# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=539

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 540

---

## [Kibana Multi User Graph](https://discuss.elastic.co/t/kibana-multi-user-graph/218545)

<div class="topic-metadata">

**Author:** [@vinu89](https://discuss.elastic.co/u/vinu89)\
**Replies:** 2\
**Last updated:** [February 11, 2020, 6:55am UTC](https://discuss.elastic.co/t/kibana-multi-user-graph/218545 "2020-02-11T06:55:41Z")

</div>

Hi, I need to create a graph in kibana where i need to identify the list of email id's loggged in from different countries.lets say email id is xyz@domain.com and the user belongs to India but his password has been comp…

---

## [Co-ordinating node JVM heap size increase](https://discuss.elastic.co/t/co-ordinating-node-jvm-heap-size-increase/217369)

<div class="topic-metadata">

**Author:** [@kmousikos](https://discuss.elastic.co/u/kmousikos)\
**Replies:** 3\
**Last updated:** [February 11, 2020, 8:23am UTC](https://discuss.elastic.co/t/co-ordinating-node-jvm-heap-size-increase/217369 "2020-02-11T08:23:20Z")

</div>

Hello, I have a cluster of 3 master-eligible, data and ingest nodes and 2 co-ordinate only nodes. Running on version 6.8.6. I created a Data Table visualisation with a Unique count of a field as a Metric and 2 sub-buck…

---

## [Index pattern in Kibana can not create](https://discuss.elastic.co/t/index-pattern-in-kibana-can-not-create/218539)

<div class="topic-metadata">

**Author:** [@juuuhuuu](https://discuss.elastic.co/u/juuuhuuu)\
**Replies:** 3\
**Last updated:** [February 11, 2020, 8:07am UTC](https://discuss.elastic.co/t/index-pattern-in-kibana-can-not-create/218539 "2020-02-11T08:07:03Z")

</div>

Good Morning, Coud You plese hepl me? The problem is that : In kibana I can not create index pattern . My logs are in elasticsearch : curl -XGET "http://es01:9200/\_cat/indices" and I checked the logs of docker contai…

---

## [Kibana 7.5 Data Table percentage using Json input](https://discuss.elastic.co/t/kibana-7-5-data-table-percentage-using-json-input/217740)

<div class="topic-metadata">

**Author:** [@umay\_fb](https://discuss.elastic.co/u/umay_fb)\
**Replies:** 7\
**Last updated:** [February 11, 2020, 7:51am UTC](https://discuss.elastic.co/t/kibana-7-5-data-table-percentage-using-json-input/217740 "2020-02-11T07:51:27Z")

</div>

I have problem, i have data and i want make kibana data Table like this, but i want create percentage beside each Col. like percentage DLV H-1, can i make it with Json input? i create Json input like { "script" : "do…

---

## [Kibana throwing errors behind a load balancer](https://discuss.elastic.co/t/kibana-throwing-errors-behind-a-load-balancer/214567)

<div class="topic-metadata">

**Author:** [@gborg](https://discuss.elastic.co/u/gborg)\
**Replies:** 2\
**Last updated:** [February 10, 2020, 9:20pm UTC](https://discuss.elastic.co/t/kibana-throwing-errors-behind-a-load-balancer/214567 "2020-02-10T21:20:00Z")

</div>

Hello, I have been having some issues where Kibana is throwing me "clear your session" errors User enter's Kibana, loads a dashboard, a few minutes pass, error occurs Setup: F5 hardware load balancer ----- --------- \> …

---

## [Not able to connect to ElasticSearch Cluster in AWS from Kibana](https://discuss.elastic.co/t/not-able-to-connect-to-elasticsearch-cluster-in-aws-from-kibana/218071)

<div class="topic-metadata">

**Author:** [@chilakala](https://discuss.elastic.co/u/chilakala)\
**Replies:** 3\
**Last updated:** [February 10, 2020, 8:05pm UTC](https://discuss.elastic.co/t/not-able-to-connect-to-elasticsearch-cluster-in-aws-from-kibana/218071 "2020-02-10T20:05:49Z")

