# Kibana **URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=390 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 391 --- ## [Error in Dashboard/ \[filebeat System\]](https://discuss.elastic.co/t/error-in-dashboard-filebeat-system/257731)
**Author:** [@prat](https://discuss.elastic.co/u/prat)\ **Replies:** 10\ **Last updated:** [December 7, 2020, 6:14pm UTC](https://discuss.elastic.co/t/error-in-dashboard-filebeat-system/257731 "2020-12-07T18:14:35Z")
Hi Team, I am getting error (as attached) when clicked in Dashboard and selected file-beat, here I am getting error for tabs Sudo commands | SSH logins | New users and groups. How can I see all this information. … --- ## [Threshold value for color conditioning to be taken from a variable/field rather than giving direct number](https://discuss.elastic.co/t/threshold-value-for-color-conditioning-to-be-taken-from-a-variable-field-rather-than-giving-direct-number/255585)
**Author:** [@Pranusha119](https://discuss.elastic.co/u/Pranusha119)\ **Replies:** 0\ **Last updated:** [November 16, 2020, 6:50pm UTC](https://discuss.elastic.co/t/threshold-value-for-color-conditioning-to-be-taken-from-a-variable-field-rather-than-giving-direct-number/255585 "2020-11-16T18:50:28Z")
"color": { "condition": { "test": {"field": "PercentOfTotal", "gt": 70}, "value": "#B22222" }, "value": "#006400" } By this way I am able to do color conditioning "… --- ## [Auto-login in iFrame using nginx proxy](https://discuss.elastic.co/t/auto-login-in-iframe-using-nginx-proxy/257322)
**Author:** [@Docrom](https://discuss.elastic.co/u/Docrom)\ **Replies:** 3\ **Last updated:** [December 7, 2020, 5:02pm UTC](https://discuss.elastic.co/t/auto-login-in-iframe-using-nginx-proxy/257322 "2020-12-07T17:02:49Z")
Hello everyone, I'm trying to follow the post here in order login to my Kibana iFrame via nginx as proxy but I fail. I'm not really good with proxies and nginx in particular so maybe I'm missing something important tha… --- ## [Kibana action webhook failing](https://discuss.elastic.co/t/kibana-action-webhook-failing/257855)
**Author:** [@Alexhutchinson](https://discuss.elastic.co/u/Alexhutchinson)\ **Replies:** 1\ **Last updated:** [December 7, 2020, 3:58pm UTC](https://discuss.elastic.co/t/kibana-action-webhook-failing/257855 "2020-12-07T15:58:53Z")
Hi! I have an 7.10 stack running in ECK, and have a webhook Alert and Action set up (Linked to a custom Security Detection Rule). The webhook endpoint is HTTPS with a self-signed certificate. When hitting test on the c… --- ## [Current Time Marker in vega-lite chart](https://discuss.elastic.co/t/current-time-marker-in-vega-lite-chart/256073)
**Author:** [@shin1](https://discuss.elastic.co/u/shin1)\ **Replies:** 1\ **Last updated:** [December 7, 2020, 3:37pm UTC](https://discuss.elastic.co/t/current-time-marker-in-vega-lite-chart/256073 "2020-12-07T15:37:53Z")
Hi experts, Is there any way to draw a current time marker in vega-lite? I'd like to do it on a scatter plot written in vega-lite. Many thanks in advane, Cheers Shin --- ## [Setup watcher with multiple must\_not values do not apply as expected](https://discuss.elastic.co/t/setup-watcher-with-multiple-must-not-values-do-not-apply-as-expected/256957)
