# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=402

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 403

---

## [Heatmap respect X or Y axis metric, not both](https://discuss.elastic.co/t/heatmap-respect-x-or-y-axis-metric-not-both/254447)

<div class="topic-metadata">

**Author:** [@nunes](https://discuss.elastic.co/u/nunes)\
**Replies:** 2\
**Last updated:** [November 11, 2020, 4:39pm UTC](https://discuss.elastic.co/t/heatmap-respect-x-or-y-axis-metric-not-both/254447 "2020-11-11T16:39:09Z")

</div>

Im trying to make a calendar with heatmap vizualization. Sum of field group by week number and week day. And this works when i use histogram aggregate for week day. But i want to use the week days in text (Mon, Tue, Wed…

---

## [Query DSL](https://discuss.elastic.co/t/query-dsl/254615)

<div class="topic-metadata">

**Author:** [@peretz\_shlomi](https://discuss.elastic.co/u/peretz_shlomi)\
**Replies:** 1\
**Last updated:** [November 11, 2020, 3:43pm UTC](https://discuss.elastic.co/t/query-dsl/254615 "2020-11-11T15:43:48Z")

</div>

hii I want to make filter on visualization by query dsl a need to make filter to visualization by last value who entered to one field (name : product name)

---

## [Regex on a string field with number](https://discuss.elastic.co/t/regex-on-a-string-field-with-number/254667)

<div class="topic-metadata">

**Author:** [@sudersank](https://discuss.elastic.co/u/sudersank)\
**Replies:** 1\
**Last updated:** [November 11, 2020, 3:41pm UTC](https://discuss.elastic.co/t/regex-on-a-string-field-with-number/254667 "2020-11-11T15:41:32Z")

</div>

I have a timestamp field which will have value as below log\_timestamp : 11/8/2020#17:21:25:635 The log\_timestamp is a string field. How do i use regex to filter values from 11/8/2020#17:21:22:635 To 11/8/2020#17:21:25…

---

## [Kibana delete field from index pattern](https://discuss.elastic.co/t/kibana-delete-field-from-index-pattern/255043)

<div class="topic-metadata">

**Author:** [@Mohammad\_Mousavi](https://discuss.elastic.co/u/Mohammad_Mousavi)\
**Replies:** 1\
**Last updated:** [November 11, 2020, 2:23pm UTC](https://discuss.elastic.co/t/kibana-delete-field-from-index-pattern/255043 "2020-11-11T14:23:52Z")

</div>

Hi, I made a typo mistake in logstash and it caused a field with a wrong name (ts\_duration). I've deleted the data from elasticsearch and now data is in correct field (duration). I did some search and I've found out t…

---

## [Kibana 7.9 - Customizatios not reflecting on the browser](https://discuss.elastic.co/t/kibana-7-9-customizatios-not-reflecting-on-the-browser/254348)

<div class="topic-metadata">

**Author:** [@RichaSinha08](https://discuss.elastic.co/u/RichaSinha08)\
**Replies:** 3\
**Last updated:** [November 11, 2020, 2:17pm UTC](https://discuss.elastic.co/t/kibana-7-9-customizatios-not-reflecting-on-the-browser/254348 "2020-11-11T14:17:36Z")

</div>

Hello, When I make customizations in Kibana 7.9.2 code, though they are reflecting in the optimize/bundles but not on the browser(localhost:5601) Earlier I had successfully done customizations for Kibana 7.4. Do I hav…

---

## [Customizable axis labels in TSVB Time Series Visualization](https://discuss.elastic.co/t/customizable-axis-labels-in-tsvb-time-series-visualization/254708)

<div class="topic-metadata">

**Author:** [@akash\_keswani](https://discuss.elastic.co/u/akash_keswani)\
**Replies:** 3\
**Last updated:** [November 11, 2020, 1:56pm UTC](https://discuss.elastic.co/t/customizable-axis-labels-in-tsvb-time-series-visualization/254708 "2020-11-11T13:56:05Z")

</div>

Hi, Can anyone help me on how can we customize axis labels in TSVB Time Series Visualization - e.g. instead of 'per x weeks ' as a x-axis label, I'd really like the ability to relabel it to what i want.

