# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=417

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 418

---

## [Count active docs and display by date in Line Chart](https://discuss.elastic.co/t/count-active-docs-and-display-by-date-in-line-chart/251129)

<div class="topic-metadata">

**Author:** [@r97](https://discuss.elastic.co/u/r97)\
**Replies:** 5\
**Last updated:** [October 7, 2020, 4:00pm UTC](https://discuss.elastic.co/t/count-active-docs-and-display-by-date-in-line-chart/251129 "2020-10-07T16:00:45Z")

</div>

Hi, I have an index with the fields: @timestamp, boolean: active and solved\_date (see below). If I import the values, the solved\_date field is not set and the boolean is true. When I want to make the document inactive…

---

## [Labeling in vega lite](https://discuss.elastic.co/t/labeling-in-vega-lite/251022)

<div class="topic-metadata">

**Author:** [@suibgui](https://discuss.elastic.co/u/suibgui)\
**Replies:** 2\
**Last updated:** [October 7, 2020, 2:16pm UTC](https://discuss.elastic.co/t/labeling-in-vega-lite/251022 "2020-10-07T14:16:06Z")

</div>

Hello, i have this eureur when showing value in labels in side my horizantal bar . this is my code : "layer": \[{ "mark": "bar" }, { "mark": { "type": "text", "align": "right", "xOffset": -4, "aria": false }, …

---

## [Sum / Aggregations - Kibana/Logstash](https://discuss.elastic.co/t/sum-aggregations-kibana-logstash/251214)

<div class="topic-metadata">

**Author:** [@jafri6](https://discuss.elastic.co/u/jafri6)\
**Replies:** 6\
**Last updated:** [October 7, 2020, 1:12pm UTC](https://discuss.elastic.co/t/sum-aggregations-kibana-logstash/251214 "2020-10-07T13:12:41Z")

</div>

I am working on a project where the log data can be used to determine a user's performance everyday. The work users do is converting physical documents to digital ones. I have successfully loaded the data into elasticse…

---

## [Dashboard for file access logs](https://discuss.elastic.co/t/dashboard-for-file-access-logs/251260)

<div class="topic-metadata">

**Author:** [@Craig2188](https://discuss.elastic.co/u/Craig2188)\
**Replies:** 0\
**Last updated:** [October 7, 2020, 11:47am UTC](https://discuss.elastic.co/t/dashboard-for-file-access-logs/251260 "2020-10-07T11:47:16Z")

</div>

Hi, We are being tasked with pushing event logs for file access to Kibana: Winlogbeat \> Logstash \> ES/Kibana I will filter it down to specific Event ID's in the winlog YML file and then let it run for 30 days to colla…

---

## [Dashboard community](https://discuss.elastic.co/t/dashboard-community/251223)

<div class="topic-metadata">

**Author:** [@Babadofar](https://discuss.elastic.co/u/Babadofar)\
**Replies:** 4\
**Last updated:** [October 7, 2020, 10:11am UTC](https://discuss.elastic.co/t/dashboard-community/251223 "2020-10-07T10:11:30Z")

</div>

This idea is not new, but I think it's about time to revisit. It would be really nice if elastic had a community for sharing Kibana dashboards. Dashboards uploaded by users, or elastic staff, could be rated and have cou…

---

## [Jira Connector EMail and API-Token](https://discuss.elastic.co/t/jira-connector-email-and-api-token/240329)

<div class="topic-metadata">

**Author:** [@norgro2601](https://discuss.elastic.co/u/norgro2601)\
**Replies:** 17\
**Last updated:** [October 7, 2020, 9:53am UTC](https://discuss.elastic.co/t/jira-connector-email-and-api-token/240329 "2020-10-07T09:53:09Z")

</div>

Hi, to create a Jira connector in Alerts and Actions, Email and API token are required fields. I can't find any information, how to configure this in Jira. Do I have to define an application in Jira ? But no email is ne…

