# Kibana **URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=513 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 514 --- ## [User in xpack security not added](https://discuss.elastic.co/t/user-in-xpack-security-not-added/223983)
**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\ **Replies:** 13\ **Last updated:** [April 3, 2020, 8:57pm UTC](https://discuss.elastic.co/t/user-in-xpack-security-not-added/223983 "2020-04-03T20:57:52Z")
I am trying to add user in kibana after running the ./bin/kibana-keystore add elasticsearch.username --allow-root and password command in Kibana folder. But when I restart kibana after setting username and password, i ge… --- ## [Customizable datetime filter](https://discuss.elastic.co/t/customizable-datetime-filter/225926)
**Author:** [@Angela\_Escobar\_Mimbr](https://discuss.elastic.co/u/Angela_Escobar_Mimbr)\ **Replies:** 1\ **Last updated:** [April 3, 2020, 8:47pm UTC](https://discuss.elastic.co/t/customizable-datetime-filter/225926 "2020-04-03T20:47:24Z")
Hi, We need to use a customizable datetime filter in our dashboard, we have two use case distinct: In a workpad we have two differents types of visualization with differents index, a visualization present a data for … --- ## [Active Guests Count](https://discuss.elastic.co/t/active-guests-count/225549)
**Author:** [@deutschermann](https://discuss.elastic.co/u/deutschermann)\ **Replies:** 2\ **Last updated:** [April 3, 2020, 6:50pm UTC](https://discuss.elastic.co/t/active-guests-count/225549 "2020-04-03T18:50:37Z")
I want to know the count and details of active guests in hotel. I have check-in time and check-out time. Check-out time is null, if guest is still in the hotel. I have another column, which says "Status", like, 'checke… --- ## [Divide Sums with conditions an d group by](https://discuss.elastic.co/t/divide-sums-with-conditions-an-d-group-by/223437)
**Author:** [@AClerk](https://discuss.elastic.co/u/AClerk)\ **Replies:** 1\ **Last updated:** [April 3, 2020, 5:14pm UTC](https://discuss.elastic.co/t/divide-sums-with-conditions-an-d-group-by/223437 "2020-04-03T17:14:47Z")
Hi, I have documents that looks like { ... "\_source": { ... "Number\_2": 64, ... "Name\_A": "RANDOM\_A", ... "Number\_1": 4, ... "Name\_B": "RANDOM\_B" }, I would like to show a ratio calculation… --- ## [No logs in Kibana logs app](https://discuss.elastic.co/t/no-logs-in-kibana-logs-app/221005)
**Author:** [@Vaishali\_Gupta](https://discuss.elastic.co/u/Vaishali_Gupta)\ **Replies:** 14\ **Last updated:** [April 3, 2020, 4:56pm UTC](https://discuss.elastic.co/t/no-logs-in-kibana-logs-app/221005 "2020-04-03T16:56:58Z")
I have configured the EFK stack and logs are visible in kibana under the discover button when i create index pattern fluentd\*. But same logs are not visible in logs app when I make custom settings. PFA the configuratio… --- ## [Create Kibana Watcher alerts for certain conditions](https://discuss.elastic.co/t/create-kibana-watcher-alerts-for-certain-conditions/226275)
**Author:** [@malleable](https://discuss.elastic.co/u/malleable)\ **Replies:** 3\ **Last updated:** [April 3, 2020, 4:51pm UTC](https://discuss.elastic.co/t/create-kibana-watcher-alerts-for-certain-conditions/226275 "2020-04-03T16:51:00Z")
Hi all, I am trying to achieve the following with my Kibana watcher. 1\> I have added logs in my code with the text "Security Alert" where there is an appropriate security violation. So, in my code, in certain sections, … --- ## [Index not in pattern](https://discuss.elastic.co/t/index-not-in-pattern/226006)
