# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=541

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 542

---

## [DropDownControl - filter with fields information](https://discuss.elastic.co/t/dropdowncontrol-filter-with-fields-information/218025)

<div class="topic-metadata">

**Author:** [@McSaesch](https://discuss.elastic.co/u/McSaesch)\
**Replies:** 3\
**Last updated:** [February 6, 2020, 7:33am UTC](https://discuss.elastic.co/t/dropdowncontrol-filter-with-fields-information/218025 "2020-02-06T07:33:49Z")

</div>

Hi, i starte dto work with canvas, it's really nice. But i have a problem by using fields information as filter. I wan't to use the information "fields.FileType" My Convas DropBox esdocs index="event-\*" fields="fie…

---

## [Kibana / Logtrail plugin issue](https://discuss.elastic.co/t/kibana-logtrail-plugin-issue/218097)

<div class="topic-metadata">

**Author:** [@andye](https://discuss.elastic.co/u/andye)\
**Replies:** 0\
**Last updated:** [February 6, 2020, 7:00am UTC](https://discuss.elastic.co/t/kibana-logtrail-plugin-issue/218097 "2020-02-06T07:00:28Z")

</div>

ECK 7.5.2 and logtrail-7.5.2-0.1.31. I'm trying to run logtrail with an ECK install in a bare metal k8s cluster and after the 'opimize' process has been run Kibana continually fails to start up with the following error: …

---

## [Filter results on "Unique Count" aggregation](https://discuss.elastic.co/t/filter-results-on-unique-count-aggregation/217883)

<div class="topic-metadata">

**Author:** [@jaimin161](https://discuss.elastic.co/u/jaimin161)\
**Replies:** 3\
**Last updated:** [February 6, 2020, 1:00am UTC](https://discuss.elastic.co/t/filter-results-on-unique-count-aggregation/217883 "2020-02-06T01:00:50Z")

</div>

I'm building Data Table visulizer in Kibana, where I'm using Unique Count aggregation. It returns data correctly. But my users needs to filter data based Unique Count (Show results \<= #n of Unique Counts). Any help wou…

---

## [Filtering based on change in values](https://discuss.elastic.co/t/filtering-based-on-change-in-values/218010)

<div class="topic-metadata">

**Author:** [@isostatic](https://discuss.elastic.co/u/isostatic)\
**Replies:** 3\
**Last updated:** [February 5, 2020, 9:33pm UTC](https://discuss.elastic.co/t/filtering-based-on-change-in-values/218010 "2020-02-05T21:33:52Z")

</div>

For several years I've logged data from some devices in CSV files, and used perl or grep to analyse them in various ways. I'm trying to do the same thing in elasticsearch, primarily to benefit from far faster retrieval …

---

## [Cpu gauge](https://discuss.elastic.co/t/cpu-gauge/218026)

<div class="topic-metadata">

**Author:** [@SirJune](https://discuss.elastic.co/u/SirJune)\
**Replies:** 2\
**Last updated:** [February 5, 2020, 8:43pm UTC](https://discuss.elastic.co/t/cpu-gauge/218026 "2020-02-05T20:43:45Z")

</div>

I am trying to create a gauge visualization for the CPU. I have a 32-core machine. I've been using TSVB and i can stress load the cpu like this with (system.cpu.total.norm.pct): when i try to use Gauge Visualization,…

---

## [Custom Links on visualization](https://discuss.elastic.co/t/custom-links-on-visualization/217909)

<div class="topic-metadata">

**Author:** [@pradeepp12](https://discuss.elastic.co/u/pradeepp12)\
**Replies:** 1\
**Last updated:** [February 5, 2020, 8:06pm UTC](https://discuss.elastic.co/t/custom-links-on-visualization/217909 "2020-02-05T20:06:36Z")

</div>

We have custom application that stores records. We are pushing those records in ElasticSearch for building dashboard in Kibana. Once of ask is that whenever the user clicks on metrics, graphs, tables or any other visuali…

---

## [Kibana monitoring - recent log entries lost timezone](https://discuss.elastic.co/t/kibana-monitoring-recent-log-entries-lost-timezone/217889)