---

## [How to build 7.9.1 kibana plugin?](https://discuss.elastic.co/t/how-to-build-7-9-1-kibana-plugin/251248)

<div class="topic-metadata">

**Author:** [@Javek](https://discuss.elastic.co/u/Javek)\
**Replies:** 2\
**Last updated:** [October 7, 2020, 9:51am UTC](https://discuss.elastic.co/t/how-to-build-7-9-1-kibana-plugin/251248 "2020-10-07T09:51:42Z")

</div>

Hello. I am moving my plugin to new platform. After running node scripts/generate\_plugin my\_plugin\_name i got this (screenshot 1): So there is no package.json. How can I get a zip file so that I can install it later…

---

## [How to change the top left header logo in kibana 7.9.2](https://discuss.elastic.co/t/how-to-change-the-top-left-header-logo-in-kibana-7-9-2/250084)

<div class="topic-metadata">

**Author:** [@witcher](https://discuss.elastic.co/u/witcher)\
**Replies:** 59\
**Last updated:** [October 7, 2020, 9:37am UTC](https://discuss.elastic.co/t/how-to-change-the-top-left-header-logo-in-kibana-7-9-2/250084 "2020-10-07T09:37:57Z")

</div>

this is where the dark theme is located. kibana-7.9.2-windows-x86\_64\\node\_modules\\@kbn\\ui-shared-deps\\target and this is the theme file exactly from inspecting the element. http://localhost:5601/33984/bundles/kbn-ui-s…

---

## [Counting the duplicates and non-duplicates of a count aggregation (revisited)](https://discuss.elastic.co/t/counting-the-duplicates-and-non-duplicates-of-a-count-aggregation-revisited/247856)

<div class="topic-metadata">

**Author:** [@benji87](https://discuss.elastic.co/u/benji87)\
**Replies:** 2\
**Last updated:** [October 7, 2020, 8:38am UTC](https://discuss.elastic.co/t/counting-the-duplicates-and-non-duplicates-of-a-count-aggregation-revisited/247856 "2020-10-07T08:38:51Z")

</div>

Hello all, My recently submitted topic was closed due to inactivity, but I just wondered if anyone else had any thoughts on it? You can find the original post here - https://discuss.elastic.co/t/counting-the-duplicates…

---

## [Best way to visualize health and structure of data processing pipeline](https://discuss.elastic.co/t/best-way-to-visualize-health-and-structure-of-data-processing-pipeline/250458)

<div class="topic-metadata">

**Author:** [@FloJe](https://discuss.elastic.co/u/FloJe)\
**Replies:** 6\
**Last updated:** [October 7, 2020, 6:49am UTC](https://discuss.elastic.co/t/best-way-to-visualize-health-and-structure-of-data-processing-pipeline/250458 "2020-10-07T06:49:25Z")

</div>

Dear Forum, in one of our projects we want to monitor the components of several data processing pipelines. Each of these pipelines has the following structure: Connects to at least one data source Connects to at leas…

---

## [Kibana generate access\_token without user credentials](https://discuss.elastic.co/t/kibana-generate-access-token-without-user-credentials/250750)

<div class="topic-metadata">

**Author:** [@Ali\_Nazemian](https://discuss.elastic.co/u/Ali_Nazemian)\
**Replies:** 4\
**Last updated:** [October 7, 2020, 4:23am UTC](https://discuss.elastic.co/t/kibana-generate-access-token-without-user-credentials/250750 "2020-10-07T04:23:30Z")

</div>

I am looking for a way to use token based authentication for Kibana to give end-users an ability to use Kibana in an embedded iframe. Here is the flow that has worked for me: 1- use a system-level user with sufficient p…

---

## [CPU Usage (Dashboard) Not Show Value](https://discuss.elastic.co/t/cpu-usage-dashboard-not-show-value/251204)

<div class="topic-metadata">

**Author:** [@reza\_naipospos](https://discuss.elastic.co/u/reza_naipospos)\
**Replies:** 2\
**Last updated:** [October 7, 2020, 4:14am UTC](https://discuss.elastic.co/t/cpu-usage-dashboard-not-show-value/251204 "2020-10-07T04:14:02Z")

</div>

My dashboard not show CPU, RAM usage and etc. Only show Number of process value. metricbeat-7.9.1-x86\_64.rpm elasticsearch & Kibana version 7.9.1 I using logstash as output Please help me.

