# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=504

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 505

---

## [Timelion inconsistent information](https://discuss.elastic.co/t/timelion-inconsistent-information/229147)

<div class="topic-metadata">

**Author:** [@bevano](https://discuss.elastic.co/u/bevano)\
**Replies:** 1\
**Last updated:** [April 22, 2020, 8:36am UTC](https://discuss.elastic.co/t/timelion-inconsistent-information/229147 "2020-04-22T08:36:06Z")

</div>

Hey Guys, Pretty new to ELK. I am trying to use Timelion to visualise historical trends since December and this is searching multiple indices totalling around 600gb, however searches never complete first time. It takes…

---

## [Term join not yielding results when using Keyword field as left source](https://discuss.elastic.co/t/term-join-not-yielding-results-when-using-keyword-field-as-left-source/229080)

<div class="topic-metadata">

**Author:** [@Bustencio](https://discuss.elastic.co/u/Bustencio)\
**Replies:** 4\
**Last updated:** [April 22, 2020, 8:22am UTC](https://discuss.elastic.co/t/term-join-not-yielding-results-when-using-keyword-field-as-left-source/229080 "2020-04-22T08:22:47Z")

</div>

Hi, I'm trying to join 2 indexes through term join in Elastic Maps but I'm having trouble retrieving results when I use a "fieldName.keyword" field as the left source of the join, meanwhile I'm not having any trouble re…

---

## [Kibana- not able to login using saml](https://discuss.elastic.co/t/kibana-not-able-to-login-using-saml/227321)

<div class="topic-metadata">

**Author:** [@jbaskaran\_123](https://discuss.elastic.co/u/jbaskaran_123)\
**Replies:** 10\
**Last updated:** [April 22, 2020, 4:20am UTC](https://discuss.elastic.co/t/kibana-not-able-to-login-using-saml/227321 "2020-04-22T04:20:49Z")

</div>

We have configured SAML for our Elasticsearch cluster running in Kubernetes. when I hit the application URL, it redirects to IDP login (IDMS) but after logging in it shows "you are not authorized to use this application…

---

## [Intercept every request from Kibana plugin](https://discuss.elastic.co/t/intercept-every-request-from-kibana-plugin/229021)

<div class="topic-metadata">

**Author:** [@Digl1](https://discuss.elastic.co/u/Digl1)\
**Replies:** 18\
**Last updated:** [April 22, 2020, 2:57am UTC](https://discuss.elastic.co/t/intercept-every-request-from-kibana-plugin/229021 "2020-04-22T02:57:23Z")

</div>

Hi, I have tried a lot, but I can't really get it to work. I want to intercept all requests from kibana to elastic and modify the HTTP request Headers. I am also not sure what the correct approach to this would be - s…

---

## [Version control and backup of dashboard/visualization/query object](https://discuss.elastic.co/t/version-control-and-backup-of-dashboard-visualization-query-object/229148)

<div class="topic-metadata">

**Author:** [@dataplatform12345](https://discuss.elastic.co/u/dataplatform12345)\
**Replies:** 1\
**Last updated:** [April 22, 2020, 2:59am UTC](https://discuss.elastic.co/t/version-control-and-backup-of-dashboard-visualization-query-object/229148 "2020-04-22T02:59:30Z")

</div>

What's the best way to implement an automatic version control and backup system for all the objects created in Kibana for visualization and querying? Should we use export/import API to collect the latest content and push…

---

## [Kibana server is not ready-- clean new install](https://discuss.elastic.co/t/kibana-server-is-not-ready-clean-new-install/228709)

<div class="topic-metadata">

**Author:** [@x0rcist](https://discuss.elastic.co/u/x0rcist)\
**Replies:** 1\
**Last updated:** [April 22, 2020, 2:32am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-clean-new-install/228709 "2020-04-22T02:32:46Z")

</div>

Hi, I followed this post https://www.lahilabs.com/2020/01/02/how-to-install-elk-siem-for-beginners-complete-guide/ I have running elastic curl localhost:9200 { "name" : "vultr.guest", "cluster\_name" : "elasticsearc…

---

## [Field Formatter registration Kibana 7.6.2](https://discuss.elastic.co/t/field-formatter-registration-kibana-7-6-2/228544)

