# Kibana **URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=459 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 460 --- ## [Kibana count and elasticsearch count are different](https://discuss.elastic.co/t/kibana-count-and-elasticsearch-count-are-different/240375)
**Author:** [@elisavet](https://discuss.elastic.co/u/elisavet)\ **Replies:** 2\ **Last updated:** [July 9, 2020, 11:44am UTC](https://discuss.elastic.co/t/kibana-count-and-elasticsearch-count-are-different/240375 "2020-07-09T11:44:18Z")
Hello! When I count docs in elasticsearch with the \_count API I get 844, while in kibana I get 623. Why does this happen? Thank you, elisavet --- ## [Intercept all requests from Kibana to Elasticsearch by using the plugin](https://discuss.elastic.co/t/intercept-all-requests-from-kibana-to-elasticsearch-by-using-the-plugin/240507)
**Author:** [@Uldis\_Liepins](https://discuss.elastic.co/u/Uldis_Liepins)\ **Replies:** 0\ **Last updated:** [July 9, 2020, 10:19am UTC](https://discuss.elastic.co/t/intercept-all-requests-from-kibana-to-elasticsearch-by-using-the-plugin/240507 "2020-07-09T10:19:40Z")
Hi, I am trying to intercept all requests coming from browser to \_msearch (e.g. \_msearch?rest\_total\_hits\_as\_int=true&ignore\_throttled=true) by using the plugin. The idea is to be able to add additional search parameter… --- ## [Issues with Wildcard Watcher](https://discuss.elastic.co/t/issues-with-wildcard-watcher/240315)
**Author:** [@LiamSwe](https://discuss.elastic.co/u/LiamSwe)\ **Replies:** 2\ **Last updated:** [July 9, 2020, 9:19am UTC](https://discuss.elastic.co/t/issues-with-wildcard-watcher/240315 "2020-07-09T09:19:15Z")
I am writing a watcher to monitor failures on a website of XML files imported that fail due to invalid character(s) in the XML. This is what I have right now, but for some reason it isn't working. Can anyone help me out? … --- ## [Showing icons for legends in place of text](https://discuss.elastic.co/t/showing-icons-for-legends-in-place-of-text/240316)
**Author:** [@VipinAgarwal](https://discuss.elastic.co/u/VipinAgarwal)\ **Replies:** 2\ **Last updated:** [July 9, 2020, 7:20am UTC](https://discuss.elastic.co/t/showing-icons-for-legends-in-place-of-text/240316 "2020-07-09T07:20:43Z")
Hello all, I'm a newbie to ELK stack, so apologies if this has already been answered. Would really appreciate if you can point me to right place. We have a requirement where we would like to show a horizontal bar with… --- ## [Error in visualization \[esaggs\] \> Service unavailable when time filtering](https://discuss.elastic.co/t/error-in-visualization-esaggs-service-unavailable-when-time-filtering/239987)
**Author:** [@Kevin\_Renalda](https://discuss.elastic.co/u/Kevin_Renalda)\ **Replies:** 2\ **Last updated:** [July 8, 2020, 12:05pm UTC](https://discuss.elastic.co/t/error-in-visualization-esaggs-service-unavailable-when-time-filtering/239987 "2020-07-08T12:05:55Z")
Hi, I'm fairly new to kibana, I wanna ask about this error I keep getting every time I set the filter time range in my dashboard to a wide range and when I click the see the full error it just shows the exact same err… --- ## [Can't access kibana when enable xpack.security](https://discuss.elastic.co/t/cant-access-kibana-when-enable-xpack-security/240114)
**Author:** [@Jinlian\_Chen](https://discuss.elastic.co/u/Jinlian_Chen)\ **Replies:** 4\ **Last updated:** [July 9, 2020, 3:08am UTC](https://discuss.elastic.co/t/cant-access-kibana-when-enable-xpack-security/240114 "2020-07-09T03:08:19Z")
Os: macOS Mojave 10.14.5 Elasticsearch version: 7.8.0 Kibana version: 7.8.0 Chrome version: Version 83.0.4103.106 (Official Build) (64-bit) Safari version: Version 12.1.1 (14607.2.6.1.1) Issue: Use Chrome can't acc… --- ## [ML: how to find anomaly from ip address](https://discuss.elastic.co/t/ml-how-to-find-anomaly-from-ip-address/239996)
