# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=425

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 426

---

## [Kibana Transform index using terms aggregation](https://discuss.elastic.co/t/kibana-transform-index-using-terms-aggregation/249122)

<div class="topic-metadata">

**Author:** [@geekganesh](https://discuss.elastic.co/u/geekganesh)\
**Replies:** 2\
**Last updated:** [September 21, 2020, 6:49am UTC](https://discuss.elastic.co/t/kibana-transform-index-using-terms-aggregation/249122 "2020-09-21T06:49:11Z")

</div>

I am using Elastic Cloud v 7.5.2. I am trying to transform the index, where i want the term count to be aggregated. In Kibana UI, Define Pivot does not have provision to take terms aggregation. How to achieve it? Is the …

---

## [Tracking Sales Against Goals](https://discuss.elastic.co/t/tracking-sales-against-goals/249047)

<div class="topic-metadata">

**Author:** [@mykael](https://discuss.elastic.co/u/mykael)\
**Replies:** 3\
**Last updated:** [September 21, 2020, 5:47am UTC](https://discuss.elastic.co/t/tracking-sales-against-goals/249047 "2020-09-21T05:47:47Z")

</div>

I'm looking for suggestions on how to handle this in Kibana. I've got one index that contains sales goals. Each record has a state, a month and a slaes goal for that month. Say, In WA, in August, we want to sell 600 i…

---

## [Split message field into multiple fields in kibana](https://discuss.elastic.co/t/split-message-field-into-multiple-fields-in-kibana/249262)

<div class="topic-metadata">

**Author:** [@chand](https://discuss.elastic.co/u/chand)\
**Replies:** 4\
**Last updated:** [September 21, 2020, 5:39am UTC](https://discuss.elastic.co/t/split-message-field-into-multiple-fields-in-kibana/249262 "2020-09-21T05:39:05Z")

</div>

I've the following data for the message field which is being shipped by filebeat to elasticseatch. I am not using Logstash here 2020-09-20 15:44:23 ::1 get / - 80 - ::1 mozilla/5.0+(windows+nt+10.0;+win64;+x64)+window…

---

## [Kibana how to export csv](https://discuss.elastic.co/t/kibana-how-to-export-csv/249298)

<div class="topic-metadata">

**Author:** [@111387](https://discuss.elastic.co/u/111387)\
**Replies:** 1\
**Last updated:** [September 21, 2020, 5:33am UTC](https://discuss.elastic.co/t/kibana-how-to-export-csv/249298 "2020-09-21T05:33:52Z")

</div>

i installed kibana and recevied data using logstash i want to export data to csv but share-\> csv reports -\> generate csv button is disabled.. kibana version is 7.9 and license is basic basic license can't using export…

---

## [Kibana redirect to page: Select your space after a day, all data is reset. (ver: 7.8.0)](https://discuss.elastic.co/t/kibana-redirect-to-page-select-your-space-after-a-day-all-data-is-reset-ver-7-8-0/245908)

<div class="topic-metadata">

**Author:** [@lucky\_luke15190](https://discuss.elastic.co/u/lucky_luke15190)\
**Replies:** 5\
**Last updated:** [September 21, 2020, 3:59am UTC](https://discuss.elastic.co/t/kibana-redirect-to-page-select-your-space-after-a-day-all-data-is-reset-ver-7-8-0/245908 "2020-09-21T03:59:50Z")

</div>

I have built kibana with elasticsearch and filebeat, it's running well with filebeat default index, own dashboard. After 1 day, it redirect to page: Select your space, no spaces match search criteria. This can be fixed…

---

## [Error in Kibana "xpack =\> unable to get local issuer certificate"](https://discuss.elastic.co/t/error-in-kibana-xpack-unable-to-get-local-issuer-certificate/249226)

<div class="topic-metadata">

**Author:** [@Abhishek\_Kumar7](https://discuss.elastic.co/u/Abhishek_Kumar7)\
**Replies:** 1\
**Last updated:** [September 21, 2020, 12:24am UTC](https://discuss.elastic.co/t/error-in-kibana-xpack-unable-to-get-local-issuer-certificate/249226 "2020-09-21T00:24:47Z")

</div>

I have a single node server with ES and Kibana hosted on it. I have put them behind an ELB , under a domain name . Assume :- kibana.xyz.com and elasticsearch.xyz.com I have enabled http ssl in elasticsearch and copy pa…

