# Kibana **URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=530 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 531 --- ## [Kibana 7.5.1 Unable to use Kibana Keystore due to Permissions Problem](https://discuss.elastic.co/t/kibana-7-5-1-unable-to-use-kibana-keystore-due-to-permissions-problem/215050)
**Author:** [@nmm](https://discuss.elastic.co/u/nmm)\ **Replies:** 5\ **Last updated:** [March 2, 2020, 9:29pm UTC](https://discuss.elastic.co/t/kibana-7-5-1-unable-to-use-kibana-keystore-due-to-permissions-problem/215050 "2020-03-02T21:29:16Z")
I installed Kibana on an Ubuntu 16.04.6 VM using a user with sudo permissions (basically, a user with root-like permissions). I have enabled and started kibana with systemctl. I have security enabled, the built-in users … --- ## [Watcher for string value - Returns 'met : false'](https://discuss.elastic.co/t/watcher-for-string-value-returns-met-false/221497)
**Author:** [@EricJohnson](https://discuss.elastic.co/u/EricJohnson)\ **Replies:** 1\ **Last updated:** [March 2, 2020, 8:57pm UTC](https://discuss.elastic.co/t/watcher-for-string-value-returns-met-false/221497 "2020-03-02T20:57:47Z")
Greetings I'm looking at logs coming from the application layer of a server. The records look like this: { "\_index": "applog-test-001", "\_type": "\_doc", ... "level": "LOG", "message": "Database connected...", "… --- ## [Creating Elasticsearch Complicated Data Table](https://discuss.elastic.co/t/creating-elasticsearch-complicated-data-table/221718)
**Author:** [@lmit](https://discuss.elastic.co/u/lmit)\ **Replies:** 2\ **Last updated:** [March 2, 2020, 7:09pm UTC](https://discuss.elastic.co/t/creating-elasticsearch-complicated-data-table/221718 "2020-03-02T19:09:20Z")
Hello, I am Looking to build the following report data table as a Elasticsearch Dashboard Using the following JSON data in Elasticsearch document(s) PUT canpi-v1-2020.03.01/\_doc/004D58\_5E5C0DA7 { "@timestamp": "202… --- ## [How can i get a distinct USERID from a table](https://discuss.elastic.co/t/how-can-i-get-a-distinct-userid-from-a-table/221728)
**Author:** [@axedenim](https://discuss.elastic.co/u/axedenim)\ **Replies:** 1\ **Last updated:** [March 2, 2020, 5:51pm UTC](https://discuss.elastic.co/t/how-can-i-get-a-distinct-userid-from-a-table/221728 "2020-03-02T17:51:51Z")
I have a SQL query for SELECT DISTINCT(USER\_ID) FROM TABLENAME Need help to frame the query on Kibana for elastic search --- ## [Machine Learning Data Visualizer "Error loading data in index"](https://discuss.elastic.co/t/machine-learning-data-visualizer-error-loading-data-in-index/219161)
**Author:** [@steveg](https://discuss.elastic.co/u/steveg)\ **Replies:** 4\ **Last updated:** [March 2, 2020, 4:42pm UTC](https://discuss.elastic.co/t/machine-learning-data-visualizer-error-loading-data-in-index/219161 "2020-03-02T16:42:35Z")
I am attempting to use Machine Learning Data Visualisation - On Prem ELK stack 7.5, Basic Licence, I have an index which is receiving log data and displaying data in Custom dashboards However, I get the following error… --- ## [Kibana Discovery UI Slow](https://discuss.elastic.co/t/kibana-discovery-ui-slow/221706)
**Author:** [@Cody\_Bennett](https://discuss.elastic.co/u/Cody_Bennett)\ **Replies:** 1\ **Last updated:** [March 2, 2020, 2:53pm UTC](https://discuss.elastic.co/t/kibana-discovery-ui-slow/221706 "2020-03-02T14:53:49Z")
Prefacing this with: There are numerous long code blocks in this post. The default Discovery tab in Kibana takes between 120000ms and 150000ms to return the last 15 minutes of logs. We are using monthly indices in a hot… --- ## [Scripted Fields in Kibana cannot be used for filtering purpose in control visualization](https://discuss.elastic.co/t/scripted-fields-in-kibana-cannot-be-used-for-filtering-purpose-in-control-visualization/221674)