**Author:** [@Aviram\_Niron](https://discuss.elastic.co/u/Aviram_Niron)\ **Replies:** 3\ **Last updated:** [December 7, 2020, 2:51pm UTC](https://discuss.elastic.co/t/setup-watcher-with-multiple-must-not-values-do-not-apply-as-expected/256957 "2020-12-07T14:51:48Z")
I've set the following watcher which aims to ignore events coming from several tenants (as indicated in the "must\_not" clause). However, these are not ignored. What am I missing? { "trigger": { "schedule": { … --- ## [7.10 ECONNREFUSED on Kibana](https://discuss.elastic.co/t/7-10-econnrefused-on-kibana/257838)
**Author:** [@CLeO\_Zap](https://discuss.elastic.co/u/CLeO_Zap)\ **Replies:** 7\ **Last updated:** [December 7, 2020, 2:38pm UTC](https://discuss.elastic.co/t/7-10-econnrefused-on-kibana/257838 "2020-12-07T14:38:57Z")
Hi All, I have a bit of a problem, I currently have a VM (Centos) running Elasticsearch 7.10, and a different VM (Centos ) running Kibana 7.10 and Nginx. The error I'm getting is: Dec 07 11:17:07 slazKIB02 kibana\[905… --- ## [Override fields with update\_per\_query](https://discuss.elastic.co/t/override-fields-with-update-per-query/257857)
**Author:** [@lina1](https://discuss.elastic.co/u/lina1)\ **Replies:** 1\ **Last updated:** [December 7, 2020, 2:17pm UTC](https://discuss.elastic.co/t/override-fields-with-update-per-query/257857 "2020-12-07T14:17:43Z")
Hi, I am new to elastic search and I am trying to filter and replace some http Status Codes. I've got error logs like these: 'Error domain: NSURLErrorDomain Code=-1005' 'HTTP 404 not found' 'Error domain: mycompany.… --- ## [Kibana ui not loading](https://discuss.elastic.co/t/kibana-ui-not-loading/257141)
**Author:** [@sudhakar\_u](https://discuss.elastic.co/u/sudhakar_u)\ **Replies:** 1\ **Last updated:** [December 7, 2020, 12:51pm UTC](https://discuss.elastic.co/t/kibana-ui-not-loading/257141 "2020-12-07T12:51:58Z")
iam using nginx proxy for kibana.My kibana ui is not loading. iam getting this in UI. Kibana did not load properly. Check the server output for more information. in the UI inspect mode .iam seeing this index.light.css:… --- ## [Unique array elements in elasticsearch 7.4.2](https://discuss.elastic.co/t/unique-array-elements-in-elasticsearch-7-4-2/257847)
**Author:** [@Mohammad\_Mousavi](https://discuss.elastic.co/u/Mohammad_Mousavi)\ **Replies:** 0\ **Last updated:** [December 7, 2020, 12:34pm UTC](https://discuss.elastic.co/t/unique-array-elements-in-elasticsearch-7-4-2/257847 "2020-12-07T12:34:18Z")
Hi, I've found this post and I think it's a little old. I run this code in elasticsearch 7.4.2 : POST logstash-vod-2020.11/\_update\_by\_query?conflicts=proceed&refresh { "query": { "bool": { "must": \[ … --- ## [What is the best way to back up Kibana visualization and dashboard?](https://discuss.elastic.co/t/what-is-the-best-way-to-back-up-kibana-visualization-and-dashboard/257693)
**Author:** [@jhagen92](https://discuss.elastic.co/u/jhagen92)\ **Replies:** 1\ **Last updated:** [December 7, 2020, 12:04pm UTC](https://discuss.elastic.co/t/what-is-the-best-way-to-back-up-kibana-visualization-and-dashboard/257693 "2020-12-07T12:04:52Z")
Hi, I am curious what is the best way to back up Kibana dashboard and visualization. I know there is UI in Kibana where I can choose which saved object I can make back up (json). Is there way to do this using API? Expor… --- ## [Reverse Proxy](https://discuss.elastic.co/t/reverse-proxy/257238)
**Author:** [@kamandohl](https://discuss.elastic.co/u/kamandohl)\ **Replies:** 4\ **Last updated:** [December 7, 2020, 8:33am UTC](https://discuss.elastic.co/t/reverse-proxy/257238 "2020-12-07T08:33:37Z")
Try to explain the best I can. I have an Apache reverse proxy configure as such and it works and is in production. \ SSLEngine on SSLCertificateFile computer.cer SSLCertifi… --- ## [TSVB Visualization font inconsistent](https://discuss.elastic.co/t/tsvb-visualization-font-inconsistent/257805)