**Author:** [@jeipo\_91](https://discuss.elastic.co/u/jeipo_91)\ **Replies:** 2\ **Last updated:** [April 3, 2020, 3:05pm UTC](https://discuss.elastic.co/t/index-not-in-pattern/226006 "2020-04-03T15:05:09Z")
I created an index named prova: When I try to create an index pattern as prova\*, it doesn't match with any index while I would expect it matched with index prova mentioned above: What should I do to map index prova… --- ## [Kibana drill down issue on bar charts after upgrading to 7.6](https://discuss.elastic.co/t/kibana-drill-down-issue-on-bar-charts-after-upgrading-to-7-6/225010)
**Author:** [@tshayan](https://discuss.elastic.co/u/tshayan)\ **Replies:** 14\ **Last updated:** [April 3, 2020, 3:03pm UTC](https://discuss.elastic.co/t/kibana-drill-down-issue-on-bar-charts-after-upgrading-to-7-6/225010 "2020-04-03T15:03:53Z")
Hello, We recently upgraded Kibana from 7.5 to 7.6. After the upgrade, I see a filtering or "drill down" issue on bar charts that are using terms aggregation in pre-existing dashboards. If I try to filter or drill down… --- ## [Log entry disappears between Logstash and Kibana](https://discuss.elastic.co/t/log-entry-disappears-between-logstash-and-kibana/225850)
**Author:** [@Axl](https://discuss.elastic.co/u/Axl)\ **Replies:** 6\ **Last updated:** [April 3, 2020, 2:20pm UTC](https://discuss.elastic.co/t/log-entry-disappears-between-logstash-and-kibana/225850 "2020-04-03T14:20:09Z")
Hello, Logstash is processing an event with: eventid set to cowrie.command.input message and input containing Unix commands Mar 31 10:26:02 instance-42 logstash\[22592\]: { Mar 31 10:26:02 instance-42 logstash\[22592… --- ## [Generate chart from custom aggregation](https://discuss.elastic.co/t/generate-chart-from-custom-aggregation/226389)
**Author:** [@oula\_oula](https://discuss.elastic.co/u/oula_oula)\ **Replies:** 1\ **Last updated:** [April 3, 2020, 11:31am UTC](https://discuss.elastic.co/t/generate-chart-from-custom-aggregation/226389 "2020-04-03T11:31:03Z")
Hi, I'm trying to make a chart that shows for each superhero the time he's spent between to cities. The problem is that I cannot add a field using "scripted field" method because it cannot match multiple docs at the sa… --- ## [Is it possible to jump from a visualization to a deeper visualization?](https://discuss.elastic.co/t/is-it-possible-to-jump-from-a-visualization-to-a-deeper-visualization/226387)
**Author:** [@Sajumoet](https://discuss.elastic.co/u/Sajumoet)\ **Replies:** 1\ **Last updated:** [April 3, 2020, 10:52am UTC](https://discuss.elastic.co/t/is-it-possible-to-jump-from-a-visualization-to-a-deeper-visualization/226387 "2020-04-03T10:52:03Z")
Is it possible to jump from a visualization to a deeper visualization? For example, if I'm in a pie chart and click on a pie piece so I see a different visualization. Let me give you an example. I create a pie chart that… --- ## [Update value on field with spaces](https://discuss.elastic.co/t/update-value-on-field-with-spaces/225652)
**Author:** [@Elaak](https://discuss.elastic.co/u/Elaak)\ **Replies:** 3\ **Last updated:** [April 3, 2020, 7:54am UTC](https://discuss.elastic.co/t/update-value-on-field-with-spaces/225652 "2020-04-03T07:54:46Z")
I have a field in my elasticsearch that I wish to be able to update using the \_update API. Currently I make a request and change the value of field FIELD to VALUE using this body: { "script": { "source": "ctx.\_so… --- ## [Value at grid aggregation kibana map](https://discuss.elastic.co/t/value-at-grid-aggregation-kibana-map/226147)