<div class="topic-metadata">

**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\
**Replies:** 3\
**Last updated:** [February 5, 2020, 8:06pm UTC](https://discuss.elastic.co/t/kibana-monitoring-recent-log-entries-lost-timezone/217889 "2020-02-05T20:06:08Z")

</div>

Just noticed that on the Monitoring overview screen, "recent log entries" have the wrong timestamp by our timezone offset. The same log entry in Discover has the correct timestamp. Everything involved is 7.5.2, filebea…

---

## [Different Kibana Landing page for multiple users](https://discuss.elastic.co/t/different-kibana-landing-page-for-multiple-users/217920)

<div class="topic-metadata">

**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\
**Replies:** 1\
**Last updated:** [February 5, 2020, 8:05pm UTC](https://discuss.elastic.co/t/different-kibana-landing-page-for-multiple-users/217920 "2020-02-05T20:05:49Z")

</div>

Hi All, We are trying to figure out a way to keep different landing page for kibana for different users. We have separated users and teams using kibana spaces, now while logging in we dont want to land to dashboard pag…

---

## [Automated way of getting iframe for dashboard url](https://discuss.elastic.co/t/automated-way-of-getting-iframe-for-dashboard-url/217921)

<div class="topic-metadata">

**Author:** [@eyesmoker1](https://discuss.elastic.co/u/eyesmoker1)\
**Replies:** 1\
**Last updated:** [February 5, 2020, 8:04pm UTC](https://discuss.elastic.co/t/automated-way-of-getting-iframe-for-dashboard-url/217921 "2020-02-05T20:04:45Z")

</div>

I couldn't find solution when searching through existing questions in the forums. So, posting it here. I have seen a manual way of going to kibana and getting a iframe url for some of the dashboards. Is there any way, …

---

## [Convert STRING to FLOAT through FluentD using csv plugin](https://discuss.elastic.co/t/convert-string-to-float-through-fluentd-using-csv-plugin/217974)

<div class="topic-metadata">

**Author:** [@King\_D](https://discuss.elastic.co/u/King_D)\
**Replies:** 1\
**Last updated:** [February 5, 2020, 7:39pm UTC](https://discuss.elastic.co/t/convert-string-to-float-through-fluentd-using-csv-plugin/217974 "2020-02-05T19:39:28Z")

</div>

I need help with converting a string field to float either by modifying td-agent.conf file or by scripted field but seem to be failing miserably.

---

## [Can we filter data by default based on login user in dash board?](https://discuss.elastic.co/t/can-we-filter-data-by-default-based-on-login-user-in-dash-board/217984)

<div class="topic-metadata">

**Author:** [@anjilinga](https://discuss.elastic.co/u/anjilinga)\
**Replies:** 1\
**Last updated:** [February 5, 2020, 7:30pm UTC](https://discuss.elastic.co/t/can-we-filter-data-by-default-based-on-login-user-in-dash-board/217984 "2020-02-05T19:30:55Z")

</div>

if A user creates 10 records, if B creates 10 records, in dash board i have given the filter based on user. when user A login to dash board, he should be able to see only the 10 records he created. the user selection in …

---

## [Kibana filter not working correctly with dash characters](https://discuss.elastic.co/t/kibana-filter-not-working-correctly-with-dash-characters/218035)

<div class="topic-metadata">

**Author:** [@silentfilm](https://discuss.elastic.co/u/silentfilm)\
**Replies:** 1\
**Last updated:** [February 5, 2020, 7:07pm UTC](https://discuss.elastic.co/t/kibana-filter-not-working-correctly-with-dash-characters/218035 "2020-02-05T19:07:04Z")

</div>

This could be an Elasticsearch issue, but I am seeing it Kibana. If I have a name filter that includes a dash character, then the filter only filters up to the dash character, and allows anything after it. In this ex…