**Author:** [@nameisnotimportant](https://discuss.elastic.co/u/nameisnotimportant)\ **Replies:** 5\ **Last updated:** [July 9, 2020, 12:48am UTC](https://discuss.elastic.co/t/ml-how-to-find-anomaly-from-ip-address/239996 "2020-07-09T00:48:38Z")
Hi, I have been trying to figure out how to use the multi metric to find anomaly in IP address. Objective is to do something like gmail login notification if IP address or device type are different. I created sample da… --- ## [How many user are logging in to kibana?](https://discuss.elastic.co/t/how-many-user-are-logging-in-to-kibana/240430)
**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\ **Replies:** 2\ **Last updated:** [July 8, 2020, 10:06pm UTC](https://discuss.elastic.co/t/how-many-user-are-logging-in-to-kibana/240430 "2020-07-08T22:06:43Z")
I am running 7.8.0 enable xpack.security.audit.enabled: true in kibana.yml where are these two information going, which index or log? saved\_objects\_authorization\_success saved\_objects\_authorization\_failure --- ## [\[script\_exception\] runtime error bad request](https://discuss.elastic.co/t/script-exception-runtime-error-bad-request/240397)
**Author:** [@rob2020](https://discuss.elastic.co/u/rob2020)\ **Replies:** 1\ **Last updated:** [July 8, 2020, 9:30pm UTC](https://discuss.elastic.co/t/script-exception-runtime-error-bad-request/240397 "2020-07-08T21:30:17Z")
Hi, I am new in Kibana .So I added a scripted field in one of the index pattern. I am pretty sure the code should work fine. if (doc\['message.keyword'\].value.contains('errCode')) { return "match"; } return "No match"; W… --- ## [Hora errada en el Log de Kibana](https://discuss.elastic.co/t/hora-errada-en-el-log-de-kibana/238754)
**Author:** [@Consultoria\_SI](https://discuss.elastic.co/u/Consultoria_SI)\ **Replies:** 3\ **Last updated:** [July 8, 2020, 9:21pm UTC](https://discuss.elastic.co/t/hora-errada-en-el-log-de-kibana/238754 "2020-07-08T21:21:31Z")
Buenas Tardes, Tengo instalado kibana y cuando quiero validar el log me sale una hora diferente a la configurada en el sistema. ¿Alguna forma solucionar este problema? --- ## [Horizontal Bar calculation string](https://discuss.elastic.co/t/horizontal-bar-calculation-string/240341)
**Author:** [@Anton91](https://discuss.elastic.co/u/Anton91)\ **Replies:** 1\ **Last updated:** [July 8, 2020, 8:41pm UTC](https://discuss.elastic.co/t/horizontal-bar-calculation-string/240341 "2020-07-08T20:41:55Z")
Hello, i have the following question: I have a string field and i want to count it and then divide it by the sum and calculate \*100 at the end. Theoretically I want to find out what percentage of each application uses a… --- ## [Creating dropdowns within a dashboard to select particular visualisation](https://discuss.elastic.co/t/creating-dropdowns-within-a-dashboard-to-select-particular-visualisation/240224)
**Author:** [@Ram2416](https://discuss.elastic.co/u/Ram2416)\ **Replies:** 2\ **Last updated:** [July 8, 2020, 7:39pm UTC](https://discuss.elastic.co/t/creating-dropdowns-within-a-dashboard-to-select-particular-visualisation/240224 "2020-07-08T19:39:14Z")
Hi, I've currently multiple visualizations embedded within a dashboard. When I open the dashboard, What I see is all the visualizations present in the dashboard all at once. I would like to know if there is any way aro… --- ## [Different results in different graphs - same data in kibana](https://discuss.elastic.co/t/different-results-in-different-graphs-same-data-in-kibana/240292)
