# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=438

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 439

---

## [Comparing metric over two time duration under same index](https://discuss.elastic.co/t/comparing-metric-over-two-time-duration-under-same-index/245964)

<div class="topic-metadata">

**Author:** [@SUMANTA\_ROY](https://discuss.elastic.co/u/SUMANTA_ROY)\
**Replies:** 6\
**Last updated:** [August 22, 2020, 8:45pm UTC](https://discuss.elastic.co/t/comparing-metric-over-two-time-duration-under-same-index/245964 "2020-08-22T20:45:51Z")

</div>

Hi, I am trying to find a way to visualize a bar chart displaying a metric value side by side (two different time periods), from the same index. Example : Comparing avg. attendance of class for 15 days of April month w…

---

## [Data Formatter in TSVB visualization](https://discuss.elastic.co/t/data-formatter-in-tsvb-visualization/245982)

<div class="topic-metadata">

**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\
**Replies:** 1\
**Last updated:** [August 22, 2020, 2:14pm UTC](https://discuss.elastic.co/t/data-formatter-in-tsvb-visualization/245982 "2020-08-22T14:14:09Z")

</div>

Hi , i use kibana 7.7.0. i create a TSVB visualization : X-axis: sum of credit and sum of debit Y-axis: date per day . in my index the fields "credit" and "debit" are a number with a format string. i like to dis…

---

## [Exporting saved search in Discover(more than 2GB)](https://discuss.elastic.co/t/exporting-saved-search-in-discover-more-than-2gb/244393)

<div class="topic-metadata">

**Author:** [@liron\_gofberg](https://discuss.elastic.co/u/liron_gofberg)\
**Replies:** 2\
**Last updated:** [August 22, 2020, 1:42pm UTC](https://discuss.elastic.co/t/exporting-saved-search-in-discover-more-than-2gb/244393 "2020-08-22T13:42:48Z")

</div>

I have problem of exporting data of saved search when exporting more than 2 GB The error: Max attempts reached How can I fix it? Please, Thanks, Liron Gofberg

---

## [Kibana not showing all documents in index](https://discuss.elastic.co/t/kibana-not-showing-all-documents-in-index/245979)

<div class="topic-metadata">

**Author:** [@Diederik\_Mathijs](https://discuss.elastic.co/u/Diederik_Mathijs)\
**Replies:** 7\
**Last updated:** [August 22, 2020, 10:30am UTC](https://discuss.elastic.co/t/kibana-not-showing-all-documents-in-index/245979 "2020-08-22T10:30:13Z")

</div>

Hi, I'm having an issue with Kibana (I'm running es 7.9.0 and kb 7.9.0). In Kibana under my index management I see that the 'mag\_mapping' index contains 50 million documents. However, when I look in the Kibana discover …

---

## [Alphabetical sorting of numeric labels not working](https://discuss.elastic.co/t/alphabetical-sorting-of-numeric-labels-not-working/245940)

<div class="topic-metadata">

**Author:** [@Dennis1](https://discuss.elastic.co/u/Dennis1)\
**Replies:** 3\
**Last updated:** [August 21, 2020, 10:30pm UTC](https://discuss.elastic.co/t/alphabetical-sorting-of-numeric-labels-not-working/245940 "2020-08-21T22:30:35Z")

</div>

I'm trying to order the response code labels in my stacked bar graph to be descending alphabetical, but it doesn't appear to be working properly. Further, when I select 'ascending', the response codes are re-ordered in s…

---

## [\[Ingest Management\] - Multiple configs per agent?](https://discuss.elastic.co/t/ingest-management-multiple-configs-per-agent/245922)

<div class="topic-metadata">

**Author:** [@tjfred](https://discuss.elastic.co/u/tjfred)\
**Replies:** 1\
**Last updated:** [August 21, 2020, 7:53pm UTC](https://discuss.elastic.co/t/ingest-management-multiple-configs-per-agent/245922 "2020-08-21T19:53:30Z")

</div>

Hello, I'm trying out the new Ingest Manager on 7.9.1, all looks great! I was wondering if anyone could clarify how best to design configurations and integrations. Consider this setup: All hosts require "System" and …

