# Kibana **URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=404 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 405 --- ## [Don't see logs in kibana stack montoring](https://discuss.elastic.co/t/dont-see-logs-in-kibana-stack-montoring/254433)
**Author:** [@JC83](https://discuss.elastic.co/u/JC83)\ **Replies:** 2\ **Last updated:** [November 6, 2020, 3:51pm UTC](https://discuss.elastic.co/t/dont-see-logs-in-kibana-stack-montoring/254433 "2020-11-06T15:51:02Z")
No structured logs found Check if the var.paths setting \[points to JSON logs\] Here is my elasticsearch.yml (Filebeat -elasticsearch Module) - module: elasticsearch # Server log server: enabled: true # Set… --- ## [Control timeline of Line Visualization in Dashboard](https://discuss.elastic.co/t/control-timeline-of-line-visualization-in-dashboard/254539)
**Author:** [@Agenobarb](https://discuss.elastic.co/u/Agenobarb)\ **Replies:** 1\ **Last updated:** [November 6, 2020, 3:14pm UTC](https://discuss.elastic.co/t/control-timeline-of-line-visualization-in-dashboard/254539 "2020-11-06T15:14:44Z")
I'd like my Line chart to follow time interval setting on the upper right of the Dashboard. However, when I configure visualization I can't keep the default 'auto' for Minimum interval - getting error. Can I do somethin… --- ## [Problems with visualizing a co-occurrence matrix in Kibana](https://discuss.elastic.co/t/problems-with-visualizing-a-co-occurrence-matrix-in-kibana/254403)
**Author:** [@Matthew\_1979](https://discuss.elastic.co/u/Matthew_1979)\ **Replies:** 1\ **Last updated:** [November 6, 2020, 3:04pm UTC](https://discuss.elastic.co/t/problems-with-visualizing-a-co-occurrence-matrix-in-kibana/254403 "2020-11-06T15:04:36Z")
Hello everyone, I am trying to visualize a co-occurrence matrix. This matrix consists of two lists with terms (list1: n\_columns & list2: n\_rows). The data itself shows the article identifiers in which the terms co-occur… --- ## [Create an alert based on contradicting logs](https://discuss.elastic.co/t/create-an-alert-based-on-contradicting-logs/253050)
**Author:** [@mimoo](https://discuss.elastic.co/u/mimoo)\ **Replies:** 4\ **Last updated:** [November 6, 2020, 2:13pm UTC](https://discuss.elastic.co/t/create-an-alert-based-on-contradicting-logs/253050 "2020-11-06T14:13:58Z")
Hello, I am trying to figure out alerts, and if Kibana is the best place to setup these alerts, or if it'd be better for me to write a program that queries elastic search instead. I'm in a situation where I log tuples … --- ## [Kibana : The connection has timed out when trying to connect](https://discuss.elastic.co/t/kibana-the-connection-has-timed-out-when-trying-to-connect/254454)
**Author:** [@hyochang](https://discuss.elastic.co/u/hyochang)\ **Replies:** 1\ **Last updated:** [November 6, 2020, 1:36pm UTC](https://discuss.elastic.co/t/kibana-the-connection-has-timed-out-when-trying-to-connect/254454 "2020-11-06T13:36:18Z")
Hi, I am trying elastic cloud deployment, and have created a 14-day trial one. When trying to connect Kibana from the service main UI, I am getting timed-out error. I am not sure where to look at for a troubleshootin… --- ## [Session expires very fast](https://discuss.elastic.co/t/session-expires-very-fast/254446)
**Author:** [@cdy5159](https://discuss.elastic.co/u/cdy5159)\ **Replies:** 7\ **Last updated:** [November 6, 2020, 1:09pm UTC](https://discuss.elastic.co/t/session-expires-very-fast/254446 "2020-11-06T13:09:54Z")
Ever since I upgraded to version 7.X, my session will expire even though I'm working in Kibana. It could happen anytime for seemingly no reason. Is there some timeout config that is causing this? --- ## [Creating Single URL for multiple Kibana URL](https://discuss.elastic.co/t/creating-single-url-for-multiple-kibana-url/254525)
