# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=535

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 536

---

## [Using painless in Kibana . how is make Total/unique values?](https://discuss.elastic.co/t/using-painless-in-kibana-how-is-make-total-unique-values/219865)

<div class="topic-metadata">

**Author:** [@mr\_searchng](https://discuss.elastic.co/u/mr_searchng)\
**Replies:** 0\
**Last updated:** [February 18, 2020, 9:21pm UTC](https://discuss.elastic.co/t/using-painless-in-kibana-how-is-make-total-unique-values/219865 "2020-02-18T21:21:54Z")

</div>

I have index. index count=total, unique value=unique avg=total/unique calculation in painless in kibana dashboard ?

---

## [Slack Alert If Cluster goes unhealthy](https://discuss.elastic.co/t/slack-alert-if-cluster-goes-unhealthy/219672)

<div class="topic-metadata">

**Author:** [@Edgar\_Peixoto](https://discuss.elastic.co/u/Edgar_Peixoto)\
**Replies:** 1\
**Last updated:** [February 18, 2020, 8:59pm UTC](https://discuss.elastic.co/t/slack-alert-if-cluster-goes-unhealthy/219672 "2020-02-18T20:59:28Z")

</div>

I need to receive a Slack Alert if my cluster goes unhealthy. How can I do it? I already have a Slack hook URL.

---

## [How can I use field names for rows in table visualization](https://discuss.elastic.co/t/how-can-i-use-field-names-for-rows-in-table-visualization/219863)

<div class="topic-metadata">

**Author:** [@georgiy](https://discuss.elastic.co/u/georgiy)\
**Replies:** 0\
**Last updated:** [February 18, 2020, 8:52pm UTC](https://discuss.elastic.co/t/how-can-i-use-field-names-for-rows-in-table-visualization/219863 "2020-02-18T20:52:38Z")

</div>

Hello. How can I create table with field names in rows? Example: I have some jsons: {"name1": "a", name2: "b"} {"name2": "e", name3: "c"} and want table in kibana: NAME COUNT name2 2 name1 1 …

---

## [KIBANA TIMELION HELP](https://discuss.elastic.co/t/kibana-timelion-help/219782)

<div class="topic-metadata">

**Author:** [@ROHINI13](https://discuss.elastic.co/u/ROHINI13)\
**Replies:** 1\
**Last updated:** [February 18, 2020, 8:33pm UTC](https://discuss.elastic.co/t/kibana-timelion-help/219782 "2020-02-18T20:33:17Z")

</div>

Continuing the discussion from Timelion - kibana Filter the column using code:

---

## [Filter by campaign](https://discuss.elastic.co/t/filter-by-campaign/219795)

<div class="topic-metadata">

**Author:** [@Farsad](https://discuss.elastic.co/u/Farsad)\
**Replies:** 1\
**Last updated:** [February 18, 2020, 8:30pm UTC](https://discuss.elastic.co/t/filter-by-campaign/219795 "2020-02-18T20:30:15Z")

</div>

Hi, We are imported Nginx logs to elastic by Logstash to make an analytics panel in Kibana. We need to make a filter to filter results based on campaign ids that the user started to reach our app. As an example, a use…

---

## [Are there onClick or hover events in Canvas?](https://discuss.elastic.co/t/are-there-onclick-or-hover-events-in-canvas/219808)

<div class="topic-metadata">

**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\
**Replies:** 1\
**Last updated:** [February 18, 2020, 5:26pm UTC](https://discuss.elastic.co/t/are-there-onclick-or-hover-events-in-canvas/219808 "2020-02-18T17:26:27Z")

</div>

To display some info, when the mouse pointer is over an element, or this is clicked. thanks!

