")

</div>

Hello! I have an use case where events have multiple timestamps. Would it be possible to create an index pattern with a Time Filter on those multiple timestamp fields? I would prefer to it through Kibana rather than t…

---

## [Problem when setting Kibana server as a proxy for Tiles Maps Download and Maps Visualizations](https://discuss.elastic.co/t/problem-when-setting-kibana-server-as-a-proxy-for-tiles-maps-download-and-maps-visualizations/258594)

<div class="topic-metadata">

**Author:** [@Manuel\_Wong](https://discuss.elastic.co/u/Manuel_Wong)\
**Replies:** 1\
**Last updated:** [December 14, 2020, 4:16pm UTC](https://discuss.elastic.co/t/problem-when-setting-kibana-server-as-a-proxy-for-tiles-maps-download-and-maps-visualizations/258594 "2020-12-14T16:16:21Z")

</div>

Hello All, We have a KIbana/Elasticsearch environment where the servers have access to the internet through a proxy. The web browser clients from which the users access to Kibana are also running from an environment tha…

---

## [Showing saved dashboards in other plugins](https://discuss.elastic.co/t/showing-saved-dashboards-in-other-plugins/258501)

<div class="topic-metadata">

**Author:** [@houshmand1996](https://discuss.elastic.co/u/houshmand1996)\
**Replies:** 1\
**Last updated:** [December 14, 2020, 3:10pm UTC](https://discuss.elastic.co/t/showing-saved-dashboards-in-other-plugins/258501 "2020-12-14T15:10:27Z")

</div>

hi how we can use of saved dashboards in other plugins besides of dashboard plugin and apply filters to that dynamically

---

## [How to create a drilldown on dashboard for Vega-lite vis](https://discuss.elastic.co/t/how-to-create-a-drilldown-on-dashboard-for-vega-lite-vis/257632)

<div class="topic-metadata">

**Author:** [@Melok](https://discuss.elastic.co/u/Melok)\
**Replies:** 3\
**Last updated:** [December 14, 2020, 2:14pm UTC](https://discuss.elastic.co/t/how-to-create-a-drilldown-on-dashboard-for-vega-lite-vis/257632 "2020-12-14T14:14:37Z")

</div>

I am trying to create drilldown from vega vis to dashboard but it doesn't work. For example, for tables, this works correctly, by clicking on the magnifying glass icon, you can select the drilldown created. Kibana v…

---

## [Tag Cloud to only show current value](https://discuss.elastic.co/t/tag-cloud-to-only-show-current-value/258165)

<div class="topic-metadata">

**Author:** [@fastxl](https://discuss.elastic.co/u/fastxl)\
**Replies:** 7\
**Last updated:** [December 14, 2020, 9:52am UTC](https://discuss.elastic.co/t/tag-cloud-to-only-show-current-value/258165 "2020-12-14T09:52:53Z")

</div>

I am reading data in from a machine tool and I would like to visualize the current status. My document looks like this @timestamp Dec 9, 2020 @ 10:44:00.867 @version 1 Events.Execution.@@data INTERRUPTED Events.Execut…

---

## [Mappings conflict after rollover](https://discuss.elastic.co/t/mappings-conflict-after-rollover/258476)

<div class="topic-metadata">

**Author:** [@lstoneir](https://discuss.elastic.co/u/lstoneir)\
**Replies:** 1\
**Last updated:** [December 12, 2020, 2:43pm UTC](https://discuss.elastic.co/t/mappings-conflict-after-rollover/258476 "2020-12-12T14:43:07Z")

</div>

I have an index with name X-001 with this mapping: { "time": { "type": "date" } } after linking index to ilm, and rollover action: elastic creates index X-002 but in mapping i see this : { "time": { …

---

## [Index deleted and create weird new index](https://discuss.elastic.co/t/index-deleted-and-create-weird-new-index/258362)

<div class="topic-metadata">

**Author:** [@Junedi\_Rajagukguk](https://discuss.elastic.co/u/Junedi_Rajagukguk)\
**Replies:** 4\
**Last updated:** [December 12, 2020, 6:45am UTC](https://discuss.elastic.co/t/index-deleted-and-create-weird-new-index/258362 "2020-12-12T06:45:16Z")

