# Kibana **URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=419 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 420 --- ## [Add character by a script](https://discuss.elastic.co/t/add-character-by-a-script/249983)
**Author:** [@Fred59](https://discuss.elastic.co/u/Fred59)\ **Replies:** 5\ **Last updated:** [October 5, 2020, 8:54am UTC](https://discuss.elastic.co/t/add-character-by-a-script/249983 "2020-10-05T08:54:57Z")
Hello, I have a field in string, and in this field, i have different numbers (example : 0032345643). I want to add "0" at the beginning when the number have only 9 characters, and add "00" at the beginning when the num… --- ## [Elastic Search Installation on server](https://discuss.elastic.co/t/elastic-search-installation-on-server/250940)
**Author:** [@ashley11](https://discuss.elastic.co/u/ashley11)\ **Replies:** 1\ **Last updated:** [October 5, 2020, 8:51am UTC](https://discuss.elastic.co/t/elastic-search-installation-on-server/250940 "2020-10-05T08:51:46Z")
Hi Team, I need to install elastic search in the windows/linux server and to use the kibana and elasticsearch from the local PC. Can I achieve this ? If yes can you please drop some links which explains the same. I'm ne… --- ## [Slow Kibana after update 7.4.2 -\> 7.9.2](https://discuss.elastic.co/t/slow-kibana-after-update-7-4-2-7-9-2/250878)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 3\ **Last updated:** [October 5, 2020, 7:57am UTC](https://discuss.elastic.co/t/slow-kibana-after-update-7-4-2-7-9-2/250878 "2020-10-05T07:57:31Z")
Loading a dashboard with 5 visualizations takes 4x time with K7.9 than K7.4 (with exactly same indices and resources). ES cluster has 3 nodes, all queries take no more than 1 seconde, but dashboard is loading on 10 seco… --- ## [Explain difference between Kibana "time ellapsed" and query "took"](https://discuss.elastic.co/t/explain-difference-between-kibana-time-ellapsed-and-query-took/250763)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 7\ **Last updated:** [October 5, 2020, 7:20am UTC](https://discuss.elastic.co/t/explain-difference-between-kibana-time-ellapsed-and-query-took/250763 "2020-10-05T07:20:01Z")
In Kibana dev-console, I see a big difference between ES query took time and Kibana ellapsed time. Why ? --- ## [How to add a sum for all columns in a table view](https://discuss.elastic.co/t/how-to-add-a-sum-for-all-columns-in-a-table-view/250888)
**Author:** [@hzarrabi](https://discuss.elastic.co/u/hzarrabi)\ **Replies:** 2\ **Last updated:** [October 5, 2020, 7:00am UTC](https://discuss.elastic.co/t/how-to-add-a-sum-for-all-columns-in-a-table-view/250888 "2020-10-05T07:00:13Z")
Hi all, I need to add a table view in my kibana dashboard with a sum for all columns like Excel. (see the picture. Is there any idea. Best Regards Hamid --- ## [How i can determine the difference of two fields(ROWS) in kibana](https://discuss.elastic.co/t/how-i-can-determine-the-difference-of-two-fields-rows-in-kibana/250922)
**Author:** [@Raja\_Kushwah](https://discuss.elastic.co/u/Raja_Kushwah)\ **Replies:** 2\ **Last updated:** [October 5, 2020, 6:43am UTC](https://discuss.elastic.co/t/how-i-can-determine-the-difference-of-two-fields-rows-in-kibana/250922 "2020-10-05T06:43:33Z")
Please find the attached screenshot.!! I am trying to create a new filed name -- 'msec different' and its value will be '0' when the event name is a start and 2nd value will be the difference of \[2nd 'msecs' value - 3… --- ## [Urgent: Date Histogram showing 2 dates for single date on X axis when we selected absolute date in calander in Kibana](https://discuss.elastic.co/t/urgent-date-histogram-showing-2-dates-for-single-date-on-x-axis-when-we-selected-absolute-date-in-calander-in-kibana/250916)
