# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=433

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 434

---

## [Fliebeat netflow vs elastiflow](https://discuss.elastic.co/t/fliebeat-netflow-vs-elastiflow/247114)

<div class="topic-metadata">

**Author:** [@leostereo](https://discuss.elastic.co/u/leostereo)\
**Replies:** 1\
**Last updated:** [September 2, 2020, 4:22am UTC](https://discuss.elastic.co/t/fliebeat-netflow-vs-elastiflow/247114 "2020-09-02T04:22:52Z")

</div>

Hello , here im, trying to find a nice solution for netflow analisis. After reading elastiflow at https://github.com/robcowart/elastiflow And testing my recently working filebeat netflow module can not find more than …

---

## [Kibana inline script](https://discuss.elastic.co/t/kibana-inline-script/245331)

<div class="topic-metadata">

**Author:** [@kinlee](https://discuss.elastic.co/u/kinlee)\
**Replies:** 6\
**Last updated:** [September 2, 2020, 1:00am UTC](https://discuss.elastic.co/t/kibana-inline-script/245331 "2020-09-02T01:00:09Z")

</div>

As per docu, it says "If you use Kibana, set script.allowed\_types to both or inline . Some Kibana features rely on inline scripts and do not function as expected if Elasticsearch does not allow inline scripts." wha…

---

## [Date Range series in Kibana: how to fit the global date range filter of kibana?](https://discuss.elastic.co/t/date-range-series-in-kibana-how-to-fit-the-global-date-range-filter-of-kibana/247107)

<div class="topic-metadata">

**Author:** [@dao](https://discuss.elastic.co/u/dao)\
**Replies:** 3\
**Last updated:** [September 1, 2020, 7:59pm UTC](https://discuss.elastic.co/t/date-range-series-in-kibana-how-to-fit-the-global-date-range-filter-of-kibana/247107 "2020-09-01T19:59:14Z")

</div>

I have created this date range filter on a visualization using the acceptable date formats here is my first draft OK, I am happy if I stick to now. But if I go back in time in my global filter, then the visualizati…

---

## [Remove Multiple entries in visualization](https://discuss.elastic.co/t/remove-multiple-entries-in-visualization/246327)

<div class="topic-metadata">

**Author:** [@jerin](https://discuss.elastic.co/u/jerin)\
**Replies:** 4\
**Last updated:** [September 1, 2020, 5:07pm UTC](https://discuss.elastic.co/t/remove-multiple-entries-in-visualization/246327 "2020-09-01T17:07:32Z")

</div>

Hello , I am trying to remove duplicate values in kibana viz Example : i have two keys and values Key: id value: value1 key:status value: value1 key:id value:value1 key:status value:value2 if you look above F…

---

## [Problem with build dev kibana plugin in 7.8](https://discuss.elastic.co/t/problem-with-build-dev-kibana-plugin-in-7-8/247046)

<div class="topic-metadata">

**Author:** [@Ali\_Zali](https://discuss.elastic.co/u/Ali_Zali)\
**Replies:** 2\
**Last updated:** [September 1, 2020, 4:51pm UTC](https://discuss.elastic.co/t/problem-with-build-dev-kibana-plugin-in-7-8/247046 "2020-09-01T16:51:06Z")

</div>

Hi I want to build an external kibana plugin. I create plugin with node scripts/generate\_plugin my\_plugin\_name then in the plugin directory yarn build Its work on 7.6 and create build folder with zip file in a few seco…

---

## [How to get metadata file for Kibana to use for OKTA](https://discuss.elastic.co/t/how-to-get-metadata-file-for-kibana-to-use-for-okta/247023)

<div class="topic-metadata">

**Author:** [@FREDDIE2020](https://discuss.elastic.co/u/FREDDIE2020)\
**Replies:** 3\
**Last updated:** [September 1, 2020, 3:32pm UTC](https://discuss.elastic.co/t/how-to-get-metadata-file-for-kibana-to-use-for-okta/247023 "2020-09-01T15:32:51Z")

</div>

Hello, Need to know how to get the metadata file for Kibana. I am needing for Okta setup. ny information greatly appreciated. Thanks, Freddie2020

