# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=465

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 466

---

## [Input from 3 log files on 1 visualization on kibana](https://discuss.elastic.co/t/input-from-3-log-files-on-1-visualization-on-kibana/238941)

<div class="topic-metadata">

**Author:** [@falconpurple](https://discuss.elastic.co/u/falconpurple)\
**Replies:** 2\
**Last updated:** [June 27, 2020, 1:25pm UTC](https://discuss.elastic.co/t/input-from-3-log-files-on-1-visualization-on-kibana/238941 "2020-06-27T13:25:59Z")

</div>

Hi, I have to connect 3 log files. The Logfile 1 contains fields: Logdate,request\_type,responsetime The Logfile 2 contains fields: Logdate,request\_type,responsetime The Logfile 3 contains fields: Logdate,request\_t…

---

## [Suricata and Kibana in Ubuntu 18.04](https://discuss.elastic.co/t/suricata-and-kibana-in-ubuntu-18-04/235438)

<div class="topic-metadata">

**Author:** [@wahyu\_wir](https://discuss.elastic.co/u/wahyu_wir)\
**Replies:** 6\
**Last updated:** [June 27, 2020, 11:29am UTC](https://discuss.elastic.co/t/suricata-and-kibana-in-ubuntu-18-04/235438 "2020-06-27T11:29:47Z")

</div>

how can I use ELK on the suricata that I installed on Ubuntu 18.04? I have followed the link: https://www.google.com/amp/s/logz.io/blog/network-security-monitoring/amp/ but after the kibana is opened, it appears that i…

---

## [View only last logline from all hosts](https://discuss.elastic.co/t/view-only-last-logline-from-all-hosts/238206)

<div class="topic-metadata">

**Author:** [@Marcel27](https://discuss.elastic.co/u/Marcel27)\
**Replies:** 3\
**Last updated:** [June 27, 2020, 9:26am UTC](https://discuss.elastic.co/t/view-only-last-logline-from-all-hosts/238206 "2020-06-27T09:26:57Z")

</div>

For a specific use case where i have 1000+ hosts using filebeat to send a logfile to ES, i want a view in Kibana with a (filterable) listview of all hosts, with only the last logline of each host. Is this possible, and…

---

## [Filter/search by log.file.path in kibana](https://discuss.elastic.co/t/filter-search-by-log-file-path-in-kibana/238918)

<div class="topic-metadata">

**Author:** [@shawn35gh](https://discuss.elastic.co/u/shawn35gh)\
**Replies:** 0\
**Last updated:** [June 26, 2020, 9:30pm UTC](https://discuss.elastic.co/t/filter-search-by-log-file-path-in-kibana/238918 "2020-06-26T21:30:39Z")

</div>

Hey, I want to search by log.file.path in filebeat-\*. values as below. I want to search/filter all the logs in folder 67890 and its sub-folder. anyone know how to do this search? Thanks in advance! Shawn /home/users/…

---

## [Vega Transform Timestamp to date](https://discuss.elastic.co/t/vega-transform-timestamp-to-date/238834)

<div class="topic-metadata">

**Author:** [@issaissa](https://discuss.elastic.co/u/issaissa)\
**Replies:** 1\
**Last updated:** [June 26, 2020, 2:59pm UTC](https://discuss.elastic.co/t/vega-transform-timestamp-to-date/238834 "2020-06-26T14:59:45Z")

</div>

In vega-lite I can transform timestamp into time type after reading it from index as follows: transform: \[{calculate: "toDate(datum.\_source\['measure\_date\_time'\])", as: "time"} \] what is the equivalent for this in ve…

---

## [Sum of one common value on two fields](https://discuss.elastic.co/t/sum-of-one-common-value-on-two-fields/238877)

<div class="topic-metadata">

**Author:** [@kamfart](https://discuss.elastic.co/u/kamfart)\
**Replies:** 0\
**Last updated:** [June 26, 2020, 2:55pm UTC](https://discuss.elastic.co/t/sum-of-one-common-value-on-two-fields/238877 "2020-06-26T14:55:16Z")

