# Kibana **URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=416 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 417 --- ## [Can we use scripted field in kibana in term aggregation?](https://discuss.elastic.co/t/can-we-use-scripted-field-in-kibana-in-term-aggregation/251523)
**Author:** [@le\_ba\_nam](https://discuss.elastic.co/u/le_ba_nam)\ **Replies:** 1\ **Last updated:** [October 9, 2020, 9:27am UTC](https://discuss.elastic.co/t/can-we-use-scripted-field-in-kibana-in-term-aggregation/251523 "2020-10-09T09:27:23Z")
I created scripted field in kibana named service\_exception.keyword. Now I am trying to create a watcher, which aims to catch the most occurrences exception service. But it not work. I tried replace it by another field an… --- ## [Kibana plugin helpers error](https://discuss.elastic.co/t/kibana-plugin-helpers-error/250923)
**Author:** [@K\_Chaitanya](https://discuss.elastic.co/u/K_Chaitanya)\ **Replies:** 3\ **Last updated:** [October 9, 2020, 4:39am UTC](https://discuss.elastic.co/t/kibana-plugin-helpers-error/250923 "2020-10-09T04:39:14Z")
Hi, I developed a kibana plugin for kibana version 7.9.0. I setup the development environment following this. Now I want to generate the zip of the developed plugin. I tried follow the steps mentioned here but while ru… --- ## [A filter does not work in Controls visualization](https://discuss.elastic.co/t/a-filter-does-not-work-in-controls-visualization/248894)
**Author:** [@m-amano](https://discuss.elastic.co/u/m-amano)\ **Replies:** 2\ **Last updated:** [October 9, 2020, 2:56am UTC](https://discuss.elastic.co/t/a-filter-does-not-work-in-controls-visualization/248894 "2020-10-09T02:56:58Z")
I'm working on to make an options list in Controls with a filtered index by adding the filter at the upper left so that I can hide some selections. However the filtered objects are still shown in the list and I found so… --- ## [Help With ILM](https://discuss.elastic.co/t/help-with-ilm/249177)
**Author:** [@Bruceclegg](https://discuss.elastic.co/u/Bruceclegg)\ **Replies:** 4\ **Last updated:** [October 8, 2020, 9:55pm UTC](https://discuss.elastic.co/t/help-with-ilm/249177 "2020-10-08T21:55:49Z")
I still consider myself very much a neophyte with ELK. A few weeks ago I set up Lifecycle Policies for Indices in Kibana. I used the old index names the developers have hard coded into their programs. But when it came… --- ## [Unable to manually specify start/end timestamps in date range selector](https://discuss.elastic.co/t/unable-to-manually-specify-start-end-timestamps-in-date-range-selector/251487)
**Author:** [@daq](https://discuss.elastic.co/u/daq)\ **Replies:** 9\ **Last updated:** [October 8, 2020, 9:29pm UTC](https://discuss.elastic.co/t/unable-to-manually-specify-start-end-timestamps-in-date-range-selector/251487 "2020-10-08T21:29:39Z")
What am I doing wrong? I'm trying to manually adjust start/end timestamps in the date range selector in discover tab, but it just prints expected format in red and doesn't give me any way to apply manually entered timest… --- ## [Diff of 2 terms aggregations](https://discuss.elastic.co/t/diff-of-2-terms-aggregations/251021)
**Author:** [@Florent\_Fauvin](https://discuss.elastic.co/u/Florent_Fauvin)\ **Replies:** 1\ **Last updated:** [October 8, 2020, 7:08pm UTC](https://discuss.elastic.co/t/diff-of-2-terms-aggregations/251021 "2020-10-08T19:08:29Z")
Hello, I want to create 2 terms aggregations : "allUsers" : {"terms": {"field": "User"}} "allPresentUsers" : {"terms": {"field": "PresentUser"}} =\> Then, I want to find the absent users. So, I want to create a thir… --- ## [Kibana Visualization - Gauge](https://discuss.elastic.co/t/kibana-visualization-gauge/250037)
