# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=528

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 529

---

## [Filter by comparing two number fields fails with number\_format\_exception](https://discuss.elastic.co/t/filter-by-comparing-two-number-fields-fails-with-number-format-exception/222250)

<div class="topic-metadata">

**Author:** [@ismarslomic](https://discuss.elastic.co/u/ismarslomic)\
**Replies:** 4\
**Last updated:** [March 6, 2020, 10:58am UTC](https://discuss.elastic.co/t/filter-by-comparing-two-number-fields-fails-with-number-format-exception/222250 "2020-03-06T10:58:53Z")

</div>

I would like to filter documents in Kibana Visualize where msg.count\_passenger\_out \> msg.count\_passenger\_in. Both fields are number fields and are indexed. Im running Kibana + Elasticsearch v7.6.0 at Elastic Cloud. Thi…

---

## [Kibana maps character set/diacritics](https://discuss.elastic.co/t/kibana-maps-character-set-diacritics/222197)

<div class="topic-metadata">

**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\
**Replies:** 3\
**Last updated:** [March 6, 2020, 9:56am UTC](https://discuss.elastic.co/t/kibana-maps-character-set-diacritics/222197 "2020-03-06T09:56:55Z")

</div>

Maps does not show properly names of cities and streets. It does not show characters with diacritics. How can I change character set for maps to i.e UTF-8? thanks

---

## [Nginx is giving blank page on routing to Kibana](https://discuss.elastic.co/t/nginx-is-giving-blank-page-on-routing-to-kibana/221695)

<div class="topic-metadata">

**Author:** [@Natarajan](https://discuss.elastic.co/u/Natarajan)\
**Replies:** 4\
**Last updated:** [March 6, 2020, 8:40am UTC](https://discuss.elastic.co/t/nginx-is-giving-blank-page-on-routing-to-kibana/221695 "2020-03-06T08:40:42Z")

</div>

We have set up Kibana and Nginx. After making the changes in nginx to route to Kibana, we are getting following error and it is giving blank page. Refused to execute inline script because it violates the following Conte…

---

## [I can't start Kibana on Ubuntu 16.04](https://discuss.elastic.co/t/i-cant-start-kibana-on-ubuntu-16-04/222180)

<div class="topic-metadata">

**Author:** [@Mohamed\_Koubaa](https://discuss.elastic.co/u/Mohamed_Koubaa)\
**Replies:** 4\
**Last updated:** [March 6, 2020, 1:14am UTC](https://discuss.elastic.co/t/i-cant-start-kibana-on-ubuntu-16-04/222180 "2020-03-06T01:14:48Z")

</div>

I installed the ELK package. Elasticsearch, kibana and logstash. Elasticsear seems to be working fine but i can't seem to be able to start kibana. Here are the results of sudo service kibana status kibana.service - Ki…

---

## [Difficulties / Bugs with Canvas](https://discuss.elastic.co/t/difficulties-bugs-with-canvas/220422)

<div class="topic-metadata">

**Author:** [@Rob\_wylde](https://discuss.elastic.co/u/Rob_wylde)\
**Replies:** 4\
**Last updated:** [March 6, 2020, 12:43am UTC](https://discuss.elastic.co/t/difficulties-bugs-with-canvas/220422 "2020-03-06T00:43:56Z")

</div>

Good morning, I'm currently experiencing 2 issues with my 7.6.0 ECE install but my issues are specific to Kibana. When I try and print a workpad to pdf. Only a single page is printed to pdf. You can repo this by sim…

---

## [SunOS](https://discuss.elastic.co/t/sunos/221428)

<div class="topic-metadata">

**Author:** [@Felipe0792](https://discuss.elastic.co/u/Felipe0792)\
**Replies:** 1\
**Last updated:** [March 5, 2020, 10:41pm UTC](https://discuss.elastic.co/t/sunos/221428 "2020-03-05T22:41:50Z")

</div>

I would like to know if there are any version for SunOS 5.11 11.3 sun4v sparc sun4v?