**Author:** [@ksaha](https://discuss.elastic.co/u/ksaha)\ **Replies:** 4\ **Last updated:** [November 6, 2020, 12:53pm UTC](https://discuss.elastic.co/t/creating-single-url-for-multiple-kibana-url/254525 "2020-11-06T12:53:45Z")
Hi, I have a ELK stack with 2 Logstash server, 3 node Elasticsearch cluster and 2 Kibana server (considering High Availability). Due to two Kibana instance we have two Kibana URL. Both the Kibana URL is working. Can I h… --- ## [Analyzing PCAP's with Zeek(Bro) in offline mode](https://discuss.elastic.co/t/analyzing-pcaps-with-zeek-bro-in-offline-mode/254515)
**Author:** [@shabi037](https://discuss.elastic.co/u/shabi037)\ **Replies:** 3\ **Last updated:** [November 6, 2020, 11:53am UTC](https://discuss.elastic.co/t/analyzing-pcaps-with-zeek-bro-in-offline-mode/254515 "2020-11-06T11:53:04Z")
Hi all, I am using Zeek to analyze the pcaps in the offline mode. To run the pcap i use command "sudo zeek -r /path/to/file.pcap. It generates the logs (dns.log, http.log, ssl.log etc) in the /opt/zeek/logs/current fold… --- ## [Replace and Datatype conversion](https://discuss.elastic.co/t/replace-and-datatype-conversion/254491)
**Author:** [@Ganesh\_Kannan\_K\_S](https://discuss.elastic.co/u/Ganesh_Kannan_K_S)\ **Replies:** 2\ **Last updated:** [November 6, 2020, 11:25am UTC](https://discuss.elastic.co/t/replace-and-datatype-conversion/254491 "2020-11-06T11:25:05Z")
/Folder enumeration completed (6 s)/ This is a sample log. I need to get the number from this string Message. So I tried to split , replace and convert. That didn't work. I tried to create a scripted field first by spli… --- ## [Logtrail integration with kibana](https://discuss.elastic.co/t/logtrail-integration-with-kibana/252855)
**Author:** [@sudhakar\_u](https://discuss.elastic.co/u/sudhakar_u)\ **Replies:** 4\ **Last updated:** [November 6, 2020, 9:57am UTC](https://discuss.elastic.co/t/logtrail-integration-with-kibana/252855 "2020-11-06T09:57:03Z")
I have EFK stack setup on the Azure Kubernetes Cluster. How can i update the kibana image to have the logtrail? Pls let us know if you need further details.This is the kibana docker image iam using image: docker.elastic… --- ## [Kibana 7.9.2 Controls issue](https://discuss.elastic.co/t/kibana-7-9-2-controls-issue/252221)
**Author:** [@Roy\_Zhang](https://discuss.elastic.co/u/Roy_Zhang)\ **Replies:** 5\ **Last updated:** [November 6, 2020, 8:42am UTC](https://discuss.elastic.co/t/kibana-7-9-2-controls-issue/252221 "2020-11-06T08:42:32Z")
Dear Kibana experts, After I upgrade to Kibana 7.9.2, there are some issue for Controls. It can work in Kibana 7.6.2. For the following graph, I select one item from Controls in my Kibana dashboard, it shows warning in… --- ## [Got this error "Error loading data" when we search for :,\<,\> in Discover page on kibana UI](https://discuss.elastic.co/t/got-this-error-error-loading-data-when-we-search-for-in-discover-page-on-kibana-ui/249953)
**Author:** [@prashant1](https://discuss.elastic.co/u/prashant1)\ **Replies:** 11\ **Last updated:** [November 6, 2020, 8:04am UTC](https://discuss.elastic.co/t/got-this-error-error-loading-data-when-we-search-for-in-discover-page-on-kibana-ui/249953 "2020-11-06T08:04:23Z")
In the discover tab when we try to search for :,\<,\> etc we got a error "Error loading data" on Kibana UI. Please refer to the attachment. --- ## [Dedicated ml index for apm high\_mean\_transaction\_duration](https://discuss.elastic.co/t/dedicated-ml-index-for-apm-high-mean-transaction-duration/254411)