**Author:** [@isarib](https://discuss.elastic.co/u/isarib)\ **Replies:** 1\ **Last updated:** [December 7, 2020, 8:23am UTC](https://discuss.elastic.co/t/tsvb-visualization-font-inconsistent/257805 "2020-12-07T08:23:13Z")
Hi, As per below example, you can see the font sizing is different between visualizations. Is there anyway to make the font sizes the same for all? My guess it is dynamically changing based on the text to be displayed… --- ## [Duplicate data in Pie chart](https://discuss.elastic.co/t/duplicate-data-in-pie-chart/257816)
**Author:** [@Kapila](https://discuss.elastic.co/u/Kapila)\ **Replies:** 0\ **Last updated:** [December 7, 2020, 8:19am UTC](https://discuss.elastic.co/t/duplicate-data-in-pie-chart/257816 "2020-12-07T08:19:00Z")
Here is my data set stored in elastic; index\_name: my\_data-2020-12-01 ticket\_number: T123 ticket\_status: OPEN ticket\_updated\_time: 2020-12-01 12:22:12 index\_name: my\_data-2020-12-01 ticket\_number: T124 ticket\_status: … --- ## [Kibana freezes in "Kibana server is not ready yet" after activating xpack.security](https://discuss.elastic.co/t/kibana-freezes-in-kibana-server-is-not-ready-yet-after-activating-xpack-security/257699)
**Author:** [@jh0mil](https://discuss.elastic.co/u/jh0mil)\ **Replies:** 1\ **Last updated:** [December 7, 2020, 7:58am UTC](https://discuss.elastic.co/t/kibana-freezes-in-kibana-server-is-not-ready-yet-after-activating-xpack-security/257699 "2020-12-07T07:58:36Z")
When i set true the opcion xpack.security.enabled the service stay frozen in "Kibana server is not ready yet". This is the logs of Kibana log \[19:22:35.884\] \[info\]\[plugins-service\] Plugin "visTypeXy" is disabled. log… --- ## [Kibana Bad Request when creating index pattern](https://discuss.elastic.co/t/kibana-bad-request-when-creating-index-pattern/257394)
**Author:** [@elady](https://discuss.elastic.co/u/elady)\ **Replies:** 2\ **Last updated:** [December 6, 2020, 9:38am UTC](https://discuss.elastic.co/t/kibana-bad-request-when-creating-index-pattern/257394 "2020-12-06T09:38:55Z")
\*\*\* SEE EDIT BELOW \*\*\* Hey. Since we have upgraded ELK stack to version 7.7.1 the Kibana keeps presenting error messages of "bad request" to elasticsearch when we perform index field refresh and now when we are trying … --- ## [Filter out only the \_source](https://discuss.elastic.co/t/filter-out-only-the-source/257729)
**Author:** [@manuel1](https://discuss.elastic.co/u/manuel1)\ **Replies:** 1\ **Last updated:** [December 5, 2020, 2:23pm UTC](https://discuss.elastic.co/t/filter-out-only-the-source/257729 "2020-12-05T14:23:03Z")
After performing a GET request, i get a response like the below. I only need the \_source field for the response. So my response should not include 'hits' nor '\_source'. Just the values of the \_source which are: id, house… --- ## [Visualizing top list of skiing results between split times in Kibana](https://discuss.elastic.co/t/visualizing-top-list-of-skiing-results-between-split-times-in-kibana/256936)
**Author:** [@tobias.berg](https://discuss.elastic.co/u/tobias.berg)\ **Replies:** 2\ **Last updated:** [December 5, 2020, 6:35am UTC](https://discuss.elastic.co/t/visualizing-top-list-of-skiing-results-between-split-times-in-kibana/256936 "2020-12-05T06:35:09Z")
Hi, I'm scraping some cross-country skiing results, ingesting it in Elasticsearch and visualizing it in Kibana. It works pretty well! Although there is one thing I would like to accomplish that I can't get my head aroun… --- ## [TSVB annotation row template field error](https://discuss.elastic.co/t/tsvb-annotation-row-template-field-error/257158)