---

## [Read Only Repo FTP with username, password](https://discuss.elastic.co/t/read-only-repo-ftp-with-username-password/249079)

<div class="topic-metadata">

**Author:** [@binhvq](https://discuss.elastic.co/u/binhvq)\
**Replies:** 1\
**Last updated:** [September 20, 2020, 9:34pm UTC](https://discuss.elastic.co/t/read-only-repo-ftp-with-username-password/249079 "2020-09-20T21:34:48Z")

</div>

Hi! I'm use ftp for snap shot repo, but i can't find document for ftp repo with port, usename, password for repo. I can find format of url ftp://username:password@server but it's not work. Please help me.

---

## [Error message splitting series by scripted field terms agg](https://discuss.elastic.co/t/error-message-splitting-series-by-scripted-field-terms-agg/249264)

<div class="topic-metadata">

**Author:** [@NiclasK](https://discuss.elastic.co/u/NiclasK)\
**Replies:** 2\
**Last updated:** [September 20, 2020, 9:15pm UTC](https://discuss.elastic.co/t/error-message-splitting-series-by-scripted-field-terms-agg/249264 "2020-09-20T21:15:10Z")

</div>

Hi, I added one scripted field. It adds a Category string field based on an existing string field. When I try to split series using terms agg and the scripted field in a bar visualization I get the following error mes…

---

## [Bar chart percentage mode?](https://discuss.elastic.co/t/bar-chart-percentage-mode/249214)

<div class="topic-metadata">

**Author:** [@NiclasK](https://discuss.elastic.co/u/NiclasK)\
**Replies:** 1\
**Last updated:** [September 19, 2020, 8:54pm UTC](https://discuss.elastic.co/t/bar-chart-percentage-mode/249214 "2020-09-19T20:54:10Z")

</div>

Is there a percentage mode for stacked bar charts in Kibana 7.9.1? I've seen some references to it, but I can't find it...

---

## [Visualization Type Lens not present in Kibana 7.9 on windows](https://discuss.elastic.co/t/visualization-type-lens-not-present-in-kibana-7-9-on-windows/249187)

<div class="topic-metadata">

**Author:** [@Puttappaiahm](https://discuss.elastic.co/u/Puttappaiahm)\
**Replies:** 1\
**Last updated:** [September 18, 2020, 11:58pm UTC](https://discuss.elastic.co/t/visualization-type-lens-not-present-in-kibana-7-9-on-windows/249187 "2020-09-18T23:58:16Z")

</div>

I have installed ELK on windows. Under Kibana Visualizations I do not see the type 'Lens', I see all other types Area, Bar etc.. ANy suggestions on How to enable Lens? Thanks

---

## [Hide some of "available fields" in Kibana Discover](https://discuss.elastic.co/t/hide-some-of-available-fields-in-kibana-discover/249088)

<div class="topic-metadata">

**Author:** [@a1tus](https://discuss.elastic.co/u/a1tus)\
**Replies:** 4\
**Last updated:** [September 18, 2020, 7:35pm UTC](https://discuss.elastic.co/t/hide-some-of-available-fields-in-kibana-discover/249088 "2020-09-18T19:35:21Z")

</div>

Hello. We've structured our logs so that we have only a few indexed and searchable fields and all the rest goes into "extra" field that is not indexed and can't be searched (so we put there arbitrary keys and values tha…

---

## [Issue Vega to plot timeseries data in longer time range](https://discuss.elastic.co/t/issue-vega-to-plot-timeseries-data-in-longer-time-range/249067)

<div class="topic-metadata">

**Author:** [@f2020](https://discuss.elastic.co/u/f2020)\
**Replies:** 1\
**Last updated:** [September 18, 2020, 5:23pm UTC](https://discuss.elastic.co/t/issue-vega-to-plot-timeseries-data-in-longer-time-range/249067 "2020-09-18T17:23:49Z")

</div>

Hi, Currently we are facing an issue when plot the Vega chart in longer time range (1 year) , the recent data not shown. For example: if the time range set to 1 year such as from 9/18/2019 to 9/18/2020. The chart only …