</div>

hi i dont know what is hapening to my indicies, they suddenly got deleted. i lost the data, and so many weird indicies created. please help

---

## [Calling getFieldsForWildcard from Indexpatternservice in a server side kibana plugin to refresh an index pattern](https://discuss.elastic.co/t/calling-getfieldsforwildcard-from-indexpatternservice-in-a-server-side-kibana-plugin-to-refresh-an-index-pattern/258296)

<div class="topic-metadata">

**Author:** [@Aadrien](https://discuss.elastic.co/u/Aadrien)\
**Replies:** 2\
**Last updated:** [December 11, 2020, 12:46pm UTC](https://discuss.elastic.co/t/calling-getfieldsforwildcard-from-indexpatternservice-in-a-server-side-kibana-plugin-to-refresh-an-index-pattern/258296 "2020-12-11T12:46:25Z")

</div>

Hi, I'm working on a plugin for kibana 7.9.1, at some point I'd like to refresh the fields of an index pattern. hence calling getFieldsForWildcard() of IndexPatternsApiClient would be nice. I've basically the same ques…

---

## [Kibana timeout but curl with same query works perfectly](https://discuss.elastic.co/t/kibana-timeout-but-curl-with-same-query-works-perfectly/258405)

<div class="topic-metadata">

**Author:** [@Julio\_reyes](https://discuss.elastic.co/u/Julio_reyes)\
**Replies:** 2\
**Last updated:** [December 11, 2020, 1:28pm UTC](https://discuss.elastic.co/t/kibana-timeout-but-curl-with-same-query-works-perfectly/258405 "2020-12-11T13:28:25Z")

</div>

Hi, I'm facing an issue from kibana. Trying to fetch the data of last 90 days I get a timeout. After that I tried to make a curl to the server using the full request that kibana runs in the inspect windows and curl worke…

---

## [Kibana Maps not showing correct geo location](https://discuss.elastic.co/t/kibana-maps-not-showing-correct-geo-location/258306)

<div class="topic-metadata">

**Author:** [@Boris\_Joseph](https://discuss.elastic.co/u/Boris_Joseph)\
**Replies:** 2\
**Last updated:** [December 11, 2020, 3:01am UTC](https://discuss.elastic.co/t/kibana-maps-not-showing-correct-geo-location/258306 "2020-12-11T03:01:28Z")

</div>

Kibana maps don't seem to be locating geopoint correctly. Vietnam Singapore is shown in Africa and US in europe. Please advise what could be wrong. ############## Logstash config ############## 'geoip{ …

---

## ["The quota has been exceeded error" when accessing a dashboard](https://discuss.elastic.co/t/the-quota-has-been-exceeded-error-when-accessing-a-dashboard/257215)

<div class="topic-metadata">

**Author:** [@Craig\_Sharp](https://discuss.elastic.co/u/Craig_Sharp)\
**Replies:** 4\
**Last updated:** [December 11, 2020, 2:03am UTC](https://discuss.elastic.co/t/the-quota-has-been-exceeded-error-when-accessing-a-dashboard/257215 "2020-12-11T02:03:08Z")

</div>

I am receiving the following error when trying to access one of my regularly used dashboards. "The quota has been exceeded" This is a new one for me. I am not finding anything specific on a web search. Any assistance…

---

## [Find average response time in data table Kibana](https://discuss.elastic.co/t/find-average-response-time-in-data-table-kibana/258342)

<div class="topic-metadata">

**Author:** [@Thols](https://discuss.elastic.co/u/Thols)\
**Replies:** 0\
**Last updated:** [December 10, 2020, 11:03pm UTC](https://discuss.elastic.co/t/find-average-response-time-in-data-table-kibana/258342 "2020-12-10T23:03:48Z")

</div>

Hi, I have requirement to visualize data in the below format in Kibana I have series of log events loaded from csv. Here the log events can be segregated using trace id for the particular transaction which as an act…

---

## [Visualize time difference of each transaction that falls in certain bucket range](https://discuss.elastic.co/t/visualize-time-difference-of-each-transaction-that-falls-in-certain-bucket-range/257759)