</div>

Hi there, I'm trying to build a visualisation which calculates the sum of one specific value across all my documents filtered by 2 fields. Here some truncated data to illustrate my words : { ... "class": "A", "valu…

---

## [Visualization: Display missing values on filter aggregation](https://discuss.elastic.co/t/visualization-display-missing-values-on-filter-aggregation/238586)

<div class="topic-metadata">

**Author:** [@kimjavier43](https://discuss.elastic.co/u/kimjavier43)\
**Replies:** 4\
**Last updated:** [June 26, 2020, 2:09pm UTC](https://discuss.elastic.co/t/visualization-display-missing-values-on-filter-aggregation/238586 "2020-06-26T14:09:19Z")

</div>

Hello, Is there a way to include missing fields in filters aggregation like in terms aggregation? Thanks,

---

## [Unable to create Index in kibana](https://discuss.elastic.co/t/unable-to-create-index-in-kibana/238633)

<div class="topic-metadata">

**Author:** [@Magesh](https://discuss.elastic.co/u/Magesh)\
**Replies:** 3\
**Last updated:** [June 26, 2020, 11:46am UTC](https://discuss.elastic.co/t/unable-to-create-index-in-kibana/238633 "2020-06-26T11:46:07Z")

</div>

Hi i have created logstash index logstash\* please refer the screen however i'm unable to create index pattern in Kibana, my index (logstash\*) is not getting listed, Please refer the screenshot

---

## [Gauge visualization: Is there a way to set the default value as 0](https://discuss.elastic.co/t/gauge-visualization-is-there-a-way-to-set-the-default-value-as-0/238830)

<div class="topic-metadata">

**Author:** [@calumpp](https://discuss.elastic.co/u/calumpp)\
**Replies:** 0\
**Last updated:** [June 26, 2020, 10:06am UTC](https://discuss.elastic.co/t/gauge-visualization-is-there-a-way-to-set-the-default-value-as-0/238830 "2020-06-26T10:06:25Z")

</div>

Hi, I have a few gauge visualizations that display information on servers once the controls has a server selected. However when there is nothing selected on the controls, it displays a value for the first server on the …

---

## [Trial Version](https://discuss.elastic.co/t/trial-version/238783)

<div class="topic-metadata">

**Author:** [@adz](https://discuss.elastic.co/u/adz)\
**Replies:** 3\
**Last updated:** [June 26, 2020, 11:02am UTC](https://discuss.elastic.co/t/trial-version/238783 "2020-06-26T11:02:10Z")

</div>

I would like to inquire about how I can use the trial version on my local machine instead of the cloud.

---

## [Bad Request error when creating a new Kibana index pattern](https://discuss.elastic.co/t/bad-request-error-when-creating-a-new-kibana-index-pattern/238831)

<div class="topic-metadata">

**Author:** [@Mark\_Duncan](https://discuss.elastic.co/u/Mark_Duncan)\
**Replies:** 2\
**Last updated:** [June 26, 2020, 10:56am UTC](https://discuss.elastic.co/t/bad-request-error-when-creating-a-new-kibana-index-pattern/238831 "2020-06-26T10:56:14Z")

</div>

I am getting an error when trying to create a new Kibana index pattern: Error: Bad Request I don't have any details about why it's not working. Any thoughts? ... I did apply the following the other day - intending …

---

## [Time series calendar](https://discuss.elastic.co/t/time-series-calendar/238838)

<div class="topic-metadata">

**Author:** [@balaji\_18](https://discuss.elastic.co/u/balaji_18)\
**Replies:** 0\
**Last updated:** [June 26, 2020, 10:44am UTC](https://discuss.elastic.co/t/time-series-calendar/238838 "2020-06-26T10:44:17Z")

</div>

Hi team, We are trying to implement vs prior concept in kibana, where as we used serial Diff using TSVB, we got output with comparison of previous month, but if we use the calendar using date range selector, the value i…

---

## [Getting some erroe while accessing discover tab in kibana](https://discuss.elastic.co/t/getting-some-erroe-while-accessing-discover-tab-in-kibana/238836)

