# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=490

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 491

---

## [How to show Total Count in numbers from Bar Chart](https://discuss.elastic.co/t/how-to-show-total-count-in-numbers-from-bar-chart/232399)

<div class="topic-metadata">

**Author:** [@lohit18](https://discuss.elastic.co/u/lohit18)\
**Replies:** 8\
**Last updated:** [May 15, 2020, 7:23am UTC](https://discuss.elastic.co/t/how-to-show-total-count-in-numbers-from-bar-chart/232399 "2020-05-15T07:23:02Z")

</div>

Hello Everyone, Using Bar chart i want to show Values (Overall count) in chart left side /right side .kindly anyone help me how to do regards,

---

## [Sorting issue on keyword](https://discuss.elastic.co/t/sorting-issue-on-keyword/231133)

<div class="topic-metadata">

**Author:** [@Xavier\_Romero](https://discuss.elastic.co/u/Xavier_Romero)\
**Replies:** 10\
**Last updated:** [May 15, 2020, 5:52am UTC](https://discuss.elastic.co/t/sorting-issue-on-keyword/231133 "2020-05-15T05:52:46Z")

</div>

Hi there, I'm having some sorting issues. Below an image of the sorting problem, I expect the keyword field to be sorted A, B, C, D, E, U. However, it looks like when I set the time range to 12 hours or more, it usua…

---

## [\[parse\_exception\] found redacted password in field \[password\]](https://discuss.elastic.co/t/parse-exception-found-redacted-password-in-field-password/232759)

<div class="topic-metadata">

**Author:** [@kolli\_dilip](https://discuss.elastic.co/u/kolli_dilip)\
**Replies:** 0\
**Last updated:** [May 15, 2020, 6:12am UTC](https://discuss.elastic.co/t/parse-exception-found-redacted-password-in-field-password/232759 "2020-05-15T06:12:16Z")

</div>

Hi Experts, i am trying to generate an email report from watcher (to send a dashboard as a pdf report with email action) the below is my watcher { "trigger" : { "schedule": { "interval": "1h" } }, …

---

## [Dataframe Analytics Job Failed to apply boolean mapping](https://discuss.elastic.co/t/dataframe-analytics-job-failed-to-apply-boolean-mapping/232383)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 3\
**Last updated:** [May 15, 2020, 3:48am UTC](https://discuss.elastic.co/t/dataframe-analytics-job-failed-to-apply-boolean-mapping/232383 "2020-05-15T03:48:32Z")

</div>

Hello, Just tried a dataframe analytics outlier job on our panw data, which immeditaly failed when trying to start: An error occurred starting the data frame analytics dig\_dfa\_outlier\_panw\_user\_001: {"statusCode":400,"…

---

## [Use Ratio between average metrics](https://discuss.elastic.co/t/use-ratio-between-average-metrics/230826)

<div class="topic-metadata">

**Author:** [@filleul\_thierry](https://discuss.elastic.co/u/filleul_thierry)\
**Replies:** 3\
**Last updated:** [May 15, 2020, 12:09am UTC](https://discuss.elastic.co/t/use-ratio-between-average-metrics/230826 "2020-05-15T00:09:26Z")

</div>

Hello I try to make a ratio between 2 metrics during a period. 1 - sum aggregation of server RAM Used 2 - sum aggregation of server Ram capacity I did it with TSVB and bucket aggregation and it works but il would l…

---

## [How to visualize enums?](https://discuss.elastic.co/t/how-to-visualize-enums/232478)

<div class="topic-metadata">

**Author:** [@gthang](https://discuss.elastic.co/u/gthang)\
**Replies:** 2\
**Last updated:** [May 14, 2020, 6:36pm UTC](https://discuss.elastic.co/t/how-to-visualize-enums/232478 "2020-05-14T18:36:42Z")

</div>

Hello, We currently index certain system states as name value pairs along with other metrics(also name value pairs) once a second, every second for about 3000 discrete applications. One of these system state values loo…

---

## [Kibana Spaces: Only show certain Indices](https://discuss.elastic.co/t/kibana-spaces-only-show-certain-indices/231437)

