# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=439

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 440

---

## [Scripted field - Fielddata is disabled on text fields by default ... Alternatively use a keyword field instead. How to solve?](https://discuss.elastic.co/t/scripted-field-fielddata-is-disabled-on-text-fields-by-default-alternatively-use-a-keyword-field-instead-how-to-solve/245779)

<div class="topic-metadata">

**Author:** [@VooDooX](https://discuss.elastic.co/u/VooDooX)\
**Replies:** 2\
**Last updated:** [August 20, 2020, 7:24pm UTC](https://discuss.elastic.co/t/scripted-field-fielddata-is-disabled-on-text-fields-by-default-alternatively-use-a-keyword-field-instead-how-to-solve/245779 "2020-08-20T19:24:40Z")

</div>

Hello. Running that script: def inst = /.\*instrument:(\[a-z\]+).\*/.matcher(doc\['FullDetails'\].value); if (inst.matches()) { return inst.group(1) } else { return "no match" } causes "Fielddata is disabled on text fi…

---

## [Canvas - Any way to consolidate 2 metric elements into one markdown element?](https://discuss.elastic.co/t/canvas-any-way-to-consolidate-2-metric-elements-into-one-markdown-element/245670)

<div class="topic-metadata">

**Author:** [@devbot](https://discuss.elastic.co/u/devbot)\
**Replies:** 2\
**Last updated:** [August 20, 2020, 7:18pm UTC](https://discuss.elastic.co/t/canvas-any-way-to-consolidate-2-metric-elements-into-one-markdown-element/245670 "2020-08-20T19:18:17Z")

</div>

I have an elastic sql query that returns 2 calculated ("last") columns. I have use 2 "metric" elements on a canvas dashboard to display the sum of each column, respectively (selecting "sum" of the column name in both ele…

---

## [Kibana query help, find entries that occur on two different sites](https://discuss.elastic.co/t/kibana-query-help-find-entries-that-occur-on-two-different-sites/245790)

<div class="topic-metadata">

**Author:** [@stcdarrell](https://discuss.elastic.co/u/stcdarrell)\
**Replies:** 1\
**Last updated:** [August 20, 2020, 7:03pm UTC](https://discuss.elastic.co/t/kibana-query-help-find-entries-that-occur-on-two-different-sites/245790 "2020-08-20T19:03:49Z")

</div>

hi, i'm struggling to sort out how to get a query to work. I have two sites sending logs via filebeat into an ELK stack. Each entry will have a field called "site" along with a bunch of log info (ip address, port, etc) …

---

## [Single Kibana Dashboard for All Users Limited with their Own Data](https://discuss.elastic.co/t/single-kibana-dashboard-for-all-users-limited-with-their-own-data/245807)

<div class="topic-metadata">

**Author:** [@Solaris23](https://discuss.elastic.co/u/Solaris23)\
**Replies:** 3\
**Last updated:** [August 20, 2020, 6:28pm UTC](https://discuss.elastic.co/t/single-kibana-dashboard-for-all-users-limited-with-their-own-data/245807 "2020-08-20T18:28:36Z")

</div>

How to implement following scenario with ELK stack. Multiple users with same data type Single Kibana Dashboard for all users Each user should see own data on Dashboard The data type is same for all users. Should we cr…

---

## [Kibana 7.9.0: Configuring logger failed: { Error: EISDIR: illegal operation on a directory, read](https://discuss.elastic.co/t/kibana-7-9-0-configuring-logger-failed-error-eisdir-illegal-operation-on-a-directory-read/245653)

<div class="topic-metadata">

**Author:** [@nixy](https://discuss.elastic.co/u/nixy)\
**Replies:** 7\
**Last updated:** [August 20, 2020, 4:04pm UTC](https://discuss.elastic.co/t/kibana-7-9-0-configuring-logger-failed-error-eisdir-illegal-operation-on-a-directory-read/245653 "2020-08-20T16:04:08Z")

</div>

Upgraded Kibana-full 7.8.1 to 7.9.0 using homebrew and elastic/tap/kibana-full. Afterwards when start kibana always get this error: Configuring logger failed: { Error: EISDIR: illegal operation on a directory, read ..…

---

## [Embed HTML5 chart(s) from TradingView, as charts or page/plugin?](https://discuss.elastic.co/t/embed-html5-chart-s-from-tradingview-as-charts-or-page-plugin/245633)