---

## [EuiContextMenuItem](https://discuss.elastic.co/t/euicontextmenuitem/219831)

<div class="topic-metadata">

**Author:** [@pgervais](https://discuss.elastic.co/u/pgervais)\
**Replies:** 1\
**Last updated:** [February 18, 2020, 4:31pm UTC](https://discuss.elastic.co/t/euicontextmenuitem/219831 "2020-02-18T16:31:10Z")

</div>

Working on a Kibana plugin using the Eui Frameowkr as found inhttps://elastic.github.io/eui/#/. I'm using EuiContextMenu. How do i show menu item selecxtion without changing icon? (PS: I already have icons defined for e…

---

## [Dynamic dashboard data\_source](https://discuss.elastic.co/t/dynamic-dashboard-data-source/219816)

<div class="topic-metadata">

**Author:** [@Zerobot](https://discuss.elastic.co/u/Zerobot)\
**Replies:** 1\
**Last updated:** [February 18, 2020, 3:18pm UTC](https://discuss.elastic.co/t/dynamic-dashboard-data-source/219816 "2020-02-18T15:18:32Z")

</div>

Hi! Is there any option to create a dynamic index\_pattern/data\_source Dashboard where we, for example, would be able to pick an index\_pattern on which we want our Dashboard to show data? Or even going further: Is ther…

---

## [HOW TO GET THE MAPPINGS TO BE LIKE kibana\_sample\_data\_flights](https://discuss.elastic.co/t/how-to-get-the-mappings-to-be-like-kibana-sample-data-flights/219720)

<div class="topic-metadata">

**Author:** [@richylyq](https://discuss.elastic.co/u/richylyq)\
**Replies:** 1\
**Last updated:** [February 18, 2020, 3:06pm UTC](https://discuss.elastic.co/t/how-to-get-the-mappings-to-be-like-kibana-sample-data-flights/219720 "2020-02-18T15:06:31Z")

</div>

I am using the FSCrawler library by @dadoonet and it works great for the ingestion of data But after the ingestion, I cannot seem to use the data for any visualization. Therefore I would like to see how to get the mappi…

---

## [Visualization line : divide Sum](https://discuss.elastic.co/t/visualization-line-divide-sum/219641)

<div class="topic-metadata">

**Author:** [@Bruno1](https://discuss.elastic.co/u/Bruno1)\
**Replies:** 3\
**Last updated:** [February 18, 2020, 3:04pm UTC](https://discuss.elastic.co/t/visualization-line-divide-sum/219641 "2020-02-18T15:04:07Z")

</div>

Hello I want divide a Sum on "Visualization Line" graph Sum is Bytes and I want Sum in Megabytes If someone have a solution ? Thanks

---

## [Kibana 7.5.2 Startup Exception: "Error: Optimizations failure"](https://discuss.elastic.co/t/kibana-7-5-2-startup-exception-error-optimizations-failure/218650)

<div class="topic-metadata">

**Author:** [@jshapiro001](https://discuss.elastic.co/u/jshapiro001)\
**Replies:** 3\
**Last updated:** [February 18, 2020, 2:43pm UTC](https://discuss.elastic.co/t/kibana-7-5-2-startup-exception-error-optimizations-failure/218650 "2020-02-18T14:43:46Z")

</div>

I'm deploying Elasticsearch and Kibana on to OpenShift via a template yaml file. ES is deployed without issue, but I'm having trouble getting Kibana to start. Here are the details: Template YML Configuration- apiVersio…

---

## [Webhook action, json payload size limit](https://discuss.elastic.co/t/webhook-action-json-payload-size-limit/219281)

<div class="topic-metadata">

**Author:** [@Matt\_McGovern](https://discuss.elastic.co/u/Matt_McGovern)\
**Replies:** 3\
**Last updated:** [February 18, 2020, 2:23pm UTC](https://discuss.elastic.co/t/webhook-action-json-payload-size-limit/219281 "2020-02-18T14:23:05Z")

</div>

Are there any size limits to the size of the json payload sent in a webhook (action of a watcher)? I'm debugging why one of my watchers is failing, and the json validates just fine...it is just as my other watchers, doi…