---

## [Watcher when a server goes down and a followup if it's been down for 24 hours?](https://discuss.elastic.co/t/watcher-when-a-server-goes-down-and-a-followup-if-its-been-down-for-24-hours/218842)

<div class="topic-metadata">

**Author:** [@devbot](https://discuss.elastic.co/u/devbot)\
**Replies:** 1\
**Last updated:** [March 5, 2020, 10:31pm UTC](https://discuss.elastic.co/t/watcher-when-a-server-goes-down-and-a-followup-if-its-been-down-for-24-hours/218842 "2020-03-05T22:31:29Z")

</div>

Hello, I have a number of servers being pinged by heartbeat. What I'm trying to figure out how to do is: "Watcher 1" run every minute - When a server has been consistently down for a minute (no monitor.status = up for…

---

## [Resolve Import Errors API Not Working](https://discuss.elastic.co/t/resolve-import-errors-api-not-working/219573)

<div class="topic-metadata">

**Author:** [@rathna\_subramanian](https://discuss.elastic.co/u/rathna_subramanian)\
**Replies:** 1\
**Last updated:** [March 5, 2020, 10:26pm UTC](https://discuss.elastic.co/t/resolve-import-errors-api-not-working/219573 "2020-03-05T22:26:36Z")

</div>

I am trying to overwrite kibana advanced setting config using the following curl command. curl -X POST "localhost:5601/api/saved\_objects/\_resolve\_import\_errors" -H "kbn-xsrf: true" --form file=@configs.ndjson --form ret…

---

## [Failed to load data sources in Kibana](https://discuss.elastic.co/t/failed-to-load-data-sources-in-kibana/218816)

<div class="topic-metadata">

**Author:** [@ladeesh](https://discuss.elastic.co/u/ladeesh)\
**Replies:** 1\
**Last updated:** [March 5, 2020, 10:17pm UTC](https://discuss.elastic.co/t/failed-to-load-data-sources-in-kibana/218816 "2020-03-05T22:17:56Z")

</div>

Hi Team, My ELK stack running with below details 3 ES nodes 1 Logstash node 1 Kibana node Version using : 7.5.1 I am getting the error "failed to load data sources" while loading the logs/metrics in Kibana UI. Err…

---

## [Load The Data Set KIBANA](https://discuss.elastic.co/t/load-the-data-set-kibana/222352)

<div class="topic-metadata">

**Author:** [@bharatchhajed](https://discuss.elastic.co/u/bharatchhajed)\
**Replies:** 1\
**Last updated:** [March 5, 2020, 7:18pm UTC](https://discuss.elastic.co/t/load-the-data-set-kibana/222352 "2020-03-05T19:18:56Z")

</div>

I am trying this on cloud ES and Kibana which has credentials to call API. In the example it is not using any credential. https://www.elastic.co/guide/en/kibana/current/tutorial-build-dashboard.html#\_load\_the\_data\_sets …

---

## [Unable to show Hourly Average](https://discuss.elastic.co/t/unable-to-show-hourly-average/221773)

<div class="topic-metadata">

**Author:** [@askids](https://discuss.elastic.co/u/askids)\
**Replies:** 2\
**Last updated:** [March 5, 2020, 7:00pm UTC](https://discuss.elastic.co/t/unable-to-show-hourly-average/221773 "2020-03-05T19:00:04Z")

</div>

hi All, I am trying to show hourly average in a Kibana Visualization. I referred to the example in this link -https://discuss.elastic.co/t/hourly-average-over-24-hours/201445/2. However, when I select Histogram option,…

---

## [Request entity too large on specific index](https://discuss.elastic.co/t/request-entity-too-large-on-specific-index/220332)

<div class="topic-metadata">

**Author:** [@ghl1l0](https://discuss.elastic.co/u/ghl1l0)\
**Replies:** 3\
**Last updated:** [March 5, 2020, 4:57pm UTC](https://discuss.elastic.co/t/request-entity-too-large-on-specific-index/220332 "2020-03-05T16:57:42Z")

</div>

hello , i need some help with kibana " error fetchng fields" i got request entity too large when i chose specific index the other one appaers without problem Kibana version is 7.5.1

---

## [Preciso limitar minhas analises em 12 horas por falta de armazenamento](https://discuss.elastic.co/t/preciso-limitar-minhas-analises-em-12-horas-por-falta-de-armazenamento/220349)