<div class="topic-metadata">

**Author:** [@richardfoster](https://discuss.elastic.co/u/richardfoster)\
**Replies:** 1\
**Last updated:** [August 20, 2020, 3:03pm UTC](https://discuss.elastic.co/t/embed-html5-chart-s-from-tradingview-as-charts-or-page-plugin/245633 "2020-08-20T15:03:51Z")

</div>

Hi, I'm scoping the suitability of using ELK to deal with financial/market data. ELK does everything I need, however candlestick charts are required, and the ideal solution is to embed: https://www.tradingview.com/HTML5-…

---

## [Is there a way to display index last refreshed time in Elasticsearch/Kibana](https://discuss.elastic.co/t/is-there-a-way-to-display-index-last-refreshed-time-in-elasticsearch-kibana/245641)

<div class="topic-metadata">

**Author:** [@Divya\_Girase](https://discuss.elastic.co/u/Divya_Girase)\
**Replies:** 1\
**Last updated:** [August 20, 2020, 2:52pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-display-index-last-refreshed-time-in-elasticsearch-kibana/245641 "2020-08-20T14:52:28Z")

</div>

Hello, Is there a way in Elasticsearch or Kibana with which I can determine when was the last time an index was refreshed. I am using python API to refresh the indices programmatically using python without the wait for …

---

## [Cannot use "+" in document id](https://discuss.elastic.co/t/cannot-use-in-document-id/245645)

<div class="topic-metadata">

**Author:** [@rahulkothanath](https://discuss.elastic.co/u/rahulkothanath)\
**Replies:** 4\
**Last updated:** [August 20, 2020, 2:32pm UTC](https://discuss.elastic.co/t/cannot-use-in-document-id/245645 "2020-08-20T14:32:03Z")

</div>

I would like to search a document using below query and my document id contains "+" character. GET tpp\_lookup\_1808/\_doc/2FDC1B40E46EMD5DOHcKn5%2FR%2Bq6Wiipsx8Hkg==2020 in the response from kibana, "+" character is re…

---

## [Kibana Extremely slow Start Up Time on Openshift/Kubernetes while Optimizing and caching bundles](https://discuss.elastic.co/t/kibana-extremely-slow-start-up-time-on-openshift-kubernetes-while-optimizing-and-caching-bundles/245203)

<div class="topic-metadata">

**Author:** [@Kosodrom](https://discuss.elastic.co/u/Kosodrom)\
**Replies:** 13\
**Last updated:** [August 20, 2020, 2:22pm UTC](https://discuss.elastic.co/t/kibana-extremely-slow-start-up-time-on-openshift-kubernetes-while-optimizing-and-caching-bundles/245203 "2020-08-20T14:22:11Z")

</div>

Hi guys, The deployment of kibana on openshift is extremely slow after or during this step: "Optimizing and caching bundles.... This may take a few minutes" The deployment takes about 7-8 minutes. You have an Idea how…

---

## [How to disable login page for oss Kibana-7.2.1](https://discuss.elastic.co/t/how-to-disable-login-page-for-oss-kibana-7-2-1/245672)

<div class="topic-metadata">

**Author:** [@deadpool](https://discuss.elastic.co/u/deadpool)\
**Replies:** 4\
**Last updated:** [August 19, 2020, 11:24pm UTC](https://discuss.elastic.co/t/how-to-disable-login-page-for-oss-kibana-7-2-1/245672 "2020-08-19T23:24:09Z")

</div>

Hi, we are using oss Kibana 7.2.1 (docker.elastic.co/kibana/kibana-oss:7.2.1) docker image for connecting to Elastic search which is having username and password Authentication and it is working by pulling username,passw…

---

## [Where audit logger methods are called](https://discuss.elastic.co/t/where-audit-logger-methods-are-called/243470)

<div class="topic-metadata">

**Author:** [@houshmand1996](https://discuss.elastic.co/u/houshmand1996)\
**Replies:** 3\
**Last updated:** [August 20, 2020, 12:46pm UTC](https://discuss.elastic.co/t/where-audit-logger-methods-are-called/243470 "2020-08-20T12:46:08Z")

</div>

where clientWrapper in kibana calls methods like this public async update\<T extends SavedObjectAttributes\>( type: string, id: string, attributes: Partial\<T\>, options: SavedObjectsUpdateOptions = {} ) { a…