<div class="topic-metadata">

**Author:** [@N\_P](https://discuss.elastic.co/u/N_P)\
**Replies:** 4\
**Last updated:** [May 14, 2020, 5:19pm UTC](https://discuss.elastic.co/t/kibana-spaces-only-show-certain-indices/231437 "2020-05-14T17:19:46Z")

</div>

Hi everyone, Does anyone know if it is possible to only show certain indices for a particular kibana space? Currently I have multiple spaces and data is able to be seen from different spaces. Thanks, Neil

---

## [Help with visualization](https://discuss.elastic.co/t/help-with-visualization/232255)

<div class="topic-metadata">

**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\
**Replies:** 5\
**Last updated:** [May 13, 2020, 9:52pm UTC](https://discuss.elastic.co/t/help-with-visualization/232255 "2020-05-13T21:52:20Z")

</div>

Hi, \*Current version ELK 6.8.8 I am using ELK + Suricata. I am trying to build a visualization in Kibana to filter the alerts received from index "logstash-alert-\*". All alerts are received, but I would like to have a …

---

## [How to check multiple values using if else condition in field and create a new scripted field?](https://discuss.elastic.co/t/how-to-check-multiple-values-using-if-else-condition-in-field-and-create-a-new-scripted-field/231967)

<div class="topic-metadata">

**Author:** [@Emna1](https://discuss.elastic.co/u/Emna1)\
**Replies:** 15\
**Last updated:** [May 14, 2020, 2:51pm UTC](https://discuss.elastic.co/t/how-to-check-multiple-values-using-if-else-condition-in-field-and-create-a-new-scripted-field/231967 "2020-05-14T14:51:42Z")

</div>

Hi, i want to use this code or transform it in kibana in scripted field ?how can i do that, any help please? Blockquote filter { if \[Duration\] \>= 360 { mutate { add\_field =\> { "MT" =\> "50" } } } else if \[Duratio…

---

## [Average week in TSVB](https://discuss.elastic.co/t/average-week-in-tsvb/232516)

<div class="topic-metadata">

**Author:** [@obones](https://discuss.elastic.co/u/obones)\
**Replies:** 2\
**Last updated:** [May 14, 2020, 2:45pm UTC](https://discuss.elastic.co/t/average-week-in-tsvb/232516 "2020-05-14T14:45:30Z")

</div>

Hello, I have an index where each timestamp is associated with an indicator. Inside TSVB, I can represent the maximum value for this indicator over the last seven days just fine and this gives me a line series with one…

---

## [Transform - can I "group by" splitting values in one row?](https://discuss.elastic.co/t/transform-can-i-group-by-splitting-values-in-one-row/231383)

<div class="topic-metadata">

**Author:** [@Mark\_Duncan](https://discuss.elastic.co/u/Mark_Duncan)\
**Replies:** 8\
**Last updated:** [May 14, 2020, 12:26pm UTC](https://discuss.elastic.co/t/transform-can-i-group-by-splitting-values-in-one-row/231383 "2020-05-14T12:26:32Z")

</div>

I'd like to add a dimension (a single field in each document with values, "buy" or "sell") to create 2 values in a single output record/row. So in Excel, this would look like splitting a value into 2 columns. Is this p…

---

## [Embed Elastic Map in Webpage](https://discuss.elastic.co/t/embed-elastic-map-in-webpage/232577)

<div class="topic-metadata">

**Author:** [@Stimmot](https://discuss.elastic.co/u/Stimmot)\
**Replies:** 1\
**Last updated:** [May 14, 2020, 9:08am UTC](https://discuss.elastic.co/t/embed-elastic-map-in-webpage/232577 "2020-05-14T09:08:34Z")

</div>

Hey guys, I would like to embed a snippet of an Elastic Map into another website. Basically it should look something like an embedded google map snippet as seen here. Does anyone know if that's possible? Plus: Is there…