---

## [Kibana 7.8, Apache HTTPD proxy, internal server error](https://discuss.elastic.co/t/kibana-7-8-apache-httpd-proxy-internal-server-error/245308)

<div class="topic-metadata">

**Author:** [@hanover23](https://discuss.elastic.co/u/hanover23)\
**Replies:** 2\
**Last updated:** [August 21, 2020, 7:44pm UTC](https://discuss.elastic.co/t/kibana-7-8-apache-httpd-proxy-internal-server-error/245308 "2020-08-21T19:44:50Z")

</div>

I have seen nginx is a documented way to proxy requests to a local Kibana listening on TCP 5601, but I am wondering if anyone has experience getting this to work with Apache HTTPD. I have a Kibana 7.8.0-1 instance that …

---

## [\[Kibana Timelion\] - Cannot apply Dashboard filter on Timelion functions](https://discuss.elastic.co/t/kibana-timelion-cannot-apply-dashboard-filter-on-timelion-functions/241087)

<div class="topic-metadata">

**Author:** [@GitsBdr](https://discuss.elastic.co/u/GitsBdr)\
**Replies:** 9\
**Last updated:** [August 21, 2020, 4:11pm UTC](https://discuss.elastic.co/t/kibana-timelion-cannot-apply-dashboard-filter-on-timelion-functions/241087 "2020-08-21T16:11:41Z")

</div>

Hi there, Thanks in advance for your help I have written a couple of timelion functions and all of them request the same index-pattern, they just differ by their q='' filter and metric. However, from a dashboard, wher…

---

## [Time Series Visual Builder - regexing top n field responses](https://discuss.elastic.co/t/time-series-visual-builder-regexing-top-n-field-responses/245582)

<div class="topic-metadata">

**Author:** [@Marcus\_Webb](https://discuss.elastic.co/u/Marcus_Webb)\
**Replies:** 2\
**Last updated:** [August 21, 2020, 3:39pm UTC](https://discuss.elastic.co/t/time-series-visual-builder-regexing-top-n-field-responses/245582 "2020-08-21T15:39:26Z")

</div>

Hi Guys I know that the Timelion feature is being deprecated so I'm learning TSVB and fast. My question is this: I have a field called responsefield which contains literally thousands of possibilities, as there are var…

---

## [X-Pack Anomaly Detection: multi-metric equals multivariate?](https://discuss.elastic.co/t/x-pack-anomaly-detection-multi-metric-equals-multivariate/245451)

<div class="topic-metadata">

**Author:** [@boxplot](https://discuss.elastic.co/u/boxplot)\
**Replies:** 8\
**Last updated:** [August 21, 2020, 12:12pm UTC](https://discuss.elastic.co/t/x-pack-anomaly-detection-multi-metric-equals-multivariate/245451 "2020-08-21T12:12:57Z")

</div>

Hi. I would like to detect anomalies using X-Pack. I have the following data: location user event (1 event is stored in 1 document) user behaviour per event (various features/fields) I would like to detect anomalous …

---

## [How to view multiple fields in kibana add filter section](https://discuss.elastic.co/t/how-to-view-multiple-fields-in-kibana-add-filter-section/245765)

<div class="topic-metadata">

**Author:** [@hemant\_472](https://discuss.elastic.co/u/hemant_472)\
**Replies:** 10\
**Last updated:** [August 21, 2020, 11:38am UTC](https://discuss.elastic.co/t/how-to-view-multiple-fields-in-kibana-add-filter-section/245765 "2020-08-21T11:38:34Z")

</div>

i am unable to see multiple filters in add filter field of kibana, can someone suggst anything as i cannot find anything in kibana settings

---

## [Elastic-agent make ssl verification none](https://discuss.elastic.co/t/elastic-agent-make-ssl-verification-none/245827)

<div class="topic-metadata">

**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\
**Replies:** 1\
**Last updated:** [August 21, 2020, 9:44am UTC](https://discuss.elastic.co/t/elastic-agent-make-ssl-verification-none/245827 "2020-08-21T09:44:39Z")

</div>

Hello, I am playing around with elastic ingest manager and I configured a fleet in kibana. I would like to update the elasticsearch ssl verification\_mode to none in the agent config but it's not possible or at least I d…