---

## [Is there any painless console to use](https://discuss.elastic.co/t/is-there-any-painless-console-to-use/249043)

<div class="topic-metadata">

**Author:** [@dotnet85](https://discuss.elastic.co/u/dotnet85)\
**Replies:** 1\
**Last updated:** [September 18, 2020, 7:01am UTC](https://discuss.elastic.co/t/is-there-any-painless-console-to-use/249043 "2020-09-18T07:01:59Z")

</div>

I am using Kibana 7.2.0. and I cannot find Painless Playground in DevTools. I think it is undess X-Pack? Is there a way to activate it? or an online console to get familier with Painless? or standalone tool for it? Than…

---

## [How to change Kibana Notification popup CSS](https://discuss.elastic.co/t/how-to-change-kibana-notification-popup-css/248271)

<div class="topic-metadata">

**Author:** [@chandu5565](https://discuss.elastic.co/u/chandu5565)\
**Replies:** 2\
**Last updated:** [September 18, 2020, 4:25am UTC](https://discuss.elastic.co/t/how-to-change-kibana-notification-popup-css/248271 "2020-09-18T04:25:02Z")

</div>

Hi, Objective : I have to change the notification popup from bottom to top. I have upgraded kibana from 7.5.1 to 7.9.0 Earlier we had made change in file /usr/share/kibana/node\_modules/@elastic/eui/dist/eui\_theme\_ligh…

---

## [Prerequisites for ELK and Filebeat](https://discuss.elastic.co/t/prerequisites-for-elk-and-filebeat/248946)

<div class="topic-metadata">

**Author:** [@sumitsahay](https://discuss.elastic.co/u/sumitsahay)\
**Replies:** 5\
**Last updated:** [September 18, 2020, 12:56am UTC](https://discuss.elastic.co/t/prerequisites-for-elk-and-filebeat/248946 "2020-09-18T00:56:10Z")

</div>

Hi Team, Just wanted to know the CPU and RAM Prerequisites for ELK and Filebeat, if we deploy this in Infra where we can captures log around 500 client node. Please suggest the configuration for this. Thanks

---

## [Can not create script field by using regex in kibana](https://discuss.elastic.co/t/can-not-create-script-field-by-using-regex-in-kibana/248967)

<div class="topic-metadata">

**Author:** [@le\_ba\_nam](https://discuss.elastic.co/u/le_ba_nam)\
**Replies:** 2\
**Last updated:** [September 18, 2020, 12:53am UTC](https://discuss.elastic.co/t/can-not-create-script-field-by-using-regex-in-kibana/248967 "2020-09-18T00:53:53Z")

</div>

I want to create new script field in Kibana. I want to using regex to cut some text from another field ('message') and fill to new script field. I follow instruction link below: ( Match a string and return that matc…

---

## [How to modify data table column values in Kibana](https://discuss.elastic.co/t/how-to-modify-data-table-column-values-in-kibana/248989)

<div class="topic-metadata">

**Author:** [@geekganesh](https://discuss.elastic.co/u/geekganesh)\
**Replies:** 2\
**Last updated:** [September 17, 2020, 11:26pm UTC](https://discuss.elastic.co/t/how-to-modify-data-table-column-values-in-kibana/248989 "2020-09-17T23:26:13Z")

</div>

In Elastic search we store events, I have built data table which aggregates based on event types. I have filter which checks for event.keyword : "job-completed". I am getting the count as 1 or 0 but i want to display as …

---

## [How to change the huge amount of data formats of my index pattern at once?](https://discuss.elastic.co/t/how-to-change-the-huge-amount-of-data-formats-of-my-index-pattern-at-once/248937)

<div class="topic-metadata">

**Author:** [@m-amano](https://discuss.elastic.co/u/m-amano)\
**Replies:** 1\
**Last updated:** [September 17, 2020, 10:23pm UTC](https://discuss.elastic.co/t/how-to-change-the-huge-amount-of-data-formats-of-my-index-pattern-at-once/248937 "2020-09-17T22:23:16Z")

</div>

I want to change the data format from default to string. However it is too many to change from the UI. Is Reindex API able to use or other Restful API to do so?