<div class="topic-metadata">

**Author:** [@Masco\_Kaliyamoorthy](https://discuss.elastic.co/u/Masco_Kaliyamoorthy)\
**Replies:** 0\
**Last updated:** [June 26, 2020, 10:35am UTC](https://discuss.elastic.co/t/getting-some-erroe-while-accessing-discover-tab-in-kibana/238836 "2020-06-26T10:35:06Z")

</div>

Getting the error message while try to access the discover tab from a index Error: Request to Elasticsearch failed: {"error":{}} at http://10.9.76.205:5601/bundles/commons.bundle.js:3:4901144 at Function.\_module.servi…

---

## [Is it possible to show custom messages on dashboard?](https://discuss.elastic.co/t/is-it-possible-to-show-custom-messages-on-dashboard/238560)

<div class="topic-metadata">

**Author:** [@Jaishree\_Pal](https://discuss.elastic.co/u/Jaishree_Pal)\
**Replies:** 1\
**Last updated:** [June 26, 2020, 9:34am UTC](https://discuss.elastic.co/t/is-it-possible-to-show-custom-messages-on-dashboard/238560 "2020-06-26T09:34:26Z")

</div>

Hi guys, I'm actually facing one issue in my dashboard. Whenever I apply filters through controls visualization, if I select any item for which data is not present then visualizations just say 'no result found' or in cas…

---

## [Want to format date](https://discuss.elastic.co/t/want-to-format-date/234312)

<div class="topic-metadata">

**Author:** [@shubhamblackstratus](https://discuss.elastic.co/u/shubhamblackstratus)\
**Replies:** 4\
**Last updated:** [June 26, 2020, 8:29am UTC](https://discuss.elastic.co/t/want-to-format-date/234312 "2020-06-26T08:29:11Z")

</div>

My current date format is "2019-11-11T05:59:12.000Z" and I want to modify this with day\_of\_the\_week. I tried to achieve it by utilising painless script but it forces me to use terms as an aggregation without mentioning …

---

## [Kibana :: Count if the id not exist for the event](https://discuss.elastic.co/t/kibana-count-if-the-id-not-exist-for-the-event/238609)

<div class="topic-metadata">

**Author:** [@Jai1](https://discuss.elastic.co/u/Jai1)\
**Replies:** 7\
**Last updated:** [June 26, 2020, 8:01am UTC](https://discuss.elastic.co/t/kibana-count-if-the-id-not-exist-for-the-event/238609 "2020-06-26T08:01:09Z")

</div>

hi, I have a data like this: id : 1,event: event1 id: 2,event:event1 id: 2,event:event2 id:3,event:event1 Need to count the ids having only event1 not in event2 expecting is 2 count

---

## [Kibana 7.8.0 URL problem Metrics Logstash](https://discuss.elastic.co/t/kibana-7-8-0-url-problem-metrics-logstash/237790)

<div class="topic-metadata">

**Author:** [@edumartinDC](https://discuss.elastic.co/u/edumartinDC)\
**Replies:** 3\
**Last updated:** [June 26, 2020, 7:24am UTC](https://discuss.elastic.co/t/kibana-7-8-0-url-problem-metrics-logstash/237790 "2020-06-26T07:24:44Z")

</div>

Good morning: After upgrading to version 7.8.0, when I access the logstash node through the stack's metrics, it shows error 404. As far as I could see it is a problem in the redirection of the url. This is the one sho…

---

## [Parsing email data with regex in scripted field](https://discuss.elastic.co/t/parsing-email-data-with-regex-in-scripted-field/238593)

<div class="topic-metadata">

**Author:** [@whyptrap](https://discuss.elastic.co/u/whyptrap)\
**Replies:** 5\
**Last updated:** [June 26, 2020, 7:08am UTC](https://discuss.elastic.co/t/parsing-email-data-with-regex-in-scripted-field/238593 "2020-06-26T07:08:22Z")

</div>

Hello, i am newbie in ELK stack. I want to create new field using scripted field in kibana. The new field contain parsed email data from exist field that contain email data too. I just want to get string before @ charact…

---

## [Dynamically choice in second option list](https://discuss.elastic.co/t/dynamically-choice-in-second-option-list/238513)