---

## [Use of text fields in Visualizations](https://discuss.elastic.co/t/use-of-text-fields-in-visualizations/218042)

<div class="topic-metadata">

**Author:** [@Denilson\_Rodrigues](https://discuss.elastic.co/u/Denilson_Rodrigues)\
**Replies:** 1\
**Last updated:** [February 5, 2020, 6:52pm UTC](https://discuss.elastic.co/t/use-of-text-fields-in-visualizations/218042 "2020-02-05T18:52:22Z")

</div>

According to this thread, and this docs , it's not possible to use text fields in visualize, because is not a agreggable field. En my environment a have a visuzation that is using a text field, and i can clone that to w…

---

## [Overlay timeseries for different date fields within a same index](https://discuss.elastic.co/t/overlay-timeseries-for-different-date-fields-within-a-same-index/217019)

<div class="topic-metadata">

**Author:** [@IvanHerreros](https://discuss.elastic.co/u/IvanHerreros)\
**Replies:** 4\
**Last updated:** [February 5, 2020, 4:18pm UTC](https://discuss.elastic.co/t/overlay-timeseries-for-different-date-fields-within-a-same-index/217019 "2020-02-05T16:18:54Z")

</div>

Hi, problem: say i have an index were documents have a "createdOn" and a "publishedOn" fields. I want to draw two time series within a same plot, displaying the histogram counts for the two different fields. Then I can…

---

## [\[7.5.1\] script field issue on @timestamp](https://discuss.elastic.co/t/7-5-1-script-field-issue-on-timestamp/217924)

<div class="topic-metadata">

**Author:** [@dao](https://discuss.elastic.co/u/dao)\
**Replies:** 6\
**Last updated:** [February 5, 2020, 2:16pm UTC](https://discuss.elastic.co/t/7-5-1-script-field-issue-on-timestamp/217924 "2020-02-05T14:16:34Z")

</div>

Dear all, I am trying to create a field in my index patter that will hold the date only. I was thinking about script fields. I create a script field like this, as mentioned in https://www.elastic.co/guide/en/elasticsea…

---

## [Aggregation quires in Query DSL of add filters in Discover](https://discuss.elastic.co/t/aggregation-quires-in-query-dsl-of-add-filters-in-discover/217923)

<div class="topic-metadata">

**Author:** [@Satish512](https://discuss.elastic.co/u/Satish512)\
**Replies:** 3\
**Last updated:** [February 5, 2020, 12:46pm UTC](https://discuss.elastic.co/t/aggregation-quires-in-query-dsl-of-add-filters-in-discover/217923 "2020-02-05T12:46:01Z")

</div>

Hi team, I'm trying to write a query in Query DSL of Add filters in Discover tab. "size": 0, "aggs": { "test": { "nested": { "path": "users" }, "aggs": { "users": { "terms": { "field": "users.username.keyword" …

---

## [KIbana Query: regexp of 10 numbers](https://discuss.elastic.co/t/kibana-query-regexp-of-10-numbers/217650)

<div class="topic-metadata">

**Author:** [@AndresL](https://discuss.elastic.co/u/AndresL)\
**Replies:** 4\
**Last updated:** [February 5, 2020, 11:18am UTC](https://discuss.elastic.co/t/kibana-query-regexp-of-10-numbers/217650 "2020-02-05T11:18:56Z")

</div>

Im trying to match in a search (discovery tool): 1234567890 or 123456-1234 Those expressions are not working (only catch 1 number) message: /\[0-9\]{10}/ or message: /\[0-9\]{6}-\[0-9\]{4}/ It should find numbers like …

---

## [Local + cross-cluster search as described in docs is not working](https://discuss.elastic.co/t/local-cross-cluster-search-as-described-in-docs-is-not-working/217271)

<div class="topic-metadata">

**Author:** [@matoro](https://discuss.elastic.co/u/matoro)\
**Replies:** 4\
**Last updated:** [February 5, 2020, 9:54am UTC](https://discuss.elastic.co/t/local-cross-cluster-search-as-described-in-docs-is-not-working/217271 "2020-02-05T09:54:20Z")

</div>

Hi, I am trying to create an index pattern in Kibana that will search both local and remote clusters, but I can only ever get it to do one or the other. The approach mentioned in the documentation and in the below forum…