**Author:** [@rkarthik.kr](https://discuss.elastic.co/u/rkarthik.kr)\ **Replies:** 2\ **Last updated:** [October 8, 2020, 6:20pm UTC](https://discuss.elastic.co/t/kibana-visualization-gauge/250037 "2020-10-08T18:20:36Z")
Hello All I am trying to build a visualization in Kibana using Gauge . Below is the data in my Index App\_Name Service\_Name Run\_Number Coverage Red A 4 90 Red B 4 … --- ## [How to display total calls minus closed calls](https://discuss.elastic.co/t/how-to-display-total-calls-minus-closed-calls/250493)
**Author:** [@anjilinga](https://discuss.elastic.co/u/anjilinga)\ **Replies:** 4\ **Last updated:** [October 8, 2020, 6:03pm UTC](https://discuss.elastic.co/t/how-to-display-total-calls-minus-closed-calls/250493 "2020-10-08T18:03:12Z")
Hi, We have the records in the index as below. callid status 1 open 1 open 1 open 1 closed 2 open 2 open 2 closed 3 open 3 open here we can… --- ## [Tracking down who created Dashboards and Visualizations](https://discuss.elastic.co/t/tracking-down-who-created-dashboards-and-visualizations/251475)
**Author:** [@Shaw](https://discuss.elastic.co/u/Shaw)\ **Replies:** 6\ **Last updated:** [October 8, 2020, 5:20pm UTC](https://discuss.elastic.co/t/tracking-down-who-created-dashboards-and-visualizations/251475 "2020-10-08T17:20:32Z")
Is there any ways to track down who created a dashboard and visualizaions? I do not see any options or places to indicate who created it, who was last person to modify it, and when. It will be very helpful when audit ton… --- ## [7.9.2 http code convert ? to %3F. Rest API fails. Used to work](https://discuss.elastic.co/t/7-9-2-http-code-convert-to-3f-rest-api-fails-used-to-work/250385)
**Author:** [@pgervais](https://discuss.elastic.co/u/pgervais)\ **Replies:** 1\ **Last updated:** [October 8, 2020, 5:13pm UTC](https://discuss.elastic.co/t/7-9-2-http-code-convert-to-3f-rest-api-fails-used-to-work/250385 "2020-10-08T17:13:15Z")
I'm trying to convert my plugin that works under 7.8.1 to 7.9.2. I use the saved object REST API. In order to get all index patterns already created. The REST API call look like: 'http://localhost:5601/api/saved\_objec… --- ## [Log field from microservice app logs in Kibana on AWS](https://discuss.elastic.co/t/log-field-from-microservice-app-logs-in-kibana-on-aws/249580)
**Author:** [@Praful](https://discuss.elastic.co/u/Praful)\ **Replies:** 1\ **Last updated:** [October 8, 2020, 4:36pm UTC](https://discuss.elastic.co/t/log-field-from-microservice-app-logs-in-kibana-on-aws/249580 "2020-10-08T16:36:09Z")
I am searching for a string in the logs using scripted field in Kibana using the Painless code. My aim is find more details in the error/exception logs. try { if (doc.containsKey('log.keyword') && !doc\['log.keyw… --- ## [Access a field in array using Painless scripted field](https://discuss.elastic.co/t/access-a-field-in-array-using-painless-scripted-field/250774)
**Author:** [@WatsonS](https://discuss.elastic.co/u/WatsonS)\ **Replies:** 2\ **Last updated:** [October 8, 2020, 4:27pm UTC](https://discuss.elastic.co/t/access-a-field-in-array-using-painless-scripted-field/250774 "2020-10-08T16:27:10Z")
Hi, Since nested array is not well supported in Kibana, is there any way I could extract the value from the array using scripted field? My data looks like this 1st document: "page\_name": \[ { "name": "New York" }, … --- ## [Graph not showing correct nodes](https://discuss.elastic.co/t/graph-not-showing-correct-nodes/249235)