---

## [Regex can not match multiple line in painless](https://discuss.elastic.co/t/regex-can-not-match-multiple-line-in-painless/250442)

<div class="topic-metadata">

**Author:** [@le\_ba\_nam](https://discuss.elastic.co/u/le_ba_nam)\
**Replies:** 2\
**Last updated:** [October 7, 2020, 3:42am UTC](https://discuss.elastic.co/t/regex-can-not-match-multiple-line-in-painless/250442 "2020-10-07T03:42:18Z")

</div>

I want to catch some string in message field like that: 1600657611591|sendRequest\_http10.20.30.1448090BO||wsdlUrl:http://10.20.30.144:8090/BOC2Services/boc2/LocationStaffSaleHistoryService?wsdl: requestContent: \<soapenv…

---

## [Watcher custom email alert](https://discuss.elastic.co/t/watcher-custom-email-alert/251060)

<div class="topic-metadata">

**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\
**Replies:** 1\
**Last updated:** [October 6, 2020, 8:58pm UTC](https://discuss.elastic.co/t/watcher-custom-email-alert/251060 "2020-10-06T20:58:10Z")

</div>

I am trying to create an email alert using watcher. For advanced watcher options , do we have any sample templates to follow ? I would like to trigger emails when application date does not match with current date. How c…

---

## [How to use rowspan in kibana table?](https://discuss.elastic.co/t/how-to-use-rowspan-in-kibana-table/251173)

<div class="topic-metadata">

**Author:** [@WhatsIsKibana](https://discuss.elastic.co/u/WhatsIsKibana)\
**Replies:** 1\
**Last updated:** [October 6, 2020, 7:00pm UTC](https://discuss.elastic.co/t/how-to-use-rowspan-in-kibana-table/251173 "2020-10-06T19:00:02Z")

</div>

Hello there. I'm using "Data Table" visualization in kibana 6.8 with following settings: It works nice, but I would like to filter and join cells in rows into one, if values are equal. For example, I have the same va…

---

## [Bar Chart - Date Range - Display custom date format](https://discuss.elastic.co/t/bar-chart-date-range-display-custom-date-format/251049)

<div class="topic-metadata">

**Author:** [@adahn](https://discuss.elastic.co/u/adahn)\
**Replies:** 1\
**Last updated:** [October 6, 2020, 6:55pm UTC](https://discuss.elastic.co/t/bar-chart-date-range-display-custom-date-format/251049 "2020-10-06T18:55:50Z")

</div>

When I set the X axis for the chart by date range, it displays the date/time out to the millisecond. This makes the object very large with lots of whitespace on the dash. Can this be truncated or removed?

---

## [Line Visualizations - Multiple Line - Filter specific per line](https://discuss.elastic.co/t/line-visualizations-multiple-line-filter-specific-per-line/251027)

<div class="topic-metadata">

**Author:** [@Guillaume\_Guibert](https://discuss.elastic.co/u/Guillaume_Guibert)\
**Replies:** 1\
**Last updated:** [October 6, 2020, 6:18pm UTC](https://discuss.elastic.co/t/line-visualizations-multiple-line-filter-specific-per-line/251027 "2020-10-06T18:18:23Z")

</div>

Hi to everyone, I pretty new in Kibana. I'd like to have a visualisation with 2 lines. I would like to add one filter per line. Did someone make it ? Many thanks

---

## [Filtering Kibana dashboard using vega](https://discuss.elastic.co/t/filtering-kibana-dashboard-using-vega/250911)

<div class="topic-metadata">

**Author:** [@mhlnk](https://discuss.elastic.co/u/mhlnk)\
**Replies:** 2\
**Last updated:** [October 6, 2020, 6:11pm UTC](https://discuss.elastic.co/t/filtering-kibana-dashboard-using-vega/250911 "2020-10-06T18:11:22Z")