<div class="topic-metadata">

**Author:** [@Paul\_Gege](https://discuss.elastic.co/u/Paul_Gege)\
**Replies:** 1\
**Last updated:** [April 22, 2020, 2:07am UTC](https://discuss.elastic.co/t/field-formatter-registration-kibana-7-6-2/228544 "2020-04-22T02:07:39Z")

</div>

Hi, I attempted to register my plugin using this: Here is how I used it: But I get this error: I changed the code to this (passing an array with my field formatter): However the page to edit field types comes…

---

## [How to query a specific subset of transactions starting with transaction with specific value of a specific field?](https://discuss.elastic.co/t/how-to-query-a-specific-subset-of-transactions-starting-with-transaction-with-specific-value-of-a-specific-field/228888)

<div class="topic-metadata">

**Author:** [@111167](https://discuss.elastic.co/u/111167)\
**Replies:** 1\
**Last updated:** [April 21, 2020, 10:44pm UTC](https://discuss.elastic.co/t/how-to-query-a-specific-subset-of-transactions-starting-with-transaction-with-specific-value-of-a-specific-field/228888 "2020-04-21T22:44:14Z")

</div>

Hello. Kibana version: 6.4.2 In usual case, if you need to find specific subset of transactions starting with a transaction with the message field "Unload list of items" you may use id filter, for example. But in my cas…

---

## [Kibana URL template with relative path](https://discuss.elastic.co/t/kibana-url-template-with-relative-path/228418)

<div class="topic-metadata">

**Author:** [@surajbarde](https://discuss.elastic.co/u/surajbarde)\
**Replies:** 10\
**Last updated:** [April 21, 2020, 9:05pm UTC](https://discuss.elastic.co/t/kibana-url-template-with-relative-path/228418 "2020-04-21T21:05:33Z")

</div>

I have a question regarding Kibana URL templates for fields in the index. I have used relative path for the below URL template. On local environment it is replaced with http://localhost:5601/s/reporting/app/kibana#/…

---

## [Built\_assets/dll folder is empty in the kibana tar file(linux) generated from the source code](https://discuss.elastic.co/t/built-assets-dll-folder-is-empty-in-the-kibana-tar-file-linux-generated-from-the-source-code/228958)

<div class="topic-metadata">

**Author:** [@Nandhini\_Subburaj](https://discuss.elastic.co/u/Nandhini_Subburaj)\
**Replies:** 1\
**Last updated:** [April 21, 2020, 8:16pm UTC](https://discuss.elastic.co/t/built-assets-dll-folder-is-empty-in-the-kibana-tar-file-linux-generated-from-the-source-code/228958 "2020-04-21T20:16:14Z")

</div>

I am using kibana 7.6.2. I followed this guide(https://github.com/elastic/kibana/blob/master/CONTRIBUTING.md#setting-up-your-development-environment) to create the build from the kibana source code. Build was successful…

---

## [How can we include a standalone html page with scripts inside a custom Kibana plugin](https://discuss.elastic.co/t/how-can-we-include-a-standalone-html-page-with-scripts-inside-a-custom-kibana-plugin/228799)

<div class="topic-metadata">

**Author:** [@pranay\_bhatnagar](https://discuss.elastic.co/u/pranay_bhatnagar)\
**Replies:** 3\
**Last updated:** [April 21, 2020, 7:55pm UTC](https://discuss.elastic.co/t/how-can-we-include-a-standalone-html-page-with-scripts-inside-a-custom-kibana-plugin/228799 "2020-04-21T19:55:11Z")

</div>

I am using custom Kibana plugin in which i want to use a external html page with many script tags inside a plugin UI. How can i include external html page and scripts inside my Kibana plugin UI.