**Author:** [@umay\_fb](https://discuss.elastic.co/u/umay_fb)\ **Replies:** 4\ **Last updated:** [April 3, 2020, 7:50am UTC](https://discuss.elastic.co/t/value-at-grid-aggregation-kibana-map/226147 "2020-04-03T07:50:34Z")
i want create a grid aggregation map in kibana. but i cant show the value in point. i want make like this how to show value in symbol? --- ## [Directed graph in Kibana graphs](https://discuss.elastic.co/t/directed-graph-in-kibana-graphs/226251)
**Author:** [@ntsh999](https://discuss.elastic.co/u/ntsh999)\ **Replies:** 1\ **Last updated:** [April 3, 2020, 4:59am UTC](https://discuss.elastic.co/t/directed-graph-in-kibana-graphs/226251 "2020-04-03T04:59:57Z")
I want to address a use case where I want to show - to which all people a particular infected person has passed on the COVID19 infection. Is it possible to address this through Elastic graphs? I tried but I failed. I ex… --- ## [Connect directly azure table storage to Kibana](https://discuss.elastic.co/t/connect-directly-azure-table-storage-to-kibana/226313)
**Author:** [@hieunguyen](https://discuss.elastic.co/u/hieunguyen)\ **Replies:** 2\ **Last updated:** [April 3, 2020, 3:31am UTC](https://discuss.elastic.co/t/connect-directly-azure-table-storage-to-kibana/226313 "2020-04-03T03:31:44Z")
Hi everyone, I want to connect directly Kibana to Azure Table Storage to visualize my data in realtime. I try to do follow a lot of documents on websites but I still don't do it! Can you give me a way to resolve this p… --- ## [Visualization empty for scripted field](https://discuss.elastic.co/t/visualization-empty-for-scripted-field/224348)
**Author:** [@ReenaN](https://discuss.elastic.co/u/ReenaN)\ **Replies:** 2\ **Last updated:** [April 3, 2020, 2:55am UTC](https://discuss.elastic.co/t/visualization-empty-for-scripted-field/224348 "2020-04-03T02:55:56Z")
I have created a scripted field to get dayOfWeek from date field as below: if (doc\['result.opened\_at'\].size() != 0) { if (!doc\['result.opened\_at'\].empty) { doc\['result.opened\_at'\].value.dayOfWeek } } I could see t… --- ## [Combining 2 Line Graphs that has the same x-axis and y-axis timestamp](https://discuss.elastic.co/t/combining-2-line-graphs-that-has-the-same-x-axis-and-y-axis-timestamp/224924)
**Author:** [@soffonisol](https://discuss.elastic.co/u/soffonisol)\ **Replies:** 2\ **Last updated:** [April 3, 2020, 1:19am UTC](https://discuss.elastic.co/t/combining-2-line-graphs-that-has-the-same-x-axis-and-y-axis-timestamp/224924 "2020-04-03T01:19:23Z")
I was trying to consolidate two different line graphs that shows the count of response error 400 and response error 404. I was able to graph them separately with no problem. How would I combine the graphs so it shows bot… --- ## [Getting 403 after ECK installation on Openshift](https://discuss.elastic.co/t/getting-403-after-eck-installation-on-openshift/226281)
**Author:** [@Vijay\_Bhaskar\_Chinta](https://discuss.elastic.co/u/Vijay_Bhaskar_Chinta)\ **Replies:** 3\ **Last updated:** [April 2, 2020, 9:25pm UTC](https://discuss.elastic.co/t/getting-403-after-eck-installation-on-openshift/226281 "2020-04-02T21:25:54Z")
I am following the instructions from this page. I tried logging into Kibana using the username/password in the secret: kibana-sample-kibana-user. Once I log in, I get a 403 and I do not know how to proceed from here. Ple… --- ## [SQL Dividing 2 values from 2 queries in CANVAS](https://discuss.elastic.co/t/sql-dividing-2-values-from-2-queries-in-canvas/222381)
