# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=418

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 419

---

## [Getting error while trying to populate logstash data to kibana](https://discuss.elastic.co/t/getting-error-while-trying-to-populate-logstash-data-to-kibana/250287)

<div class="topic-metadata">

**Author:** [@tomalter](https://discuss.elastic.co/u/tomalter)\
**Replies:** 7\
**Last updated:** [October 6, 2020, 8:25am UTC](https://discuss.elastic.co/t/getting-error-while-trying-to-populate-logstash-data-to-kibana/250287 "2020-10-06T08:25:16Z")

</div>

Hi Folks, I am newbie here, i am trying to populate logstash metric data into kibana through elasticsearch module but i am getting 404 error after running metricbeat -e command on logstash server where metricbeat is als…

---

## [Problems with Traefik/Keycloak in front of Kibana](https://discuss.elastic.co/t/problems-with-traefik-keycloak-in-front-of-kibana/250898)

<div class="topic-metadata">

**Author:** [@kodo65](https://discuss.elastic.co/u/kodo65)\
**Replies:** 2\
**Last updated:** [October 6, 2020, 4:58am UTC](https://discuss.elastic.co/t/problems-with-traefik-keycloak-in-front-of-kibana/250898 "2020-10-06T04:58:23Z")

</div>

Hi! I want to use Keycloak as a standard way of authenticating users to applications running in our Kubernetes clusters. One of the clusters is running the Elastic ECK component (v1.1.1) and we use the operator to deplo…

---

## [How to create a Graph](https://discuss.elastic.co/t/how-to-create-a-graph/250607)

<div class="topic-metadata">

**Author:** [@udaybit45](https://discuss.elastic.co/u/udaybit45)\
**Replies:** 1\
**Last updated:** [October 5, 2020, 7:21pm UTC](https://discuss.elastic.co/t/how-to-create-a-graph/250607 "2020-10-05T19:21:53Z")

</div>

Hi All, I'm new to ELK and wanted to create Kibana visualization based on the data as below: I have data in CSV and using ELK i was able to parsed and indexed the logs and i'm using ELK 7.8V I have data as Timestamp a…

---

## [Kibana not showing all data](https://discuss.elastic.co/t/kibana-not-showing-all-data/250525)

<div class="topic-metadata">

**Author:** [@haythem](https://discuss.elastic.co/u/haythem)\
**Replies:** 7\
**Last updated:** [October 5, 2020, 7:09pm UTC](https://discuss.elastic.co/t/kibana-not-showing-all-data/250525 "2020-10-05T19:09:56Z")

</div>

Hi guys , recently i injected a 1,7 GB file in elasticsearch using logstash, so when i check the index management i find 9782102 and when i try to make a metric visualization it gives me 9007610 document any idea w…

---

## [Transfer Kibana discoveries, reports , queries from Old Kibana Server to New Kibana Server](https://discuss.elastic.co/t/transfer-kibana-discoveries-reports-queries-from-old-kibana-server-to-new-kibana-server/250389)

<div class="topic-metadata">

**Author:** [@tyrone](https://discuss.elastic.co/u/tyrone)\
**Replies:** 4\
**Last updated:** [October 5, 2020, 5:55pm UTC](https://discuss.elastic.co/t/transfer-kibana-discoveries-reports-queries-from-old-kibana-server-to-new-kibana-server/250389 "2020-10-05T17:55:35Z")

</div>

We have just finished building a new ELK environment. How to I transfer all the settings from my old Kibana server to my new Kibana server to include reports, discoveries, visualizations etc?

---

## [Possibility of sorting and filtering the bucket keys as part of Term aggregation in Bar graph?](https://discuss.elastic.co/t/possibility-of-sorting-and-filtering-the-bucket-keys-as-part-of-term-aggregation-in-bar-graph/250154)

<div class="topic-metadata">

**Author:** [@parallelthought](https://discuss.elastic.co/u/parallelthought)\
**Replies:** 1\
**Last updated:** [October 5, 2020, 5:49pm UTC](https://discuss.elastic.co/t/possibility-of-sorting-and-filtering-the-bucket-keys-as-part-of-term-aggregation-in-bar-graph/250154 "2020-10-05T17:49:01Z")