**Author:** [@Dhruvil\_Doshi](https://discuss.elastic.co/u/Dhruvil_Doshi)\ **Replies:** 0\ **Last updated:** [March 2, 2020, 12:26pm UTC](https://discuss.elastic.co/t/scripted-fields-in-kibana-cannot-be-used-for-filtering-purpose-in-control-visualization/221674 "2020-03-02T12:26:53Z")
I have a scripted field (TotalTime) which is of number type which gives me the difference to two timestamps. When i create controls visualization and select range slider option , i choose the above scripted field TotalTi… --- ## [Vega-lite - time axis is not connected correctly to the time changing button on Kibana](https://discuss.elastic.co/t/vega-lite-time-axis-is-not-connected-correctly-to-the-time-changing-button-on-kibana/221654)
**Author:** [@roxannefdj](https://discuss.elastic.co/u/roxannefdj)\ **Replies:** 0\ **Last updated:** [March 2, 2020, 9:39am UTC](https://discuss.elastic.co/t/vega-lite-time-axis-is-not-connected-correctly-to-the-time-changing-button-on-kibana/221654 "2020-03-02T09:39:20Z")
I don't know if this is a bug with Kibana or if my code caused this or if I am misinterpreting something. My issue is that whenever I try to manipulate my time axis to stretch beyond an hour using the buttons on Kibana, … --- ## [Kibana 7.6.0 not starting because cannot install APM plugin](https://discuss.elastic.co/t/kibana-7-6-0-not-starting-because-cannot-install-apm-plugin/219807)
**Author:** [@josejfb](https://discuss.elastic.co/u/josejfb)\ **Replies:** 12\ **Last updated:** [March 2, 2020, 9:26am UTC](https://discuss.elastic.co/t/kibana-7-6-0-not-starting-because-cannot-install-apm-plugin/219807 "2020-03-02T09:26:04Z")
Hello. I'm working on upgrading our Elastic setup to version 7.6.0 and I'm having issues with Kibana startup. What I see in the logs is that Kibana is not able to install the "apm" plugin within the default 30 seconds (s… --- ## [Kibana 7.6 : Reported number of Kibana instance is false](https://discuss.elastic.co/t/kibana-7-6-reported-number-of-kibana-instance-is-false/219946)
**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\ **Replies:** 8\ **Last updated:** [March 2, 2020, 8:55am UTC](https://discuss.elastic.co/t/kibana-7-6-reported-number-of-kibana-instance-is-false/219946 "2020-03-02T08:55:15Z")
Hello there, After 7.6 upgrade, I noticed that the number of Kibana instance in Monitoring tab is not the good one. I checked that my 2 Kibana instance can join the cluster : it's OK. Monitoring still show only one Ki… --- ## [AVG Bucket and split\_chart](https://discuss.elastic.co/t/avg-bucket-and-split-chart/221285)
**Author:** [@Anne\_Kim](https://discuss.elastic.co/u/Anne_Kim)\ **Replies:** 2\ **Last updated:** [March 2, 2020, 8:14am UTC](https://discuss.elastic.co/t/avg-bucket-and-split-chart/221285 "2020-03-02T08:14:22Z")
Hi there, I've a vizualization that combines both AVG Bucket and a Split\_chart. Only the data for the 1st row are displayed here, see the screenshot: Here is its visState: { "title": "AVG daily rooms count per use… --- ## [Upgrade to 7.6: Stack Monitoring Only With Security Enabled Possible?](https://discuss.elastic.co/t/upgrade-to-7-6-stack-monitoring-only-with-security-enabled-possible/220848)
**Author:** [@tomx1](https://discuss.elastic.co/u/tomx1)\ **Replies:** 7\ **Last updated:** [March 2, 2020, 8:13am UTC](https://discuss.elastic.co/t/upgrade-to-7-6-stack-monitoring-only-with-security-enabled-possible/220848 "2020-03-02T08:13:06Z")
Hey, since upgrading our cluster to 7.6.0 I'm facing the problem, that it is not possible anymore to use the "Stack Monitoring" App in Kibana. The following error message appears: { "type": "error", "@timestamp": "… --- ## [Kibana server is not ready yet as soon as i install wazuh app](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-as-soon-as-i-install-wazuh-app/221565)