**Author:** [@pingz](https://discuss.elastic.co/u/pingz)\ **Replies:** 2\ **Last updated:** [December 5, 2020, 3:50am UTC](https://discuss.elastic.co/t/tsvb-annotation-row-template-field-error/257158 "2020-12-05T03:50:26Z")
Hi, there: My fields value is set to log.message and I set row template to {{log.message}} Clicking the annotated line showed value {{log.message}}. Not the actual message from index Kibana 7.9.1 is used How shal… --- ## [Creating a watcher](https://discuss.elastic.co/t/creating-a-watcher/257247)
**Author:** [@ChristianOelsner](https://discuss.elastic.co/u/ChristianOelsner)\ **Replies:** 2\ **Last updated:** [December 4, 2020, 11:28pm UTC](https://discuss.elastic.co/t/creating-a-watcher/257247 "2020-12-04T23:28:26Z")
Hello guys. I am still very much in a learning process when it comes to the elastic stack. Now i am trying to set up a watcher that can be user for some sort of allerting/notification, be it slack or mail. We have a l… --- ## [Event Correlation/Deviation](https://discuss.elastic.co/t/event-correlation-deviation/257572)
**Author:** [@stevezemlicka](https://discuss.elastic.co/u/stevezemlicka)\ **Replies:** 4\ **Last updated:** [December 4, 2020, 9:48pm UTC](https://discuss.elastic.co/t/event-correlation-deviation/257572 "2020-12-04T21:48:56Z")
I have a series of endpoints that have hourly readings as well as a set of event times. A specific subset of the endpoints' readings are expected to drop during the events. I am trying to figure out a visualization tha… --- ## [Visualize a time counter](https://discuss.elastic.co/t/visualize-a-time-counter/257225)
**Author:** [@fastxl](https://discuss.elastic.co/u/fastxl)\ **Replies:** 4\ **Last updated:** [December 4, 2020, 7:47pm UTC](https://discuss.elastic.co/t/visualize-a-time-counter/257225 "2020-12-04T19:47:03Z")
I am new to the ELK stack and trying to learn how to visualize some things. I have data coming in from one of our machine tools and I would like to make a simple counter that show the amount of time the machine has been … --- ## [Custom Logo Kibana 7.10.0 (guide)](https://discuss.elastic.co/t/custom-logo-kibana-7-10-0-guide/257686)
**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Replies:** 0\ **Last updated:** [December 4, 2020, 5:31pm UTC](https://discuss.elastic.co/t/custom-logo-kibana-7-10-0-guide/257686 "2020-12-04T17:31:08Z")
Verified on Kibana 7.10.0, running on Debian 10 (Buster). Applies for the same version in Windows. Hello, For all users like me, that need to customize the logos in Kibana, I share this guide that I have been creating … --- ## [Variance/Deviation Visualization](https://discuss.elastic.co/t/variance-deviation-visualization/257690)
**Author:** [@stevezemlicka](https://discuss.elastic.co/u/stevezemlicka)\ **Replies:** 0\ **Last updated:** [December 4, 2020, 6:39pm UTC](https://discuss.elastic.co/t/variance-deviation-visualization/257690 "2020-12-04T18:39:51Z")
I have a dataset with readings every 30m. I want to set a start time and an end time at a single interval (eg 1:00 - 1:30) and rank the devices based on the amount they changed. I've been using the Top N feature in TSV… --- ## [Error in Discovery and vizualize when creating a script field](https://discuss.elastic.co/t/error-in-discovery-and-vizualize-when-creating-a-script-field/254818)