---

## [Visualizing a single string of text in kibana](https://discuss.elastic.co/t/visualizing-a-single-string-of-text-in-kibana/228693)

<div class="topic-metadata">

**Author:** [@vikramnr](https://discuss.elastic.co/u/vikramnr)\
**Replies:** 1\
**Last updated:** [April 21, 2020, 7:30pm UTC](https://discuss.elastic.co/t/visualizing-a-single-string-of-text-in-kibana/228693 "2020-04-21T19:30:30Z")

</div>

I'm trying to have markdown which will display only single value from one of the index. I tried using metric but it doesn't have the expected results. I did some SO search and found some thing create our own visuals I w…

---

## [Kibana alerts and use case](https://discuss.elastic.co/t/kibana-alerts-and-use-case/229071)

<div class="topic-metadata">

**Author:** [@oumy](https://discuss.elastic.co/u/oumy)\
**Replies:** 2\
**Last updated:** [April 21, 2020, 7:07pm UTC](https://discuss.elastic.co/t/kibana-alerts-and-use-case/229071 "2020-04-21T19:07:50Z")

</div>

Hello there, i am trying to get alerts in kibana and i am looking for some use cases library if there is any. ( i am trying to build a small SIEM using ELk stack and beats) Thank you in advance

---

## [Visualize:unknown error](https://discuss.elastic.co/t/visualize-unknown-error/228444)

<div class="topic-metadata">

**Author:** [@kaviraj](https://discuss.elastic.co/u/kaviraj)\
**Replies:** 1\
**Last updated:** [April 21, 2020, 6:01pm UTC](https://discuss.elastic.co/t/visualize-unknown-error/228444 "2020-04-21T18:01:00Z")

</div>

Hello, While monitoring the application we have observed an error, if we kept the GUI idle for a while 5 mins we have seen this “Visualize:unknown error” But this issue is seen only in Microsoft Edge , sometimes in Moz…

---

## [Load index pattern from Default Space to New Space](https://discuss.elastic.co/t/load-index-pattern-from-default-space-to-new-space/228945)

<div class="topic-metadata">

**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\
**Replies:** 4\
**Last updated:** [April 21, 2020, 4:46pm UTC](https://discuss.elastic.co/t/load-index-pattern-from-default-space-to-new-space/228945 "2020-04-21T16:46:14Z")

</div>

I have two spaces named- Default and XYZ. I made a user role called abc which has read only access to discover, dashboards and such tabs. In default I have indexes which have data and logs. I have made dashboards in def…

---

## [How to remove the Default Time Stamp from the Saved Index Pattern](https://discuss.elastic.co/t/how-to-remove-the-default-time-stamp-from-the-saved-index-pattern/229078)

<div class="topic-metadata">

**Author:** [@sudarsan.1687](https://discuss.elastic.co/u/sudarsan.1687)\
**Replies:** 1\
**Last updated:** [April 21, 2020, 3:51pm UTC](https://discuss.elastic.co/t/how-to-remove-the-default-time-stamp-from-the-saved-index-pattern/229078 "2020-04-21T15:51:45Z")

</div>

Hi, I have an issue in the Default time stamp that is in first column of saved index pattern, I know how to remove by using Advance Setting but it applies to all saved index patter (that is my problem) I only like to re…

---

## [Log \[13:36:54.916\] \[warning\]\[savedobjects-service\] Unable to connect to Elasticsearch. Error: Request Timeout after 30000ms](https://discuss.elastic.co/t/log-1354-916-warning-savedobjects-service-unable-to-connect-to-elasticsearch-error-request-timeout-after-30000ms/229056)

<div class="topic-metadata">

**Author:** [@Devendra7](https://discuss.elastic.co/u/Devendra7)\
**Replies:** 1\
**Last updated:** [April 21, 2020, 2:59pm UTC](https://discuss.elastic.co/t/log-1354-916-warning-savedobjects-service-unable-to-connect-to-elasticsearch-error-request-timeout-after-30000ms/229056 "2020-04-21T14:59:26Z")

</div>

C:\\Kibana\\kibana-7.6.2-windows-x86\_64\\bin\>kibana log \[13:35:11.800\] \[info\]\[plugins-service\] Plugin "case" is disabled. log \[13:36:24.614\] \[info\]\[plugins-system\] Setting up \[37\] plugins: \[taskManager,siem,infra,lice…

---

## [Kibana 7.6 crashing in docker](https://discuss.elastic.co/t/kibana-7-6-crashing-in-docker/228910)

<div class="topic-metadata">

**Author:** [@vbhat](https://discuss.elastic.co/u/vbhat)\
**Replies:** 4\
**Last updated:** [April 21, 2020, 2:52pm UTC](https://discuss.elastic.co/t/kibana-7-6-crashing-in-docker/228910 "2020-04-21T14:52:35Z")