**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\ **Replies:** 3\ **Last updated:** [November 6, 2020, 1:40am UTC](https://discuss.elastic.co/t/dedicated-ml-index-for-apm-high-mean-transaction-duration/254411 "2020-11-06T01:40:26Z")
Hello, Currently the auto-created ml job apm-pr-d40c-high\_mean\_transaction\_duration saves it's model in the shared ml index. This is problematic, as this index contains sensitive information which we cannot open for dev… --- ## [Convert Gauge to and from Celsius/Fahrenheit](https://discuss.elastic.co/t/convert-gauge-to-and-from-celsius-fahrenheit/254464)
**Author:** [@JeffSmith](https://discuss.elastic.co/u/JeffSmith)\ **Replies:** 1\ **Last updated:** [November 5, 2020, 10:20pm UTC](https://discuss.elastic.co/t/convert-gauge-to-and-from-celsius-fahrenheit/254464 "2020-11-05T22:20:41Z")
One thing that has always stumped me is converting a value in a visualization. I would like to have a gauge that display the current temperature. The data source is in fahrenheit but a lot of people seeing the gauge a… --- ## [Rendering several fields aggregations in one visualisation](https://discuss.elastic.co/t/rendering-several-fields-aggregations-in-one-visualisation/254066)
**Author:** [@Eugene\_Korepanov](https://discuss.elastic.co/u/Eugene_Korepanov)\ **Replies:** 3\ **Last updated:** [November 5, 2020, 5:28pm UTC](https://discuss.elastic.co/t/rendering-several-fields-aggregations-in-one-visualisation/254066 "2020-11-05T17:28:20Z")
Hello, dear Elastians and Kibanians. I'm looking for a decent way to build a table of several fields. In my data I have huge objects with multiple boolean properties: Doc1 Obj.Property1 = 1 Obj.Property2 = 0 ... Ob… --- ## [Imported Indexes are not showing logs](https://discuss.elastic.co/t/imported-indexes-are-not-showing-logs/254391)
**Author:** [@nyquillus](https://discuss.elastic.co/u/nyquillus)\ **Replies:** 5\ **Last updated:** [November 5, 2020, 3:34pm UTC](https://discuss.elastic.co/t/imported-indexes-are-not-showing-logs/254391 "2020-11-05T15:34:40Z")
Hi, I tried importing an index to another elk stack and had no issues with it. The problem is that the index shows no logs on the discover tab. I think i need to do something else to import the logs but can't seem to fi… --- ## [Negating Windows logons from managed service accounts ending with $](https://discuss.elastic.co/t/negating-windows-logons-from-managed-service-accounts-ending-with/254419)
**Author:** [@0nullbytes](https://discuss.elastic.co/u/0nullbytes)\ **Replies:** 3\ **Last updated:** [November 5, 2020, 2:11pm UTC](https://discuss.elastic.co/t/negating-windows-logons-from-managed-service-accounts-ending-with/254419 "2020-11-05T14:11:16Z")
Am using Kibana 6.8.11, using Kibana query language I want to exclude Windows Service Accounts ending with a $. Ideally the following query should work !data.win.eventdata.targetUserName:\*$ but for some reason it does no… --- ## [For length parameter in scripted fields its returning length of unique values in a doc](https://discuss.elastic.co/t/for-length-parameter-in-scripted-fields-its-returning-length-of-unique-values-in-a-doc/254393)
**Author:** [@Pranusha119](https://discuss.elastic.co/u/Pranusha119)\ **Replies:** 3\ **Last updated:** [November 5, 2020, 1:38pm UTC](https://discuss.elastic.co/t/for-length-parameter-in-scripted-fields-its-returning-length-of-unique-values-in-a-doc/254393 "2020-11-05T13:38:16Z")
Hello, Length of string is 5 , but why is it returning 3 by counting only unique characters ? Same with words in a string --- ## [Skip a screen in Kibana](https://discuss.elastic.co/t/skip-a-screen-in-kibana/254399)