---

## [Pass elastic index from url to kibana](https://discuss.elastic.co/t/pass-elastic-index-from-url-to-kibana/232573)

<div class="topic-metadata">

**Author:** [@Stab\_Ones](https://discuss.elastic.co/u/Stab_Ones)\
**Replies:** 1\
**Last updated:** [May 14, 2020, 8:59am UTC](https://discuss.elastic.co/t/pass-elastic-index-from-url-to-kibana/232573 "2020-05-14T08:59:12Z")

</div>

Hi, is there any way to pass index from url params to kibana? app/canvas?index=myIndex#/workpad/workpad query={ string "SELECT MONTH\_OF\_YEAR(dateBegin) month, SUM(someValue) value, some AS some, Type title FROM "{urlpa…

---

## [How to ingest / adapt my data with many arrays of objects](https://discuss.elastic.co/t/how-to-ingest-adapt-my-data-with-many-arrays-of-objects/232582)

<div class="topic-metadata">

**Author:** [@twright8](https://discuss.elastic.co/u/twright8)\
**Replies:** 0\
**Last updated:** [May 14, 2020, 8:34am UTC](https://discuss.elastic.co/t/how-to-ingest-adapt-my-data-with-many-arrays-of-objects/232582 "2020-05-14T08:34:45Z")

</div>

I have about 500000 documents of json data which are quite complex. see below for an example. Essentially i'd like to be able to visualise individual elements of objects within arrays but using the nested data type seems…

---

## [Kibana navigation very slow](https://discuss.elastic.co/t/kibana-navigation-very-slow/232141)

<div class="topic-metadata">

**Author:** [@vikramaddagulla](https://discuss.elastic.co/u/vikramaddagulla)\
**Replies:** 8\
**Last updated:** [May 14, 2020, 7:06am UTC](https://discuss.elastic.co/t/kibana-navigation-very-slow/232141 "2020-05-14T07:06:53Z")

</div>

Hello, I could observe that kibana navigation between different pages is very slow. The search looks fine. But if I go to discover and then to dashboards etc...that navigation is taking a lot of time. Please note, tha…

---

## [Difference in two timestamp fields](https://discuss.elastic.co/t/difference-in-two-timestamp-fields/232151)

<div class="topic-metadata">

**Author:** [@sama.sowjanya](https://discuss.elastic.co/u/sama.sowjanya)\
**Replies:** 2\
**Last updated:** [May 14, 2020, 6:31am UTC](https://discuss.elastic.co/t/difference-in-two-timestamp-fields/232151 "2020-05-14T06:31:41Z")

</div>

Hello I have two fields closed\_date and open\_date which are in date format and are aggregatable. i want to create a new scripted field using scripting to calculate the difference between them. We are using ELK 7.3.0 ve…

---

## [Kibana Query Displaying Incorrect Results](https://discuss.elastic.co/t/kibana-query-displaying-incorrect-results/228703)

<div class="topic-metadata">

**Author:** [@vikramaddagulla](https://discuss.elastic.co/u/vikramaddagulla)\
**Replies:** 10\
**Last updated:** [May 14, 2020, 6:09am UTC](https://discuss.elastic.co/t/kibana-query-displaying-incorrect-results/228703 "2020-05-14T06:09:24Z")

</div>

Hi, I am trying to view the logs which have higher time-taken parameter. In many of the logs, I can see that the time taken parameter is logged in as 8.000, 15.500, 15.753 etc If I try to search with timetaken \> 8.000 …

---

## [Redirection to log messages from graphs/charts](https://discuss.elastic.co/t/redirection-to-log-messages-from-graphs-charts/231983)

<div class="topic-metadata">

**Author:** [@nikhilesh](https://discuss.elastic.co/u/nikhilesh)\
**Replies:** 2\
**Last updated:** [May 14, 2020, 5:24am UTC](https://discuss.elastic.co/t/redirection-to-log-messages-from-graphs-charts/231983 "2020-05-14T05:24:55Z")

</div>

Hi All, Can any one please help on the below points ? When we click on the graphical charts( line, bar, pie) it should re-direct to log file of the error. is it possible? Already i have applied grok filter for my log …

---

## [Alerting help](https://discuss.elastic.co/t/alerting-help/232543)

<div class="topic-metadata">

**Author:** [@kumar6](https://discuss.elastic.co/u/kumar6)\
**Replies:** 1\
**Last updated:** [May 14, 2020, 4:17am UTC](https://discuss.elastic.co/t/alerting-help/232543 "2020-05-14T04:17:23Z")

</div>

Hello, I am using AWS elastic search 6.8 and wanted to using alerting in kibana. I want to generate alerts based on a pattern match "Cannot allocate memory". Is it possible to this in kibana?