---

## [Action unauthorized for user](https://discuss.elastic.co/t/action-unauthorized-for-user/255065)

<div class="topic-metadata">

**Author:** [@Samir\_Said](https://discuss.elastic.co/u/Samir_Said)\
**Replies:** 2\
**Last updated:** [November 11, 2020, 1:50pm UTC](https://discuss.elastic.co/t/action-unauthorized-for-user/255065 "2020-11-11T13:50:41Z")

</div>

I have created a user using: Stack Management / Users and added roles: kibana\_admin, kibana\_system however, the user got error when tried to run queury: { "error" : { "root\_cause" : \[ { "type" : "…

---

## [Kibana is stock on “Kibana server is not ready yet”](https://discuss.elastic.co/t/kibana-is-stock-on-kibana-server-is-not-ready-yet/255021)

<div class="topic-metadata">

**Author:** [@hadi\_farzipour](https://discuss.elastic.co/u/hadi_farzipour)\
**Replies:** 3\
**Last updated:** [November 11, 2020, 1:49pm UTC](https://discuss.elastic.co/t/kibana-is-stock-on-kibana-server-is-not-ready-yet/255021 "2020-11-11T13:49:10Z")

</div>

Hi everyone After installing Inhanced-Table plugin, my Kibana is stock on following message "Kibana server is not ready yet" However after some minutes it completely became out of reach and I face with "Unable to co…

---

## [Display bytes per second in Line viz](https://discuss.elastic.co/t/display-bytes-per-second-in-line-viz/254004)

<div class="topic-metadata">

**Author:** [@BenoitSERRA](https://discuss.elastic.co/u/BenoitSERRA)\
**Replies:** 3\
**Last updated:** [November 11, 2020, 1:40pm UTC](https://discuss.elastic.co/t/display-bytes-per-second-in-line-viz/254004 "2020-11-11T13:40:21Z")

</div>

Hello, with the lockdown, I'm currently working on a dashboard to sum up the throughput on our remote connection systems. I've created a custom script as such : { "script" : "doc\['Bytes'\].value / 60" } and forced the…

---

## [KQL filter if more values](https://discuss.elastic.co/t/kql-filter-if-more-values/254961)

<div class="topic-metadata">

**Author:** [@probson](https://discuss.elastic.co/u/probson)\
**Replies:** 3\
**Last updated:** [November 11, 2020, 12:12pm UTC](https://discuss.elastic.co/t/kql-filter-if-more-values/254961 "2020-11-11T12:12:50Z")

</div>

Hi, Looking to query a field such as process.args:"atbroker.exe" but would only want a hit if there is more in process.args than just atbroker.exe Is this possible? Thanks Phil

---

## [Restore saved objects from a remote .kibana index](https://discuss.elastic.co/t/restore-saved-objects-from-a-remote-kibana-index/254933)

<div class="topic-metadata">

**Author:** [@Angelos](https://discuss.elastic.co/u/Angelos)\
**Replies:** 8\
**Last updated:** [November 11, 2020, 12:00pm UTC](https://discuss.elastic.co/t/restore-saved-objects-from-a-remote-kibana-index/254933 "2020-11-11T12:00:33Z")

</div>

Hello, I tried to reindex .kibana\_2(latest) of our production elastic to my local elastic. The problem is that Not all the saved objects have been transferred. What kind of data .kibana\_2 includes? Shouldn't all saved …

---

## [Kibana plugin handling errors returned by the API](https://discuss.elastic.co/t/kibana-plugin-handling-errors-returned-by-the-api/255019)

<div class="topic-metadata">

**Author:** [@16318a22907f3cbfa04b](https://discuss.elastic.co/u/16318a22907f3cbfa04b)\
**Replies:** 2\
**Last updated:** [November 11, 2020, 11:30am UTC](https://discuss.elastic.co/t/kibana-plugin-handling-errors-returned-by-the-api/255019 "2020-11-11T11:30:44Z")

</div>

I'm trying to display an error message in my kibana plugin. I do it over http.get(...).then (..).catch( e=\>{console.log(e)}). In the browser console, I see, for example, error: bad request and nothing else. I expected to…