**Author:** [@tbhaxor](https://discuss.elastic.co/u/tbhaxor)\ **Replies:** 8\ **Last updated:** [March 2, 2020, 6:13am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-as-soon-as-i-install-wazuh-app/221565 "2020-03-02T06:13:16Z")
After setting up everything, I tried to install the kibana plugin for wazuh Wazuh Version: 3.11.4 Kibana Version: 7.6.0 So I tried the following command sudo -u kibana /usr/share/kibana/bin/kibana-plugin install http… --- ## [Change color based on the dynamic threshold in Metric or Guage visulization](https://discuss.elastic.co/t/change-color-based-on-the-dynamic-threshold-in-metric-or-guage-visulization/221129)
**Author:** [@Manjula\_Piyumal](https://discuss.elastic.co/u/Manjula_Piyumal)\ **Replies:** 2\ **Last updated:** [March 2, 2020, 2:04am UTC](https://discuss.elastic.co/t/change-color-based-on-the-dynamic-threshold-in-metric-or-guage-visulization/221129 "2020-03-02T02:04:31Z")
Hi, I want to visualize the number of requests with the color code to represent whether it's within the expected range as per the current time. Based on the time, max and min thresholds will be changed. Sample documents… --- ## [New host.keyword not showing up in dropdown control](https://discuss.elastic.co/t/new-host-keyword-not-showing-up-in-dropdown-control/221604)
**Author:** [@ferenc0521](https://discuss.elastic.co/u/ferenc0521)\ **Replies:** 1\ **Last updated:** [March 2, 2020, 12:38am UTC](https://discuss.elastic.co/t/new-host-keyword-not-showing-up-in-dropdown-control/221604 "2020-03-02T00:38:29Z")
Kibana 7.3.1. I added a new host for a pipeline, total is now 4 The new host does show up in the dropdown control, only the original 3, even though events clearly show in Discovery mode. I set the size to 10 so it… --- ## [Network Topology using Graph](https://discuss.elastic.co/t/network-topology-using-graph/220965)
**Author:** [@l4m4l](https://discuss.elastic.co/u/l4m4l)\ **Replies:** 4\ **Last updated:** [March 1, 2020, 9:40pm UTC](https://discuss.elastic.co/t/network-topology-using-graph/220965 "2020-03-01T21:40:23Z")
Hello all, I have indices that contain .pcap data (imported using tshark and elasticsearch BULK API). I would like to visualise this packet capture as a network topology using graph. I am envisaging that this would go … --- ## [How to create a kibana user using OSS distribution](https://discuss.elastic.co/t/how-to-create-a-kibana-user-using-oss-distribution/221555)
**Author:** [@admin\_labs](https://discuss.elastic.co/u/admin_labs)\ **Replies:** 1\ **Last updated:** [March 1, 2020, 6:39am UTC](https://discuss.elastic.co/t/how-to-create-a-kibana-user-using-oss-distribution/221555 "2020-03-01T06:39:38Z")
I am using ELK stack version 7.1.0 of OSS distribution. I have one user created that has full access and privileges (it do can all crud operations). I wanna create one more kibana user that should have ReadOnly access … --- ## [Visual Builder - True 24hr intervals instead of starting at midnight](https://discuss.elastic.co/t/visual-builder-true-24hr-intervals-instead-of-starting-at-midnight/221293)
**Author:** [@adahn](https://discuss.elastic.co/u/adahn)\ **Replies:** 1\ **Last updated:** [February 29, 2020, 5:45pm UTC](https://discuss.elastic.co/t/visual-builder-true-24hr-intervals-instead-of-starting-at-midnight/221293 "2020-02-29T17:45:28Z")
I'm working on a Visual Builder that ultimately displays a ratio between the count of documents submitted in the current 24 hour bucket and the moving average of the previous thirty 24-hour buckets. My interval on 'Panel… --- ## [Add column to Kibana dashboard that count the number of row](https://discuss.elastic.co/t/add-column-to-kibana-dashboard-that-count-the-number-of-row/221420)