</div>

I'm trying to visualize a particular usecase described below, I'm unable to figure our if such a way is possible on Kibana (Timelion or Vertical graph). Appreciate any help/suggestion Usecase: Every ES doc contains a us…

---

## [Is there a way to get " count of records, with Status = 'closed' of previous month DIVIDED BY count of records, with status = 'New' of current month"](https://discuss.elastic.co/t/is-there-a-way-to-get-count-of-records-with-status-closed-of-previous-month-divided-by-count-of-records-with-status-new-of-current-month/250163)

<div class="topic-metadata">

**Author:** [@Pooja](https://discuss.elastic.co/u/Pooja)\
**Replies:** 1\
**Last updated:** [October 5, 2020, 5:46pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-get-count-of-records-with-status-closed-of-previous-month-divided-by-count-of-records-with-status-new-of-current-month/250163 "2020-10-05T17:46:31Z")

</div>

I would like to get the following value to be populated on my dashboard. (Count of records, whose status: 'Closed', month : @timestamp - 1month) / (Count of records, whose status: 'New', month: @timestamp)

---

## [Creating a new field through painless scripts to calculate the difference between two timestamp](https://discuss.elastic.co/t/creating-a-new-field-through-painless-scripts-to-calculate-the-difference-between-two-timestamp/250345)

<div class="topic-metadata">

**Author:** [@Gerard\_Kamp](https://discuss.elastic.co/u/Gerard_Kamp)\
**Replies:** 2\
**Last updated:** [October 5, 2020, 5:45pm UTC](https://discuss.elastic.co/t/creating-a-new-field-through-painless-scripts-to-calculate-the-difference-between-two-timestamp/250345 "2020-10-05T17:45:26Z")

</div>

Hi all, i am trying to create a new field (time\_difference) in Kibana 7.4.2 to calculate the difference between two timestamp. First i tried this doc\['@timestamp'\].value - doc\['p.dateTimeSend'\].value and i received …

---

## [View triggered Alerts](https://discuss.elastic.co/t/view-triggered-alerts/250616)

<div class="topic-metadata">

**Author:** [@spike83](https://discuss.elastic.co/u/spike83)\
**Replies:** 1\
**Last updated:** [October 5, 2020, 5:32pm UTC](https://discuss.elastic.co/t/view-triggered-alerts/250616 "2020-10-05T17:32:27Z")

</div>

Hi, Is it possible to see currently triggered alerts in one location? Im aware that you can click on each alert and see, but when you have 20+ alerts its a pain running through each one to see which has triggered. Alte…

---

## [Custom domain using Nginx proxy in kubernetes](https://discuss.elastic.co/t/custom-domain-using-nginx-proxy-in-kubernetes/250483)

<div class="topic-metadata">

**Author:** [@ajaykumars](https://discuss.elastic.co/u/ajaykumars)\
**Replies:** 1\
**Last updated:** [October 5, 2020, 5:28pm UTC](https://discuss.elastic.co/t/custom-domain-using-nginx-proxy-in-kubernetes/250483 "2020-10-05T17:28:18Z")

</div>

Hi, Since using https://12312jsdjsfavhjdf.elastic.com is a pain point for our customers. So to have a custom domain like https://kibana.domain.com I have an Nginx proxy in front of the elastic cloud so our custom domai…

---

## [Not able filter out values in controls typr visualization](https://discuss.elastic.co/t/not-able-filter-out-values-in-controls-typr-visualization/250664)

<div class="topic-metadata">

**Author:** [@Matish\_Bhuyan](https://discuss.elastic.co/u/Matish_Bhuyan)\
**Replies:** 1\
**Last updated:** [October 5, 2020, 5:13pm UTC](https://discuss.elastic.co/t/not-able-filter-out-values-in-controls-typr-visualization/250664 "2020-10-05T17:13:27Z")

</div>

Hi All, This is my controls visualization values, Where i need to filter out the "Box management" "DOCUMENT\_CREATION" "ENTITLEMENT\_CREATION" "QUANTITATIVE\_COUNTERS\_PUBLISHING" and "Box Management" and display only…

---

## [How to display a field value in Kibana without using any aggregation](https://discuss.elastic.co/t/how-to-display-a-field-value-in-kibana-without-using-any-aggregation/250676)