<div class="topic-metadata">

**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\
**Replies:** 4\
**Last updated:** [June 26, 2020, 6:15am UTC](https://discuss.elastic.co/t/dynamically-choice-in-second-option-list/238513 "2020-06-26T06:15:18Z")

</div>

Hi, I made a dashboard that contains a control visualization with two option lists (A and B, A is parent of B ). Is there any way for the second option list to be filled "automatically" when I have choosen something in…

---

## [Draw date histogram after with applying filter](https://discuss.elastic.co/t/draw-date-histogram-after-with-applying-filter/238511)

<div class="topic-metadata">

**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\
**Replies:** 2\
**Last updated:** [June 26, 2020, 6:13am UTC](https://discuss.elastic.co/t/draw-date-histogram-after-with-applying-filter/238511 "2020-06-26T06:13:09Z")

</div>

Hi, I made a dashboard that contains a control visualization with two option lists (A and B, A is parent of B ) and a Date histogram. Is there any way for the histogram to "draw" the lines after I have choosen somethin…

---

## [Kibana set date filter to show last 30 days](https://discuss.elastic.co/t/kibana-set-date-filter-to-show-last-30-days/235908)

<div class="topic-metadata">

**Author:** [@katara](https://discuss.elastic.co/u/katara)\
**Replies:** 2\
**Last updated:** [June 26, 2020, 5:53am UTC](https://discuss.elastic.co/t/kibana-set-date-filter-to-show-last-30-days/235908 "2020-06-26T05:53:40Z")

</div>

Hi , I have a query on how to apply date filter conditions. so i have an index where i have not set the default time filter. ( i selected i do not want to set a time filter option while creating index) since i have man…

---

## [Getting error while doing timelion.enabled to false](https://discuss.elastic.co/t/getting-error-while-doing-timelion-enabled-to-false/238778)

<div class="topic-metadata">

**Author:** [@Mayank\_Srivastava](https://discuss.elastic.co/u/Mayank_Srivastava)\
**Replies:** 0\
**Last updated:** [June 26, 2020, 3:58am UTC](https://discuss.elastic.co/t/getting-error-while-doing-timelion-enabled-to-false/238778 "2020-06-26T03:58:39Z")

</div>

Hi , I am trying to disable timelion.enabled to false , but getting this error FATAL Error: Optimizations failure. 3456 modules ERROR in ./src/legacy/core\_plugins/interpreter/public/functions/timelion\_vis.js Module …

---

## [X axis scale showing wrong order in Heat map chart](https://discuss.elastic.co/t/x-axis-scale-showing-wrong-order-in-heat-map-chart/238379)

<div class="topic-metadata">

**Author:** [@Kavin](https://discuss.elastic.co/u/Kavin)\
**Replies:** 7\
**Last updated:** [June 26, 2020, 5:48am UTC](https://discuss.elastic.co/t/x-axis-scale-showing-wrong-order-in-heat-map-chart/238379 "2020-06-26T05:48:56Z")

</div>

I have created a 'heat map' chart for 'Day of Week' vs 'Time of Day' with the data 'No. of Sessions'. Inorder to get the correct alignment for 'Day of Week' (Monday,Tuesday,Wednersday......), I have created a separate…

---

## [Kibana and {“statusCode”:404,”error”:”Not Found”,”message”:”Not Found”}](https://discuss.elastic.co/t/kibana-and-statuscode-404-error-not-found-message-not-found/234682)

<div class="topic-metadata">

**Author:** [@ewolfman](https://discuss.elastic.co/u/ewolfman)\
**Replies:** 4\
**Last updated:** [June 26, 2020, 5:35am UTC](https://discuss.elastic.co/t/kibana-and-statuscode-404-error-not-found-message-not-found/234682 "2020-06-26T05:35:44Z")

</div>

Hi, We noticed that logging-in to Kibana with the user 'kibana' gives this 404. Logging-in with 'elastic' works well and kibana is showing. Looks like a bug to me... Thanks.