---

## [Kibana error in log : Unable to connect to Elasticsearch Error: master not discovered exception](https://discuss.elastic.co/t/kibana-error-in-log-unable-to-connect-to-elasticsearch-error-master-not-discovered-exception/247103)

<div class="topic-metadata">

**Author:** [@FREDDIE2020](https://discuss.elastic.co/u/FREDDIE2020)\
**Replies:** 1\
**Last updated:** [September 1, 2020, 2:29pm UTC](https://discuss.elastic.co/t/kibana-error-in-log-unable-to-connect-to-elasticsearch-error-master-not-discovered-exception/247103 "2020-09-01T14:29:29Z")

</div>

Hello All, I am trying to execute mt Kibana UI login and it fails. I checked the logs for the pod and this is what it shows: \[lewellf\_adm@awva-pclif03001 kibana\]$ kubectl logs kibana-75f647cf75-5l5lz -n monitoring-too…

---

## [Scripted fields regular expression not working](https://discuss.elastic.co/t/scripted-fields-regular-expression-not-working/247102)

<div class="topic-metadata">

**Author:** [@greg.melasecca](https://discuss.elastic.co/u/greg.melasecca)\
**Replies:** 1\
**Last updated:** [September 1, 2020, 2:25pm UTC](https://discuss.elastic.co/t/scripted-fields-regular-expression-not-working/247102 "2020-09-01T14:25:33Z")

</div>

I am having issues getting my regular expression to work with my scripted fields. I have the below code (dont judge I am not a developer) and for some reason the same exact line ends up in different "else" clauses. the m…

---

## [Kibana - Stack Monitoring - No structured logs found](https://discuss.elastic.co/t/kibana-stack-monitoring-no-structured-logs-found/241213)

<div class="topic-metadata">

**Author:** [@jason\_0](https://discuss.elastic.co/u/jason_0)\
**Replies:** 22\
**Last updated:** [September 1, 2020, 2:23pm UTC](https://discuss.elastic.co/t/kibana-stack-monitoring-no-structured-logs-found/241213 "2020-09-01T14:23:28Z")

</div>

Hi All, We have an issue where Kibana throws a "No structured logs found" message in the Log section when viewing the Stack Monitoring page, where it should show the last 10 log entries. I have Filebeat running on each…

---

## [Kibana 7.4.1 Does not search string directly](https://discuss.elastic.co/t/kibana-7-4-1-does-not-search-string-directly/245358)

<div class="topic-metadata">

**Author:** [@mricote](https://discuss.elastic.co/u/mricote)\
**Replies:** 5\
**Last updated:** [September 1, 2020, 2:11pm UTC](https://discuss.elastic.co/t/kibana-7-4-1-does-not-search-string-directly/245358 "2020-09-01T14:11:31Z")

</div>

Hi. Kibana 7.4.1 in discover does not found string directly. Any idea? Regards

---

## [Painless script error in getting sameday documents](https://discuss.elastic.co/t/painless-script-error-in-getting-sameday-documents/247061)

<div class="topic-metadata">

**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\
**Replies:** 5\
**Last updated:** [September 1, 2020, 1:23pm UTC](https://discuss.elastic.co/t/painless-script-error-in-getting-sameday-documents/247061 "2020-09-01T13:23:20Z")

</div>

Hi All, We are pulling data into elasticsearch using logstash http\_poller and our datasource is servicenow. We have so many incidents created in a day, i'm trying to write a painless script get get the same day closure…

---

## [Scripted field causes discover to fail kibana 7.8](https://discuss.elastic.co/t/scripted-field-causes-discover-to-fail-kibana-7-8/247083)

<div class="topic-metadata">

**Author:** [@perfectduffer](https://discuss.elastic.co/u/perfectduffer)\
**Replies:** 1\
**Last updated:** [September 1, 2020, 12:45pm UTC](https://discuss.elastic.co/t/scripted-field-causes-discover-to-fail-kibana-7-8/247083 "2020-09-01T12:45:53Z")

</div>

i added a scripted field and after that i can no longer use the discover to search or create filters, on the particular index that i added the field on... this is what i have in scripted field if(doc\['keywords.sentime…

---

## [Unable to uplaod geojson data in Kibana Maps](https://discuss.elastic.co/t/unable-to-uplaod-geojson-data-in-kibana-maps/247029)