---

## [FFT plot in Kibana](https://discuss.elastic.co/t/fft-plot-in-kibana/232515)

<div class="topic-metadata">

**Author:** [@Dimitris\_S](https://discuss.elastic.co/u/Dimitris_S)\
**Replies:** 0\
**Last updated:** [May 13, 2020, 9:11pm UTC](https://discuss.elastic.co/t/fft-plot-in-kibana/232515 "2020-05-13T21:11:02Z")

</div>

Hi all, I use Filebeat to fetch data from 2 Arduinos via the UDP interface. The messages are formated within the Arduinos and are sent in JSON format: "message": { "FFT\_Freq": \[ 0, 78.125, …

---

## [How to show legend on Vega-lite visualizations](https://discuss.elastic.co/t/how-to-show-legend-on-vega-lite-visualizations/232220)

<div class="topic-metadata">

**Author:** [@Carlos\_Vega\_Moreno](https://discuss.elastic.co/u/Carlos_Vega_Moreno)\
**Replies:** 1\
**Last updated:** [May 13, 2020, 8:49pm UTC](https://discuss.elastic.co/t/how-to-show-legend-on-vega-lite-visualizations/232220 "2020-05-13T20:49:34Z")

</div>

Hello, I would like to add the legend of the series I've been showing. I have multiple layers, and I can't manage to show the legend. Even after adding legend: {title:"File type"} it does not fail but is not shown eith…

---

## [Visualize percentage of time where logs exist / buckets are full](https://discuss.elastic.co/t/visualize-percentage-of-time-where-logs-exist-buckets-are-full/230985)

<div class="topic-metadata">

**Author:** [@kenran](https://discuss.elastic.co/u/kenran)\
**Replies:** 1\
**Last updated:** [May 13, 2020, 8:35pm UTC](https://discuss.elastic.co/t/visualize-percentage-of-time-where-logs-exist-buckets-are-full/230985 "2020-05-13T20:35:59Z")

</div>

I am sorry if this better fits in Elasticsearch; feel free to move it! I am currently trying to visualize something for the first time and it doesn't seem to be simple. My data consists of simple events that contain an…

---

## [KIbana 7.6.2 with SSL](https://discuss.elastic.co/t/kibana-7-6-2-with-ssl/232471)

<div class="topic-metadata">

**Author:** [@jgarbora](https://discuss.elastic.co/u/jgarbora)\
**Replies:** 2\
**Last updated:** [May 13, 2020, 8:34pm UTC](https://discuss.elastic.co/t/kibana-7-6-2-with-ssl/232471 "2020-05-13T20:34:00Z")

</div>

I am trying to enable SSL in Kibana ... and I am getting: Error: 139959624402752:error:14094418:SSL routines:ssl3\_read\_bytes:tlsv1 alert unknown ca:../deps/openssl/openssl/ssl/record/rec\_layer\_s3.c:1544:SSL alert number…

---

## [How to use sum aggregation in scripted field](https://discuss.elastic.co/t/how-to-use-sum-aggregation-in-scripted-field/232380)

<div class="topic-metadata">

**Author:** [@Emna1](https://discuss.elastic.co/u/Emna1)\
**Replies:** 0\
**Last updated:** [May 13, 2020, 7:46am UTC](https://discuss.elastic.co/t/how-to-use-sum-aggregation-in-scripted-field/232380 "2020-05-13T07:46:33Z")

</div>

HI, for example when i create a bar visualisation i can do the sum aggregation for specific field but when i do a control visualisation he can take just the field not sum of field so my problem is i need to create a scr…