</div>

Hi, While trying to run kibana 7.6.2 in docker I am constantly facing the below issue where kibana crashes. I am running this inside HahsiCorp Nomad. \<--- Last few GCs ---\> \[6:0x41307d0\] 184257 ms: Mark-sweep 1020.5…

---

## [Babel note: the code generator has deoptimised the styling of 500kb](https://discuss.elastic.co/t/babel-note-the-code-generator-has-deoptimised-the-styling-of-500kb/226848)

<div class="topic-metadata">

**Author:** [@Robin020](https://discuss.elastic.co/u/Robin020)\
**Replies:** 8\
**Last updated:** [April 21, 2020, 2:07pm UTC](https://discuss.elastic.co/t/babel-note-the-code-generator-has-deoptimised-the-styling-of-500kb/226848 "2020-04-21T14:07:16Z")

</div>

Hi, After I installed a plugin called Mapster (https://github.com/OmniCyberSecurity/mapster) and restarted the kibana services, I get the following error: babel note: the code generator has deoptimised the styling of 5…

---

## [No index(Doc) display in the created index pattern](https://discuss.elastic.co/t/no-index-doc-display-in-the-created-index-pattern/228629)

<div class="topic-metadata">

**Author:** [@m-hadi](https://discuss.elastic.co/u/m-hadi)\
**Replies:** 4\
**Last updated:** [April 21, 2020, 12:41pm UTC](https://discuss.elastic.co/t/no-index-doc-display-in-the-created-index-pattern/228629 "2020-04-21T12:41:53Z")

</div>

Hi I created an index pattern after creating an index(with some doc) now I can't see this index (relevant documents) in Discover when I select the index pattern. more info: (1- Number of index pattern fields: 254 2…

---

## [Kibana v7.6.0 CORS seems not work](https://discuss.elastic.co/t/kibana-v7-6-0-cors-seems-not-work/226461)

<div class="topic-metadata">

**Author:** [@lag82](https://discuss.elastic.co/u/lag82)\
**Replies:** 5\
**Last updated:** [April 21, 2020, 12:25pm UTC](https://discuss.elastic.co/t/kibana-v7-6-0-cors-seems-not-work/226461 "2020-04-21T12:25:20Z")

</div>

Hi, I have tried to enable CORS via kibana.yml and elasticsearch.yml but seems not work because my POST request not start yet because previous OPTIONS started from browser to Kibana endpoint, not receive correct headers …

---

## [Kibana load times](https://discuss.elastic.co/t/kibana-load-times/228575)

<div class="topic-metadata">

**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\
**Replies:** 5\
**Last updated:** [April 21, 2020, 10:47am UTC](https://discuss.elastic.co/t/kibana-load-times/228575 "2020-04-21T10:47:07Z")

</div>

Hi guys, Just wanted to verify that I'm not missing anything, and this behaviour is normal. For me, it takes about 8 seconds until Kibana's main page load. Is there anything to do about that? It's hosted on the cloud…

---

## [Heatmap Y-Axis reversed](https://discuss.elastic.co/t/heatmap-y-axis-reversed/228894)

<div class="topic-metadata">

**Author:** [@mpitt](https://discuss.elastic.co/u/mpitt)\
**Replies:** 2\
**Last updated:** [April 21, 2020, 9:16am UTC](https://discuss.elastic.co/t/heatmap-y-axis-reversed/228894 "2020-04-21T09:16:57Z")

</div>

Same issue as https://discuss.elastic.co/t/heat-map-y-axis-reverse-order/117685 Looks still unfixed after more than 2 years, any chance it will be worked on?