<div class="topic-metadata">

**Author:** [@MG555](https://discuss.elastic.co/u/MG555)\
**Replies:** 1\
**Last updated:** [October 5, 2020, 5:07pm UTC](https://discuss.elastic.co/t/how-to-display-a-field-value-in-kibana-without-using-any-aggregation/250676 "2020-10-05T17:07:29Z")

</div>

Hi, My requirement is i'm getting a field value that contains integer numbers that shows currently running functions in my environment. I want to create a graph to display the field value as it is without using any aggr…

---

## [Kibana visualization query very slow compared to console](https://discuss.elastic.co/t/kibana-visualization-query-very-slow-compared-to-console/250714)

<div class="topic-metadata">

**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\
**Replies:** 1\
**Last updated:** [October 5, 2020, 5:06pm UTC](https://discuss.elastic.co/t/kibana-visualization-query-very-slow-compared-to-console/250714 "2020-10-05T17:06:58Z")

</div>

Using Kibana 7.9.0, with ES 7.9.0. Running a visualization with date historgram and terms aggregation, the query takes 1800ms according Kibana inspect panel, but the same ES query takes only 20 ms when running on the co…

---

## [Can we add tooltip in the line chart? Show additional fields of the data being used?](https://discuss.elastic.co/t/can-we-add-tooltip-in-the-line-chart-show-additional-fields-of-the-data-being-used/250734)

<div class="topic-metadata">

**Author:** [@Jayasri\_Cimba](https://discuss.elastic.co/u/Jayasri_Cimba)\
**Replies:** 1\
**Last updated:** [October 5, 2020, 5:01pm UTC](https://discuss.elastic.co/t/can-we-add-tooltip-in-the-line-chart-show-additional-fields-of-the-data-being-used/250734 "2020-10-05T17:01:35Z")

</div>

I have a line chart , which is created using Time Count Speed I wish to add additional fields to the chart like say name of the device to the chart on hover. If so , Could you please tell me how

---

## [How 'old' are the documents?](https://discuss.elastic.co/t/how-old-are-the-documents/250766)

<div class="topic-metadata">

**Author:** [@Artur\_Trindade](https://discuss.elastic.co/u/Artur_Trindade)\
**Replies:** 1\
**Last updated:** [October 5, 2020, 4:57pm UTC](https://discuss.elastic.co/t/how-old-are-the-documents/250766 "2020-10-05T16:57:12Z")

</div>

Hello, I have need to create a plot that shows how long the documents exists in the index My first idea would be creating a scripted field that computes something like now()-timestamp How can this be performed in kiba…

---

## [Kibana Canvas - SQL Innerjoin & Text Colour Formatting](https://discuss.elastic.co/t/kibana-canvas-sql-innerjoin-text-colour-formatting/250590)

<div class="topic-metadata">

**Author:** [@noralilingyan](https://discuss.elastic.co/u/noralilingyan)\
**Replies:** 1\
**Last updated:** [October 5, 2020, 4:26pm UTC](https://discuss.elastic.co/t/kibana-canvas-sql-innerjoin-text-colour-formatting/250590 "2020-10-05T16:26:08Z")

</div>

Hi there, I would like to seek your help with regard to kibana visualizations. Above shows a sample list of data & screenshot given by the end user of its expected outcome for the data uploaded into elasticsearch. …

---

## [Enabling Anonymous Access](https://discuss.elastic.co/t/enabling-anonymous-access/250847)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 1\
**Last updated:** [October 5, 2020, 3:58pm UTC](https://discuss.elastic.co/t/enabling-anonymous-access/250847 "2020-10-05T15:58:12Z")

</div>

I am running Elastic Stack 7.9.2 and want to enable anonymous access to a dashboard. I have created the anonymous user and role in Kibana and configured Elasticsearch for anonymous user access. However, I can't figure …

---

## [Painless script to jsonify](https://discuss.elastic.co/t/painless-script-to-jsonify/250854)

<div class="topic-metadata">

**Author:** [@Narendra\_Jain](https://discuss.elastic.co/u/Narendra_Jain)\
**Replies:** 1\
**Last updated:** [October 5, 2020, 3:56pm UTC](https://discuss.elastic.co/t/painless-script-to-jsonify/250854 "2020-10-05T15:56:54Z")

</div>

I have index with http response body stored as string json, is it possible to treat json as string to json to read as json using json path.