**Author:** [@ErwinEnableU](https://discuss.elastic.co/u/ErwinEnableU)\ **Replies:** 2\ **Last updated:** [November 5, 2020, 12:55pm UTC](https://discuss.elastic.co/t/skip-a-screen-in-kibana/254399 "2020-11-05T12:55:21Z")
Dear community, We use Kibana for our customers to have insight in what we do using a Dashboard. The Customers have limited access to Kibana. When logging into Kibana they get a screen about Observability, Security, Vis… --- ## [Get a length/size of message field value](https://discuss.elastic.co/t/get-a-length-size-of-message-field-value/254368)
**Author:** [@EugeneZ](https://discuss.elastic.co/u/EugeneZ)\ **Replies:** 4\ **Last updated:** [November 5, 2020, 10:02am UTC](https://discuss.elastic.co/t/get-a-length-size-of-message-field-value/254368 "2020-11-05T10:02:14Z")
Hi, I try to make a scripted fields with size of message field value. I tried doc\['message'\].value.getSize() doc\['message'\].value.size() I tried also with \['message.keyword'\] but nothing. I have in preview. Where am… --- ## [Defective token when using SPNEGO in Kibana](https://discuss.elastic.co/t/defective-token-when-using-spnego-in-kibana/254287)
**Author:** [@marvi](https://discuss.elastic.co/u/marvi)\ **Replies:** 3\ **Last updated:** [November 5, 2020, 9:45am UTC](https://discuss.elastic.co/t/defective-token-when-using-spnego-in-kibana/254287 "2020-11-05T09:45:58Z")
Environment: CentOS 7 Active Directory Elasticsearch & Kibana 7.9.3 Realms configured in ES: Kerberos and AD Kerberos authorization\_realm: AD ES cluster set up with keytabs on master and data nodes. I can run curl --n… --- ## [Kibana unknown index pattern fields](https://discuss.elastic.co/t/kibana-unknown-index-pattern-fields/252803)
**Author:** [@Sh3ldoris](https://discuss.elastic.co/u/Sh3ldoris)\ **Replies:** 5\ **Last updated:** [November 5, 2020, 9:35am UTC](https://discuss.elastic.co/t/kibana-unknown-index-pattern-fields/252803 "2020-11-05T09:35:58Z")
Hello, I'm trying to do aggregations on some fields in my index pattern, but they are unknown. I've tried refresh index pattern but they still don't show in Stack managment. On the other hand, I can see them in my disco… --- ## [Filter on specific field](https://discuss.elastic.co/t/filter-on-specific-field/253731)
**Author:** [@Thomas\_Sieger](https://discuss.elastic.co/u/Thomas_Sieger)\ **Replies:** 3\ **Last updated:** [November 5, 2020, 9:30am UTC](https://discuss.elastic.co/t/filter-on-specific-field/253731 "2020-11-05T09:30:27Z")
Hello guys, above my log message. user \ from client \ I want to filter on the content in the brackets \<\>, but I don´t only want to test how many hits this delivers. I also want to know ho… --- ## [Elastic Stack 6.8.11 and 7.8.1 security update - CVE ID: CVE-2020-7017](https://discuss.elastic.co/t/elastic-stack-6-8-11-and-7-8-1-security-update-cve-id-cve-2020-7017/254237)
**Author:** [@Prathibha\_Y](https://discuss.elastic.co/u/Prathibha_Y)\ **Replies:** 2\ **Last updated:** [November 5, 2020, 8:17am UTC](https://discuss.elastic.co/t/elastic-stack-6-8-11-and-7-8-1-security-update-cve-id-cve-2020-7017/254237 "2020-11-05T08:17:16Z")
Hi, this is in reference to cve id : CVE-2020-7017 and the announcement for our usecase, region map is a must and we cannot disable it by ‘region\_map.enabled: false’. since we have kibana 7.0 and kibana 7.8 both vers… --- ## [FATAL \[index\_not\_found\_exception\] no such index \[.kibana\_task\_manager\], with { resource.type="index\_or\_alias" & resource.id=".kibana\_task\_manager" & index\_uuid="\_na\_" & index=".kibana\_task\_manager" }](https://discuss.elastic.co/t/fatal-index-not-found-exception-no-such-index-kibana-task-manager-with-resource-type-index-or-alias-resource-id-kibana-task-manager-index-uuid-na-index-kibana-task-manager/253676)