**Author:** [@JinLauter](https://discuss.elastic.co/u/JinLauter)\ **Replies:** 8\ **Last updated:** [December 4, 2020, 5:40pm UTC](https://discuss.elastic.co/t/error-in-discovery-and-vizualize-when-creating-a-script-field/254818 "2020-12-04T17:40:08Z")
Hi, We created a simple string script field, and we are getting a error in discovery and when we try to use that script field in any vizualization. I belive the images will explain it better: The script field: Usin… --- ## [Can I update existing dashboard using UPDATE api?](https://discuss.elastic.co/t/can-i-update-existing-dashboard-using-update-api/257682)
**Author:** [@jhagen92](https://discuss.elastic.co/u/jhagen92)\ **Replies:** 3\ **Last updated:** [December 4, 2020, 5:39pm UTC](https://discuss.elastic.co/t/can-i-update-existing-dashboard-using-update-api/257682 "2020-12-04T17:39:09Z")
Hi, I am wondering if I can update existing dashboard using UPDATE api with saved json file. I am trying to see if I can revert my old changes back on dashboard back to Kibana. I am designing a way to have version contr… --- ## [Cannot create Data Stream](https://discuss.elastic.co/t/cannot-create-data-stream/256621)
**Author:** [@Angelos](https://discuss.elastic.co/u/Angelos)\ **Replies:** 4\ **Last updated:** [December 4, 2020, 5:25pm UTC](https://discuss.elastic.co/t/cannot-create-data-stream/256621 "2020-12-04T17:25:52Z")
Hi, I am trying to create Data Streams by issuing: PUT \_data\_stream/test-index-pattern but I have this error: "error" : { "root\_cause" : \[ { "type" : "security\_exception", "reason" : "acti… --- ## [Control visualization issue in Dashboard](https://discuss.elastic.co/t/control-visualization-issue-in-dashboard/256645)
**Author:** [@sarthaksahu](https://discuss.elastic.co/u/sarthaksahu)\ **Replies:** 4\ **Last updated:** [December 4, 2020, 5:23pm UTC](https://discuss.elastic.co/t/control-visualization-issue-in-dashboard/256645 "2020-12-04T17:23:33Z")
We are upgrading kibana from 7.0.1 to 7.8.0 We had created Control Visualization in Kibana with 3 level parental control and using this in Dashboard. This was working as expected in 7.0.1 Issue: When we upgraded to 7.8… --- ## [Change Login Page Logo - Kibana 7.9.1 Docker](https://discuss.elastic.co/t/change-login-page-logo-kibana-7-9-1-docker/257647)
**Author:** [@Ayakashi97](https://discuss.elastic.co/u/Ayakashi97)\ **Replies:** 11\ **Last updated:** [December 4, 2020, 4:31pm UTC](https://discuss.elastic.co/t/change-login-page-logo-kibana-7-9-1-docker/257647 "2020-12-04T16:31:48Z")
Hi threre, i am on Version 7.9.1 and want to change the login page logo. I found this thread: Custom Logo Kibana 7.9.2 (guide) All is working fine in docker-container, but i cannot use this command in the kibana docker… --- ## [How can I automate version control Kibana Saved Object?](https://discuss.elastic.co/t/how-can-i-automate-version-control-kibana-saved-object/257677)
**Author:** [@jhagen92](https://discuss.elastic.co/u/jhagen92)\ **Replies:** 1\ **Last updated:** [December 4, 2020, 4:23pm UTC](https://discuss.elastic.co/t/how-can-i-automate-version-control-kibana-saved-object/257677 "2020-12-04T16:23:22Z")
Hi, I am very new to Kibana. I create Dashboard using Kibana and found that I can save it by using Saved Object. I was thinking I can version control these json file in my Azure DevOps repo. Instead of export-\>saving i… [Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=389) [Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=391)