**Author:** [@ethical20](https://discuss.elastic.co/u/ethical20)\ **Replies:** 1\ **Last updated:** [July 8, 2020, 6:51pm UTC](https://discuss.elastic.co/t/different-results-in-different-graphs-same-data-in-kibana/240292 "2020-07-08T18:51:22Z")
Hi, I'm using this visualization in kibana - filebeat : Top pages \[Filebeat Nginx\] ECS In the (Time Series) , I can see that robots.txt has 5 visits, but when switching to the (Top N) tab robots.txt value is zero! Als… --- ## [Register FieldFormat plugin in v. 7.6.2](https://discuss.elastic.co/t/register-fieldformat-plugin-in-v-7-6-2/240408)
**Author:** [@Elaak](https://discuss.elastic.co/u/Elaak)\ **Replies:** 0\ **Last updated:** [July 8, 2020, 5:13pm UTC](https://discuss.elastic.co/t/register-fieldformat-plugin-in-v-7-6-2/240408 "2020-07-08T17:13:45Z")
This is basically the same question as this post: But this one does not have a solution, at the very least the last post does not solve my issue. Although I believe there are typos in the last post also. I am trying t… --- ## [Control Visualization List Filtering on scripted metric field](https://discuss.elastic.co/t/control-visualization-list-filtering-on-scripted-metric-field/226286)
**Author:** [@silentfilm](https://discuss.elastic.co/u/silentfilm)\ **Replies:** 17\ **Last updated:** [July 8, 2020, 3:56pm UTC](https://discuss.elastic.co/t/control-visualization-list-filtering-on-scripted-metric-field/226286 "2020-07-08T15:56:14Z")
I have several Kibana dashboards that use Option List control filters to allow users to easily filter data. Many of the fields that I filter on for the list are scripted fields in the index. This works great most of the … --- ## [How I can create a Discovery view with query like](https://discuss.elastic.co/t/how-i-can-create-a-discovery-view-with-query-like/240113)
**Author:** [@ksarkar](https://discuss.elastic.co/u/ksarkar)\ **Replies:** 2\ **Last updated:** [July 8, 2020, 1:44pm UTC](https://discuss.elastic.co/t/how-i-can-create-a-discovery-view-with-query-like/240113 "2020-07-08T13:44:50Z")
One of my table is getting populated by a time interval with some data from different channel with same time stamp. I wish to aggregate it w.r.t time. Sample query as below. select starttime, sum(available) as availa… --- ## [Clone visualization in Kibana](https://discuss.elastic.co/t/clone-visualization-in-kibana/240289)
**Author:** [@ethical20](https://discuss.elastic.co/u/ethical20)\ **Replies:** 2\ **Last updated:** [July 8, 2020, 12:15pm UTC](https://discuss.elastic.co/t/clone-visualization-in-kibana/240289 "2020-07-08T12:15:34Z")
Hi, Is there a way to clone (Top pages \[Filebeat Nginx\] ECS) from visualize in order to edit the cloned version and keep the original one? I can see how can I clone dashboards but not visualizations? Any help is reall… --- ## [TSVB Calculated the Value Series](https://discuss.elastic.co/t/tsvb-calculated-the-value-series/240324)
**Author:** [@umay\_fb](https://discuss.elastic.co/u/umay_fb)\ **Replies:** 0\ **Last updated:** [July 8, 2020, 10:39am UTC](https://discuss.elastic.co/t/tsvb-calculated-the-value-series/240324 "2020-07-08T10:39:08Z")
Hii All...... I had The Question,, Can we Calculated the value of Series TSVB.. ex: we create the parameter in series a, the we using the params series a in script bucket in series b.. i want using that cause i want … --- ## [Manage\_security cluster error](https://discuss.elastic.co/t/manage-security-cluster-error/237198)
