# Kibana **URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=582 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 583 --- ## [A second/third .kibana index is created after each upgrade](https://discuss.elastic.co/t/a-second-third-kibana-index-is-created-after-each-upgrade/206771)
**Author:** [@Kuckkuck](https://discuss.elastic.co/u/Kuckkuck)\ **Replies:** 1\ **Last updated:** [November 7, 2019, 9:36pm UTC](https://discuss.elastic.co/t/a-second-third-kibana-index-is-created-after-each-upgrade/206771 "2019-11-07T21:36:56Z")
Hi, any idea, what I did wrong? After each upgrade for example from 5 - 6 , from 6.8 -\> 7.3.2 , 7.3.2 -\> 7.4.0 I get another nice .kibana\_x index created. Nicely numbered one of another. Some have data, some not. Any … --- ## [Change a field type Kibana](https://discuss.elastic.co/t/change-a-field-type-kibana/206984)
**Author:** [@ajg](https://discuss.elastic.co/u/ajg)\ **Replies:** 4\ **Last updated:** [November 7, 2019, 7:13pm UTC](https://discuss.elastic.co/t/change-a-field-type-kibana/206984 "2019-11-07T19:13:20Z")
Hi everyone, I need to change a field type from "text" to "date" because I need to calculate the average time from a variable calculated inside my code. But when I try to change it, the option is not available. I hav… --- ## [Get "Objects in arrays are not well supported" with new schema in Kibana](https://discuss.elastic.co/t/get-objects-in-arrays-are-not-well-supported-with-new-schema-in-kibana/206905)
**Author:** [@Arab.Soheyl](https://discuss.elastic.co/u/Arab.Soheyl)\ **Replies:** 1\ **Last updated:** [November 7, 2019, 3:16pm UTC](https://discuss.elastic.co/t/get-objects-in-arrays-are-not-well-supported-with-new-schema-in-kibana/206905 "2019-11-07T15:16:32Z")
I have a multi log type in my system. I want to aggregate this Log and index it into Elasticsearch. my final schema is below. { "id": 1, "name": 2, "history": \[ { "login": { … --- ## [One ES node not showing in Kibana Monitoring](https://discuss.elastic.co/t/one-es-node-not-showing-in-kibana-monitoring/200212)
**Author:** [@thealy](https://discuss.elastic.co/u/thealy)\ **Replies:** 26\ **Last updated:** [November 7, 2019, 2:24pm UTC](https://discuss.elastic.co/t/one-es-node-not-showing-in-kibana-monitoring/200212 "2019-11-07T14:24:22Z")
I recently upgraded 3 (of 9) nodes to new hardware. Since that time, one of the nodes (es02) is not visible in the Kibana "Monitoring" page. ALL nodes are visible via Elasticsearch Head plugin. Version 6.8.3 Based on e… --- ## [Getting Error Kibana Server is not ready](https://discuss.elastic.co/t/getting-error-kibana-server-is-not-ready/206948)
**Author:** [@Shradha\_Bharti](https://discuss.elastic.co/u/Shradha_Bharti)\ **Replies:** 1\ **Last updated:** [November 7, 2019, 2:00pm UTC](https://discuss.elastic.co/t/getting-error-kibana-server-is-not-ready/206948 "2019-11-07T14:00:10Z")
Hi , We have upgraded our ELK from 2.4.6 to 7.3.0 in centos here lot of files I have changed somehow i made it up all the ports related to ELK but when i ran kibana ..i got the error by saying that kibana is not read… --- ## [Filtering By Field Inequality](https://discuss.elastic.co/t/filtering-by-field-inequality/206481)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 4\ **Last updated:** [November 6, 2019, 5:15pm UTC](https://discuss.elastic.co/t/filtering-by-field-inequality/206481 "2019-11-06T17:15:56Z")
I have two fields with the same value, 99% of the time. I'd like to filter down to just the entries where the two fields are NOT the same, is it possible to do something like \[field1\] != \[field2\]? --- ## [Kibana Time picker](https://discuss.elastic.co/t/kibana-time-picker/206637)
**Author:** [@haythem](https://discuss.elastic.co/u/haythem)\ **Replies:** 3\ **Last updated:** [November 6, 2019, 2:22pm UTC](https://discuss.elastic.co/t/kibana-time-picker/206637 "2019-11-06T14:22:43Z")
hello guys , so i was wondering is there a way to customize the predefined values in the time picker and add Monday of every week , i mean i want it to be dynamic so that when the user clic on Monday it will return the d… --- ## [Visualizations work on its own, but not in a dashboard](https://discuss.elastic.co/t/visualizations-work-on-its-own-but-not-in-a-dashboard/206633)