<div class="topic-metadata">

**Author:** [@krishnendu](https://discuss.elastic.co/u/krishnendu)\
**Replies:** 1\
**Last updated:** [September 1, 2020, 10:52am UTC](https://discuss.elastic.co/t/unable-to-uplaod-geojson-data-in-kibana-maps/247029 "2020-09-01T10:52:08Z")

</div>

https://opendata.arcgis.com/datasets/2b37b84e67374fb98577c20ef8be6c62\_0.geojson I am trying to upload the above geojson data . Its failing in kibana 7.9 while its working fin on 7.8. Any suggestions ? I tried to upload …

---

## [Query to get one doc out of its duplicate](https://discuss.elastic.co/t/query-to-get-one-doc-out-of-its-duplicate/246396)

<div class="topic-metadata">

**Author:** [@Manikantaks](https://discuss.elastic.co/u/Manikantaks)\
**Replies:** 2\
**Last updated:** [September 1, 2020, 7:33am UTC](https://discuss.elastic.co/t/query-to-get-one-doc-out-of-its-duplicate/246396 "2020-09-01T07:33:39Z")

</div>

I have ELK set up . In specific index there are around 70Lac records , out of which some are duplicates . I need to create a filter in kibana so that only uniq records should be return. I need to check for two field for…

---

## [Alerts and actions filters](https://discuss.elastic.co/t/alerts-and-actions-filters/246688)

<div class="topic-metadata">

**Author:** [@sfenman](https://discuss.elastic.co/u/sfenman)\
**Replies:** 2\
**Last updated:** [September 1, 2020, 7:32am UTC](https://discuss.elastic.co/t/alerts-and-actions-filters/246688 "2020-09-01T07:32:17Z")

</div>

Hello, I am using Elastic stack version 7.9. I am trying to use alerts and actions instead of watcher for my various alerts. Is it possible to filter out some documents? The only options I got is to create an alert for …

---

## [Kibana discover shows disabled fields in "available fields" list](https://discuss.elastic.co/t/kibana-discover-shows-disabled-fields-in-available-fields-list/246806)

<div class="topic-metadata">

**Author:** [@Limus\_Anusauskas](https://discuss.elastic.co/u/Limus_Anusauskas)\
**Replies:** 2\
**Last updated:** [September 1, 2020, 5:47am UTC](https://discuss.elastic.co/t/kibana-discover-shows-disabled-fields-in-available-fields-list/246806 "2020-09-01T05:47:24Z")

</div>

I specifically used index mapping to disable some high cardinality fields: "siteEntity": { "properties": { "defaultPlacementsForMediaType": { "type": "object", …

---

## [How to centre the text in the dashboard visualisation? I am really struggling to center the text without the top white portion](https://discuss.elastic.co/t/how-to-centre-the-text-in-the-dashboard-visualisation-i-am-really-struggling-to-center-the-text-without-the-top-white-portion/246828)

<div class="topic-metadata">

**Author:** [@krishnendu](https://discuss.elastic.co/u/krishnendu)\
**Replies:** 2\
**Last updated:** [September 1, 2020, 1:07am UTC](https://discuss.elastic.co/t/how-to-centre-the-text-in-the-dashboard-visualisation-i-am-really-struggling-to-center-the-text-without-the-top-white-portion/246828 "2020-09-01T01:07:21Z")

</div>

---

## [Disable/enable in kibana 7.9 through roles](https://discuss.elastic.co/t/disable-enable-in-kibana-7-9-through-roles/246436)

<div class="topic-metadata">

**Author:** [@Muhammad\_Umair\_Baig](https://discuss.elastic.co/u/Muhammad_Umair_Baig)\
**Replies:** 1\
**Last updated:** [August 31, 2020, 6:04pm UTC](https://discuss.elastic.co/t/disable-enable-in-kibana-7-9-through-roles/246436 "2020-08-31T18:04:13Z")

</div>

Hi Team, i am using Kibana/elasticsearch 7.9 version. I have couple of questions. Is there anyway that i can hide navbar for a specific user based on the role? Hide "Edit profile" menu item and remove dashboard ca…