---

## [How to use Javascript to get Response data on the Kibana Discover page?](https://discuss.elastic.co/t/how-to-use-javascript-to-get-response-data-on-the-kibana-discover-page/245860)

<div class="topic-metadata">

**Author:** [@neargle](https://discuss.elastic.co/u/neargle)\
**Replies:** 2\
**Last updated:** [August 21, 2020, 8:09am UTC](https://discuss.elastic.co/t/how-to-use-javascript-to-get-response-data-on-the-kibana-discover-page/245860 "2020-08-21T08:09:59Z")

</div>

I hope that after searching in Discover, I can use JS or Chrome DevTools Console in the /app/kibana#/discover page to get the data returned by ES for further processing? How can I get the result of javascript object?

---

## [Plugin on new platform](https://discuss.elastic.co/t/plugin-on-new-platform/245773)

<div class="topic-metadata">

**Author:** [@wilmouths](https://discuss.elastic.co/u/wilmouths)\
**Replies:** 2\
**Last updated:** [August 21, 2020, 8:04am UTC](https://discuss.elastic.co/t/plugin-on-new-platform/245773 "2020-08-21T08:04:31Z")

</div>

Hello, I am developing a Kibana 7.8 plugin, I would like to know how to retrieve environment variables in the client part (public) and also how to add a link in the menu, because before you had to use uiExports: { links…

---

## [How to use JSON Input to make filter on part of log](https://discuss.elastic.co/t/how-to-use-json-input-to-make-filter-on-part-of-log/245570)

<div class="topic-metadata">

**Author:** [@VooDooX](https://discuss.elastic.co/u/VooDooX)\
**Replies:** 3\
**Last updated:** [August 21, 2020, 6:52am UTC](https://discuss.elastic.co/t/how-to-use-json-input-to-make-filter-on-part-of-log/245570 "2020-08-21T06:52:21Z")

</div>

I have collected logs which are already imported into ELK. Each log contains several fields, for ex date is different field. Also there is complicated field "Details" which consist a lot of data: method: value, source:…

---

## [Histogram per second](https://discuss.elastic.co/t/histogram-per-second/245855)

<div class="topic-metadata">

**Author:** [@idyuzhev](https://discuss.elastic.co/u/idyuzhev)\
**Replies:** 1\
**Last updated:** [August 21, 2020, 5:48am UTC](https://discuss.elastic.co/t/histogram-per-second/245855 "2020-08-21T05:48:44Z")

</div>

Hi. I need to build a histogram per second. Kibana, depending on the specified period, can be grouped in 5/10/30/60 seconds. This option does not suit me. Can this somehow be disabled and forced to output per second? …

---

## [Kibana Dashboard Data](https://discuss.elastic.co/t/kibana-dashboard-data/245763)

<div class="topic-metadata">

**Author:** [@Kundan\_Singh](https://discuss.elastic.co/u/Kundan_Singh)\
**Replies:** 2\
**Last updated:** [August 21, 2020, 4:41am UTC](https://discuss.elastic.co/t/kibana-dashboard-data/245763 "2020-08-21T04:41:41Z")

</div>

Hi there How kibana UI request this API for dashboard data. http://localhost:5601/elasticsearch/\_msearch?rest\_total\_hits\_as\_int=true&ignore\_throttled=true

---

## [Retrieve the sum of count of string fields](https://discuss.elastic.co/t/retrieve-the-sum-of-count-of-string-fields/245778)

<div class="topic-metadata">

**Author:** [@ranu\_shekhar](https://discuss.elastic.co/u/ranu_shekhar)\
**Replies:** 2\
**Last updated:** [August 21, 2020, 3:58am UTC](https://discuss.elastic.co/t/retrieve-the-sum-of-count-of-string-fields/245778 "2020-08-21T03:58:57Z")

</div>

Hi, I want to retrieve the sum of the count of string fields in bar chart. Is it possible to do it in Kibana visualisations. Here I want one more bar chart that will show the cummulative sum of all fields.