---

## [Connect a role to a space](https://discuss.elastic.co/t/connect-a-role-to-a-space/218029)

<div class="topic-metadata">

**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\
**Replies:** 6\
**Last updated:** [February 18, 2020, 12:44pm UTC](https://discuss.elastic.co/t/connect-a-role-to-a-space/218029 "2020-02-18T12:44:26Z")

</div>

hello I have a case where we have 1 dashboard for all clients (created in the default space) with index pattern client\_\*. (includes: client\_1 , client\_2\_ and so on..) example names... I created a space for each clien…

---

## [Change kibana index patterns to upgraded dashboards](https://discuss.elastic.co/t/change-kibana-index-patterns-to-upgraded-dashboards/219523)

<div class="topic-metadata">

**Author:** [@zakthan](https://discuss.elastic.co/u/zakthan)\
**Replies:** 2\
**Last updated:** [February 17, 2020, 10:48pm UTC](https://discuss.elastic.co/t/change-kibana-index-patterns-to-upgraded-dashboards/219523 "2020-02-17T22:48:21Z")

</div>

Does anybody know how can I migrate my old kibana saved objects from version 6.84 to version 7.5.1? Actually I used to have some index patterns from filebeat6\* filebeat indices and now that I have upgraded to 7\* filebe…

---

## [Kibana looks like it cancels requests if they take more than 30 seconds?](https://discuss.elastic.co/t/kibana-looks-like-it-cancels-requests-if-they-take-more-than-30-seconds/219689)

<div class="topic-metadata">

**Author:** [@fallenreaper](https://discuss.elastic.co/u/fallenreaper)\
**Replies:** 1\
**Last updated:** [February 18, 2020, 12:03pm UTC](https://discuss.elastic.co/t/kibana-looks-like-it-cancels-requests-if-they-take-more-than-30-seconds/219689 "2020-02-18T12:03:06Z")

</div>

I was running the newest version of Kibana, 7.6. I was noticing that during ingestion process, some of my visualizations are taking over 30 seconds. When they take that long it will expose the error: \[esaggs\] \> Unexpe…

---

## [Comparison between two data in kibana](https://discuss.elastic.co/t/comparison-between-two-data-in-kibana/218538)

<div class="topic-metadata">

**Author:** [@ROHINI13](https://discuss.elastic.co/u/ROHINI13)\
**Replies:** 3\
**Last updated:** [February 18, 2020, 11:06am UTC](https://discuss.elastic.co/t/comparison-between-two-data-in-kibana/218538 "2020-02-18T11:06:57Z")

</div>

Hi guys, I have one doubt in kibana , I want to compare two different data , I want to compare and overlap between the two different data in kibana using timelion or kibna lens. Can anyone help me how to compare betwee…

---

## [Kibana User Session data in query](https://discuss.elastic.co/t/kibana-user-session-data-in-query/219635)

<div class="topic-metadata">

**Author:** [@gkainth](https://discuss.elastic.co/u/gkainth)\
**Replies:** 5\
**Last updated:** [February 18, 2020, 8:51am UTC](https://discuss.elastic.co/t/kibana-user-session-data-in-query/219635 "2020-02-18T08:51:12Z")

</div>

I have a question that I’m having trouble finding the answer to elsewhere. I would like to create dashboards that customize the data based on the specific user logged in. To do so, I need to provide the logged-in user’s…

---

## [MAPS in kibana](https://discuss.elastic.co/t/maps-in-kibana/219131)

<div class="topic-metadata">

**Author:** [@vinu89](https://discuss.elastic.co/u/vinu89)\
**Replies:** 8\
**Last updated:** [February 18, 2020, 5:37am UTC](https://discuss.elastic.co/t/maps-in-kibana/219131 "2020-02-18T05:37:58Z")

</div>

How to Use the Maps for the index created by us.I checked with the below link https://www.elastic.co/guide/en/kibana/current/maps-getting-started.html but in the above link they have provided on how to work on default …