---

## [Painless third party library](https://discuss.elastic.co/t/painless-third-party-library/250855)

<div class="topic-metadata">

**Author:** [@Narendra\_Jain](https://discuss.elastic.co/u/Narendra_Jain)\
**Replies:** 1\
**Last updated:** [October 5, 2020, 3:53pm UTC](https://discuss.elastic.co/t/painless-third-party-library/250855 "2020-10-05T15:53:19Z")

</div>

Is there a way i can use org.apache.commons.math4.stat.regression library inside painless, or any third party lib support available in any form.

---

## [Dropdown Dashboard multiselect bug](https://discuss.elastic.co/t/dropdown-dashboard-multiselect-bug/250984)

<div class="topic-metadata">

**Author:** [@Bender](https://discuss.elastic.co/u/Bender)\
**Replies:** 2\
**Last updated:** [October 5, 2020, 3:50pm UTC](https://discuss.elastic.co/t/dropdown-dashboard-multiselect-bug/250984 "2020-10-05T15:50:40Z")

</div>

Hello Community, if we use multiselect und dropdown (select box) all selected items got deleted when the text from one item or multiple items is to long and its not get breaked to new line then the whole selected items …

---

## [Display all rows in canvas kibana when taking pdf](https://discuss.elastic.co/t/display-all-rows-in-canvas-kibana-when-taking-pdf/250917)

<div class="topic-metadata">

**Author:** [@Saurabh\_Anand](https://discuss.elastic.co/u/Saurabh_Anand)\
**Replies:** 1\
**Last updated:** [October 5, 2020, 3:47pm UTC](https://discuss.elastic.co/t/display-all-rows-in-canvas-kibana-when-taking-pdf/250917 "2020-10-05T15:47:24Z")

</div>

In the above screenshot of Demo data, the data table contains 300 pagination. When i try to take pdf of the canvas, it only shows the value at first page and values at other pages are not shown. Is there a way to disp…

---

## [Cannot query ip address fields using elastic SQL](https://discuss.elastic.co/t/cannot-query-ip-address-fields-using-elastic-sql/249038)

<div class="topic-metadata">

**Author:** [@fporrata](https://discuss.elastic.co/u/fporrata)\
**Replies:** 7\
**Last updated:** [October 5, 2020, 2:10pm UTC](https://discuss.elastic.co/t/cannot-query-ip-address-fields-using-elastic-sql/249038 "2020-10-05T14:10:55Z")

</div>

I am using the Kibana console to run a SQL query with an ip field as criteria. Here is the query: POST /\_sql?format=json { "query": """SELECT "@timestamp", "destination.ip" FROM "dummyindex" WHERE "destination.ip"…

---

## [Kibana Math Aggregation on Terms](https://discuss.elastic.co/t/kibana-math-aggregation-on-terms/250816)

<div class="topic-metadata">

**Author:** [@savior1307](https://discuss.elastic.co/u/savior1307)\
**Replies:** 1\
**Last updated:** [October 5, 2020, 1:54pm UTC](https://discuss.elastic.co/t/kibana-math-aggregation-on-terms/250816 "2020-10-05T13:54:37Z")

</div>

Kibana Term Math Aggregation Hey guys, I'd like to ask if there's any way to do Math aggregation on individual Term buckets in TSVB. TSVB Metric I've divided my data into buckets by Term and aggregated by Count. Thi…

---

## [7.9.x greying out disables additional criteria selection](https://discuss.elastic.co/t/7-9-x-greying-out-disables-additional-criteria-selection/250880)

<div class="topic-metadata">

**Author:** [@kmfreder1](https://discuss.elastic.co/u/kmfreder1)\
**Replies:** 1\
**Last updated:** [October 5, 2020, 1:27pm UTC](https://discuss.elastic.co/t/7-9-x-greying-out-disables-additional-criteria-selection/250880 "2020-10-05T13:27:06Z")

</div>

Hi all, I have been using Elasticsearch for a couple of years now for integration with my SIEM (using Wazuh). This has worked quite well for me as I go through my daily threat hunting activities. I appreciate all of t…