**Author:** [@Prashanth1](https://discuss.elastic.co/u/Prashanth1)\ **Replies:** 2\ **Last updated:** [October 5, 2020, 6:10am UTC](https://discuss.elastic.co/t/urgent-date-histogram-showing-2-dates-for-single-date-on-x-axis-when-we-selected-absolute-date-in-calander-in-kibana/250916 "2020-10-05T06:10:07Z")
Hi All, I am new to ELK stack so I couldn't able to resolve this. Could any one help me to resolve this issue. My problem is that when I have selected date from September 25th to 28th it should only one date on X-axis b… --- ## [HELP \[illegal\_argument\_exception: index.lifecycle.rollover\_alias \[sonicwall-\*\] does not point to index \[sonicwall-2020.09.28-000001\]\]](https://discuss.elastic.co/t/help-illegal-argument-exception-index-lifecycle-rollover-alias-sonicwall-does-not-point-to-index-sonicwall-2020-09-28-000001/250281)
**Author:** [@Akbar\_Maulana](https://discuss.elastic.co/u/Akbar_Maulana)\ **Replies:** 4\ **Last updated:** [October 5, 2020, 4:00am UTC](https://discuss.elastic.co/t/help-illegal-argument-exception-index-lifecycle-rollover-alias-sonicwall-does-not-point-to-index-sonicwall-2020-09-28-000001/250281 "2020-10-05T04:00:04Z")
I use this configuration for my indices but always returned with this error PUT \_template/sonicwall?include\_type\_name { "version": 60001, "order": 0, "index\_patterns": \[ "sonicwall-" \], "settings": { "index": { … --- ## [Wrong timestamp suricata module](https://discuss.elastic.co/t/wrong-timestamp-suricata-module/250876)
**Author:** [@nunex\_17](https://discuss.elastic.co/u/nunex_17)\ **Replies:** 3\ **Last updated:** [October 4, 2020, 4:34pm UTC](https://discuss.elastic.co/t/wrong-timestamp-suricata-module/250876 "2020-10-04T16:34:22Z")
Hi. I+m having a problem with my suricata logs on kibana. My server and kibana are configured with the time Europe/Lisbon. The eve.json logs are in the correct timestamp. But when i move to kibana, the logs are shown in … --- ## [Creating alerts in Kibana for a specific query](https://discuss.elastic.co/t/creating-alerts-in-kibana-for-a-specific-query/250740)
**Author:** [@vpurushottam](https://discuss.elastic.co/u/vpurushottam)\ **Replies:** 4\ **Last updated:** [October 4, 2020, 12:13pm UTC](https://discuss.elastic.co/t/creating-alerts-in-kibana-for-a-specific-query/250740 "2020-10-04T12:13:06Z")
Hi, I am struggling with creating an alert on Kibana. I have the license and have Slack notification connected. I have logs coming in from a HIDS and from those logs, which has logs for many different kind of activities… --- ## [The context.thresholdOf, context.metricOf and context.valueOf not working in inventory alert](https://discuss.elastic.co/t/the-context-thresholdof-context-metricof-and-context-valueof-not-working-in-inventory-alert/250094)
**Author:** [@mohanr](https://discuss.elastic.co/u/mohanr)\ **Replies:** 5\ **Last updated:** [October 3, 2020, 5:44pm UTC](https://discuss.elastic.co/t/the-context-thresholdof-context-metricof-and-context-valueof-not-working-in-inventory-alert/250094 "2020-10-03T17:44:25Z")
Hi, I am using the ELK 7.8.0 and making an inventory alert. I have created an action message as shown below. But I am not getting values for context.thresholdOf, context.metricOf and context.valueOf. I have also trie… --- ## [Painless Script with name contain dot](https://discuss.elastic.co/t/painless-script-with-name-contain-dot/249231)