---

## [Log threshold alert](https://discuss.elastic.co/t/log-threshold-alert/245317)

<div class="topic-metadata">

**Author:** [@Ronin](https://discuss.elastic.co/u/Ronin)\
**Replies:** 1\
**Last updated:** [August 20, 2020, 12:27pm UTC](https://discuss.elastic.co/t/log-threshold-alert/245317 "2020-08-20T12:27:50Z")

</div>

We are attempting to make a Log Threshold alert, however it is sending alerts when it shouldn't be. The query we are trying to alert on is labels.application: "theapp" and message: "\*limit request headers fields size\*". …

---

## [Alert monitor - Keep getting 1 hit every 5 minutes.. want it to change to 100 hits every five minutes](https://discuss.elastic.co/t/alert-monitor-keep-getting-1-hit-every-5-minutes-want-it-to-change-to-100-hits-every-five-minutes/245350)

<div class="topic-metadata">

**Author:** [@jamesyone](https://discuss.elastic.co/u/jamesyone)\
**Replies:** 1\
**Last updated:** [August 20, 2020, 11:16am UTC](https://discuss.elastic.co/t/alert-monitor-keep-getting-1-hit-every-5-minutes-want-it-to-change-to-100-hits-every-five-minutes/245350 "2020-08-20T11:16:46Z")

</div>

Hi, I want to be able to receive alerts for security WAF blocks for 100 hits every 5 minutes instead of 1 hit every five minutes.. Is it possible on kibana?

---

## [Data Visualizer - Import button grayed out for CSV import](https://discuss.elastic.co/t/data-visualizer-import-button-grayed-out-for-csv-import/245664)

<div class="topic-metadata">

**Author:** [@kaoutar\_id](https://discuss.elastic.co/u/kaoutar_id)\
**Replies:** 7\
**Last updated:** [August 20, 2020, 7:56am UTC](https://discuss.elastic.co/t/data-visualizer-import-button-grayed-out-for-csv-import/245664 "2020-08-20T07:56:03Z")

</div>

I'm unable to import a CSV file to Elasticsearch using the Data Visualizer. I get to upload the file and see the file stats but after that when I type the name of the index the import button remains gray and can't import…

---

## [String type conversion to date type](https://discuss.elastic.co/t/string-type-conversion-to-date-type/245698)

<div class="topic-metadata">

**Author:** [@Rachana\_Pole](https://discuss.elastic.co/u/Rachana_Pole)\
**Replies:** 1\
**Last updated:** [August 20, 2020, 8:26am UTC](https://discuss.elastic.co/t/string-type-conversion-to-date-type/245698 "2020-08-20T08:26:58Z")

</div>

Hi all, I have a field that provides the date information but is coming is of String Data Type. Ex: metrics.database.state.my\_session\_time 2020-Aug-19 04:40:53 I want to convert it into a date format. I tried a few da…

---

## [Change Upper left side Logo in Kibana version 7.8.0](https://discuss.elastic.co/t/change-upper-left-side-logo-in-kibana-version-7-8-0/245182)

<div class="topic-metadata">

**Author:** [@Mayank\_Damani](https://discuss.elastic.co/u/Mayank_Damani)\
**Replies:** 1\
**Last updated:** [August 20, 2020, 8:22am UTC](https://discuss.elastic.co/t/change-upper-left-side-logo-in-kibana-version-7-8-0/245182 "2020-08-20T08:22:28Z")

</div>

I want to change upper left side logo in Kibana version 7.8.0 as shown in below image. What i tried is changing their svg code with my own svg code in node\_modules\\@kbn\\ui-shared-deps\\target\\kbn-ui-shared-deps.@elastic.j…

---

## [Timelion throws error while querying on empty data](https://discuss.elastic.co/t/timelion-throws-error-while-querying-on-empty-data/245223)

<div class="topic-metadata">

**Author:** [@Castor](https://discuss.elastic.co/u/Castor)\
**Replies:** 1\
**Last updated:** [August 20, 2020, 8:08am UTC](https://discuss.elastic.co/t/timelion-throws-error-while-querying-on-empty-data/245223 "2020-08-20T08:08:21Z")

</div>

Hello I am trying to calculate total x value divided by total y value in percentage. .es(q="\*",metric=sum:x.value,split=element.name:10).cusum().divide(.es(q="\*",metric=sum:y.value, split=element.name:10).cusum()).mult…

---

## [Adding new button to saved search object to export saved search object raw data from dashboard](https://discuss.elastic.co/t/adding-new-button-to-saved-search-object-to-export-saved-search-object-raw-data-from-dashboard/244407)