---

## [New plugin on previous version on Kibana](https://discuss.elastic.co/t/new-plugin-on-previous-version-on-kibana/255020)

<div class="topic-metadata">

**Author:** [@ssasporta](https://discuss.elastic.co/u/ssasporta)\
**Replies:** 1\
**Last updated:** [November 11, 2020, 10:11am UTC](https://discuss.elastic.co/t/new-plugin-on-previous-version-on-kibana/255020 "2020-11-11T10:11:22Z")

</div>

Hi, We are running on production version 7.0.1 of Kibana, and we have a request to create a new plugin. While we were trying to use the plugin kibana generator on the dev environment, it looks like we are able to create…

---

## [Cannot connect Kibana to Elasticsearch with different port in docker](https://discuss.elastic.co/t/cannot-connect-kibana-to-elasticsearch-with-different-port-in-docker/254919)

<div class="topic-metadata">

**Author:** [@doston](https://discuss.elastic.co/u/doston)\
**Replies:** 1\
**Last updated:** [November 11, 2020, 9:35am UTC](https://discuss.elastic.co/t/cannot-connect-kibana-to-elasticsearch-with-different-port-in-docker/254919 "2020-11-11T09:35:56Z")

</div>

I could not connect Kibana to Elasticsearch that is running in a different port in docker. Here is my docker file: version: '3.2' services: elasticsearch\_new\_1: image: docker.elastic.co/elasticsearch/elasticsearch…

---

## [Setting up TLS](https://discuss.elastic.co/t/setting-up-tls/254905)

<div class="topic-metadata">

**Author:** [@Craig2188](https://discuss.elastic.co/u/Craig2188)\
**Replies:** 2\
**Last updated:** [November 11, 2020, 7:36am UTC](https://discuss.elastic.co/t/setting-up-tls/254905 "2020-11-11T07:36:22Z")

</div>

Hi, I am trying to set up TLS encryption for accessing Kibana internally. I am trying to follow the following article: Setting up TLS on a cluster | Elasticsearch Reference \[7.9\] | Elastic On the first step in creatin…

---

## [Delete the data in Elasticsearch index based on a date/timestamp column in that index using python](https://discuss.elastic.co/t/delete-the-data-in-elasticsearch-index-based-on-a-date-timestamp-column-in-that-index-using-python/254775)

<div class="topic-metadata">

**Author:** [@vidhyadhara](https://discuss.elastic.co/u/vidhyadhara)\
**Replies:** 4\
**Last updated:** [November 11, 2020, 6:42am UTC](https://discuss.elastic.co/t/delete-the-data-in-elasticsearch-index-based-on-a-date-timestamp-column-in-that-index-using-python/254775 "2020-11-11T06:42:35Z")

</div>

I have several indexes which has a column named "date" or "timestamp", I want to delete only the data from that index which older than certain days/weeks. I do not want to delete the entire index. In fact I want to do i…

---

## [Visualization TSVB Error message: The request for this panel failed Cannot cast from \[boolean\] to \[java.lang.Number\]](https://discuss.elastic.co/t/visualization-tsvb-error-message-the-request-for-this-panel-failed-cannot-cast-from-boolean-to-java-lang-number/254869)

<div class="topic-metadata">

**Author:** [@111207](https://discuss.elastic.co/u/111207)\
**Replies:** 2\
**Last updated:** [November 11, 2020, 2:37am UTC](https://discuss.elastic.co/t/visualization-tsvb-error-message-the-request-for-this-panel-failed-cannot-cast-from-boolean-to-java-lang-number/254869 "2020-11-11T02:37:22Z")

</div>

I have create the visualization type TSVB on elasticsearch version 7.5.2 I need to Unique Count of Serail ID of sum value Duration \< 1 But error message "The request for this panel failed Cannot cast from \[boolean\] t…

---

## [Ignoring certain values in average aggregation](https://discuss.elastic.co/t/ignoring-certain-values-in-average-aggregation/254820)