**Author:** [@Narendra\_Jain](https://discuss.elastic.co/u/Narendra_Jain)\ **Replies:** 2\ **Last updated:** [October 3, 2020, 2:21am UTC](https://discuss.elastic.co/t/painless-script-with-name-contain-dot/249231 "2020-10-03T02:21:15Z")
Hi, I have field name with dot. like param.request\_id, this is actual field name and not Actual: { "param.request\_id": 12343 } Not like { "param" : { "request\_id": 12343 } } . when i try scripted filed i… --- ## [Devtools only showing 10,000 hits](https://discuss.elastic.co/t/devtools-only-showing-10-000-hits/250663)
**Author:** [@chapmantrain](https://discuss.elastic.co/u/chapmantrain)\ **Replies:** 2\ **Last updated:** [October 2, 2020, 7:25pm UTC](https://discuss.elastic.co/t/devtools-only-showing-10-000-hits/250663 "2020-10-02T19:25:23Z")
I have just installed Elasticsearch 7.8.0 on my laptop as a dev environment. I am using 6.8.10 in production. I have a dataset of around 600,000 documents however when I did a match\_all in devtools, its only showing 10,0… --- ## [How to do Nested for Multiple objects arrays in Kibana to create the dashboards](https://discuss.elastic.co/t/how-to-do-nested-for-multiple-objects-arrays-in-kibana-to-create-the-dashboards/250709)
**Author:** [@Prabhu.292](https://discuss.elastic.co/u/Prabhu.292)\ **Replies:** 3\ **Last updated:** [October 2, 2020, 6:01pm UTC](https://discuss.elastic.co/t/how-to-do-nested-for-multiple-objects-arrays-in-kibana-to-create-the-dashboards/250709 "2020-10-02T18:01:09Z")
Hi All, Below is the data set in kibana. My requirement is mentioned below for the kibana dashboards. department wise male & female gender ratio 2.department wise subject count 3.department wise age group people in… --- ## [Create histogram with group by count (binned data)](https://discuss.elastic.co/t/create-histogram-with-group-by-count-binned-data/250512)
**Author:** [@Pond](https://discuss.elastic.co/u/Pond)\ **Replies:** 8\ **Last updated:** [October 2, 2020, 5:57pm UTC](https://discuss.elastic.co/t/create-histogram-with-group-by-count-binned-data/250512 "2020-10-02T17:57:26Z")
Hi, I have devices users are using: {"userID":"1", "deviceID": "11"} {"userID":"1", "deviceID": "12"} {"userID":"1", "deviceID": "13"} {"userID":"2", "deviceID": "21"} {"userID":"2", "deviceID": "22"} {"userID":"3… --- ## [Setting Alerting configuration on Kibana 7.9](https://discuss.elastic.co/t/setting-alerting-configuration-on-kibana-7-9/250530)
**Author:** [@ushma.shah](https://discuss.elastic.co/u/ushma.shah)\ **Replies:** 11\ **Last updated:** [October 2, 2020, 2:53pm UTC](https://discuss.elastic.co/t/setting-alerting-configuration-on-kibana-7-9/250530 "2020-10-02T14:53:38Z")
I am using basic license for elastic search with on-premises deployment without security. I want to get started with Alerting and Actions in Kibana 7.9. I have set xpack.encryptedSavedObjects.encryptionKey value as pe… --- ## [Create visualization in Kibana](https://discuss.elastic.co/t/create-visualization-in-kibana/250109)
**Author:** [@malsioufi](https://discuss.elastic.co/u/malsioufi)\ **Replies:** 4\ **Last updated:** [October 2, 2020, 11:55am UTC](https://discuss.elastic.co/t/create-visualization-in-kibana/250109 "2020-10-02T11:55:27Z")
I have a csv file with data structure something like this I managed to ingest this data to elasticsearch via the import interface in Kibana. and now I have an index "example" with a related index pattern and the docum… --- ## [Add Filter in discovery](https://discuss.elastic.co/t/add-filter-in-discovery/250333)
**Author:** [@graimato](https://discuss.elastic.co/u/graimato)\ **Replies:** 2\ **Last updated:** [October 2, 2020, 8:39am UTC](https://discuss.elastic.co/t/add-filter-in-discovery/250333 "2020-10-02T08:39:59Z")
Dear All, I'm trying to filter logs but when I choose value of the field the option menu does not show all possible values but only one part. there is a way to force it to show all possibilities? thanks for your time --- ## [Kibana Word Cloud on Text Field](https://discuss.elastic.co/t/kibana-word-cloud-on-text-field/250523)