<div class="topic-metadata">

**Author:** [@liron\_gofberg](https://discuss.elastic.co/u/liron_gofberg)\
**Replies:** 2\
**Last updated:** [August 20, 2020, 7:20am UTC](https://discuss.elastic.co/t/adding-new-button-to-saved-search-object-to-export-saved-search-object-raw-data-from-dashboard/244407 "2020-08-20T07:20:28Z")

</div>

current Kibana version: 6.3.2 to get the next feature: I need to upgrade Kibana version to 7.3.0 now before I do that I have to ask.. I added saved search object to my dashboard that saved search have no filters, …

---

## [Kibana Dev Tools: How to execute multiple statements in one shot?](https://discuss.elastic.co/t/kibana-dev-tools-how-to-execute-multiple-statements-in-one-shot/245682)

<div class="topic-metadata">

**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\
**Replies:** 2\
**Last updated:** [August 20, 2020, 4:12am UTC](https://discuss.elastic.co/t/kibana-dev-tools-how-to-execute-multiple-statements-in-one-shot/245682 "2020-08-20T04:12:49Z")

</div>

hi We don't have access to ssh/backend/elastic-port directly. So the only interaction we have is with Kibana's DEV console to update and retrieve data So i've around 60 commands (mainly deleting and creating watchers)…

---

## [Can't figure out how to wildcard fields](https://discuss.elastic.co/t/cant-figure-out-how-to-wildcard-fields/245106)

<div class="topic-metadata">

**Author:** [@Rhysyrhys](https://discuss.elastic.co/u/Rhysyrhys)\
**Replies:** 2\
**Last updated:** [August 19, 2020, 9:27pm UTC](https://discuss.elastic.co/t/cant-figure-out-how-to-wildcard-fields/245106 "2020-08-19T21:27:55Z")

</div>

Hi, I have my Celery workers reporting their status to Kibana via logstash. When I get a snapshot the document Kibana receives is similar to this truncated doc: { "tasks\_total\_processed": 2, "worker\_count": 2, "wo…

---

## [Import CSV on basic license \[7.9.0\]](https://discuss.elastic.co/t/import-csv-on-basic-license-7-9-0/245624)

<div class="topic-metadata">

**Author:** [@Celiken](https://discuss.elastic.co/u/Celiken)\
**Replies:** 3\
**Last updated:** [August 19, 2020, 7:09pm UTC](https://discuss.elastic.co/t/import-csv-on-basic-license-7-9-0/245624 "2020-08-19T19:09:00Z")

</div>

Hello, As the 7.9.0 elastic stack has been released, and I was waiting for one of its feature, I got it today on my dev env to set it up. I was under 7.8.0 with a Basic license, and the Import CSV were really useful. …

---

## [Getting query and responses from TSVB Visualizations](https://discuss.elastic.co/t/getting-query-and-responses-from-tsvb-visualizations/245651)

<div class="topic-metadata">

**Author:** [@jonatelo](https://discuss.elastic.co/u/jonatelo)\
**Replies:** 3\
**Last updated:** [August 19, 2020, 5:47pm UTC](https://discuss.elastic.co/t/getting-query-and-responses-from-tsvb-visualizations/245651 "2020-08-19T17:47:49Z")

</div>

Continuing the discussion from How to get the query for a visualization created using Visual Builder: Hi, Is there a way to get the query or responses from a TSVB visualization?

---

## [Remove kibana exported fields from "Add Filter"](https://discuss.elastic.co/t/remove-kibana-exported-fields-from-add-filter/245230)

<div class="topic-metadata">

**Author:** [@gizem](https://discuss.elastic.co/u/gizem)\
**Replies:** 3\
**Last updated:** [August 19, 2020, 4:04pm UTC](https://discuss.elastic.co/t/remove-kibana-exported-fields-from-add-filter/245230 "2020-08-19T16:04:23Z")

</div>

I use kibana 7.0.1 and filebeat 7.0.1. There is always "exported fields" in my indexes even if they are empty. And these exported fields are always shown in "Add Filter" part. Why exported fields are always in my indexes…

---

## [Kibana controls and Drill Down](https://discuss.elastic.co/t/kibana-controls-and-drill-down/244491)

<div class="topic-metadata">

**Author:** [@mykael](https://discuss.elastic.co/u/mykael)\
**Replies:** 1\
**Last updated:** [August 19, 2020, 3:49pm UTC](https://discuss.elastic.co/t/kibana-controls-and-drill-down/244491 "2020-08-19T15:49:02Z")