**Author:** [@JoseLuisEzquerro](https://discuss.elastic.co/u/JoseLuisEzquerro)\ **Replies:** 1\ **Last updated:** [February 28, 2020, 11:37pm UTC](https://discuss.elastic.co/t/add-column-to-kibana-dashboard-that-count-the-number-of-row/221420 "2020-02-28T23:37:50Z")
I'm using Kibana 6.8.2 and I want to add a column that will show the number of the row displayed, something like: Row Country Some data 1 Greece 100 2 Italy 50 3 G… --- ## [How to make Kibana Filters use Filter Context instead of Query Context?](https://discuss.elastic.co/t/how-to-make-kibana-filters-use-filter-context-instead-of-query-context/221430)
**Author:** [@Rajiv](https://discuss.elastic.co/u/Rajiv)\ **Replies:** 1\ **Last updated:** [February 28, 2020, 9:11pm UTC](https://discuss.elastic.co/t/how-to-make-kibana-filters-use-filter-context-instead-of-query-context/221430 "2020-02-28T21:11:51Z")
We are using Kibana v6.8.1 to search log messages When we try to filter messages using the "Filter for value" icon like so: we notice Kibana generates search query with a match\_phrase clause in Query Context, like so… --- ## [Equivalences for visualizations and Canvas elements](https://discuss.elastic.co/t/equivalences-for-visualizations-and-canvas-elements/221326)
**Author:** [@Pablo\_Albertengo](https://discuss.elastic.co/u/Pablo_Albertengo)\ **Replies:** 1\ **Last updated:** [February 28, 2020, 8:20pm UTC](https://discuss.elastic.co/t/equivalences-for-visualizations-and-canvas-elements/221326 "2020-02-28T20:20:47Z")
I have some visualizations in my dahsboards for which I am not finding a way to represent them in Canvas elements. They all have a common characteristic: they involve more than one field / aggregation on the same axis. … --- ## [Ctx.results in Kibana Alerting](https://discuss.elastic.co/t/ctx-results-in-kibana-alerting/221473)
**Author:** [@Priyan\_Murugan](https://discuss.elastic.co/u/Priyan_Murugan)\ **Replies:** 0\ **Last updated:** [February 28, 2020, 5:56pm UTC](https://discuss.elastic.co/t/ctx-results-in-kibana-alerting/221473 "2020-02-28T17:56:51Z")
Hi I have created the below mustache template to send alert notification to slack. Mustache Template: Total hits: {{#ctx.results}}{{#hits}}{{total}}{{/hits}}{{/ctx.results}} Period start: {{ctx.periodStart}} Period e… --- ## [One user can delete other users dashboard, visualizations, graphs and index patterns. I want to avoid this, so that one user can only delete its own created stuff](https://discuss.elastic.co/t/one-user-can-delete-other-users-dashboard-visualizations-graphs-and-index-patterns-i-want-to-avoid-this-so-that-one-user-can-only-delete-its-own-created-stuff/221434)
**Author:** [@owais](https://discuss.elastic.co/u/owais)\ **Replies:** 5\ **Last updated:** [February 28, 2020, 5:48pm UTC](https://discuss.elastic.co/t/one-user-can-delete-other-users-dashboard-visualizations-graphs-and-index-patterns-i-want-to-avoid-this-so-that-one-user-can-only-delete-its-own-created-stuff/221434 "2020-02-28T17:48:28Z")
We have created multiple users for Kibana and we have given access of ALL for our dashboards, graphs, index patterns and visualizations. The problem is that one user can also delete other users created dashboards, graphs… --- ## [Custom Kibana Plugin not working in Kibana 7.5.x](https://discuss.elastic.co/t/custom-kibana-plugin-not-working-in-kibana-7-5-x/221412)
**Author:** [@PraveenKumarM](https://discuss.elastic.co/u/PraveenKumarM)\ **Replies:** 1\ **Last updated:** [February 28, 2020, 3:29pm UTC](https://discuss.elastic.co/t/custom-kibana-plugin-not-working-in-kibana-7-5-x/221412 "2020-02-28T15:29:58Z")
Hi, Greetings. I am new to ELK stack and I am trying to create a Kibana dashboard with custom kibana plugin. I have tried to do the same in the below Kibana version and Kibana has not started up. Can you please help m… --- ## [User dashboards-only-read cannot make pdf reporting](https://discuss.elastic.co/t/user-dashboards-only-read-cannot-make-pdf-reporting/221439)