---

## [Region Map drill down action](https://discuss.elastic.co/t/region-map-drill-down-action/217491)

<div class="topic-metadata">

**Author:** [@arunachala](https://discuss.elastic.co/u/arunachala)\
**Replies:** 2\
**Last updated:** [February 5, 2020, 9:45am UTC](https://discuss.elastic.co/t/region-map-drill-down-action/217491 "2020-02-05T09:45:57Z")

</div>

Hi, We have the following requirement from Region Map. By default show country wide map with states colored according to some metric. On clicking a particular state, show district/county wise map of that state accordi…

---

## [Visualise logs in data table using Terms Aggregation](https://discuss.elastic.co/t/visualise-logs-in-data-table-using-terms-aggregation/217818)

<div class="topic-metadata">

**Author:** [@MPiorunn](https://discuss.elastic.co/u/MPiorunn)\
**Replies:** 2\
**Last updated:** [February 5, 2020, 7:57am UTC](https://discuss.elastic.co/t/visualise-logs-in-data-table-using-terms-aggregation/217818 "2020-02-05T07:57:09Z")

</div>

Hello I am working on logs collecting using Elastic Stack and I wanted to present logs in a data table. They should be grouped by "Call ID", which I have achieved using Buckets with Terms aggregation. As you can see, e…

---

## [Can't see 'message.keyword' in field when creating data table visualize](https://discuss.elastic.co/t/cant-see-message-keyword-in-field-when-creating-data-table-visualize/217797)

<div class="topic-metadata">

**Author:** [@Nikhil\_Pillai](https://discuss.elastic.co/u/Nikhil_Pillai)\
**Replies:** 3\
**Last updated:** [February 5, 2020, 7:49am UTC](https://discuss.elastic.co/t/cant-see-message-keyword-in-field-when-creating-data-table-visualize/217797 "2020-02-05T07:49:52Z")

</div>

Hi, I am using Kibana 7.5.2 and can't see "message.keyword" when trying to create a "data table" visualize. I need to display error/info/warn message in dashboard using it. I have refreshed the index pattern but it didn…

---

## [Exclude records by an existing value in a group](https://discuss.elastic.co/t/exclude-records-by-an-existing-value-in-a-group/217849)

<div class="topic-metadata">

**Author:** [@Carlos\_Arturo\_Bernal](https://discuss.elastic.co/u/Carlos_Arturo_Bernal)\
**Replies:** 3\
**Last updated:** [February 4, 2020, 11:04pm UTC](https://discuss.elastic.co/t/exclude-records-by-an-existing-value-in-a-group/217849 "2020-02-04T23:04:42Z")

</div>

Hello, I'm currently storing in ElasticSearch build data from Jenkins, related to the success of client deployments. If we see such data as a table, this is what I have: client\_id build\_url result 123456 http:/…

---

## [Pretty JSON format of recieved (dot separated) log data fields](https://discuss.elastic.co/t/pretty-json-format-of-recieved-dot-separated-log-data-fields/217796)

<div class="topic-metadata">

**Author:** [@Roman\_Konkol](https://discuss.elastic.co/u/Roman_Konkol)\
**Replies:** 3\
**Last updated:** [February 4, 2020, 10:06pm UTC](https://discuss.elastic.co/t/pretty-json-format-of-recieved-dot-separated-log-data-fields/217796 "2020-02-04T22:06:43Z")

</div>

Hi all, can you help me, please? I want to see my whole log entries in pretty JSON format on Kibana Discovery page. What I received from logstash: log entries with "dot case format" fields like: http.host, http.body,…

---

## [Kibana RAW message to text table](https://discuss.elastic.co/t/kibana-raw-message-to-text-table/217708)

<div class="topic-metadata">

**Author:** [@PublicName](https://discuss.elastic.co/u/PublicName)\
**Replies:** 3\
**Last updated:** [February 4, 2020, 9:33pm UTC](https://discuss.elastic.co/t/kibana-raw-message-to-text-table/217708 "2020-02-04T21:33:39Z")

</div>

I've been at this for a couple days with very limited success. Any tips on how to display 2 fields from a windows event log into a table. For example lets say error 1000 has to field param1 and param2 both are already i…