**Author:** [@nameisnotimportant](https://discuss.elastic.co/u/nameisnotimportant)\ **Replies:** 4\ **Last updated:** [July 8, 2020, 9:54am UTC](https://discuss.elastic.co/t/manage-security-cluster-error/237198 "2020-07-08T09:54:13Z")
Hi, I created and granted a user with manage\_security cluster privileges. By right the user should be able to manage role but somehow, when the user click on role name or the Create role button, nothing happen. May i kno… --- ## [Kibana doesn't start after upgrading from 6.6.0 to 6.8.10 version](https://discuss.elastic.co/t/kibana-doesnt-start-after-upgrading-from-6-6-0-to-6-8-10-version/240218)
**Author:** [@MohammedReehan](https://discuss.elastic.co/u/MohammedReehan)\ **Replies:** 3\ **Last updated:** [July 8, 2020, 8:39am UTC](https://discuss.elastic.co/t/kibana-doesnt-start-after-upgrading-from-6-6-0-to-6-8-10-version/240218 "2020-07-08T08:39:52Z")
Hello, I would need some help here. i have recently upgrade Elastic and kibana from version 6.6.0 to 6.8.0 however elasticsearch upgrade went good. i didn't reindex any indices. however after upgrading kibana version. k… --- ## [Unable to get Kibana working under subdomain](https://discuss.elastic.co/t/unable-to-get-kibana-working-under-subdomain/240112)
**Author:** [@jacktaaniels](https://discuss.elastic.co/u/jacktaaniels)\ **Replies:** 2\ **Last updated:** [July 8, 2020, 7:50am UTC](https://discuss.elastic.co/t/unable-to-get-kibana-working-under-subdomain/240112 "2020-07-08T07:50:35Z")
Hello, I am trying to set up Kibana with Nginx using ubuntu 18.04 LTS. I am using an alias for Kibana, e.g. kibana.mydomain.com. Under the domain root, I want to have a different application running. Kibana service itse… --- ## [Why the index not discover in kibana?](https://discuss.elastic.co/t/why-the-index-not-discover-in-kibana/240248)
**Author:** [@Champion\_Xie](https://discuss.elastic.co/u/Champion_Xie)\ **Replies:** 2\ **Last updated:** [July 8, 2020, 6:46am UTC](https://discuss.elastic.co/t/why-the-index-not-discover-in-kibana/240248 "2020-07-08T06:46:16Z")
Hi All, i can get the index (logstash-web-20200701) inES , but why the index not discove in kibana? and then Today's index file can be viewed normally btw the index is supplemented manually, not created in real time --- ## [Pie chart top hit metrics doesn't allow sort by timestamp](https://discuss.elastic.co/t/pie-chart-top-hit-metrics-doesnt-allow-sort-by-timestamp/239937)
**Author:** [@Kayla\_Vo](https://discuss.elastic.co/u/Kayla_Vo)\ **Replies:** 7\ **Last updated:** [July 8, 2020, 3:05am UTC](https://discuss.elastic.co/t/pie-chart-top-hit-metrics-doesnt-allow-sort-by-timestamp/239937 "2020-07-08T03:05:15Z")
I am using Amazon Elasticsearch 7.4 to create a pie chart for the last value of each category. The logs look like this: { "@timestamp": 1593750007582, "type": "roommode", "name": "Off", … --- ## [More data return when do one query](https://discuss.elastic.co/t/more-data-return-when-do-one-query/240148)
**Author:** [@bo\_bo](https://discuss.elastic.co/u/bo_bo)\ **Replies:** 4\ **Last updated:** [July 8, 2020, 2:12am UTC](https://discuss.elastic.co/t/more-data-return-when-do-one-query/240148 "2020-07-08T02:12:28Z")
i want do some queries in elasticsearch when i do this by kibana, it returns like this: but when i do queries in console with these sentences: GET /doujiangv4-2020-07-05/\_search/ { "query":{ "bool" : { … --- ## [Kibana7.1 - Getting "unable to find usable node.js executable" after running ./kibana --oss](https://discuss.elastic.co/t/kibana7-1-getting-unable-to-find-usable-node-js-executable-after-running-kibana-oss/240077)