**Author:** [@emahdij](https://discuss.elastic.co/u/emahdij)\ **Replies:** 1\ **Last updated:** [October 8, 2020, 4:19pm UTC](https://discuss.elastic.co/t/graph-not-showing-correct-nodes/249235 "2020-10-08T16:19:17Z")
Hello When i add a field to a graph it doesn't show the correct nodes As you can see in below image i have five different value for 'DevName' field but when i add that to a graph it doesn't show any of them. --- ## [Monitoring tab blank](https://discuss.elastic.co/t/monitoring-tab-blank/245525)
**Author:** [@bevano](https://discuss.elastic.co/u/bevano)\ **Replies:** 18\ **Last updated:** [October 8, 2020, 3:47pm UTC](https://discuss.elastic.co/t/monitoring-tab-blank/245525 "2020-10-08T15:47:10Z")
Updated from 7.8.1 to 7.9 today on my monitoring cluster and after clicking on the monitoring tab, i am presented with a blank page. No error with regards to Kibana but from the web console i can see this. I assume it i… --- ## [Kibana Discover page sorting when Hide 'Time' column enabled](https://discuss.elastic.co/t/kibana-discover-page-sorting-when-hide-time-column-enabled/251326)
**Author:** [@CODE-REaD](https://discuss.elastic.co/u/CODE-REaD)\ **Replies:** 2\ **Last updated:** [October 8, 2020, 2:52pm UTC](https://discuss.elastic.co/t/kibana-discover-page-sorting-when-hide-time-column-enabled/251326 "2020-10-08T14:52:32Z")
Background: Kibana and Elasticsearch version: 7.9.2, installed with yum from repo elasticsearch-7.x, running on free license. Platform: CentOS 7 I had enabled Kibana's Advanced setting titled Hide 'Time' column (doc\_ta… --- ## [JSON Request With Saved Object Find API](https://discuss.elastic.co/t/json-request-with-saved-object-find-api/251265)
**Author:** [@git-blame](https://discuss.elastic.co/u/git-blame)\ **Replies:** 2\ **Last updated:** [October 8, 2020, 12:44pm UTC](https://discuss.elastic.co/t/json-request-with-saved-object-find-api/251265 "2020-10-08T12:44:58Z")
In the Find API, there is a has\_reference parameter which is an object with fields type and id. However, There is no example I can find of how to format that as a URL (e.g., for a curl get) This comment implies that I … --- ## [How to create an Alert for APM ML job?](https://discuss.elastic.co/t/how-to-create-an-alert-for-apm-ml-job/251221)
**Author:** [@insanity13](https://discuss.elastic.co/u/insanity13)\ **Replies:** 1\ **Last updated:** [October 8, 2020, 10:47am UTC](https://discuss.elastic.co/t/how-to-create-an-alert-for-apm-ml-job/251221 "2020-10-08T10:47:07Z")
How to create an Alert for APM ML job? For Uptime, it offers to create automatically. But I can't find a way to create an alert for APM anomalies. --- ## [Scripted field getting 12 hours date time difference](https://discuss.elastic.co/t/scripted-field-getting-12-hours-date-time-difference/248999)
**Author:** [@ahmadsayeed3](https://discuss.elastic.co/u/ahmadsayeed3)\ **Replies:** 11\ **Last updated:** [October 8, 2020, 10:16am UTC](https://discuss.elastic.co/t/scripted-field-getting-12-hours-date-time-difference/248999 "2020-10-08T10:16:22Z")
Hi, I am trying to get difference between current date time and a field(date time). Timezone for date formatting: UTC Date format: MM/D/YYYY HH:mm:ss.SSS Date with nanoseconds format: MMM D, YYYY @ HH:mm:ss.SSSSSSSS… --- ## [Nginx Log Dashboard Not Show Data](https://discuss.elastic.co/t/nginx-log-dashboard-not-show-data/251395)