<div class="topic-metadata">

**Author:** [@rafaelassis53](https://discuss.elastic.co/u/rafaelassis53)\
**Replies:** 3\
**Last updated:** [March 5, 2020, 4:56pm UTC](https://discuss.elastic.co/t/preciso-limitar-minhas-analises-em-12-horas-por-falta-de-armazenamento/220349 "2020-03-05T16:56:42Z")

</div>

I need to limit my analysis to 12 hours due to lack of storage,

---

## [Maximum timelion splits](https://discuss.elastic.co/t/maximum-timelion-splits/222175)

<div class="topic-metadata">

**Author:** [@slarty](https://discuss.elastic.co/u/slarty)\
**Replies:** 2\
**Last updated:** [March 5, 2020, 2:55pm UTC](https://discuss.elastic.co/t/maximum-timelion-splits/222175 "2020-03-05T14:55:00Z")

</div>

I'm trying to draw a timelion with one line per host (field name is 'instance.keyword'), and have 26 hosts. It's a lot of lines, but it's useful in spotting hosts that have high values. Unfortunately, it only displays 24…

---

## [Disable Data Usage in Config File](https://discuss.elastic.co/t/disable-data-usage-in-config-file/222296)

<div class="topic-metadata">

**Author:** [@heydo](https://discuss.elastic.co/u/heydo)\
**Replies:** 1\
**Last updated:** [March 5, 2020, 2:31pm UTC](https://discuss.elastic.co/t/disable-data-usage-in-config-file/222296 "2020-03-05T14:31:21Z")

</div>

Hi, in Kibana, I get a notification "Help us improve the Elastic Stack". Is there a way to disable the usage data in the config files? Or alternatively to suppress banners in general using the config files? Thanks!

---

## [Visualize REST API calls?](https://discuss.elastic.co/t/visualize-rest-api-calls/221667)

<div class="topic-metadata">

**Author:** [@Mattness](https://discuss.elastic.co/u/Mattness)\
**Replies:** 4\
**Last updated:** [March 5, 2020, 12:51pm UTC](https://discuss.elastic.co/t/visualize-rest-api-calls/221667 "2020-03-05T12:51:38Z")

</div>

Is it possible to directly visualize REST API calls, without resorting to monitoring methods like metricbeat monitoring or xpack internal collection? E.g. could I just make a visual out of this call: "GET \_cluster/heal…

---

## [Kibana 7.0.1 does not work with centos 8 base image](https://discuss.elastic.co/t/kibana-7-0-1-does-not-work-with-centos-8-base-image/219603)

<div class="topic-metadata">

**Author:** [@akshatsharma](https://discuss.elastic.co/u/akshatsharma)\
**Replies:** 7\
**Last updated:** [March 5, 2020, 11:20am UTC](https://discuss.elastic.co/t/kibana-7-0-1-does-not-work-with-centos-8-base-image/219603 "2020-03-05T11:20:51Z")

</div>

Hi, I was using kibana-oss 7.0.1 with centos 7 as base image which was working fine. Now we are migrating to centos 8 and I am able to build kibana image with centos 8. I am facing problem while runnnig this newly buil…

---

## [Spurious Skew](https://discuss.elastic.co/t/spurious-skew/220660)

<div class="topic-metadata">

**Author:** [@hilt86](https://discuss.elastic.co/u/hilt86)\
**Replies:** 4\
**Last updated:** [March 5, 2020, 10:19am UTC](https://discuss.elastic.co/t/spurious-skew/220660 "2020-03-05T10:19:23Z")

</div>

I have a visualization of system.network.in.bytes and since 7.6.0 the visualization occasionally gets wrecked by a falsely large value. I have to either refresh or more often than not change the timeframe and it is getti…

---

## [Call to saved\_objects API fails with "illegal\_argument\_exception"](https://discuss.elastic.co/t/call-to-saved-objects-api-fails-with-illegal-argument-exception/222086)