</div>

Hello @nyuriks, I followed your example at the end of this post (https://github.com/elastic/kibana/issues/17210) to filter my dashboard from Vega visualization. This worked great. Thanks for a very clear example. I am …

---

## [EuiImage url](https://discuss.elastic.co/t/euiimage-url/242951)

<div class="topic-metadata">

**Author:** [@pgervais](https://discuss.elastic.co/u/pgervais)\
**Replies:** 3\
**Last updated:** [October 6, 2020, 6:03pm UTC](https://discuss.elastic.co/t/euiimage-url/242951 "2020-10-06T18:03:55Z")

</div>

Does EuiImage url support file access? I have tried to specify a png file that is within the plugin i'm developing. What is the path that the png file should contain in order to use local path for use with EuiImage?

---

## [Dynamically change Moving Average (Timelion)](https://discuss.elastic.co/t/dynamically-change-moving-average-timelion/251144)

<div class="topic-metadata">

**Author:** [@Max\_Handle](https://discuss.elastic.co/u/Max_Handle)\
**Replies:** 1\
**Last updated:** [October 6, 2020, 5:59pm UTC](https://discuss.elastic.co/t/dynamically-change-moving-average-timelion/251144 "2020-10-06T17:59:49Z")

</div>

Hi, Is there a way to dynamically change the moving average function in timelion. For example could I somehow write a conditional statement that references the selection of the time picker? So for example if the time pi…

---

## [Aggregation interval: 1m, bucket span: 1m](https://discuss.elastic.co/t/aggregation-interval-1m-bucket-span-1m/251043)

<div class="topic-metadata">

**Author:** [@liorhalperin](https://discuss.elastic.co/u/liorhalperin)\
**Replies:** 3\
**Last updated:** [October 6, 2020, 5:52pm UTC](https://discuss.elastic.co/t/aggregation-interval-1m-bucket-span-1m/251043 "2020-10-06T17:52:18Z")

</div>

when running job in machine learning i see: aggregation interval: 1m, bucket span: 1m i defined indeed bucket of 1 minute i didnt see the definution of interval - from where it takes it?

---

## [Tracking user analytics on ELK Cloud](https://discuss.elastic.co/t/tracking-user-analytics-on-elk-cloud/251151)

<div class="topic-metadata">

**Author:** [@hsn752](https://discuss.elastic.co/u/hsn752)\
**Replies:** 1\
**Last updated:** [October 6, 2020, 3:07pm UTC](https://discuss.elastic.co/t/tracking-user-analytics-on-elk-cloud/251151 "2020-10-06T15:07:45Z")

</div>

How can we get the user metrics and their usage? I would like to know how many users are accessing/hitting my dashboards on the elk cloud. I'm using the Platinum package on the elastic cloud. Please advise

---

## [Error: Unsupported script sort type: date at castSortType](https://discuss.elastic.co/t/error-unsupported-script-sort-type-date-at-castsorttype/250531)

<div class="topic-metadata">

**Author:** [@balamelangi](https://discuss.elastic.co/u/balamelangi)\
**Replies:** 7\
**Last updated:** [October 6, 2020, 2:02pm UTC](https://discuss.elastic.co/t/error-unsupported-script-sort-type-date-at-castsorttype/250531 "2020-10-06T14:02:42Z")

</div>

@here I added my scripted field in kibana. SimpleDateFormat f = new SimpleDateFormat("yyyy-MM-dd HH:mm:ss Z"); f.setTimeZone(TimeZone.getTimeZone("America/Chicago")); f.parse(doc\['starttime.keyword'\].value); Even Adde…

---

## [Get email notifications on new entries](https://discuss.elastic.co/t/get-email-notifications-on-new-entries/250672)

<div class="topic-metadata">

**Author:** [@headtea](https://discuss.elastic.co/u/headtea)\
**Replies:** 2\
**Last updated:** [October 6, 2020, 1:07pm UTC](https://discuss.elastic.co/t/get-email-notifications-on-new-entries/250672 "2020-10-06T13:07:20Z")