---

## [Insert Tooltip in canvas´s visualizations](https://discuss.elastic.co/t/insert-tooltip-in-canvas-s-visualizations/231692)

<div class="topic-metadata">

**Author:** [@Marcos\_David\_Moreno](https://discuss.elastic.co/u/Marcos_David_Moreno)\
**Replies:** 1\
**Last updated:** [May 13, 2020, 7:53pm UTC](https://discuss.elastic.co/t/insert-tooltip-in-canvas-s-visualizations/231692 "2020-05-13T19:53:11Z")

</div>

Hello, Is there any way to include tooltip in canvas´s visualizations such as donut chart or histograms? Thank you

---

## [Using Controls in Dashboards](https://discuss.elastic.co/t/using-controls-in-dashboards/232056)

<div class="topic-metadata">

**Author:** [@cjabrantes](https://discuss.elastic.co/u/cjabrantes)\
**Replies:** 2\
**Last updated:** [May 13, 2020, 7:17pm UTC](https://discuss.elastic.co/t/using-controls-in-dashboards/232056 "2020-05-13T19:17:10Z")

</div>

Hi, Imaging that i have a dashboard with a couple of visualizations. The first x visualizations are "global" then i would like to add a control visualization to affect only a few following visualizations, is that possi…

---

## [Kibana Watcher using monitoring index](https://discuss.elastic.co/t/kibana-watcher-using-monitoring-index/231877)

<div class="topic-metadata">

**Author:** [@Maries](https://discuss.elastic.co/u/Maries)\
**Replies:** 12\
**Last updated:** [May 13, 2020, 6:10pm UTC](https://discuss.elastic.co/t/kibana-watcher-using-monitoring-index/231877 "2020-05-13T18:10:50Z")

</div>

Created a watcher script for getting the statistics details from daily monitoring index. But the match phrase condition is not working and no rows returned ( getting NULL Values in output). The same script was working i…

---

## [Kibana dashboard No result found](https://discuss.elastic.co/t/kibana-dashboard-no-result-found/232173)

<div class="topic-metadata">

**Author:** [@ethical20](https://discuss.elastic.co/u/ethical20)\
**Replies:** 14\
**Last updated:** [May 13, 2020, 5:46pm UTC](https://discuss.elastic.co/t/kibana-dashboard-no-result-found/232173 "2020-05-13T17:46:52Z")

</div>

Hi, I've installed elasticsearch, kibana, on server. Installed Filebeat on ubuntu client. For a reason (couldn't find logstash index, didn't knew it will have filebeat name, forgot about logstash for now) I deleted the…

---

## [The easiet way to add field editable in control visualisation?](https://discuss.elastic.co/t/the-easiet-way-to-add-field-editable-in-control-visualisation/232189)

<div class="topic-metadata">

**Author:** [@Emna1](https://discuss.elastic.co/u/Emna1)\
**Replies:** 2\
**Last updated:** [May 13, 2020, 4:46pm UTC](https://discuss.elastic.co/t/the-easiet-way-to-add-field-editable-in-control-visualisation/232189 "2020-05-13T16:46:32Z")

</div>

Hi, i want to know the easiet way to do point 2: 1.i must do range slider in control visualisation with field duration and i specify the interval min & max and after that i want to add 2. editable input field which…

---

## [Create WATCHER with dynamic search value](https://discuss.elastic.co/t/create-watcher-with-dynamic-search-value/232298)

<div class="topic-metadata">

**Author:** [@greg.melasecca](https://discuss.elastic.co/u/greg.melasecca)\
**Replies:** 2\
**Last updated:** [May 13, 2020, 3:59pm UTC](https://discuss.elastic.co/t/create-watcher-with-dynamic-search-value/232298 "2020-05-13T15:59:56Z")

</div>

kibana version: 7.4.1 Description: We want to create a WATCHER event that triggers an alert (slack, pd, email, etc.) when a field is found with the same string but that string is unknown (can not hard code it into WATC…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=489)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=491)