---

## [\[Kibana painless alert\] Unable to read a string value from an array](https://discuss.elastic.co/t/kibana-painless-alert-unable-to-read-a-string-value-from-an-array/250837)

<div class="topic-metadata">

**Author:** [@roel\_m](https://discuss.elastic.co/u/roel_m)\
**Replies:** 1\
**Last updated:** [October 5, 2020, 1:15pm UTC](https://discuss.elastic.co/t/kibana-painless-alert-unable-to-read-a-string-value-from-an-array/250837 "2020-10-05T13:15:07Z")

</div>

Hi, We are using elastic and kibana to store and visualize automated testing data and we want to create an alerting system that sends a message to Flowdock if a certain threshold of failed tests is reached. For this pu…

---

## [Kibana Discover Extremely Slow (unusable)](https://discuss.elastic.co/t/kibana-discover-extremely-slow-unusable/250260)

<div class="topic-metadata">

**Author:** [@BenB196](https://discuss.elastic.co/u/BenB196)\
**Replies:** 4\
**Last updated:** [October 5, 2020, 12:27pm UTC](https://discuss.elastic.co/t/kibana-discover-extremely-slow-unusable/250260 "2020-10-05T12:27:28Z")

</div>

Hi All, I have a bit of a problem and was wondering if anyone has any ideas. I'm running Kibana 7.9.1 (docker container) (entire stack is 7.9.1), and the Discover feature is unusably slow. I don't believe its the Elast…

---

## [Modifying Discover page with plugin](https://discuss.elastic.co/t/modifying-discover-page-with-plugin/250968)

<div class="topic-metadata">

**Author:** [@Introverrso](https://discuss.elastic.co/u/Introverrso)\
**Replies:** 2\
**Last updated:** [October 5, 2020, 12:01pm UTC](https://discuss.elastic.co/t/modifying-discover-page-with-plugin/250968 "2020-10-05T12:01:40Z")

</div>

Hi everybody. I have questions about the potential of modifying the Discover page using the plugin. I read some old topics related to my challenge, which revealed that the maximum that can be done is to add a new tab t…

---

## [Dealing with multiple date fields](https://discuss.elastic.co/t/dealing-with-multiple-date-fields/250795)

<div class="topic-metadata">

**Author:** [@79g](https://discuss.elastic.co/u/79g)\
**Replies:** 6\
**Last updated:** [October 5, 2020, 10:59am UTC](https://discuss.elastic.co/t/dealing-with-multiple-date-fields/250795 "2020-10-05T10:59:46Z")

</div>

Hello, We are dealing with an index that contains multiple date type fields. The structure, summarized, is below: ... "entry\_date": { "type": "date", "ignore\_malformed": false, "format": "yyy…

---

## [New enhanced data table 1.10 not working with time filter](https://discuss.elastic.co/t/new-enhanced-data-table-1-10-not-working-with-time-filter/250952)

<div class="topic-metadata">

**Author:** [@Saurabh\_Anand](https://discuss.elastic.co/u/Saurabh_Anand)\
**Replies:** 1\
**Last updated:** [October 5, 2020, 10:09am UTC](https://discuss.elastic.co/t/new-enhanced-data-table-1-10-not-working-with-time-filter/250952 "2020-10-05T10:09:53Z")

</div>

Thank you @fbaligand for new release of Enhanced data table. Appreciate your efforts. But the new released plugin of Enhanced Data table not displaying values according to time range. Thanks

---

## [Kibana suggestion api not showing all values](https://discuss.elastic.co/t/kibana-suggestion-api-not-showing-all-values/250905)

<div class="topic-metadata">

**Author:** [@Ankur\_Mahajan](https://discuss.elastic.co/u/Ankur_Mahajan)\
**Replies:** 5\
**Last updated:** [October 5, 2020, 9:52am UTC](https://discuss.elastic.co/t/kibana-suggestion-api-not-showing-all-values/250905 "2020-10-05T09:52:43Z")

</div>

I've recently upgraded to ELK stack (Kibana) 7.9.2 from 7.8.0. I am facing a weird issue which was not in the older version. The filter doesn't populate all the values of a field in discover or dashboards. Let say a fie…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=417)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=419)