**Author:** [@leprovokateur](https://discuss.elastic.co/u/leprovokateur)\ **Replies:** 2\ **Last updated:** [November 6, 2019, 10:31am UTC](https://discuss.elastic.co/t/visualizations-work-on-its-own-but-not-in-a-dashboard/206633 "2019-11-06T10:31:40Z")
Hi, I use the example dashboards imported by metricbeat setup. The visualizations work: but not in the dashboard: What can be done about this? Best regards, Robert --- ## [Alert when there is no data in index](https://discuss.elastic.co/t/alert-when-there-is-no-data-in-index/206535)
**Author:** [@Polina\_Blinchevsky](https://discuss.elastic.co/u/Polina_Blinchevsky)\ **Replies:** 3\ **Last updated:** [November 6, 2019, 9:03am UTC](https://discuss.elastic.co/t/alert-when-there-is-no-data-in-index/206535 "2019-11-06T09:03:31Z")
I have data coming into an index from few different sources and I want to create an alert (preferably slack) when there's no data for the last few minutes for one of the sources (filter by unique id field). I'm trying t… --- ## [Changing field in Index pattern](https://discuss.elastic.co/t/changing-field-in-index-pattern/206619)
**Author:** [@Aileen](https://discuss.elastic.co/u/Aileen)\ **Replies:** 5\ **Last updated:** [November 6, 2019, 7:49am UTC](https://discuss.elastic.co/t/changing-field-in-index-pattern/206619 "2019-11-06T07:49:40Z")
Hi We have recently changed our field names to include a suffix of the type. I have run a refresh on my index pattern and can now see the new fields and the old, but my visualizations now need updating to handle both (… --- ## [Kibana 7.3.0 rpm is not having opt and config folder](https://discuss.elastic.co/t/kibana-7-3-0-rpm-is-not-having-opt-and-config-folder/205725)
**Author:** [@Shradha\_Bharti](https://discuss.elastic.co/u/Shradha_Bharti)\ **Replies:** 3\ **Last updated:** [November 6, 2019, 6:59am UTC](https://discuss.elastic.co/t/kibana-7-3-0-rpm-is-not-having-opt-and-config-folder/205725 "2019-11-06T06:59:23Z")
HI we are using centos where we have deployed our ELK 2.4.6 ,recently there is a need to upgrade the ELK to 7.3.0 but when i have downloaded kibana-7.3.0-1.x86\_64.rpm , there is one command which was failing ,after deb… --- ## [Filters not working on Dashboard](https://discuss.elastic.co/t/filters-not-working-on-dashboard/206675)
**Author:** [@dhruv477](https://discuss.elastic.co/u/dhruv477)\ **Replies:** 3\ **Last updated:** [November 5, 2019, 11:27pm UTC](https://discuss.elastic.co/t/filters-not-working-on-dashboard/206675 "2019-11-05T23:27:35Z")
In my current version of Kibana(6.6.0), the '+' '-' widgets above the color option on visualizations are not available, making it harder to add filters. Is there a fix around this? --- ## [Message text size Kibana](https://discuss.elastic.co/t/message-text-size-kibana/204932)
**Author:** [@kiran2](https://discuss.elastic.co/u/kiran2)\ **Replies:** 3\ **Last updated:** [November 5, 2019, 9:51pm UTC](https://discuss.elastic.co/t/message-text-size-kibana/204932 "2019-11-05T21:51:49Z")
Team, My query is increasing the message text (number of lines) up to 1000 line in a single document. Note:- When searing for an error I am missing related error above and below lines In kibana 6.7.0 when logs are in… --- ## [How to auto select the appropriate index dynamically in the kibana through discover url](https://discuss.elastic.co/t/how-to-auto-select-the-appropriate-index-dynamically-in-the-kibana-through-discover-url/206210)