**Author:** [@reza\_naipospos](https://discuss.elastic.co/u/reza_naipospos)\ **Replies:** 1\ **Last updated:** [October 8, 2020, 8:37am UTC](https://discuss.elastic.co/t/nginx-log-dashboard-not-show-data/251395 "2020-10-08T08:37:31Z")
No data after make dashboard from filebeat command the data requirement on kibana not same with my nginx log data Please help me --- ## [Watcher advanced scripts](https://discuss.elastic.co/t/watcher-advanced-scripts/251197)
**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Replies:** 3\ **Last updated:** [October 8, 2020, 8:33am UTC](https://discuss.elastic.co/t/watcher-advanced-scripts/251197 "2020-10-08T08:33:14Z")
I am using Kibana 7.8 and below is the result of my POST \_xpack/watcher/watch/949f7606-97dc-42ce-86b7-ddcf5a77d804/\_execute "result" : { "execution\_time" : "2020-10-06T23:40:33.976Z", "execution\_duration" :… --- ## [Kibana multiple line scripts json input](https://discuss.elastic.co/t/kibana-multiple-line-scripts-json-input/248374)
**Author:** [@sambart19](https://discuss.elastic.co/u/sambart19)\ **Replies:** 4\ **Last updated:** [October 8, 2020, 7:21am UTC](https://discuss.elastic.co/t/kibana-multiple-line-scripts-json-input/248374 "2020-10-08T07:21:38Z")
This is a duplicate of the question here from a different user that never got an answer. I would like to be able to use multiple lines in the json input for a script but the triple quote that is listed in documentation… --- ## [Get Sum value of an aggregation than group by a term looks not possible](https://discuss.elastic.co/t/get-sum-value-of-an-aggregation-than-group-by-a-term-looks-not-possible/251271)
**Author:** [@miri](https://discuss.elastic.co/u/miri)\ **Replies:** 5\ **Last updated:** [October 8, 2020, 7:13am UTC](https://discuss.elastic.co/t/get-sum-value-of-an-aggregation-than-group-by-a-term-looks-not-possible/251271 "2020-10-08T07:13:59Z")
Is there a way to get from a field value ( like "devices\_connected"), seperated by a term (like "servers") ... the sum of that? Example: There are 3 servers sending connected device information into elasticsearch //1se… --- ## [Bar Chart axis label not in center of bar](https://discuss.elastic.co/t/bar-chart-axis-label-not-in-center-of-bar/250955)
**Author:** [@Nicolas\_Deleplace](https://discuss.elastic.co/u/Nicolas_Deleplace)\ **Replies:** 3\ **Last updated:** [October 8, 2020, 6:41am UTC](https://discuss.elastic.co/t/bar-chart-axis-label-not-in-center-of-bar/250955 "2020-10-08T06:41:48Z")
Hi, exact same issue as https://discuss.elastic.co/t/bar-chart-axis-label-not-in-center-of-bar/247039 Why is this topic closed with no solution ? Thanks for helping :slight\_smile: Example : missing January and not c… --- ## [Restrict time range for users in kibana](https://discuss.elastic.co/t/restrict-time-range-for-users-in-kibana/251371)
**Author:** [@Saurabh\_Anand](https://discuss.elastic.co/u/Saurabh_Anand)\ **Replies:** 1\ **Last updated:** [October 8, 2020, 5:38am UTC](https://discuss.elastic.co/t/restrict-time-range-for-users-in-kibana/251371 "2020-10-08T05:38:24Z")
Is it possible to restrict time ranges for different users in Kibana? For example User1 can not search data before 90 days. User1 can only see those data available between now to 90 days before? --- ## [How to change "ignore\_above" property of field in index pattern even index match pattern will be insert in the future?](https://discuss.elastic.co/t/how-to-change-ignore-above-property-of-field-in-index-pattern-even-index-match-pattern-will-be-insert-in-the-future/251208)