**Author:** [@Priya\_Zingade](https://discuss.elastic.co/u/Priya_Zingade)\ **Replies:** 4\ **Last updated:** [November 5, 2020, 7:20am UTC](https://discuss.elastic.co/t/fatal-index-not-found-exception-no-such-index-kibana-task-manager-with-resource-type-index-or-alias-resource-id-kibana-task-manager-index-uuid-na-index-kibana-task-manager/253676 "2020-11-05T07:20:43Z")
Hi am facing this error FATAL \[index\_not\_found\_exception\] no such index \[.kibana\_task\_manager\], with { resource.type="index\_or\_alias" & resource.id=".kibana\_task\_manager" & index\_uuid="na" & index=".kibana\_task\_manager… --- ## [How to plot a graph using data from two filters?](https://discuss.elastic.co/t/how-to-plot-a-graph-using-data-from-two-filters/254186)
**Author:** [@I\_Hathout](https://discuss.elastic.co/u/I_Hathout)\ **Replies:** 3\ **Last updated:** [November 5, 2020, 5:26am UTC](https://discuss.elastic.co/t/how-to-plot-a-graph-using-data-from-two-filters/254186 "2020-11-05T05:26:25Z")
I've two filters each of which gets data from a database query. I wanna have a single visualization vertical bar which has data histograms monthly on X axis and for the Y-axis, I need to (count transfer failures from… --- ## [ELK - index pattern configuration as code](https://discuss.elastic.co/t/elk-index-pattern-configuration-as-code/254308)
**Author:** [@krishkir\_k](https://discuss.elastic.co/u/krishkir_k)\ **Replies:** 1\ **Last updated:** [November 4, 2020, 11:08pm UTC](https://discuss.elastic.co/t/elk-index-pattern-configuration-as-code/254308 "2020-11-04T23:08:05Z")
Is there a way to configure default index pattern in configuration file so I wouldn't have to set it manually after each redeploy?Also to configure and persist field level format ? --- ## [Kibana vega chart timeline graphs, need to show some expectation with static value comparing with actual value](https://discuss.elastic.co/t/kibana-vega-chart-timeline-graphs-need-to-show-some-expectation-with-static-value-comparing-with-actual-value/254003)
**Author:** [@jagdishsamdani](https://discuss.elastic.co/u/jagdishsamdani)\ **Replies:** 1\ **Last updated:** [November 4, 2020, 11:04pm UTC](https://discuss.elastic.co/t/kibana-vega-chart-timeline-graphs-need-to-show-some-expectation-with-static-value-comparing-with-actual-value/254003 "2020-11-04T23:04:50Z")
I have need to show batches execution in our env, I am able show this using existing index data. But i have another need to show some expected batch execution with value avg execution time. To compare and show if execut… --- ## [OSS-KIBANA with Elasticbasic and ILM](https://discuss.elastic.co/t/oss-kibana-with-elasticbasic-and-ilm/254297)
**Author:** [@vazma](https://discuss.elastic.co/u/vazma)\ **Replies:** 1\ **Last updated:** [November 4, 2020, 9:49pm UTC](https://discuss.elastic.co/t/oss-kibana-with-elasticbasic-and-ilm/254297 "2020-11-04T21:49:25Z")
Hi, I am using Elasticsearch basic 7.9 with the ILM feature for my logs management and I am running also Kibana-OSS. In this case, will it be any problem/conflict with the ILM since is not supported in the OSS version? … --- ## [Get documents for Kibana visualizations/dashboard](https://discuss.elastic.co/t/get-documents-for-kibana-visualizations-dashboard/254319)
**Author:** [@Agenobarb](https://discuss.elastic.co/u/Agenobarb)\ **Replies:** 1\ **Last updated:** [November 4, 2020, 7:47pm UTC](https://discuss.elastic.co/t/get-documents-for-kibana-visualizations-dashboard/254319 "2020-11-04T19:47:59Z")
Hi! I created a dashboard containg a couple of visualizations (Line, Timelion) where I can check how my web app perofrms. However, when I see the problem in the dashboard, I'd like to locate it further, i.e. I need to ge… [Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=403) [Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=405)