</div>

Hi All, I have setup a Elastic search cluster in AWS using the ec2 discovery plugin. I have 2 Nodes, one as master and another as data node. They are able to discover automatically and i see the 2 Nodes on the master …

---

## [Get Kibana Cookie with Custom Realm](https://discuss.elastic.co/t/get-kibana-cookie-with-custom-realm/216747)

<div class="topic-metadata">

**Author:** [@YanbangLiuUiPath](https://discuss.elastic.co/u/YanbangLiuUiPath)\
**Replies:** 6\
**Last updated:** [February 10, 2020, 7:59pm UTC](https://discuss.elastic.co/t/get-kibana-cookie-with-custom-realm/216747 "2020-02-10T19:59:08Z")

</div>

Is there a way to get Kibana session cookie with custom realm? Right now I'm using Bearer token generated by ES for API calls in Kibana, but ultimately I want the users to be able to automatically login to their own kib…

---

## [How can I migrate my v6 dashboards to v7](https://discuss.elastic.co/t/how-can-i-migrate-my-v6-dashboards-to-v7/218587)

<div class="topic-metadata">

**Author:** [@stephen.palfreyman](https://discuss.elastic.co/u/stephen.palfreyman)\
**Replies:** 4\
**Last updated:** [February 10, 2020, 5:15pm UTC](https://discuss.elastic.co/t/how-can-i-migrate-my-v6-dashboards-to-v7/218587 "2020-02-10T17:15:01Z")

</div>

In kibana 6.8.0 saved visualizations have an element called uiStateJSON, which has been deprecated in kibana 7 (in https://github.com/elastic/kibana/issues/15204 & https://github.com/elastic/kibana/pull/14949). However,…

---

## [Access Kibana Dashboard without login](https://discuss.elastic.co/t/access-kibana-dashboard-without-login/218626)

<div class="topic-metadata">

**Author:** [@BjoernB](https://discuss.elastic.co/u/BjoernB)\
**Replies:** 1\
**Last updated:** [February 10, 2020, 3:51pm UTC](https://discuss.elastic.co/t/access-kibana-dashboard-without-login/218626 "2020-02-10T15:51:17Z")

</div>

Seems to be a well discussed topic, but I might run into some difficulties. I'm using elastic-stack in Version: 6.2.4, x-pack installed. I already do the "anonymous"-user in elasticstack.yml - Where I can change the ac…

---

## [Canvas dropdown filter result no data after filtering](https://discuss.elastic.co/t/canvas-dropdown-filter-result-no-data-after-filtering/218537)

<div class="topic-metadata">

**Author:** [@Timothy\_Julius](https://discuss.elastic.co/u/Timothy_Julius)\
**Replies:** 1\
**Last updated:** [February 10, 2020, 3:49pm UTC](https://discuss.elastic.co/t/canvas-dropdown-filter-result-no-data-after-filtering/218537 "2020-02-10T15:49:50Z")

</div>

Hello, i know this is an outdated problem, but after i research all the topic about dropdown canvas and implement it, the result always zero data i don't know why. So, right now i want to developed a simple visualizatio…

---

## [Splitting visualization by value not field](https://discuss.elastic.co/t/splitting-visualization-by-value-not-field/218573)

<div class="topic-metadata">

**Author:** [@kilianten](https://discuss.elastic.co/u/kilianten)\
**Replies:** 1\
**Last updated:** [February 10, 2020, 2:54pm UTC](https://discuss.elastic.co/t/splitting-visualization-by-value-not-field/218573 "2020-02-10T14:54:09Z")

</div>

I can the JSON structure whatever way I like but I need to split tables by string value and get a count of another value for example: { "car.BMW":20, "car.Toyota":10 } or something like { car: {"name":"BMW", "valu…

---

## [Unknown indexes created in kibana](https://discuss.elastic.co/t/unknown-indexes-created-in-kibana/218589)

<div class="topic-metadata">

**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\
**Replies:** 2\
**Last updated:** [February 10, 2020, 2:09pm UTC](https://discuss.elastic.co/t/unknown-indexes-created-in-kibana/218589 "2020-02-10T14:09:37Z")