</div>

We're creating some dashboards that we sell to other ELK users as a part of our offering. I'm adding some controls to some of our new drill down dashboards - that all seems to work quite nicely - but I've a problem with…

---

## [Error when trying to add documents layer to maps](https://discuss.elastic.co/t/error-when-trying-to-add-documents-layer-to-maps/245500)

<div class="topic-metadata">

**Author:** [@looknleap](https://discuss.elastic.co/u/looknleap)\
**Replies:** 5\
**Last updated:** [August 19, 2020, 3:29pm UTC](https://discuss.elastic.co/t/error-when-trying-to-add-documents-layer-to-maps/245500 "2020-08-19T15:29:30Z")

</div>

I am trying to get a map visualization working, but I get the error: "Couldn't find any index patterns with geospatial fields" As shown below, I have have the index template setup with a geoip field mapping (2 actually,…

---

## [Displaying weeks number as X labels](https://discuss.elastic.co/t/displaying-weeks-number-as-x-labels/245606)

<div class="topic-metadata">

**Author:** [@BenoitSERRA](https://discuss.elastic.co/u/BenoitSERRA)\
**Replies:** 2\
**Last updated:** [August 19, 2020, 3:10pm UTC](https://discuss.elastic.co/t/displaying-weeks-number-as-x-labels/245606 "2020-08-19T15:10:57Z")

</div>

Hello, we are currently in a process of using the ELK stack to create our monthly dashboards for the management. previously, we were using custom Excel workbooks with specials queries. And those workbooks were agregati…

---

## [\[Kibana\] Index denied but visible and empty](https://discuss.elastic.co/t/kibana-index-denied-but-visible-and-empty/243728)

<div class="topic-metadata">

**Author:** [@Downer](https://discuss.elastic.co/u/Downer)\
**Replies:** 1\
**Last updated:** [August 19, 2020, 1:30pm UTC](https://discuss.elastic.co/t/kibana-index-denied-but-visible-and-empty/243728 "2020-08-19T13:30:43Z")

</div>

Hey guys ! I'm learning about kibana security feature and I've seen it's possible to allow only one index. But other still visible but empty so it's ok but not perfect. Can I do better ? Can I remove index than the rol…

---

## [Complex(Dynamic) query - Using the value of a particular field in the logs to filter the logs](https://discuss.elastic.co/t/complex-dynamic-query-using-the-value-of-a-particular-field-in-the-logs-to-filter-the-logs/245025)

<div class="topic-metadata">

**Author:** [@riyag](https://discuss.elastic.co/u/riyag)\
**Replies:** 3\
**Last updated:** [August 19, 2020, 12:56pm UTC](https://discuss.elastic.co/t/complex-dynamic-query-using-the-value-of-a-particular-field-in-the-logs-to-filter-the-logs/245025 "2020-08-19T12:56:52Z")

</div>

I have logs in the above format. The 'key1' "A" changes to "B" ('key2') and this change is documented in the log highlighted in green. After this step, "B" becomes the new value of "A" and the further logs have "B" i…

---

## [Managing kibana for multiple users](https://discuss.elastic.co/t/managing-kibana-for-multiple-users/245412)

<div class="topic-metadata">

**Author:** [@Dipak\_Sharma](https://discuss.elastic.co/u/Dipak_Sharma)\
**Replies:** 8\
**Last updated:** [August 19, 2020, 11:28am UTC](https://discuss.elastic.co/t/managing-kibana-for-multiple-users/245412 "2020-08-19T11:28:31Z")

</div>

I want to create a user with read access of one index of kibana.

---

## [Color in a field in the dashboard](https://discuss.elastic.co/t/color-in-a-field-in-the-dashboard/245218)

<div class="topic-metadata">

**Author:** [@vikramaddagulla](https://discuss.elastic.co/u/vikramaddagulla)\
**Replies:** 10\
**Last updated:** [August 19, 2020, 10:16am UTC](https://discuss.elastic.co/t/color-in-a-field-in-the-dashboard/245218 "2020-08-19T10:16:05Z")

</div>

Hello, I would like to know if its possible to display colored fields based on the message. For ex : If a server down is down, I would get the status as UP or DOWN on the dashboard. I would like to modify it as If th…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=438)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=440)