---

## [Kibana - Visualization shows 0 results](https://discuss.elastic.co/t/kibana-visualization-shows-0-results/246993)

<div class="topic-metadata">

**Author:** [@spiri](https://discuss.elastic.co/u/spiri)\
**Replies:** 2\
**Last updated:** [August 31, 2020, 5:45pm UTC](https://discuss.elastic.co/t/kibana-visualization-shows-0-results/246993 "2020-08-31T17:45:53Z")

</div>

Hello, I integrated my syslog-ng with Elasticsearch + Kibana and I want to show the count of denied and allowed connections in a pie. So I created a new visualization for a pie, then splitted the slice twice and select…

---

## [Generate custom report and automate sending using watcher](https://discuss.elastic.co/t/generate-custom-report-and-automate-sending-using-watcher/246973)

<div class="topic-metadata">

**Author:** [@vivekkarne](https://discuss.elastic.co/u/vivekkarne)\
**Replies:** 2\
**Last updated:** [August 31, 2020, 5:44pm UTC](https://discuss.elastic.co/t/generate-custom-report-and-automate-sending-using-watcher/246973 "2020-08-31T17:44:19Z")

</div>

I have a saved search which when exported as csv from the discover page works fine, i then copy the url and create a watcher following to process here: Automatically generate reports | Kibana Guide \[master\] | Elastic Bu…

---

## [Kibana Homepage Not Loading](https://discuss.elastic.co/t/kibana-homepage-not-loading/246758)

<div class="topic-metadata">

**Author:** [@guilloryg](https://discuss.elastic.co/u/guilloryg)\
**Replies:** 7\
**Last updated:** [August 31, 2020, 5:43pm UTC](https://discuss.elastic.co/t/kibana-homepage-not-loading/246758 "2020-08-31T17:43:54Z")

</div>

Good Morning, I am running in an issue with the loading of the x.x.x.x:5601/app/home. In IE 11 I get a blank page and with Firefox it get a constant Elastic Loading. Has anyone experienced this issue and solved the pro…

---

## [Can i control the time interval on the Dashboard?(Not visualization)](https://discuss.elastic.co/t/can-i-control-the-time-interval-on-the-dashboard-not-visualization/246902)

<div class="topic-metadata">

**Author:** [@ksw4147](https://discuss.elastic.co/u/ksw4147)\
**Replies:** 1\
**Last updated:** [August 31, 2020, 5:19pm UTC](https://discuss.elastic.co/t/can-i-control-the-time-interval-on-the-dashboard-not-visualization/246902 "2020-08-31T17:19:26Z")

</div>

On the visualization such as line chart, i can control the time interval. But on the dashboard i want to control the time interval each chart. Such as someone it 15m interval other is 1H interval. OR i want to change All…

---

## [How to define mustache variable for Kibana TSVB time series label](https://discuss.elastic.co/t/how-to-define-mustache-variable-for-kibana-tsvb-time-series-label/246071)

<div class="topic-metadata">

**Author:** [@Roy\_Zhang](https://discuss.elastic.co/u/Roy_Zhang)\
**Replies:** 10\
**Last updated:** [August 31, 2020, 3:50pm UTC](https://discuss.elastic.co/t/how-to-define-mustache-variable-for-kibana-tsvb-time-series-label/246071 "2020-08-31T15:50:54Z")

</div>

Dear Kibana Experts, According to https://www.elastic.co/guide/en/kibana/master/TSVB.html, for "series that are grouped by a term, I need to specify a mustache variable of {{key}} to substitute the term" for labels. …

---

## [Can Kibana support moving functions?](https://discuss.elastic.co/t/can-kibana-support-moving-functions/246896)

<div class="topic-metadata">

**Author:** [@Roy\_Zhang](https://discuss.elastic.co/u/Roy_Zhang)\
**Replies:** 2\
**Last updated:** [August 31, 2020, 3:50pm UTC](https://discuss.elastic.co/t/can-kibana-support-moving-functions/246896 "2020-08-31T15:50:31Z")

</div>

Dear Kibana experts, Elastic API can support moving functions, can Kibana visualization solutions (visualize, Lens, TSVG, etc) support moving functions? I go through kibana docs, seems Kibana can only support moving ave…