</div>

Hi I have 2 indexes that I didnt create in kibana, one is call "UptimeIndexPattern", and the other is call "apm-\*" Anynone knows if there where created automatically by kibana, or anithing? there is a programer using t…

---

## [My Kibana is expired so how can I download the csv file ? Any other methods?](https://discuss.elastic.co/t/my-kibana-is-expired-so-how-can-i-download-the-csv-file-any-other-methods/218560)

<div class="topic-metadata">

**Author:** [@AwaizK](https://discuss.elastic.co/u/AwaizK)\
**Replies:** 3\
**Last updated:** [February 10, 2020, 12:40pm UTC](https://discuss.elastic.co/t/my-kibana-is-expired-so-how-can-i-download-the-csv-file-any-other-methods/218560 "2020-02-10T12:40:04Z")

</div>

I need to download the csv file from kibana but my Kibana is expired so any other methods?

---

## [How do I count unique prefixes](https://discuss.elastic.co/t/how-do-i-count-unique-prefixes/215751)

<div class="topic-metadata">

**Author:** [@Diwike](https://discuss.elastic.co/u/Diwike)\
**Replies:** 4\
**Last updated:** [February 10, 2020, 10:25am UTC](https://discuss.elastic.co/t/how-do-i-count-unique-prefixes/215751 "2020-02-10T10:25:10Z")

</div>

Hello, Im new to Kibana and this forum and hope to find some assistance. Im trying to create a unique counter of the first five digits of, ex: 47001834023049820397402 I can't for the life of me figure out how to do thi…

---

## [Differencies between Kibana and Excel](https://discuss.elastic.co/t/differencies-between-kibana-and-excel/216844)

<div class="topic-metadata">

**Author:** [@fgomez17](https://discuss.elastic.co/u/fgomez17)\
**Replies:** 3\
**Last updated:** [February 10, 2020, 10:12am UTC](https://discuss.elastic.co/t/differencies-between-kibana-and-excel/216844 "2020-02-10T10:12:00Z")

</div>

Hello everyone, I have a question for you, do you think we can compare kibana with excel ? If yes, according to you, what are their differencies ? And what are their strengths weeknesses ? Thank again for your help !

---

## [Please provide script for sections under msteams configuration watcher](https://discuss.elastic.co/t/please-provide-script-for-sections-under-msteams-configuration-watcher/218126)

<div class="topic-metadata">

**Author:** [@Sumit\_Kumar1](https://discuss.elastic.co/u/Sumit_Kumar1)\
**Replies:** 3\
**Last updated:** [February 10, 2020, 6:57am UTC](https://discuss.elastic.co/t/please-provide-script-for-sections-under-msteams-configuration-watcher/218126 "2020-02-10T06:57:39Z")

</div>

I want alerts in a tabular format in MS Teams , I am providing a snippet for adding sections in the body . Please, help me know where i am making mistake . "MS\_Teams": { "transform": { "script": { "source":…

---

## [Login page and dark theme](https://discuss.elastic.co/t/login-page-and-dark-theme/218396)

<div class="topic-metadata">

**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\
**Replies:** 1\
**Last updated:** [February 7, 2020, 8:44pm UTC](https://discuss.elastic.co/t/login-page-and-dark-theme/218396 "2020-02-07T20:44:19Z")

</div>

Hi, Is there a simple/automatic way to set a dark theme also for the Kiban login page? The settings in the panel refer to Space after login. Is this issue known?

---

## [7.5.2 unable to revive connection (custom routine to generate certs)](https://discuss.elastic.co/t/7-5-2-unable-to-revive-connection-custom-routine-to-generate-certs/218254)

<div class="topic-metadata">

**Author:** [@elemus](https://discuss.elastic.co/u/elemus)\
**Replies:** 5\
**Last updated:** [February 7, 2020, 7:56pm UTC](https://discuss.elastic.co/t/7-5-2-unable-to-revive-connection-custom-routine-to-generate-certs/218254 "2020-02-07T19:56:17Z")

</div>

Hi again, Exists a way to see detailed kibana logs? I have the famous "unable to revive connection" exception using a docker compose (se below) When I pass verification mode to 'none' TLS works in cluster and kibana. …