---

## [FATAL Error: EISDIR: illegal operation on a directory, read](https://discuss.elastic.co/t/fatal-error-eisdir-illegal-operation-on-a-directory-read/245733)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 2\
**Last updated:** [August 21, 2020, 1:35am UTC](https://discuss.elastic.co/t/fatal-error-eisdir-illegal-operation-on-a-directory-read/245733 "2020-08-21T01:35:09Z")

</div>

I used version 7.6.1 before, and then I changed it to kibana:8.0.0-SNAPSHOT Restart the pod and it won't work Configuring logger failed: { Error: EISDIR: illegal operation on a directory, read at Object.readSync (f…

---

## [\[Metricbeat Windows\] Services ECS dashboard throwing errors](https://discuss.elastic.co/t/metricbeat-windows-services-ecs-dashboard-throwing-errors/245173)

<div class="topic-metadata">

**Author:** [@mudricd](https://discuss.elastic.co/u/mudricd)\
**Replies:** 2\
**Last updated:** [August 20, 2020, 11:21pm UTC](https://discuss.elastic.co/t/metricbeat-windows-services-ecs-dashboard-throwing-errors/245173 "2020-08-20T23:21:41Z")

</div>

Hi, I setup Metricbeat on Windows and I use windows module to send info about services to Elasticsearch through Logstash. There are no filters on Logstash server for this pipeline. Then I loaded Kibana dashboards accor…

---

## [Unable to reindex after field changes](https://discuss.elastic.co/t/unable-to-reindex-after-field-changes/243867)

<div class="topic-metadata">

**Author:** [@Gavin\_Clark](https://discuss.elastic.co/u/Gavin_Clark)\
**Replies:** 2\
**Last updated:** [August 20, 2020, 11:01pm UTC](https://discuss.elastic.co/t/unable-to-reindex-after-field-changes/243867 "2020-08-20T23:01:39Z")

</div>

At the end of each month to keep index and shard counts low, we reindex all of our daily indices into a larger monthly index. We do this by manually running a reindex job on each of our larger index groups by running the…

---

## [Mathematics calculations with daily data records](https://discuss.elastic.co/t/mathematics-calculations-with-daily-data-records/245320)

<div class="topic-metadata">

**Author:** [@MyQuery](https://discuss.elastic.co/u/MyQuery)\
**Replies:** 1\
**Last updated:** [August 20, 2020, 10:38pm UTC](https://discuss.elastic.co/t/mathematics-calculations-with-daily-data-records/245320 "2020-08-20T22:38:39Z")

</div>

Hi Team, We would like to build table in the below format . Data is coming as record by record.. Marketing Operating Count Total AF FL Total(%) AF(%) FL(%) UA UA 9415 24 17 7 0.25 0.18 0.07 UA LH 47 6 6 0 12.…

---

## [How to add custom Kibana Plugin App as Visualization Plugin in a Dashboard](https://discuss.elastic.co/t/how-to-add-custom-kibana-plugin-app-as-visualization-plugin-in-a-dashboard/245385)

<div class="topic-metadata">

**Author:** [@burakka](https://discuss.elastic.co/u/burakka)\
**Replies:** 1\
**Last updated:** [August 20, 2020, 10:31pm UTC](https://discuss.elastic.co/t/how-to-add-custom-kibana-plugin-app-as-visualization-plugin-in-a-dashboard/245385 "2020-08-20T22:31:33Z")

</div>

Hi all, I developed a custom Kibana Plugin App. It's a React App which is visualizing data queried from an Elasticsearch index in its React components. It also has buttons in it, e.g. for filtering and updating data. N…

---

## [How to check stats of all saved objects](https://discuss.elastic.co/t/how-to-check-stats-of-all-saved-objects/245553)

<div class="topic-metadata">

**Author:** [@Redcxx](https://discuss.elastic.co/u/Redcxx)\
**Replies:** 1\
**Last updated:** [August 20, 2020, 10:17pm UTC](https://discuss.elastic.co/t/how-to-check-stats-of-all-saved-objects/245553 "2020-08-20T22:17:41Z")

</div>

Hi I am using the saved\_objects API to create visualizations and dashboard, but since Kibana does not validate the data as mentioned here: When you create saved objects, attributes are not validated, which allows you t…