<div class="topic-metadata">

**Author:** [@silentsurfer](https://discuss.elastic.co/u/silentsurfer)\
**Replies:** 2\
**Last updated:** [March 5, 2020, 10:13am UTC](https://discuss.elastic.co/t/call-to-saved-objects-api-fails-with-illegal-argument-exception/222086 "2020-03-05T10:13:57Z")

</div>

I'm on Elastic stack v 7.6 and trying to get the JSON representation of a Kibana index pattern via the saved\_objects API as explained here. I tried issuing a GET request via Postman to: https://mydomain/api/saved\_objec…

---

## [Complex calculations and table view format](https://discuss.elastic.co/t/complex-calculations-and-table-view-format/219045)

<div class="topic-metadata">

**Author:** [@nino](https://discuss.elastic.co/u/nino)\
**Replies:** 6\
**Last updated:** [March 5, 2020, 8:57am UTC](https://discuss.elastic.co/t/complex-calculations-and-table-view-format/219045 "2020-03-05T08:57:09Z")

</div>

Hello all, i would like to know if this kind of tables can be done with kibana and add it to a dasboard. What is the best approach to achieve this? Index structure { "gain\_loss" =\> " 1,011.53", "@tim…

---

## [I am not able to make my scripted field work. Can someone help me to understand what am I doing wrong here](https://discuss.elastic.co/t/i-am-not-able-to-make-my-scripted-field-work-can-someone-help-me-to-understand-what-am-i-doing-wrong-here/222174)

<div class="topic-metadata">

**Author:** [@preyansh\_shah](https://discuss.elastic.co/u/preyansh_shah)\
**Replies:** 1\
**Last updated:** [March 5, 2020, 8:46am UTC](https://discuss.elastic.co/t/i-am-not-able-to-make-my-scripted-field-work-can-someone-help-me-to-understand-what-am-i-doing-wrong-here/222174 "2020-03-05T08:46:31Z")

</div>

Kibana Version: 7.5.0 management I wrote a scripted field to find the difference between two field in a document: if (doc\['page\_details.Compliance.ui'\].size() == 0) { return ''; } else { return doc\['page\_details.Compli…

---

## [Kibana and ElasticSearch X-Opaque-ID header](https://discuss.elastic.co/t/kibana-and-elasticsearch-x-opaque-id-header/222080)

<div class="topic-metadata">

**Author:** [@GabrielM](https://discuss.elastic.co/u/GabrielM)\
**Replies:** 2\
**Last updated:** [March 5, 2020, 8:29am UTC](https://discuss.elastic.co/t/kibana-and-elasticsearch-x-opaque-id-header/222080 "2020-03-05T08:29:46Z")

</div>

Hello ! ElasticSearch slow log search and tasks management use the X-Opaque-ID header to identify tasks running in the cluster. Is there a way to set the X-Opaque-ID header with the current Kibana user name ? Thank you…

---

## [Query on KQL to get an exact match](https://discuss.elastic.co/t/query-on-kql-to-get-an-exact-match/222131)

<div class="topic-metadata">

**Author:** [@ldomenella](https://discuss.elastic.co/u/ldomenella)\
**Replies:** 3\
**Last updated:** [March 5, 2020, 8:06am UTC](https://discuss.elastic.co/t/query-on-kql-to-get-an-exact-match/222131 "2020-03-05T08:06:35Z")

</div>

hi all, im running elastic 7.6 and kibana 7.6. Im getting logs from my 2 servers tomcat and i use filebeat to send them directly to elasticseach.. doing it i added some custom fields: project the project field is popu…

---

## [Embed kibana lens alone in a react application](https://discuss.elastic.co/t/embed-kibana-lens-alone-in-a-react-application/222048)

<div class="topic-metadata">

**Author:** [@kikkuj](https://discuss.elastic.co/u/kikkuj)\
**Replies:** 2\
**Last updated:** [March 5, 2020, 5:05am UTC](https://discuss.elastic.co/t/embed-kibana-lens-alone-in-a-react-application/222048 "2020-03-05T05:05:16Z")

</div>

Hi, I need to embed KIBANA LENS alone to my react application, providing the user a playground to visualize the data. The user should not have access to anything other than kibana lens with the user specific index-patte…