---

## [Elasticsearch query works in kibana but not code](https://discuss.elastic.co/t/elasticsearch-query-works-in-kibana-but-not-code/249032)

<div class="topic-metadata">

**Author:** [@martinradio](https://discuss.elastic.co/u/martinradio)\
**Replies:** 3\
**Last updated:** [September 17, 2020, 8:50pm UTC](https://discuss.elastic.co/t/elasticsearch-query-works-in-kibana-but-not-code/249032 "2020-09-17T20:50:26Z")

</div>

I have a query string source.keyword: "chewy" and is\_discontinued:"false" that if I run in the Kibana UI, returns the correct number: If I try to run the query in code though, it returns an incorrect number: GET /i…

---

## [Importing vulnwhisperer kibana.json file for out of the box visualization in kibana dashboard](https://discuss.elastic.co/t/importing-vulnwhisperer-kibana-json-file-for-out-of-the-box-visualization-in-kibana-dashboard/248889)

<div class="topic-metadata">

**Author:** [@Subhadeep](https://discuss.elastic.co/u/Subhadeep)\
**Replies:** 8\
**Last updated:** [September 17, 2020, 1:36pm UTC](https://discuss.elastic.co/t/importing-vulnwhisperer-kibana-json-file-for-out-of-the-box-visualization-in-kibana-dashboard/248889 "2020-09-17T13:36:58Z")

</div>

Hello Guys, I am extracting reports from Openvas through vulnwhisperer and I would like to view it on my kibana dashboard. I have the configuration file provided by vulnwhisperer which is kibana.json. Could anyone pleas…

---

## [Visualization of array vs array from a single document](https://discuss.elastic.co/t/visualization-of-array-vs-array-from-a-single-document/248528)

<div class="topic-metadata">

**Author:** [@Leonid\_Pantaler](https://discuss.elastic.co/u/Leonid_Pantaler)\
**Replies:** 4\
**Last updated:** [September 17, 2020, 1:17pm UTC](https://discuss.elastic.co/t/visualization-of-array-vs-array-from-a-single-document/248528 "2020-09-17T13:17:40Z")

</div>

Hi, I'm new to kibana and trying to create a line visualization from arrays given in a single document Let's say some document has the following arrays: A: \[55, 99, 57, 8\] B: \[1, 2, 3, 4\] I want B to be my X axis an…

---

## [Some entries missing when uploading json file in kibana](https://discuss.elastic.co/t/some-entries-missing-when-uploading-json-file-in-kibana/248448)

<div class="topic-metadata">

**Author:** [@Kanav\_Ghai](https://discuss.elastic.co/u/Kanav_Ghai)\
**Replies:** 3\
**Last updated:** [September 17, 2020, 12:46pm UTC](https://discuss.elastic.co/t/some-entries-missing-when-uploading-json-file-in-kibana/248448 "2020-09-17T12:46:53Z")

</div>

I have 153 entries in my json file, but when i upload the corresponding log file in kibana, it shows 121 entires (sometimes lesser) . I don't understand why is it missing out a few entries. Below is my conf file inp…

---

## [Stack monitoring: self vs metricbeat monitoring](https://discuss.elastic.co/t/stack-monitoring-self-vs-metricbeat-monitoring/248858)

<div class="topic-metadata">

**Author:** [@robertitox](https://discuss.elastic.co/u/robertitox)\
**Replies:** 2\
**Last updated:** [September 17, 2020, 12:27pm UTC](https://discuss.elastic.co/t/stack-monitoring-self-vs-metricbeat-monitoring/248858 "2020-09-17T12:27:06Z")

</div>

Dear all, I have an ELK 7.9.1 platform. When I go to Kibana --\> Stack Monitoring, I can see Elasticsearcxj, Kibana and Beats with SELF MONITORING, but I have the option to change to METRICBEAT MONITORING using this beat…

---

## [How to apply different index patterns to same dashboard and its widgets?](https://discuss.elastic.co/t/how-to-apply-different-index-patterns-to-same-dashboard-and-its-widgets/248723)

<div class="topic-metadata">

**Author:** [@DSMilestone](https://discuss.elastic.co/u/DSMilestone)\
**Replies:** 2\
**Last updated:** [September 17, 2020, 12:13pm UTC](https://discuss.elastic.co/t/how-to-apply-different-index-patterns-to-same-dashboard-and-its-widgets/248723 "2020-09-17T12:13:49Z")

</div>

I have created a kibana dashboard for katalon reports for my API services. For that I have created a index pattern api\_katalon\_reports\*. all the widgets inside that dashboard use this index pattern. Now, I have katalon …