**Author:** [@AlfredoC](https://discuss.elastic.co/u/AlfredoC)\ **Replies:** 4\ **Last updated:** [April 2, 2020, 6:53pm UTC](https://discuss.elastic.co/t/sql-dividing-2-values-from-2-queries-in-canvas/222381 "2020-04-02T18:53:36Z")
Hi, I want to make a division form 2 queries (SELECT COUNT(id) FROM "production" WHERE state='created') / (SELECT COUNT(id) AS number FROM "production") How would you divide the counts between these two? --- ## [Why source.ip.keyword instead source.ip after upgrade](https://discuss.elastic.co/t/why-source-ip-keyword-instead-source-ip-after-upgrade/222579)
**Author:** [@Sasha\_Zn](https://discuss.elastic.co/u/Sasha_Zn)\ **Replies:** 2\ **Last updated:** [April 2, 2020, 6:29pm UTC](https://discuss.elastic.co/t/why-source-ip-keyword-instead-source-ip-after-upgrade/222579 "2020-04-02T18:29:11Z")
Hi everyone! I upgrade my installation of elastic from 7.6 to 7.6.1 and break my dashboards. In my visualizations I used split by Terms=source.ip and now I have error that field not exist. Now I can select source.ip.k… --- ## [Reporting index management](https://discuss.elastic.co/t/reporting-index-management/224961)
**Author:** [@dao](https://discuss.elastic.co/u/dao)\ **Replies:** 2\ **Last updated:** [April 2, 2020, 5:35pm UTC](https://discuss.elastic.co/t/reporting-index-management/224961 "2020-04-02T17:35:50Z")
I can see a lot of report indices that creates several shards. The reason is that I have several kibana indices, and I need as many reporting indices. It increases the number of shards I have, and I am chasing them to re… --- ## [How to add a new field to all my log indices](https://discuss.elastic.co/t/how-to-add-a-new-field-to-all-my-log-indices/224149)
**Author:** [@Goishin](https://discuss.elastic.co/u/Goishin)\ **Replies:** 4\ **Last updated:** [March 20, 2020, 4:42pm UTC](https://discuss.elastic.co/t/how-to-add-a-new-field-to-all-my-log-indices/224149 "2020-03-20T16:42:47Z")
I'm a new kibana user and you guys have been invaluable to me over the past two months while I get my feet under me. Now I've got a question about logging data. I upload my testpass logs to cloudwatch which then shuffles… --- ## [Vega heatmap chart for matrix stats (correlation)](https://discuss.elastic.co/t/vega-heatmap-chart-for-matrix-stats-correlation/226099)
**Author:** [@Vincent\_Maury](https://discuss.elastic.co/u/Vincent_Maury)\ **Replies:** 2\ **Last updated:** [April 2, 2020, 3:16pm UTC](https://discuss.elastic.co/t/vega-heatmap-chart-for-matrix-stats-correlation/226099 "2020-04-02T15:16:11Z")
Hi I struggled to display a heatmap showing the correlation of fields (calling the matrix\_stats agg from Elasticsearch). Many many thanks to my colleague Yuri that helped me on this :+1: Here is the code that works: {… --- ## [Filter in Timelion](https://discuss.elastic.co/t/filter-in-timelion/225481)
**Author:** [@sai\_16](https://discuss.elastic.co/u/sai_16)\ **Replies:** 5\ **Last updated:** [April 2, 2020, 2:38pm UTC](https://discuss.elastic.co/t/filter-in-timelion/225481 "2020-04-02T14:38:57Z")
I created a timelion to display cpu usage, I need to pass server names dynamically, using filter. Created dashboard but not finding all the options in "add filter" , it just shows me index, message, message.keyword but I… --- ## [When I try to edit a filter, "Something went wrong" occurs, how to solve it?](https://discuss.elastic.co/t/when-i-try-to-edit-a-filter-something-went-wrong-occurs-how-to-solve-it/226152)