**Author:** [@ucw](https://discuss.elastic.co/u/ucw)\ **Replies:** 3\ **Last updated:** [July 8, 2020, 1:53am UTC](https://discuss.elastic.co/t/kibana7-1-getting-unable-to-find-usable-node-js-executable-after-running-kibana-oss/240077 "2020-07-08T01:53:34Z")
Hi all, I'm getting message "unable to find usable node.js executable" after running ./kibana --oss and couldn't get Kibana up and running. Kibana server OS - Ubuntu 18.04.1 LTS Installation steps: git clone https:/… --- ## [Elasticsearch/Kibana 7.8.0-1 in Docker Container - Index Pattern issue in Kibana as nothing showing up when going into Discover](https://discuss.elastic.co/t/elasticsearch-kibana-7-8-0-1-in-docker-container-index-pattern-issue-in-kibana-as-nothing-showing-up-when-going-into-discover/240088)
**Author:** [@soneill](https://discuss.elastic.co/u/soneill)\ **Replies:** 5\ **Last updated:** [July 7, 2020, 11:25pm UTC](https://discuss.elastic.co/t/elasticsearch-kibana-7-8-0-1-in-docker-container-index-pattern-issue-in-kibana-as-nothing-showing-up-when-going-into-discover/240088 "2020-07-07T23:25:21Z")
I have Elasticsearch and Kibana running in a docker container. I've recently setup up a data stream from my 1900ACS router of ulog data pushing connections information from that router into Elasticsearch. From what I'm… --- ## [\[warning\]\[savedobjects-service\] Unable to connect to Elasticsearch. Error: Request Timeout after 30000ms](https://discuss.elastic.co/t/warning-savedobjects-service-unable-to-connect-to-elasticsearch-error-request-timeout-after-30000ms/240083)
**Author:** [@Splunk](https://discuss.elastic.co/u/Splunk)\ **Replies:** 12\ **Last updated:** [July 7, 2020, 11:09pm UTC](https://discuss.elastic.co/t/warning-savedobjects-service-unable-to-connect-to-elasticsearch-error-request-timeout-after-30000ms/240083 "2020-07-07T23:09:27Z")
I have no idea what is the cause. anyone help me with this. kibana installation \[warning\]\[savedobjects-service\] Unable to connect to Elasticsearch. Error: Request Timeout after 30000ms --- ## [Kibana iFrame cannot undo zoom](https://discuss.elastic.co/t/kibana-iframe-cannot-undo-zoom/239871)
**Author:** [@sanjaysubramanian](https://discuss.elastic.co/u/sanjaysubramanian)\ **Replies:** 2\ **Last updated:** [July 7, 2020, 11:03pm UTC](https://discuss.elastic.co/t/kibana-iframe-cannot-undo-zoom/239871 "2020-07-07T23:03:15Z")
Dear all Please see the video. When viewing the iFrame of the Dashboard, if I zoom a visualization then it affects all panels. Thats a good feature. However their is no way to "Zoom back to Original"...The… --- ## [Kibana dashboards for Prometheus based metrics](https://discuss.elastic.co/t/kibana-dashboards-for-prometheus-based-metrics/240180)
**Author:** [@Xavier\_Krantz](https://discuss.elastic.co/u/Xavier_Krantz)\ **Replies:** 1\ **Last updated:** [July 7, 2020, 10:39pm UTC](https://discuss.elastic.co/t/kibana-dashboards-for-prometheus-based-metrics/240180 "2020-07-07T22:39:28Z")
Hi there, I am trying to monitor the Nginx ingress controller on kubernetes. This project integrates nicely with Prometheus. Using the valuable information from this thread: Nginx k8s metrics, I am able to pull the me… --- ## [\[warning\]Error: Request Timeout after 30000ms](https://discuss.elastic.co/t/warning-error-request-timeout-after-30000ms/240199)
**Author:** [@Splunk](https://discuss.elastic.co/u/Splunk)\ **Replies:** 3\ **Last updated:** [July 7, 2020, 10:08pm UTC](https://discuss.elastic.co/t/warning-error-request-timeout-after-30000ms/240199 "2020-07-07T22:08:37Z")
Hi, Can Someone help me with this issue, I have been trying to fix it from the last 24hours. Unable to connect to Elasticsearch. Error: Request Timeout after 30000ms ➜ bin kibana log \[16:52:47.938\] \[wa… [Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=458) [Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=460)