---

## [The displayed items change with autorefresh](https://discuss.elastic.co/t/the-displayed-items-change-with-autorefresh/225194)

<div class="topic-metadata">

**Author:** [@mareksedlacek](https://discuss.elastic.co/u/mareksedlacek)\
**Replies:** 3\
**Last updated:** [April 21, 2020, 10:00am UTC](https://discuss.elastic.co/t/the-displayed-items-change-with-autorefresh/225194 "2020-04-21T10:00:54Z")

</div>

From Kibana 7.4.x, the position of the items in the view is changed with each autorefresh. It starts to happen once I scroll down to the bottom of the page and new batch of items is loaded (and scrollbar is resized + re…

---

## [Kibana on port 443 multiple IIS sites](https://discuss.elastic.co/t/kibana-on-port-443-multiple-iis-sites/228991)

<div class="topic-metadata">

**Author:** [@vladtepes](https://discuss.elastic.co/u/vladtepes)\
**Replies:** 1\
**Last updated:** [April 21, 2020, 9:34am UTC](https://discuss.elastic.co/t/kibana-on-port-443-multiple-iis-sites/228991 "2020-04-21T09:34:09Z")

</div>

Hi, I am trying to get Kibana working on port 443 on Windows, however if IIS is installed, requests seem to be routed to IIS and not kibana. Any way to make this work in such a scenario?

---

## [Heat map Y-axis reverse order](https://discuss.elastic.co/t/heat-map-y-axis-reverse-order/117685)

<div class="topic-metadata">

**Author:** [@a18](https://discuss.elastic.co/u/a18)\
**Replies:** 3\
**Last updated:** [April 21, 2020, 9:27am UTC](https://discuss.elastic.co/t/heat-map-y-axis-reverse-order/117685 "2020-04-21T09:27:26Z")

</div>

Hi everyone! I am currently working on a heat map on Kibana 6.1.1. I am using histogram aggreagation for both X-axis and Y-axis. When setting the y-axis, I would like it to be sorted in descending order from top to botto…

---

## [Filtering documents to any with matching strings from keyword list](https://discuss.elastic.co/t/filtering-documents-to-any-with-matching-strings-from-keyword-list/228506)

<div class="topic-metadata">

**Author:** [@twright8](https://discuss.elastic.co/u/twright8)\
**Replies:** 5\
**Last updated:** [April 21, 2020, 8:48am UTC](https://discuss.elastic.co/t/filtering-documents-to-any-with-matching-strings-from-keyword-list/228506 "2020-04-21T08:48:27Z")

</div>

Hi! I'm currently working on procurement data relevant to the current COVID-19 crises. Essentially i had a block of data that i'd like to be filtered to be relevant to COVID via a keyword list. If a document does not c…

---

## [How to fetch 2x top hit values from 2 different indexes' documents in one table?](https://discuss.elastic.co/t/how-to-fetch-2x-top-hit-values-from-2-different-indexes-documents-in-one-table/228523)

<div class="topic-metadata">

**Author:** [@Mark\_Duncan](https://discuss.elastic.co/u/Mark_Duncan)\
**Replies:** 4\
**Last updated:** [April 21, 2020, 8:48am UTC](https://discuss.elastic.co/t/how-to-fetch-2x-top-hit-values-from-2-different-indexes-documents-in-one-table/228523 "2020-04-21T08:48:17Z")

</div>

Hi I have 2 x Elasticsearch indexes and I've made one Kibana index using the \* wildcard index name. I'd like to present 2 top hit (latest) values in a table; one value from each Elasticsearch index - so these are 2 dif…

---

## [How to solve this error in kibana?](https://discuss.elastic.co/t/how-to-solve-this-error-in-kibana/228777)

<div class="topic-metadata">

**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\
**Replies:** 5\
**Last updated:** [April 21, 2020, 8:38am UTC](https://discuss.elastic.co/t/how-to-solve-this-error-in-kibana/228777 "2020-04-21T08:38:17Z")

</div>

Discover found the error. Looking at the kibana and elasticsearch logs, there are no errors. What is the cause and how to fix it?

---

## [Created script field successfully but error occurred in discover](https://discuss.elastic.co/t/created-script-field-successfully-but-error-occurred-in-discover/228813)

<div class="topic-metadata">

**Author:** [@Echo\_yu](https://discuss.elastic.co/u/Echo_yu)\
**Replies:** 4\
**Last updated:** [April 21, 2020, 8:14am UTC](https://discuss.elastic.co/t/created-script-field-successfully-but-error-occurred-in-discover/228813 "2020-04-21T08:14:53Z")

</div>

Hi, I created a script field with the type of date successfully but when I search data in discover something went wrong . And I cannot use my script field in aggregation either. My script field create by if(doc\['finished…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=503)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=505)