---

## [Using ctx.results Variable in a Message](https://discuss.elastic.co/t/using-ctx-results-variable-in-a-message/216498)

<div class="topic-metadata">

**Author:** [@stevebanik](https://discuss.elastic.co/u/stevebanik)\
**Replies:** 2\
**Last updated:** [February 7, 2020, 6:53pm UTC](https://discuss.elastic.co/t/using-ctx-results-variable-in-a-message/216498 "2020-02-07T18:53:59Z")

</div>

I'd like to use the ctx.results variable in a message using {{ctx.results.0}} but I am not able to display the \_source value I'm interested in. For example, the extraction query response is: { "\_shards": { …

---

## [Unique Count by using visual builder metric](https://discuss.elastic.co/t/unique-count-by-using-visual-builder-metric/218093)

<div class="topic-metadata">

**Author:** [@sajjithreddy](https://discuss.elastic.co/u/sajjithreddy)\
**Replies:** 4\
**Last updated:** [February 7, 2020, 6:12pm UTC](https://discuss.elastic.co/t/unique-count-by-using-visual-builder-metric/218093 "2020-02-07T18:12:28Z")

</div>

I have a question that, How we can get unique count of multiple events in visual builder or any visualization kibana? Let me explain my question clearly. In log stash events class name, git url and status is there. Thi…

---

## [Unable to connect to Elasticsearch. Error: \[mapper\_parsing\_exception\] No handler for type \[flattened\] declared on field \[state\]](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-error-mapper-parsing-exception-no-handler-for-type-flattened-declared-on-field-state/215378)

<div class="topic-metadata">

**Author:** [@o1o1o11o1](https://discuss.elastic.co/u/o1o1o11o1)\
**Replies:** 13\
**Last updated:** [February 7, 2020, 4:18pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-error-mapper-parsing-exception-no-handler-for-type-flattened-declared-on-field-state/215378 "2020-02-07T16:18:53Z")

</div>

After upgrading Elasticsearch and Kibana from 7.1 to 7.5.1 Kibana is unable to start with the following error: Unable to connect to Elasticsearch. Error: \[mapper\_parsing\_exception\] No handler for type \[flattened\] declar…

---

## [Kibana Data Table to group by fields](https://discuss.elastic.co/t/kibana-data-table-to-group-by-fields/218232)

<div class="topic-metadata">

**Author:** [@Joseph\_Mak](https://discuss.elastic.co/u/Joseph_Mak)\
**Replies:** 2\
**Last updated:** [February 7, 2020, 4:15pm UTC](https://discuss.elastic.co/t/kibana-data-table-to-group-by-fields/218232 "2020-02-07T16:15:52Z")

</div>

If I have something super simple like this, a bunch of records with a few fields and a timestamp. Is there a way to build a Data Table (or some other visualization), grouping by each of the fields? For example, in the …

---

## [Issue with Time Range visualization](https://discuss.elastic.co/t/issue-with-time-range-visualization/218370)

<div class="topic-metadata">

**Author:** [@enordstrand](https://discuss.elastic.co/u/enordstrand)\
**Replies:** 2\
**Last updated:** [February 7, 2020, 4:02pm UTC](https://discuss.elastic.co/t/issue-with-time-range-visualization/218370 "2020-02-07T16:02:57Z")

</div>

Hello I have an issue with vizualisation in Kibana. See bellow picture. I want the Aggregation "Date Range" show bar graphs that are side by side, with a space between them and I want the time ranges to be listed under …

---

## [Numbers in Table and JSON are different](https://discuss.elastic.co/t/numbers-in-table-and-json-are-different/218362)

<div class="topic-metadata">

**Author:** [@ldevlnull](https://discuss.elastic.co/u/ldevlnull)\
**Replies:** 1\
**Last updated:** [February 7, 2020, 3:24pm UTC](https://discuss.elastic.co/t/numbers-in-table-and-json-are-different/218362 "2020-02-07T15:24:47Z")

</div>

I noticed strange thing in logs: the number-value of marker in table-view differs from the corresponding value of field in JSON. What is this?