**Author:** [@le\_ba\_nam](https://discuss.elastic.co/u/le_ba_nam)\ **Replies:** 5\ **Last updated:** [October 8, 2020, 4:53am UTC](https://discuss.elastic.co/t/how-to-change-ignore-above-property-of-field-in-index-pattern-even-index-match-pattern-will-be-insert-in-the-future/251208 "2020-10-08T04:53:30Z")
I want to change "ignore\_above" property of field in index pattern. I have success with post request like: PUT myIndex-\*/doc/\_mapping { "properties": { "message": { "type": "text", "… --- ## [Dashboard Navigation \[Filebeat Netflow\] not working](https://discuss.elastic.co/t/dashboard-navigation-filebeat-netflow-not-working/249144)
**Author:** [@HelpComputer](https://discuss.elastic.co/u/HelpComputer)\ **Replies:** 12\ **Last updated:** [October 7, 2020, 9:05pm UTC](https://discuss.elastic.co/t/dashboard-navigation-filebeat-netflow-not-working/249144 "2020-10-07T21:05:08Z")
Hello, I recently upgraded our Elastic Stack from 6.8 to 7.9.1 and I am unable to get several Dashboards to work in Kibana. Specifically, the \[Filebeat Netflow\] Overview dashboard. Whenever I select it in Kibana I recei… --- ## [How do I list all of the filebeat clients sending logs to a logstash instance?](https://discuss.elastic.co/t/how-do-i-list-all-of-the-filebeat-clients-sending-logs-to-a-logstash-instance/251297)
**Author:** [@deep9300](https://discuss.elastic.co/u/deep9300)\ **Replies:** 1\ **Last updated:** [October 7, 2020, 8:19pm UTC](https://discuss.elastic.co/t/how-do-i-list-all-of-the-filebeat-clients-sending-logs-to-a-logstash-instance/251297 "2020-10-07T20:19:06Z")
How do I list all of the filebeat clients sending logs to a logstash instance in my ELK cluster (5.6.16)? I want to get a list of these filebeat servers. Is there way to list them in Kibana? Currently if I query "host" i… --- ## [How to create a baseline chart](https://discuss.elastic.co/t/how-to-create-a-baseline-chart/251288)
**Author:** [@WassimDhib](https://discuss.elastic.co/u/WassimDhib)\ **Replies:** 2\ **Last updated:** [October 7, 2020, 8:11pm UTC](https://discuss.elastic.co/t/how-to-create-a-baseline-chart/251288 "2020-10-07T20:11:41Z")
Hi, I have a time series of application performance monitoring data (response times). I need to create a baseline chart ( it is something like mean value plus and minus standard deviation multiplied by some coefficient… --- ## [TSVB Visualization takes only the default index pattern into account](https://discuss.elastic.co/t/tsvb-visualization-takes-only-the-default-index-pattern-into-account/251292)
**Author:** [@zaeemmasood](https://discuss.elastic.co/u/zaeemmasood)\ **Replies:** 4\ **Last updated:** [October 7, 2020, 5:05pm UTC](https://discuss.elastic.co/t/tsvb-visualization-takes-only-the-default-index-pattern-into-account/251292 "2020-10-07T17:05:30Z")
Hi All, I am new to visualizations/ dashboards for Kibana 7.6.2 TSVB Visualization takes only the default index pattern into account. We want to create dashboards containing TSVB visualizations from different index pa… --- ## [Custom css in Kibana 7.6.2](https://discuss.elastic.co/t/custom-css-in-kibana-7-6-2/251213)
**Author:** [@gulshann](https://discuss.elastic.co/u/gulshann)\ **Replies:** 1\ **Last updated:** [October 7, 2020, 4:51pm UTC](https://discuss.elastic.co/t/custom-css-in-kibana-7-6-2/251213 "2020-10-07T16:51:25Z")
Hi, How to change the css style i.e color codes , themes, images and text in Kibana 7.6.2 using elastic EUI. [Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=415) [Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=417)