---

## [Customize text from login page in Kibana 7.6 - not working](https://discuss.elastic.co/t/customize-text-from-login-page-in-kibana-7-6-not-working/238432)

<div class="topic-metadata">

**Author:** [@marrel](https://discuss.elastic.co/u/marrel)\
**Replies:** 7\
**Last updated:** [June 26, 2020, 5:27am UTC](https://discuss.elastic.co/t/customize-text-from-login-page-in-kibana-7-6-not-working/238432 "2020-06-26T05:27:15Z")

</div>

Hi everyone! I wanted to customize the texts from login/logout page in Kibana version 7.6 with my custom text. I have found where the texts are written: for the Welcome to Kibana and Your window into the Elastic Sta…

---

## [Heatmap X-axis number sorting issue](https://discuss.elastic.co/t/heatmap-x-axis-number-sorting-issue/238627)

<div class="topic-metadata">

**Author:** [@Kavin](https://discuss.elastic.co/u/Kavin)\
**Replies:** 2\
**Last updated:** [June 26, 2020, 5:12am UTC](https://discuss.elastic.co/t/heatmap-x-axis-number-sorting-issue/238627 "2020-06-26T05:12:32Z")

</div>

Continuing the discussion from Heatmap X-Axis - Simple number sorting issue: I am facing a similar issue. Is there a solution for this?

---

## [In a painless script how do I iterate through document keys based on a pattern?](https://discuss.elastic.co/t/in-a-painless-script-how-do-i-iterate-through-document-keys-based-on-a-pattern/238552)

<div class="topic-metadata">

**Author:** [@gthang](https://discuss.elastic.co/u/gthang)\
**Replies:** 2\
**Last updated:** [June 25, 2020, 11:46pm UTC](https://discuss.elastic.co/t/in-a-painless-script-how-do-i-iterate-through-document-keys-based-on-a-pattern/238552 "2020-06-25T23:46:00Z")

</div>

Hello, I would like to come up with a scripted field of sum of all values based on document keys. So for example I have the following k=v pairs. doc\['totalA'\] = 1 doc\['totalB'\] = 3 doc\['totalC'\] = 3 I would like to…

---

## [Divergence in data when sent to Kibana](https://discuss.elastic.co/t/divergence-in-data-when-sent-to-kibana/238522)

<div class="topic-metadata">

**Author:** [@FernandoMOTA](https://discuss.elastic.co/u/FernandoMOTA)\
**Replies:** 13\
**Last updated:** [June 25, 2020, 10:27pm UTC](https://discuss.elastic.co/t/divergence-in-data-when-sent-to-kibana/238522 "2020-06-25T22:27:39Z")

</div>

I did a data ingestion in the SQL Server data ES, the total number of documents is the same, but when I create a visualization in Kibana the values ​​are different when I make a different count by product for example, I …

---

## [Page not found error in stack monitoring page](https://discuss.elastic.co/t/page-not-found-error-in-stack-monitoring-page/238551)

<div class="topic-metadata">

**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\
**Replies:** 8\
**Last updated:** [June 25, 2020, 8:30pm UTC](https://discuss.elastic.co/t/page-not-found-error-in-stack-monitoring-page/238551 "2020-06-25T20:30:37Z")

</div>

I am getting 404 - "page not found" while clicking on specific node inside stack management. I am able to get details about other nodes. Here is the URL: logstash/node/3cba9882-7c93-48d6-ae7c-2c599b01abfa?\_g=(cluster…

---

## [TSVB Gauge showing 0](https://discuss.elastic.co/t/tsvb-gauge-showing-0/238755)

<div class="topic-metadata">

**Author:** [@Evan\_W](https://discuss.elastic.co/u/Evan_W)\
**Replies:** 0\
**Last updated:** [June 25, 2020, 8:00pm UTC](https://discuss.elastic.co/t/tsvb-gauge-showing-0/238755 "2020-06-25T20:00:47Z")

</div>

Fresh recruit here so pardon any "user error", but I'm trying to set up an ELK stack with the new 7.8 version to monitor a problematic server. I've set up built in dashboards with Metricbeat, but upon viewing the Host Ov…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=464)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=466)