**Author:** [@JoseLuisEzquerro](https://discuss.elastic.co/u/JoseLuisEzquerro)\ **Replies:** 1\ **Last updated:** [February 28, 2020, 3:15pm UTC](https://discuss.elastic.co/t/user-dashboards-only-read-cannot-make-pdf-reporting/221439 "2020-02-28T15:15:26Z")
I'm using Kibana 6.8.2 and I have users with only read permission for dashboards, but the "shared" option to create pdf reporting is not showing for those users. Is there any way to enable this option for these kind of u… --- ## [Average number of documents per buckets](https://discuss.elastic.co/t/average-number-of-documents-per-buckets/221323)
**Author:** [@suite800](https://discuss.elastic.co/u/suite800)\ **Replies:** 1\ **Last updated:** [February 28, 2020, 12:48pm UTC](https://discuss.elastic.co/t/average-number-of-documents-per-buckets/221323 "2020-02-28T12:48:56Z")
Suppose I have a mapping { "properties": { "jobName": { "type": "keyword" }, "jobNumber": { "type": "long" }, ... } What I am trying to do is to get metri… --- ## [How can I set X-axis time domain with 24hours?](https://discuss.elastic.co/t/how-can-i-set-x-axis-time-domain-with-24hours/221383)
**Author:** [@m-amano](https://discuss.elastic.co/u/m-amano)\ **Replies:** 4\ **Last updated:** [February 28, 2020, 12:40pm UTC](https://discuss.elastic.co/t/how-can-i-set-x-axis-time-domain-with-24hours/221383 "2020-02-28T12:40:21Z")
I want to make my vega-light graph x-axis starts from 0:00 to 24:00 below. I was trying to add a code like this, but it doesn't work successfully. Is there any tips? "x": { . . . "scale":{ … --- ## [Index-pattern created via Kibana API not operational in UI](https://discuss.elastic.co/t/index-pattern-created-via-kibana-api-not-operational-in-ui/221418)
**Author:** [@serhii.zaidlin](https://discuss.elastic.co/u/serhii.zaidlin)\ **Replies:** 0\ **Last updated:** [February 28, 2020, 11:37am UTC](https://discuss.elastic.co/t/index-pattern-created-via-kibana-api-not-operational-in-ui/221418 "2020-02-28T11:37:31Z")
Hi, I'm trying to create index-pattern via Kibana API. Everything looks fine - I make POST request, receive 200 and I can see this object in .kibana index. When I'm trying to access this pattern via Kibana UI (either I… --- ## [Metric older than 10 minutes](https://discuss.elastic.co/t/metric-older-than-10-minutes/220472)
**Author:** [@Reshad](https://discuss.elastic.co/u/Reshad)\ **Replies:** 7\ **Last updated:** [February 28, 2020, 11:31am UTC](https://discuss.elastic.co/t/metric-older-than-10-minutes/220472 "2020-02-28T11:31:15Z")
Hey, I am setting up a monitoring system for my infra and using metricbeat from my servers (3 for now). What I want is a visulization that shows me a list of hosts that have not checked in to ES in the past 10 minutes. … --- ## [AWS Elasticsearch kibana visualization text in legend truncated](https://discuss.elastic.co/t/aws-elasticsearch-kibana-visualization-text-in-legend-truncated/221310)
**Author:** [@dharti\_trivedi](https://discuss.elastic.co/u/dharti_trivedi)\ **Replies:** 5\ **Last updated:** [February 28, 2020, 10:10am UTC](https://discuss.elastic.co/t/aws-elasticsearch-kibana-visualization-text-in-legend-truncated/221310 "2020-02-28T10:10:33Z")
Hi I have AWS elasticsearch v7.1. I am able to see legend in dashboard with text, however if some of the long text in legend gets truncated. How do I change that? Thanks [Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=529) [Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=531)