---

## [Dynamic filtering of indices based on SAML attributes](https://discuss.elastic.co/t/dynamic-filtering-of-indices-based-on-saml-attributes/221371)

<div class="topic-metadata">

**Author:** [@lucasnad27](https://discuss.elastic.co/u/lucasnad27)\
**Replies:** 1\
**Last updated:** [March 5, 2020, 5:00am UTC](https://discuss.elastic.co/t/dynamic-filtering-of-indices-based-on-saml-attributes/221371 "2020-03-05T05:00:56Z")

</div>

I want to dynamically filter a dashboard based on a user's SAML attributes. Here are the basics of my attempts so far... I've setup a special field in my user's metadata, we'll call it filter\_id. If you hit the authenti…

---

## [Line chart with date histogram, split series and filter](https://discuss.elastic.co/t/line-chart-with-date-histogram-split-series-and-filter/221804)

<div class="topic-metadata">

**Author:** [@c95mbq](https://discuss.elastic.co/u/c95mbq)\
**Replies:** 4\
**Last updated:** [March 5, 2020, 12:20am UTC](https://discuss.elastic.co/t/line-chart-with-date-histogram-split-series-and-filter/221804 "2020-03-05T00:20:50Z")

</div>

Hi, It seems clear to me that I'm obviously misunderstanding how filters are used in Kibana's visualizations and/or am using them incorrectly. Brief background. Each document contains a unique identifier and let's say …

---

## [Kibana time filter does not take effort of document timestamp](https://discuss.elastic.co/t/kibana-time-filter-does-not-take-effort-of-document-timestamp/222176)

<div class="topic-metadata">

**Author:** [@magtaff](https://discuss.elastic.co/u/magtaff)\
**Replies:** 1\
**Last updated:** [March 4, 2020, 11:32pm UTC](https://discuss.elastic.co/t/kibana-time-filter-does-not-take-effort-of-document-timestamp/222176 "2020-03-04T23:32:25Z")

</div>

Hi, I'm trying to build a Kibana dashboard to display top hit URLs in a time period. I'm using ElasticSearch V7.6 and Kibana V7.6. The documents pattern I have is like this: { "\_index": "user\_action", "\_type": "\_doc…

---

## [Kibana Auto Refresh](https://discuss.elastic.co/t/kibana-auto-refresh/220391)

<div class="topic-metadata">

**Author:** [@aman97](https://discuss.elastic.co/u/aman97)\
**Replies:** 8\
**Last updated:** [March 4, 2020, 6:25pm UTC](https://discuss.elastic.co/t/kibana-auto-refresh/220391 "2020-03-04T18:25:29Z")

</div>

Hi All, I am using Auto-refresh functionality in the kibana dashboard but it seems not working fine as the dashboard is not updating in the auto-refresh time interval. but when I did the same for discovering page and f…

---

## [Index privilege syntax : all indices except one](https://discuss.elastic.co/t/index-privilege-syntax-all-indices-except-one/221041)

<div class="topic-metadata">

**Author:** [@antoineozenne](https://discuss.elastic.co/u/antoineozenne)\
**Replies:** 8\
**Last updated:** [March 4, 2020, 4:43pm UTC](https://discuss.elastic.co/t/index-privilege-syntax-all-indices-except-one/221041 "2020-03-04T16:43:20Z")

</div>

Hello, I want grant my new user read only privilege on all indices except one. I don't understand how I can write the query in KQL (I don't use Lucene) : Is it possible ? How ?

---

## [REST API to access/update Advanced Settings](https://discuss.elastic.co/t/rest-api-to-access-update-advanced-settings/220350)

<div class="topic-metadata">

**Author:** [@gab.bernasconi](https://discuss.elastic.co/u/gab.bernasconi)\
**Replies:** 3\
**Last updated:** [March 4, 2020, 2:01pm UTC](https://discuss.elastic.co/t/rest-api-to-access-update-advanced-settings/220350 "2020-03-04T14:01:53Z")

</div>

I am currently using Kibana version 7.4.2 Saved Objects REST API (see here) to programmatically customize some Kibana Advanced Settings. In particular, I am customizing the dateFormat:tz setting to choose the timezone K…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=527)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=529)