</div>

I have set up a honeypot in one of our segments. When someone logs into it, it logs the credentials into a log file. Using filebeat, I ship the new entries from the log to the elastic stack which looks like that on the d…

---

## [Visualization by STATUS field which changes his state](https://discuss.elastic.co/t/visualization-by-status-field-which-changes-his-state/251071)

<div class="topic-metadata">

**Author:** [@ahmadsayeed3](https://discuss.elastic.co/u/ahmadsayeed3)\
**Replies:** 3\
**Last updated:** [October 6, 2020, 12:31pm UTC](https://discuss.elastic.co/t/visualization-by-status-field-which-changes-his-state/251071 "2020-10-06T12:31:33Z")

</div>

Hi, I recently started working on Kibana visualization so I know very less about it. Allow me to explain my use case. I have a STATUS field which has 4 states. In-Queue, In-Progress, Completed and Purged. In parallel…

---

## [Anomaly detection - partitioning data](https://discuss.elastic.co/t/anomaly-detection-partitioning-data/250957)

<div class="topic-metadata">

**Author:** [@mduzy](https://discuss.elastic.co/u/mduzy)\
**Replies:** 5\
**Last updated:** [October 6, 2020, 11:54am UTC](https://discuss.elastic.co/t/anomaly-detection-partitioning-data/250957 "2020-10-06T11:54:49Z")

</div>

Hi, I've been working with the anomaly detection functionality in Kibana. I've got about 500 records processed, all of them have a transaction.name and a custom id that works as an tenant indicator (I'll call it tenantI…

---

## [Export Dashboard on PDF](https://discuss.elastic.co/t/export-dashboard-on-pdf/251100)

<div class="topic-metadata">

**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\
**Replies:** 1\
**Last updated:** [October 6, 2020, 10:26am UTC](https://discuss.elastic.co/t/export-dashboard-on-pdf/251100 "2020-10-06T10:26:46Z")

</div>

Hi team, I use ELK 7.9.0 i try to export dashbord into PDF format , but i don't find how can i do this. Any help please ! Hiba.

---

## [Ingest Manager requires superuser privileges](https://discuss.elastic.co/t/ingest-manager-requires-superuser-privileges/251086)

<div class="topic-metadata">

**Author:** [@LukaszBis](https://discuss.elastic.co/u/LukaszBis)\
**Replies:** 3\
**Last updated:** [October 6, 2020, 10:09am UTC](https://discuss.elastic.co/t/ingest-manager-requires-superuser-privileges/251086 "2020-10-06T10:09:24Z")

</div>

Hi, I can't open the tab Ingest Manager. Message appears what could be causing this behavior?

---

## [How to do a cohort analysis using a heatmap](https://discuss.elastic.co/t/how-to-do-a-cohort-analysis-using-a-heatmap/251091)

<div class="topic-metadata">

**Author:** [@Max\_Handle](https://discuss.elastic.co/u/Max_Handle)\
**Replies:** 4\
**Last updated:** [October 6, 2020, 9:18am UTC](https://discuss.elastic.co/t/how-to-do-a-cohort-analysis-using-a-heatmap/251091 "2020-10-06T09:18:19Z")

</div>

Hi, I tried to find a solution online, but I haven't found any answer yet. I am trying to do a cohort/ customer retention analysis. The picture shows my take on this. What I want: I want to see whether customers that w…

---

## [Vega lite viz](https://discuss.elastic.co/t/vega-lite-viz/250652)

<div class="topic-metadata">

**Author:** [@suibgui](https://discuss.elastic.co/u/suibgui)\
**Replies:** 2\
**Last updated:** [October 6, 2020, 9:15am UTC](https://discuss.elastic.co/t/vega-lite-viz/250652 "2020-10-06T09:15:44Z")

</div>

hello, i want to Create a bar visualisation with vega lite , i'm writing this code but no data showing in the visualisation. \` { "$schema": "https://vega.github.io/schema/vega-lite/v2.json", "data": { "url": { "%…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=416)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=418)