---

## [Creating a kibana role using Dev Tools](https://discuss.elastic.co/t/creating-a-kibana-role-using-dev-tools/246963)

<div class="topic-metadata">

**Author:** [@mfa](https://discuss.elastic.co/u/mfa)\
**Replies:** 3\
**Last updated:** [August 31, 2020, 3:20pm UTC](https://discuss.elastic.co/t/creating-a-kibana-role-using-dev-tools/246963 "2020-08-31T15:20:50Z")

</div>

Hi, I am using ElasticCloud v7.9.0, I use Dev Tools to do the setup on kibana like creating users, indexes,... I want to create a kibana role as well however I get an error: PUT /\_security/role/mytestrole { …

---

## [Generate Alert for entries not present in the log for a given time window](https://discuss.elastic.co/t/generate-alert-for-entries-not-present-in-the-log-for-a-given-time-window/245874)

<div class="topic-metadata">

**Author:** [@akhettar](https://discuss.elastic.co/u/akhettar)\
**Replies:** 5\
**Last updated:** [August 31, 2020, 2:03pm UTC](https://discuss.elastic.co/t/generate-alert-for-entries-not-present-in-the-log-for-a-given-time-window/245874 "2020-08-31T14:03:57Z")

</div>

Hello there, I am hoping if somebody can help me write monitor's query to generate an alert to be pushed to a slack channel. I am using ELK stack v 7.4.2. Here is the payload of the message: { "metaData":{ "t…

---

## [Index RollOver policy and deleting logs after specific time](https://discuss.elastic.co/t/index-rollover-policy-and-deleting-logs-after-specific-time/246778)

<div class="topic-metadata">

**Author:** [@mfa](https://discuss.elastic.co/u/mfa)\
**Replies:** 3\
**Last updated:** [August 31, 2020, 1:38pm UTC](https://discuss.elastic.co/t/index-rollover-policy-and-deleting-logs-after-specific-time/246778 "2020-08-31T13:38:22Z")

</div>

Hi, I have an ElasticCloud that I want to setups indexes on it and a policy to delete the old logs. I have created a lifecycle policy for deleting the logs which are older that 30 days: PUT \_ilm/policy/deleting\_po…

---

## [Error loading integrations](https://discuss.elastic.co/t/error-loading-integrations/246643)

<div class="topic-metadata">

**Author:** [@grfneto](https://discuss.elastic.co/u/grfneto)\
**Replies:** 2\
**Last updated:** [August 31, 2020, 1:31pm UTC](https://discuss.elastic.co/t/error-loading-integrations/246643 "2020-08-31T13:31:06Z")

</div>

Hi everyone, after update of version 7.8 to 7.9 in Kibana doesn't visualization the Integration tab. When i try configuration showed the message error: Error connecting to package registry at https://epr-7-9.elastic.co…

---

## [Visualize Prometheus Metrics From Metricbeats](https://discuss.elastic.co/t/visualize-prometheus-metrics-from-metricbeats/246893)

<div class="topic-metadata">

**Author:** [@Karl\_Falconer](https://discuss.elastic.co/u/Karl_Falconer)\
**Replies:** 3\
**Last updated:** [August 31, 2020, 1:16pm UTC](https://discuss.elastic.co/t/visualize-prometheus-metrics-from-metricbeats/246893 "2020-08-31T13:16:29Z")

</div>

Hi, We are evaluating migrating from Grafana to Kibana, we have metricbeats sending prometheus data to be Elastic to be indexed. I am having trouble creating a visualization on a pre-aggregated count field. Below is a d…

---

## [How do I add a custom Vega transformation?](https://discuss.elastic.co/t/how-do-i-add-a-custom-vega-transformation/246546)

<div class="topic-metadata">

**Author:** [@moxenb](https://discuss.elastic.co/u/moxenb)\
**Replies:** 1\
**Last updated:** [August 31, 2020, 11:13am UTC](https://discuss.elastic.co/t/how-do-i-add-a-custom-vega-transformation/246546 "2020-08-31T11:13:09Z")

</div>

I would like to create a custom Vega transformation, specifically to put time ranges into arbitrary buckets such that they never overlap in a given bucket (basically to show the duration and disposition of a set of tasks…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=432)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=434)