**Author:** [@111309](https://discuss.elastic.co/u/111309)\ **Replies:** 1\ **Last updated:** [April 2, 2020, 2:33pm UTC](https://discuss.elastic.co/t/when-i-try-to-edit-a-filter-something-went-wrong-occurs-how-to-solve-it/226152 "2020-04-02T14:33:58Z")
I'm using Kibana 7.1.0, this problem frequently happens recently: --- ## [Kibana spaces not able to create using api](https://discuss.elastic.co/t/kibana-spaces-not-able-to-create-using-api/226052)
**Author:** [@Masood\_Azam](https://discuss.elastic.co/u/Masood_Azam)\ **Replies:** 8\ **Last updated:** [April 2, 2020, 2:33pm UTC](https://discuss.elastic.co/t/kibana-spaces-not-able-to-create-using-api/226052 "2020-04-02T14:33:28Z")
Hello, I am new to Kibana, I want to create spaces from web application. I am able to get all spaces define in Kibana. But once I try to post it’s give me error. Remote server not found 400 bad request. I am using the… --- ## [Data is already aggregated in logstash feed, how to create a Kibana UI on this aggregated metrics](https://discuss.elastic.co/t/data-is-already-aggregated-in-logstash-feed-how-to-create-a-kibana-ui-on-this-aggregated-metrics/225561)
**Author:** [@apdpsudx](https://discuss.elastic.co/u/apdpsudx)\ **Replies:** 8\ **Last updated:** [April 2, 2020, 2:16pm UTC](https://discuss.elastic.co/t/data-is-already-aggregated-in-logstash-feed-how-to-create-a-kibana-ui-on-this-aggregated-metrics/225561 "2020-04-02T14:16:04Z")
Hi All, I am a bit new to ELK and have been researching this for a bit, and most forums and links I found indicate this is not possible. Happy if there is a thread open/closed for me to review as well. Scenario: Run… --- ## [Display dashboard based on logged in user](https://discuss.elastic.co/t/display-dashboard-based-on-logged-in-user/225578)
**Author:** [@sunitha.eswaraiah](https://discuss.elastic.co/u/sunitha.eswaraiah)\ **Replies:** 2\ **Last updated:** [April 2, 2020, 1:50pm UTC](https://discuss.elastic.co/t/display-dashboard-based-on-logged-in-user/225578 "2020-04-02T13:50:17Z")
Hi, Is there a way to auto filter the dashboard based on the user logged in ? When a user 'A' logged in, the dashboard should be updated based on the filter -\> User='A'. /Sunitha --- ## [Creating a filter based on two indexes](https://discuss.elastic.co/t/creating-a-filter-based-on-two-indexes/226214)
**Author:** [@moza](https://discuss.elastic.co/u/moza)\ **Replies:** 6\ **Last updated:** [April 2, 2020, 1:43pm UTC](https://discuss.elastic.co/t/creating-a-filter-based-on-two-indexes/226214 "2020-04-02T13:43:49Z")
Hello, we have 2 indexes and we want to create a filter that will compare and match specific fields from the first index with the second index and the created filter should be boolean (yes and no). the created filter s… --- ## [Examples for scripted fields in Painless](https://discuss.elastic.co/t/examples-for-scripted-fields-in-painless/226105)
**Author:** [@elastimatic](https://discuss.elastic.co/u/elastimatic)\ **Replies:** 2\ **Last updated:** [April 2, 2020, 1:36pm UTC](https://discuss.elastic.co/t/examples-for-scripted-fields-in-painless/226105 "2020-04-02T13:36:24Z")
Continuing the discussion from Handling empty/zero values in Scripted Fields: :arrow\_up: I have been doing some scripted field definition for some Kibana dashboards that I work with for web analytics data. This Discuss… [Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=512) [Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=514)