---

## [How to generate last login report in kibana](https://discuss.elastic.co/t/how-to-generate-last-login-report-in-kibana/218136)

<div class="topic-metadata">

**Author:** [@mkanukur](https://discuss.elastic.co/u/mkanukur)\
**Replies:** 1\
**Last updated:** [February 7, 2020, 3:05pm UTC](https://discuss.elastic.co/t/how-to-generate-last-login-report-in-kibana/218136 "2020-02-07T15:05:25Z")

</div>

Hi All, I'm trying to generate a report for last logon activity for all users. Entire cluster is on 7.2.1(BLEK). Any suggestions ? Thanks in advance

---

## [Average of Serial Diff in kibana](https://discuss.elastic.co/t/average-of-serial-diff-in-kibana/217026)

<div class="topic-metadata">

**Author:** [@Angelos](https://discuss.elastic.co/u/Angelos)\
**Replies:** 3\
**Last updated:** [February 7, 2020, 3:01pm UTC](https://discuss.elastic.co/t/average-of-serial-diff-in-kibana/217026 "2020-02-07T15:01:55Z")

</div>

Hello, Is there any way to show the average of Serial Diff in Kibana? I am trying to create a line graph using Serial Diff in Y axis but then I want to add another Y axis with average of Serial Diff. In kibana line gra…

---

## [How to get rid of the dented weel of managemente on a read only user?](https://discuss.elastic.co/t/how-to-get-rid-of-the-dented-weel-of-managemente-on-a-read-only-user/218349)

<div class="topic-metadata">

**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\
**Replies:** 1\
**Last updated:** [February 7, 2020, 2:28pm UTC](https://discuss.elastic.co/t/how-to-get-rid-of-the-dented-weel-of-managemente-on-a-read-only-user/218349 "2020-02-07T14:28:40Z")

</div>

Hi I need to get rid of the dented weel on kibana, anyone knows where to disable it for a especific user?

---

## [Hover-box placement in visualisation at bottom of screen](https://discuss.elastic.co/t/hover-box-placement-in-visualisation-at-bottom-of-screen/218301)

<div class="topic-metadata">

**Author:** [@ahoffskov](https://discuss.elastic.co/u/ahoffskov)\
**Replies:** 3\
**Last updated:** [February 7, 2020, 2:15pm UTC](https://discuss.elastic.co/t/hover-box-placement-in-visualisation-at-bottom-of-screen/218301 "2020-02-07T14:15:40Z")

</div>

When viewing a trendline that is placed at the bottom of the page, the full info can not be viewed. Would it be possible to edit the placement given the position on the screen? ( I know this might not be an easy task). S…

---

## [Trying to apply a wildcard exclusion in the Query bar using Lucene](https://discuss.elastic.co/t/trying-to-apply-a-wildcard-exclusion-in-the-query-bar-using-lucene/218250)

<div class="topic-metadata">

**Author:** [@dleota](https://discuss.elastic.co/u/dleota)\
**Replies:** 2\
**Last updated:** [February 7, 2020, 1:13pm UTC](https://discuss.elastic.co/t/trying-to-apply-a-wildcard-exclusion-in-the-query-bar-using-lucene/218250 "2020-02-07T13:13:44Z")

</div>

Hello I am trying filter out the records where the field: "callCodeDesc" does not equal wildcard "NIVR" in the query bar for Lucene I entered: callCodeDesc: - NIVR (I have an asterisk before the "N" and after the "R"…

---

## [Visualization : count every occurrence of every not null field](https://discuss.elastic.co/t/visualization-count-every-occurrence-of-every-not-null-field/215101)

<div class="topic-metadata">

**Author:** [@GabrielM](https://discuss.elastic.co/u/GabrielM)\
**Replies:** 4\
**Last updated:** [February 7, 2020, 10:00am UTC](https://discuss.elastic.co/t/visualization-count-every-occurrence-of-every-not-null-field/215101 "2020-02-07T10:00:01Z")

</div>

Hello ! Is there a way to count the number of occurrences of each not null field in a visualization (a table seems appropriate to me) Kibana please? Thank you in advance and have a nice day !

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=538)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=540)