---

## [How to Send the alerts to opsgenie from kibana](https://discuss.elastic.co/t/how-to-send-the-alerts-to-opsgenie-from-kibana/246631)

<div class="topic-metadata">

**Author:** [@Bala\_Kumaar\_1653](https://discuss.elastic.co/u/Bala_Kumaar_1653)\
**Replies:** 7\
**Last updated:** [September 17, 2020, 11:44am UTC](https://discuss.elastic.co/t/how-to-send-the-alerts-to-opsgenie-from-kibana/246631 "2020-09-17T11:44:52Z")

</div>

Hi all, Can anyone help me out on sending the alerts to opsgenie from kibana. In actions i selected Webhook and pasted the Opsgenie webhook url, but still its not working..!!

---

## [KQL (or SQL or DSL): How to do transaction/pairing up between events based on a same sessiond, user combo?](https://discuss.elastic.co/t/kql-or-sql-or-dsl-how-to-do-transaction-pairing-up-between-events-based-on-a-same-sessiond-user-combo/248877)

<div class="topic-metadata">

**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\
**Replies:** 3\
**Last updated:** [September 17, 2020, 9:40am UTC](https://discuss.elastic.co/t/kql-or-sql-or-dsl-how-to-do-transaction-pairing-up-between-events-based-on-a-same-sessiond-user-combo/248877 "2020-09-17T09:40:59Z")

</div>

We have certain dataset like below 2020-09-10T01:00:01 entry=1 user=A session=ses1 action=create 2020-09-10T01:01:01 entry=2 user=A session=ses1 action=delete 2020-09-10T01:02:01 entry=3 user=B session=ses2 action=creat…

---

## [I need to get the last document field to visualize](https://discuss.elastic.co/t/i-need-to-get-the-last-document-field-to-visualize/248932)

<div class="topic-metadata">

**Author:** [@dotnet85](https://discuss.elastic.co/u/dotnet85)\
**Replies:** 4\
**Last updated:** [September 17, 2020, 8:56am UTC](https://discuss.elastic.co/t/i-need-to-get-the-last-document-field-to-visualize/248932 "2020-09-17T08:56:26Z")

</div>

I have created an index and I would like to get the latest value available in the index e.g.: { "\_index": "tester", "\_type": "\_doc", "\_id": "Qujl-nMBaIdydddddd", "\_version": 1, "\_score": 0, "\_source": { …

---

## [How to filter all in KQL](https://discuss.elastic.co/t/how-to-filter-all-in-kql/248908)

<div class="topic-metadata">

**Author:** [@syafeera](https://discuss.elastic.co/u/syafeera)\
**Replies:** 2\
**Last updated:** [September 17, 2020, 7:28am UTC](https://discuss.elastic.co/t/how-to-filter-all-in-kql/248908 "2020-09-17T07:28:32Z")

</div>

HI all, may i know how i want to filter all panw.panos.threat.id in KQL?

---

## [Kibana can't create Index](https://discuss.elastic.co/t/kibana-cant-create-index/248622)

<div class="topic-metadata">

**Author:** [@Funky89](https://discuss.elastic.co/u/Funky89)\
**Replies:** 3\
**Last updated:** [September 17, 2020, 6:53am UTC](https://discuss.elastic.co/t/kibana-cant-create-index/248622 "2020-09-17T06:53:17Z")

</div>

Hello everyone, I have followed the steps of @knrdv at this post : and it still does not work Here is a picture of what I did : Connector : Template : Alert : I have nothing here : In…

---

## [Remove time chart from Discover in Kibana](https://discuss.elastic.co/t/remove-time-chart-from-discover-in-kibana/248860)

<div class="topic-metadata">

**Author:** [@Cosmin\_Marginean1](https://discuss.elastic.co/u/Cosmin_Marginean1)\
**Replies:** 7\
**Last updated:** [September 17, 2020, 6:36am UTC](https://discuss.elastic.co/t/remove-time-chart-from-discover-in-kibana/248860 "2020-09-17T06:36:17Z")

</div>

We're using Kibana 7.2.0 and we'd very much like to remove the bar chart at the top of the Discover section (see below) but we couldn't find the setting for it. Thanks!

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=424)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=426)