---

## [Watches and Security / Spaces](https://discuss.elastic.co/t/watches-and-security-spaces/219472)

<div class="topic-metadata">

**Author:** [@StefanoM](https://discuss.elastic.co/u/StefanoM)\
**Replies:** 1\
**Last updated:** [February 17, 2020, 6:36pm UTC](https://discuss.elastic.co/t/watches-and-security-spaces/219472 "2020-02-17T18:36:02Z")

</div>

Dear community, is it possible in the newer elastick stack clusters with the licensed security enabled to combine watches alerting functionality and spaces? What I mean is: members of a space see only theire log events.…

---

## [Watcher & logging](https://discuss.elastic.co/t/watcher-logging/219468)

<div class="topic-metadata">

**Author:** [@StefanoM](https://discuss.elastic.co/u/StefanoM)\
**Replies:** 2\
**Last updated:** [February 17, 2020, 6:33pm UTC](https://discuss.elastic.co/t/watcher-logging/219468 "2020-02-17T18:33:04Z")

</div>

Hi there, we have the possibility to define watches in Kibana. One action is logging. My question: Where / in which log does this log event get written to? Thanks guys!

---

## [Organize Weekly Bar Graph by correct day order](https://discuss.elastic.co/t/organize-weekly-bar-graph-by-correct-day-order/216932)

<div class="topic-metadata">

**Author:** [@jamesyone](https://discuss.elastic.co/u/jamesyone)\
**Replies:** 3\
**Last updated:** [February 17, 2020, 5:19pm UTC](https://discuss.elastic.co/t/organize-weekly-bar-graph-by-correct-day-order/216932 "2020-02-17T17:19:37Z")

</div>

Hi, I currently created a weekly bar graph with the following scripted field : LocalDateTime.ofInstant(Instant.ofEpochMilli(doc\['xxx'\].value.millis),ZoneId.of('Asia/Tokyo')).getDayOfWeek() and the graph looks somethin…

---

## [Possible Feature Request - Context (surrounding docs) based on non-timestamp fields](https://discuss.elastic.co/t/possible-feature-request-context-surrounding-docs-based-on-non-timestamp-fields/219355)

<div class="topic-metadata">

**Author:** [@aidofitz](https://discuss.elastic.co/u/aidofitz)\
**Replies:** 2\
**Last updated:** [February 17, 2020, 3:40pm UTC](https://discuss.elastic.co/t/possible-feature-request-context-surrounding-docs-based-on-non-timestamp-fields/219355 "2020-02-17T15:40:59Z")

</div>

Hi all, I'll describe what I'd like to achieve, and appreciate your views on if it makes sense! We're using ELK for log aggregation and analysis. We ingest multiple log files in real time from multiple servers. One of …

---

## [Kibana dashboard shows different values](https://discuss.elastic.co/t/kibana-dashboard-shows-different-values/219506)

<div class="topic-metadata">

**Author:** [@Vicky\_S](https://discuss.elastic.co/u/Vicky_S)\
**Replies:** 6\
**Last updated:** [February 17, 2020, 2:25pm UTC](https://discuss.elastic.co/t/kibana-dashboard-shows-different-values/219506 "2020-02-17T14:25:36Z")

</div>

Hi, I have created dashboards to monitor customer care details. I have visualizations to show the incoming and outgoing calls. In my computer kibana shows 71 incoming calls and 23 outgoing calls.I accessed the same dashb…

---

## [Filter some value on visualize "control" function](https://discuss.elastic.co/t/filter-some-value-on-visualize-control-function/215679)

<div class="topic-metadata">

**Author:** [@Tennis](https://discuss.elastic.co/u/Tennis)\
**Replies:** 3\
**Last updated:** [February 17, 2020, 12:11pm UTC](https://discuss.elastic.co/t/filter-some-value-on-visualize-control-function/215679 "2020-02-17T12:11:35Z")

</div>

I want to use the field: "product" to be a selection menu using the visualize feature "control". Data of field: "product" contains three types: keyboard, computer, screen. In default "control" function, my select menu …

---

## [Migrating the Splunk Visualizations and Dashboards to Kibana](https://discuss.elastic.co/t/migrating-the-splunk-visualizations-and-dashboards-to-kibana/219580)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 2\
**Last updated:** [February 17, 2020, 11:20am UTC](https://discuss.elastic.co/t/migrating-the-splunk-visualizations-and-dashboards-to-kibana/219580 "2020-02-17T11:20:17Z")

</div>

Is there any best practice/tool to migrate the Splunk Reports/Visualizations/Dashboards to Kibana? Or the only way is to recreate them in Kibana?