---

## [Visualizations functions in canvas](https://discuss.elastic.co/t/visualizations-functions-in-canvas/214909)

<div class="topic-metadata">

**Author:** [@Marcos\_David\_Moreno](https://discuss.elastic.co/u/Marcos_David_Moreno)\
**Replies:** 1\
**Last updated:** [February 4, 2020, 9:23pm UTC](https://discuss.elastic.co/t/visualizations-functions-in-canvas/214909 "2020-02-04T21:23:05Z")

</div>

Hi, I want to insert a visualization which I have created in Kibana inside of canvas. I have tried to use the visualization function but I´m not sure if this option is possible. I have had the visualization´s json in …

---

## [Display Time Range in Vega Text](https://discuss.elastic.co/t/display-time-range-in-vega-text/217689)

<div class="topic-metadata">

**Author:** [@butchkelley](https://discuss.elastic.co/u/butchkelley)\
**Replies:** 6\
**Last updated:** [February 4, 2020, 7:36pm UTC](https://discuss.elastic.co/t/display-time-range-in-vega-text/217689 "2020-02-04T19:36:19Z")

</div>

Hello, I’m trying to add text to my vega visualization that displays the selected Time Range. I started with what’s shown below, which gives the current time but I quickly reached a dead-end. Is there a built in signa…

---

## [Can we extract folder and file out of log.file.path field?](https://discuss.elastic.co/t/can-we-extract-folder-and-file-out-of-log-file-path-field/216722)

<div class="topic-metadata">

**Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\
**Replies:** 4\
**Last updated:** [February 4, 2020, 7:05pm UTC](https://discuss.elastic.co/t/can-we-extract-folder-and-file-out-of-log-file-path-field/216722 "2020-02-04T19:05:20Z")

</div>

Hi, I want to extract the folder and file name out of log.file.path filed we have in kibana. SO for example- C:\\Program Files (x86)\\xxx SST\\DispatcherAPP\\logs\\dispatcher.log In this file path, I want to create a field …

---

## [Concurrent Sessions Counter](https://discuss.elastic.co/t/concurrent-sessions-counter/217773)

<div class="topic-metadata">

**Author:** [@AMES-IT](https://discuss.elastic.co/u/AMES-IT)\
**Replies:** 1\
**Last updated:** [February 4, 2020, 6:44pm UTC](https://discuss.elastic.co/t/concurrent-sessions-counter/217773 "2020-02-04T18:44:12Z")

</div>

Hi all! There is anyway to know how many sessions are working at the same time? I've a VPN service that I'm storing every log in and log out of users. I would know if it is possible to show the concurrent sessions in a …

---

## [Unable to Filter Data using Data Table in Kibana](https://discuss.elastic.co/t/unable-to-filter-data-using-data-table-in-kibana/217756)

<div class="topic-metadata">

**Author:** [@Venkata\_Naresh](https://discuss.elastic.co/u/Venkata_Naresh)\
**Replies:** 1\
**Last updated:** [February 4, 2020, 6:36pm UTC](https://discuss.elastic.co/t/unable-to-filter-data-using-data-table-in-kibana/217756 "2020-02-04T18:36:31Z")

</div>

Hi, I'm using Data Table Visualisation, recently I have upgraded ELK to 7.5.1 and with the latest version I found an issue. I have created an Index pattern in kibana without any custom index pattern ID by selecting "I …

---

## [7.5 \[reporting\] fails randomly](https://discuss.elastic.co/t/7-5-reporting-fails-randomly/215160)

<div class="topic-metadata">

**Author:** [@dao](https://discuss.elastic.co/u/dao)\
**Replies:** 5\
**Last updated:** [February 4, 2020, 4:45pm UTC](https://discuss.elastic.co/t/7-5-reporting-fails-randomly/215160 "2020-02-04T16:45:03Z")

</div>

Hello, my users want to create some reports but the completion/fail is erratic. I am running on a debian 9 Could not find more hint to solve that. Can you help, please? best the message in the frontend: Unable to gen…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=540)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=542)