**Author:** [@spyderman4g63](https://discuss.elastic.co/u/spyderman4g63)\ **Replies:** 10\ **Last updated:** [October 2, 2020, 7:21am UTC](https://discuss.elastic.co/t/kibana-word-cloud-on-text-field/250523 "2020-10-02T07:21:16Z")
I'm trying to create a word cloud on a text field called "message". This is my configuration for the field in elasticsearch: { "my\_index" : { "mappings" : { "message" : { "full\_name" : "message", … --- ## [How to convert the date format - From DOUBLE to Datetime in KIbana elastic search](https://discuss.elastic.co/t/how-to-convert-the-date-format-from-double-to-datetime-in-kibana-elastic-search/250713)
**Author:** [@Prabhu.292](https://discuss.elastic.co/u/Prabhu.292)\ **Replies:** 2\ **Last updated:** [October 2, 2020, 6:09am UTC](https://discuss.elastic.co/t/how-to-convert-the-date-format-from-double-to-datetime-in-kibana-elastic-search/250713 "2020-10-02T06:09:53Z")
Could you please help with the below issue. Is there anyway can we change the date format for the below mentioned columns? Time\_token : 1.6013861887237842E9 Created\_at: 1.600254825E9 I want to create the dashboards b… --- ## [Trouble setting up TLS in Kibana with Docker](https://discuss.elastic.co/t/trouble-setting-up-tls-in-kibana-with-docker/250041)
**Author:** [@Cyberdemic](https://discuss.elastic.co/u/Cyberdemic)\ **Replies:** 15\ **Last updated:** [October 2, 2020, 5:20am UTC](https://discuss.elastic.co/t/trouble-setting-up-tls-in-kibana-with-docker/250041 "2020-10-02T05:20:49Z")
I'm trying to setup ELK stack in Docker Swarm following this guide with some modifications. I've tried a number of different options, and while it's helped me learn more of ELK, I still haven't managed to get it working… --- ## [Elasticsearch/Kibana 7.9 - Troubleshooting](https://discuss.elastic.co/t/elasticsearch-kibana-7-9-troubleshooting/250735)
**Author:** [@kercio](https://discuss.elastic.co/u/kercio)\ **Replies:** 3\ **Last updated:** [October 2, 2020, 2:32am UTC](https://discuss.elastic.co/t/elasticsearch-kibana-7-9-troubleshooting/250735 "2020-10-02T02:32:43Z")
What is the best way to troubleshoot in Elasticsearch/Kibana to find the root cause why only part of my raw data is getting indexed? Currently I have Kibana 6.2 and 7.9 in my environment. While in Kibana 6.2 one of the… --- ## [Find number of matching pair, display in pie chart](https://discuss.elastic.co/t/find-number-of-matching-pair-display-in-pie-chart/249503)
**Author:** [@nameisnotimportant](https://discuss.elastic.co/u/nameisnotimportant)\ **Replies:** 5\ **Last updated:** [October 2, 2020, 1:18am UTC](https://discuss.elastic.co/t/find-number-of-matching-pair-display-in-pie-chart/249503 "2020-10-02T01:18:05Z")
Hi, Say i have a table of records like below: Is it possible to use Kibana visualization to find and display the total number of matching pair where FundA is follow by DD (within the same SessionID) and the total num… --- ## [Kibana canvasrender options](https://discuss.elastic.co/t/kibana-canvasrender-options/250558)
**Author:** [@Robin020](https://discuss.elastic.co/u/Robin020)\ **Replies:** 4\ **Last updated:** [October 1, 2020, 11:14pm UTC](https://discuss.elastic.co/t/kibana-canvasrender-options/250558 "2020-10-01T23:14:52Z")
Hello, Is there documentation about canvasrender options? I am trying to change the filling color of a gauge in canvas. --- ## [Yarn start not starting up](https://discuss.elastic.co/t/yarn-start-not-starting-up/250426)