---

## [Kibana folder is empty](https://discuss.elastic.co/t/kibana-folder-is-empty/219501)

<div class="topic-metadata">

**Author:** [@aniketharode](https://discuss.elastic.co/u/aniketharode)\
**Replies:** 2\
**Last updated:** [February 17, 2020, 11:16am UTC](https://discuss.elastic.co/t/kibana-folder-is-empty/219501 "2020-02-17T11:16:30Z")

</div>

I have recently downloaded the kibana zip on windows folder but it is completely empty no files is showing inside the zip

---

## [Kibana 7.5.2 - How to get size on Y axis in metrics dropdown](https://discuss.elastic.co/t/kibana-7-5-2-how-to-get-size-on-y-axis-in-metrics-dropdown/219570)

<div class="topic-metadata">

**Author:** [@svyas1](https://discuss.elastic.co/u/svyas1)\
**Replies:** 1\
**Last updated:** [February 17, 2020, 10:30am UTC](https://discuss.elastic.co/t/kibana-7-5-2-how-to-get-size-on-y-axis-in-metrics-dropdown/219570 "2020-02-17T10:30:33Z")

</div>

Hi Experts, I have Kibana 7.5.2 and have index in elastic search containing data for a process memory and cpu usage. While this data is available in elastic search index , not seeing size as a aggregation option in Y ax…

---

## [Grok pattern works but not applied on Kibana](https://discuss.elastic.co/t/grok-pattern-works-but-not-applied-on-kibana/218752)

<div class="topic-metadata">

**Author:** [@Cuju](https://discuss.elastic.co/u/Cuju)\
**Replies:** 10\
**Last updated:** [February 17, 2020, 9:04am UTC](https://discuss.elastic.co/t/grok-pattern-works-but-not-applied-on-kibana/218752 "2020-02-17T09:04:22Z")

</div>

Hello, I have an issue I try to fix for a couple of days, without success. I need to grok the message field (they don't have the same syntax) from my Kibana but it fails. I created my grok filter, which works on Grok …

---

## [Create custom visualization dashboard from the monitoring data?](https://discuss.elastic.co/t/create-custom-visualization-dashboard-from-the-monitoring-data/219185)

<div class="topic-metadata">

**Author:** [@Mattness](https://discuss.elastic.co/u/Mattness)\
**Replies:** 4\
**Last updated:** [February 17, 2020, 8:02am UTC](https://discuss.elastic.co/t/create-custom-visualization-dashboard-from-the-monitoring-data/219185 "2020-02-17T08:02:16Z")

</div>

Hello, I noticed all the graphs under Stackmonitoring/elasticsearch/nodes and was wondering where Kibana gets this data from. Also can I access this data myself and create custom visualizations for my dashboard? Or is th…

---

## [Kibana should not be run as root. Use --allow-root to continue](https://discuss.elastic.co/t/kibana-should-not-be-run-as-root-use-allow-root-to-continue/219253)

<div class="topic-metadata">

**Author:** [@dsv](https://discuss.elastic.co/u/dsv)\
**Replies:** 4\
**Last updated:** [February 17, 2020, 8:11am UTC](https://discuss.elastic.co/t/kibana-should-not-be-run-as-root-use-allow-root-to-continue/219253 "2020-02-17T08:11:10Z")

</div>

CentOS Linux release 7.7.1908 (Core) I have the lastest version of the kibana installed from the elasticsearch repo by yum: kibana-7.5.2-1.x86\_64 When I try to install a plugin: /usr/share/kibana/bin/kibana-plugin in…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=534)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=536)