<div class="topic-metadata">

**Author:** [@jonVR](https://discuss.elastic.co/u/jonVR)\
**Replies:** 2\
**Last updated:** [November 10, 2020, 10:57pm UTC](https://discuss.elastic.co/t/ignoring-certain-values-in-average-aggregation/254820 "2020-11-10T22:57:47Z")

</div>

I'm in the Visualize section of Kibana, and I'm trying to create a Metric that is an average. However, I want the calculation of the average to ignore values under 15 (or actually, under 900, but the point is I want to i…

---

## [Statistical Mode, on visualizations?](https://discuss.elastic.co/t/statistical-mode-on-visualizations/254970)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 3\
**Last updated:** [November 10, 2020, 9:42pm UTC](https://discuss.elastic.co/t/statistical-mode-on-visualizations/254970 "2020-11-10T21:42:29Z")

</div>

Hi, is there any vizualization on wich you can display the mode of the data? the definition of mode: The mode is the value that appears most often in a set of data values.

---

## [Using rank and partition in vega-lite](https://discuss.elastic.co/t/using-rank-and-partition-in-vega-lite/254831)

<div class="topic-metadata">

**Author:** [@smruthip](https://discuss.elastic.co/u/smruthip)\
**Replies:** 3\
**Last updated:** [November 10, 2020, 8:32pm UTC](https://discuss.elastic.co/t/using-rank-and-partition-in-vega-lite/254831 "2020-11-10T20:32:47Z")

</div>

Hi all, Can we do something like this in vega-lite or any other way in Kibana to display the count and state of the container? Select count(\*), state from ( select container\_id, state, rank() over (partition by co…

---

## [Count licences](https://discuss.elastic.co/t/count-licences/254180)

<div class="topic-metadata">

**Author:** [@jeleb](https://discuss.elastic.co/u/jeleb)\
**Replies:** 3\
**Last updated:** [November 10, 2020, 8:25pm UTC](https://discuss.elastic.co/t/count-licences/254180 "2020-11-10T20:25:41Z")

</div>

Hi all, I'm new to ELK I use ELK to parse flexlm log files, and I want to know the number of licenses used simultaneously A flexlm example log file : 22:26:18 (lmgrd) TIMESTAMP 5/22/2013 23:19:37 (MLM) OUT: …

---

## [Kibana - What privileges required for Save Search option?](https://discuss.elastic.co/t/kibana-what-privileges-required-for-save-search-option/254952)

<div class="topic-metadata">

**Author:** [@brapnda23](https://discuss.elastic.co/u/brapnda23)\
**Replies:** 2\
**Last updated:** [November 10, 2020, 4:55pm UTC](https://discuss.elastic.co/t/kibana-what-privileges-required-for-save-search-option/254952 "2020-11-10T16:55:50Z")

</div>

I am using a basic license. Created a few spaces and assigned folks to those spaces. What least index/cluster privilege I need to enable the Save search option for a user in a particular space. I have already given rep…

---

## [Joinaggregate and argmax() using transform](https://discuss.elastic.co/t/joinaggregate-and-argmax-using-transform/254853)

<div class="topic-metadata">

**Author:** [@smruthip](https://discuss.elastic.co/u/smruthip)\
**Replies:** 1\
**Last updated:** [November 10, 2020, 3:43pm UTC](https://discuss.elastic.co/t/joinaggregate-and-argmax-using-transform/254853 "2020-11-10T15:43:12Z")

</div>

Hi, I am trying to display the count of container for each state example: container\_id, container\_state, timestamp 1, loaded, 2pm 1, received, 4pm here the count of container\_id 1 should be only for received state …

---

## [Link two dropdown select visualisations Kibana Canvas](https://discuss.elastic.co/t/link-two-dropdown-select-visualisations-kibana-canvas/253288)

<div class="topic-metadata">

**Author:** [@r97](https://discuss.elastic.co/u/r97)\
**Replies:** 5\
**Last updated:** [November 10, 2020, 2:02pm UTC](https://discuss.elastic.co/t/link-two-dropdown-select-visualisations-kibana-canvas/253288 "2020-11-10T14:02:21Z")

</div>

Hi, I've created a canvas with two dropdown selects (One for customer and one for projects) Is there a way to link those, like a parent and child? If I select a customer in the first dropdown select. I want only to see…