<div class="topic-metadata">

**Author:** [@Thols](https://discuss.elastic.co/u/Thols)\
**Replies:** 2\
**Last updated:** [December 10, 2020, 9:40pm UTC](https://discuss.elastic.co/t/visualize-time-difference-of-each-transaction-that-falls-in-certain-bucket-range/257759 "2020-12-10T21:40:20Z")

</div>

Hi , I have requirement to show something similar to the above image. I have start and end time in each of my transaction with which I will be creating a scripted filed for time difference. So based on the range the t…

---

## [Kibana Dashboard with Control & Data Table](https://discuss.elastic.co/t/kibana-dashboard-with-control-data-table/258319)

<div class="topic-metadata">

**Author:** [@mailinglists19](https://discuss.elastic.co/u/mailinglists19)\
**Replies:** 1\
**Last updated:** [December 10, 2020, 9:22pm UTC](https://discuss.elastic.co/t/kibana-dashboard-with-control-data-table/258319 "2020-12-10T21:22:06Z")

</div>

I’ve millions of JSON on ES that look like this: { "overallAverage": { "clickAverage": { "avg": 4.4460716 }, "viewAverage": { "avg": 4.8814287 } }, "day": "2019-07-02", "browser": "ch…

---

## [How to create a new Canvas template?](https://discuss.elastic.co/t/how-to-create-a-new-canvas-template/258331)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 1\
**Last updated:** [December 10, 2020, 8:53pm UTC](https://discuss.elastic.co/t/how-to-create-a-new-canvas-template/258331 "2020-12-10T20:53:23Z")

</div>

Hello, Looked around Canvas options and documentation, but I can't seem to find a way to create a new template? I would like to create a template containing some example pages with our new house style. So is it possib…

---

## [Math function in tsvb](https://discuss.elastic.co/t/math-function-in-tsvb/258320)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 1\
**Last updated:** [December 10, 2020, 8:42pm UTC](https://discuss.elastic.co/t/math-function-in-tsvb/258320 "2020-12-10T20:42:07Z")

</div>

I am trying to do simple match function on TSVB but it shows no data. If I remove math I can see the value. What am I doing wrong. I just want to minus some fixed number from it. totalfreesize is in bytes.

---

## [How to setup Kibana?](https://discuss.elastic.co/t/how-to-setup-kibana/258268)

<div class="topic-metadata">

**Author:** [@mahalabobis](https://discuss.elastic.co/u/mahalabobis)\
**Replies:** 2\
**Last updated:** [December 10, 2020, 6:43pm UTC](https://discuss.elastic.co/t/how-to-setup-kibana/258268 "2020-12-10T18:43:39Z")

</div>

I have a remote server which runs Elasticsearch. I'm accessing this server via ssh. I want to setup Kibana how can I do it? Do I need to set Kibana locally or to the remote server?

---

## [How to make queries to elasticsearch from client side of kibana plugin](https://discuss.elastic.co/t/how-to-make-queries-to-elasticsearch-from-client-side-of-kibana-plugin/254178)

<div class="topic-metadata">

**Author:** [@K\_Chaitanya](https://discuss.elastic.co/u/K_Chaitanya)\
**Replies:** 3\
**Last updated:** [December 10, 2020, 6:40pm UTC](https://discuss.elastic.co/t/how-to-make-queries-to-elasticsearch-from-client-side-of-kibana-plugin/254178 "2020-12-10T18:40:50Z")

</div>

Hi, I am trying to query elasticsearch indices from client side of kibana plugin. I was unable to find any native kibana plugin components which can readily enable me to create a client with which I can make request to…

---

## [Security error when create new role with field\_security](https://discuss.elastic.co/t/security-error-when-create-new-role-with-field-security/258082)

<div class="topic-metadata">

**Author:** [@thejusjose-mindcurv](https://discuss.elastic.co/u/thejusjose-mindcurv)\
**Replies:** 2\
**Last updated:** [December 10, 2020, 6:23pm UTC](https://discuss.elastic.co/t/security-error-when-create-new-role-with-field-security/258082 "2020-12-10T18:23:02Z")

</div>

Hi Team, We have Kibana version 7.8 installed. Tried to hide some particular fields for kibana users by creating a new custom role after referring https://www.elastic.co/guide/en/elasticsearch/reference/7.8/field-level…