---

## [Kibana Canvas](https://discuss.elastic.co/t/kibana-canvas/245572)

<div class="topic-metadata">

**Author:** [@oliverlucas](https://discuss.elastic.co/u/oliverlucas)\
**Replies:** 1\
**Last updated:** [August 20, 2020, 10:06pm UTC](https://discuss.elastic.co/t/kibana-canvas/245572 "2020-08-20T22:06:21Z")

</div>

Hi All, Trying to find some help and guidance. I'm new to Canvas (2 days) and I can already see the infinite possibilities to make some really cool stuff, but I'm really struggling. So first off I had problems with SQL…

---

## [Query multiple mapping indices in visualization](https://discuss.elastic.co/t/query-multiple-mapping-indices-in-visualization/244971)

<div class="topic-metadata">

**Author:** [@InfiniteDreamer](https://discuss.elastic.co/u/InfiniteDreamer)\
**Replies:** 4\
**Last updated:** [August 20, 2020, 9:32pm UTC](https://discuss.elastic.co/t/query-multiple-mapping-indices-in-visualization/244971 "2020-08-20T21:32:36Z")

</div>

we have a index pattern with few indices with two different mapping, few fields are present in both mapping. we want bucket the common fields from both mapping indices and want to perform metric aggs on data from both m…

---

## [Kibana crash after 7.9 install; revert to 7.8 is ok](https://discuss.elastic.co/t/kibana-crash-after-7-9-install-revert-to-7-8-is-ok/245697)

<div class="topic-metadata">

**Author:** [@bumpyfaceok](https://discuss.elastic.co/u/bumpyfaceok)\
**Replies:** 11\
**Last updated:** [August 20, 2020, 9:22pm UTC](https://discuss.elastic.co/t/kibana-crash-after-7-9-install-revert-to-7-8-is-ok/245697 "2020-08-20T21:22:51Z")

</div>

Kibana starts and then fails with "FATAL URIError: URI malformed" Debian 10, logstash, elasticsearch, kibana all on same box. I removed Kibana 7.9 and installed 7.8 and it's working fine again; elasticsearch remains a…

---

## [CSV Report generation fails with large KQL query](https://discuss.elastic.co/t/csv-report-generation-fails-with-large-kql-query/245636)

<div class="topic-metadata">

**Author:** [@tomervain](https://discuss.elastic.co/u/tomervain)\
**Replies:** 1\
**Last updated:** [August 20, 2020, 9:11pm UTC](https://discuss.elastic.co/t/csv-report-generation-fails-with-large-kql-query/245636 "2020-08-20T21:11:36Z")

</div>

Hello, I am running Elasticsearch + Kibana 7.8.0 on a virtual machine, everything in the cluster is operating fine with no issues. In the last few days, I was trying to run a long query (written in KQL) in the search b…

---

## [Can a Kibana Canvas Markdown Element Display a Total of a Column?](https://discuss.elastic.co/t/can-a-kibana-canvas-markdown-element-display-a-total-of-a-column/245797)

<div class="topic-metadata">

**Author:** [@devbot](https://discuss.elastic.co/u/devbot)\
**Replies:** 2\
**Last updated:** [August 20, 2020, 8:35pm UTC](https://discuss.elastic.co/t/can-a-kibana-canvas-markdown-element-display-a-total-of-a-column/245797 "2020-08-20T20:35:01Z")

</div>

I have a Markdown Element on a Kibana canvas with the Expression Syntax: filters group="default" | essql query="SELECT host.hostname, (last(system.memory.actual.used.bytes, \\"@timestamp\\")/1073741824 as m…

---

## [Filter after selecting top 5 hits](https://discuss.elastic.co/t/filter-after-selecting-top-5-hits/245290)

<div class="topic-metadata">

**Author:** [@Bhavya\_Bansal](https://discuss.elastic.co/u/Bhavya_Bansal)\
**Replies:** 5\
**Last updated:** [August 20, 2020, 7:52pm UTC](https://discuss.elastic.co/t/filter-after-selecting-top-5-hits/245290 "2020-08-20T19:52:49Z")

</div>

Hi, I'm using the alerting feature in Kibana and I want to check if the last 5 consecutive values of a field exceed a threshold x but if I use a filter in my elastic query, it gets applied before the top N aggregation. …

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=437)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=439)