---

## [Lens fields limited to 257 char](https://discuss.elastic.co/t/lens-fields-limited-to-257-char/254904)

<div class="topic-metadata">

**Author:** [@QwerFact](https://discuss.elastic.co/u/QwerFact)\
**Replies:** 2\
**Last updated:** [November 10, 2020, 1:01pm UTC](https://discuss.elastic.co/t/lens-fields-limited-to-257-char/254904 "2020-11-10T13:01:55Z")

</div>

Hello, I'm experiencing limitations with Lens visualization. I created a table with long string fields. After 258 char the field disappears: With 257 char my field is displayed correctly: Do you know if there is …

---

## [Kibana Timelion Offset](https://discuss.elastic.co/t/kibana-timelion-offset/254891)

<div class="topic-metadata">

**Author:** [@PRODIPTO](https://discuss.elastic.co/u/PRODIPTO)\
**Replies:** 1\
**Last updated:** [November 10, 2020, 11:22am UTC](https://discuss.elastic.co/t/kibana-timelion-offset/254891 "2020-11-10T11:22:20Z")

</div>

Hi .. I am trying to build a Kibana Timelion Vizualization to compare data between two different dates .. However the current Timelion feature only allows me to put specific offset values which essentially means that my…

---

## [Create custom \_id for events uploaded via file from data visualizer option in ML (Kibana)](https://discuss.elastic.co/t/create-custom-id-for-events-uploaded-via-file-from-data-visualizer-option-in-ml-kibana/254791)

<div class="topic-metadata">

**Author:** [@Aditya\_Srivastava1](https://discuss.elastic.co/u/Aditya_Srivastava1)\
**Replies:** 1\
**Last updated:** [November 10, 2020, 9:58am UTC](https://discuss.elastic.co/t/create-custom-id-for-events-uploaded-via-file-from-data-visualizer-option-in-ml-kibana/254791 "2020-11-10T09:58:27Z")

</div>

Hi Team, I have a simple csv file with 4 columns that I want to upload and push in ES. For that I am using the data visualizer option in ML (on Kibana). I click on import file, select the file, enter index name and done…

---

## [Express logs are parsed as nginx.access logs](https://discuss.elastic.co/t/express-logs-are-parsed-as-nginx-access-logs/254886)

<div class="topic-metadata">

**Author:** [@Djiit](https://discuss.elastic.co/u/Djiit)\
**Replies:** 2\
**Last updated:** [November 10, 2020, 9:37am UTC](https://discuss.elastic.co/t/express-logs-are-parsed-as-nginx-access-logs/254886 "2020-11-10T09:37:58Z")

</div>

Hi there, I'm tuning my logs display/parsing in Kibana and I'm not sure how to instruct Kibana to display correctly logs from an Express app (NodeJS). The app uses Pino logger + @elastic/pino-ecs-format. Every time I s…

---

## [Data Volume](https://discuss.elastic.co/t/data-volume/254808)

<div class="topic-metadata">

**Author:** [@lks](https://discuss.elastic.co/u/lks)\
**Replies:** 4\
**Last updated:** [November 10, 2020, 2:10am UTC](https://discuss.elastic.co/t/data-volume/254808 "2020-11-10T02:10:11Z")

</div>

on the open source version, How much data does Elastic stack handle? Can I import a pipe delimited data in Kibana? What is the max volume size of data that I can import in Kibana?

---

## [Unique count and bucket aggregation with top hits](https://discuss.elastic.co/t/unique-count-and-bucket-aggregation-with-top-hits/254698)

<div class="topic-metadata">

**Author:** [@smruthip](https://discuss.elastic.co/u/smruthip)\
**Replies:** 3\
**Last updated:** [November 9, 2020, 5:28pm UTC](https://discuss.elastic.co/t/unique-count-and-bucket-aggregation-with-top-hits/254698 "2020-11-09T17:28:48Z")

</div>

Hi all, I want to display unique count of container\_id's for each state. I want to do a bucket aggregation to get the latest state of the container and then do a unique count of the containers for each state to get the…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=401)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=403)