**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Replies:** 4\ **Last updated:** [October 1, 2020, 7:26pm UTC](https://discuss.elastic.co/t/yarn-start-not-starting-up/250426 "2020-10-01T19:26:29Z")
i am trying to follow https://www.elastic.co/guide/en/kibana/7.9/development-getting-started.html . But when i do yarn kbn bootstrap I get the below error. Instead of cloning I downloaded the branch. \[4/5\] Linking depen… --- ## [Custom table color](https://discuss.elastic.co/t/custom-table-color/250594)
**Author:** [@anjana1](https://discuss.elastic.co/u/anjana1)\ **Replies:** 6\ **Last updated:** [October 1, 2020, 6:33pm UTC](https://discuss.elastic.co/t/custom-table-color/250594 "2020-10-01T18:33:41Z")
Kibana version : 7.9 Elasticsearch version : 7.9 APM Server version : 7.9 APM Agent language and version : java 1.8 Fresh install or upgraded from other version? fresh install Is there anything special in your … --- ## [Strict comparison](https://discuss.elastic.co/t/strict-comparison/250550)
**Author:** [@pcuvi](https://discuss.elastic.co/u/pcuvi)\ **Replies:** 2\ **Last updated:** [October 1, 2020, 5:46pm UTC](https://discuss.elastic.co/t/strict-comparison/250550 "2020-10-01T17:46:50Z")
Hello all, I want to find a document where "data.city:Barcelona". Thus, the query should return the doc 2 but not doc 1. How can I do it? Currently, I am doing a Lucene query on Kibana using "data.city:Barcelona" and i… --- ## [Getting Error while trying to create and Index Pattern : "Error Fetching Fields" "Request Entity Too Large"](https://discuss.elastic.co/t/getting-error-while-trying-to-create-and-index-pattern-error-fetching-fields-request-entity-too-large/248835)
**Author:** [@Sebastien\_Lelak](https://discuss.elastic.co/u/Sebastien_Lelak)\ **Replies:** 15\ **Last updated:** [October 1, 2020, 3:08pm UTC](https://discuss.elastic.co/t/getting-error-while-trying-to-create-and-index-pattern-error-fetching-fields-request-entity-too-large/248835 "2020-10-01T15:08:41Z")
Greetings, We have an elastic cluster containing 12 nodes and 1.4Tb of documents, daily indexed through a total of 7.5k shards. Everything was working fine, but a human error caused the deletion of the .kibana\* indexes… --- ## [Wrong timestamp on kibana](https://discuss.elastic.co/t/wrong-timestamp-on-kibana/249979)
**Author:** [@leostereo](https://discuss.elastic.co/u/leostereo)\ **Replies:** 6\ **Last updated:** [October 1, 2020, 1:35pm UTC](https://discuss.elastic.co/t/wrong-timestamp-on-kibana/249979 "2020-10-01T13:35:01Z")
Hi , guys. I can not properly set time on my kibana web. As you can see on picture bellow , timestamp on kibana and timestamp on elasticsearch returned document has a 3 hours difference. Other: Both , kiabana and ela… --- ## [Error after switching to ECS: 1 of 2 shards failed The data you are seeing might be incomplete or wrong](https://discuss.elastic.co/t/error-after-switching-to-ecs-1-of-2-shards-failed-the-data-you-are-seeing-might-be-incomplete-or-wrong/250540)
**Author:** [@michielvoo](https://discuss.elastic.co/u/michielvoo)\ **Replies:** 1\ **Last updated:** [October 1, 2020, 1:20pm UTC](https://discuss.elastic.co/t/error-after-switching-to-ecs-1-of-2-shards-failed-the-data-you-are-seeing-might-be-incomplete-or-wrong/250540 "2020-10-01T13:20:01Z")
I recently changed the logging configuration in my .NET application to use the official Serilog ECS formatter from Elastic (based on the recommendation in this official documentation). Now when I go to the discover app … [Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=418) [Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=420)