---

## [Average line is not shown as expected in vega visualization](https://discuss.elastic.co/t/average-line-is-not-shown-as-expected-in-vega-visualization/258314)

<div class="topic-metadata">

**Author:** [@Pranusha119](https://discuss.elastic.co/u/Pranusha119)\
**Replies:** 1\
**Last updated:** [December 10, 2020, 6:11pm UTC](https://discuss.elastic.co/t/average-line-is-not-shown-as-expected-in-vega-visualization/258314 "2020-12-10T18:11:47Z")

</div>

{ "$schema": "https://vega.github.io/schema/vega-lite/v4.json", "description": "Bar chart with text labels. Apply scale padding to make the frame cover the labels.", "data": { "values": \[ {"a": "A", …

---

## [Index Patterns Keep Disappearing](https://discuss.elastic.co/t/index-patterns-keep-disappearing/258292)

<div class="topic-metadata">

**Author:** [@valleram](https://discuss.elastic.co/u/valleram)\
**Replies:** 4\
**Last updated:** [December 10, 2020, 5:39pm UTC](https://discuss.elastic.co/t/index-patterns-keep-disappearing/258292 "2020-12-10T17:39:15Z")

</div>

Hi All, I'm currently using version 7.8.0, I've indexed some documents into ES, but when I create a n Index Pattern in Kibana, it disappear automatically. Please see below some screenshots of this issue. GET \_cat/indi…

---

## [Kibana Lucene search of an array field](https://discuss.elastic.co/t/kibana-lucene-search-of-an-array-field/258313)

<div class="topic-metadata">

**Author:** [@gaz1](https://discuss.elastic.co/u/gaz1)\
**Replies:** 0\
**Last updated:** [December 10, 2020, 5:36pm UTC](https://discuss.elastic.co/t/kibana-lucene-search-of-an-array-field/258313 "2020-12-10T17:36:00Z")

</div>

Hi there. I have a few docs in an index that go as the following example: ''' "\_index" : "metrics", "\_type" : "\_doc", "\_id" : "5fd1814e8a7b8b0023d747d5", "\_source" : { "socketId" : "hh9WMhPM1z1tD8SyAAdN", "events"…

---

## [Export CSV doesn't work v7.9.0](https://discuss.elastic.co/t/export-csv-doesnt-work-v7-9-0/258247)

<div class="topic-metadata">

**Author:** [@111382](https://discuss.elastic.co/u/111382)\
**Replies:** 2\
**Last updated:** [December 10, 2020, 5:31pm UTC](https://discuss.elastic.co/t/export-csv-doesnt-work-v7-9-0/258247 "2020-12-10T17:31:35Z")

</div>

Hi everyone! I hope some of you met the same trouble with csv report generation. I read articles at the forum but didn't get the same case. So I try to export saved search in Kibana 7.9.0 but receive Service Unavailable…

---

## [Exported CSV from search table in dashboard has column values missing](https://discuss.elastic.co/t/exported-csv-from-search-table-in-dashboard-has-column-values-missing/257882)

<div class="topic-metadata">

**Author:** [@xyz2](https://discuss.elastic.co/u/xyz2)\
**Replies:** 3\
**Last updated:** [December 10, 2020, 5:30pm UTC](https://discuss.elastic.co/t/exported-csv-from-search-table-in-dashboard-has-column-values-missing/257882 "2020-12-10T17:30:23Z")

</div>

Hi, I am using 7.8.0 . I have used discover search tables and data tables in kibana dashboards. When I download CSV from the dashboard for a search table, it doesn't contain values for some .keyword columns. When I dow…

---

## [Not able to show field values in Kibana](https://discuss.elastic.co/t/not-able-to-show-field-values-in-kibana/257188)

<div class="topic-metadata">

**Author:** [@marcosvrrs](https://discuss.elastic.co/u/marcosvrrs)\
**Replies:** 2\
**Last updated:** [December 10, 2020, 5:27pm UTC](https://discuss.elastic.co/t/not-able-to-show-field-values-in-kibana/257188 "2020-12-10T17:27:25Z")

</div>

I have JSON documents that I send through a lambda to Elasticsearch and these JSONs have certain fields nested that are flattened in the process, I can see that they are correctly showed in my Index Pattern, like this: …

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=386)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=388)