**Author:** [@rockyadi](https://discuss.elastic.co/u/rockyadi)\ **Replies:** 2\ **Last updated:** [November 5, 2019, 9:48pm UTC](https://discuss.elastic.co/t/how-to-auto-select-the-appropriate-index-dynamically-in-the-kibana-through-discover-url/206210 "2019-11-05T21:48:53Z")
We create a dynamic kibana url to the user http://localhost:5601/app/kibana#/discover?\_g=(refreshInterval:(pause:!t,value:0),time:(from:'2019-10-16T06:00',to:'2019-10-18T06:00'))&\_a=(columns:!(\_source),index:'logstash-\*… --- ## [Unable to access underlaying indexed log messages from Kibana Heatmap using a Search filter](https://discuss.elastic.co/t/unable-to-access-underlaying-indexed-log-messages-from-kibana-heatmap-using-a-search-filter/206450)
**Author:** [@rade95](https://discuss.elastic.co/u/rade95)\ **Replies:** 1\ **Last updated:** [November 5, 2019, 9:08pm UTC](https://discuss.elastic.co/t/unable-to-access-underlaying-indexed-log-messages-from-kibana-heatmap-using-a-search-filter/206450 "2019-11-05T21:08:15Z")
Hello, I have older Kibana v5.6.4 running as a log aggregator, part of a custom ELK implementation. I have indexed log database and I can Search my logs based on my criteria. I can visualize my messages using that same … --- ## [Mongo Dashboard Error - Could not locate that index-pattern](https://discuss.elastic.co/t/mongo-dashboard-error-could-not-locate-that-index-pattern/205870)
**Author:** [@Felipe\_Cabral\_Jeroni](https://discuss.elastic.co/u/Felipe_Cabral_Jeroni)\ **Replies:** 2\ **Last updated:** [November 4, 2019, 1:12pm UTC](https://discuss.elastic.co/t/mongo-dashboard-error-could-not-locate-that-index-pattern/205870 "2019-11-04T13:12:32Z")
I've installed metricbeat in the Mongo server and I'm able to see the logs shipped to logstash and elastic into the kibana discovery, however when I open the dasboard I get the error " Could not locate that index-pattern… --- ## [Timelion - Incorrect metrics for a given date and server timezone effects](https://discuss.elastic.co/t/timelion-incorrect-metrics-for-a-given-date-and-server-timezone-effects/206486)
**Author:** [@crpj](https://discuss.elastic.co/u/crpj)\ **Replies:** 1\ **Last updated:** [November 4, 2019, 10:29pm UTC](https://discuss.elastic.co/t/timelion-incorrect-metrics-for-a-given-date-and-server-timezone-effects/206486 "2019-11-04T22:29:30Z")
Hello, I have an issue with timezone conversion in timelion, I care about event dates only (no hours) so I ingested data via logstash using date filter as follows: date { match =\> \["EVENT\_START\_DATE", "yyyyMMdd"\] ti… --- ## [File where dashboard names reside](https://discuss.elastic.co/t/file-where-dashboard-names-reside/206415)
**Author:** [@amanciao](https://discuss.elastic.co/u/amanciao)\ **Replies:** 1\ **Last updated:** [November 4, 2019, 10:03pm UTC](https://discuss.elastic.co/t/file-where-dashboard-names-reside/206415 "2019-11-04T22:03:53Z")
I have a use case where I want to know that if a dashboard is created where is it stored in the source code. I want to get all the dashboard names created on top of kibana. Thanks in advance --- ## [Date range value for data table](https://discuss.elastic.co/t/date-range-value-for-data-table/206111)
**Author:** [@Amphagory](https://discuss.elastic.co/u/Amphagory)\ **Replies:** 5\ **Last updated:** [November 4, 2019, 3:29pm UTC](https://discuss.elastic.co/t/date-range-value-for-data-table/206111 "2019-11-04T15:29:44Z")
Is there a way to obtain the value of the date range in terms of start and end times, last x mins, etc... I would like to put this value into a data table. i.e. Animal Number Date range Average … --- ## [Kibana logs out after opening SIEM page](https://discuss.elastic.co/t/kibana-logs-out-after-opening-siem-page/205663)
**Author:** [@Kerwood](https://discuss.elastic.co/u/Kerwood)\ **Replies:** 4\ **Last updated:** [November 4, 2019, 2:13pm UTC](https://discuss.elastic.co/t/kibana-logs-out-after-opening-siem-page/205663 "2019-11-04T14:13:29Z")
Upgrade from 6.x to 7.3.2. Everything works except the SIEM tab. When ever I go to the SIEM tab, I get logged out and redirected to the login page. I'm not using and proxy in front, so thats not the problem. Elasticsear… --- ## [Azure AD Kibana](https://discuss.elastic.co/t/azure-ad-kibana/206329)
**Author:** [@arnn](https://discuss.elastic.co/u/arnn)\ **Replies:** 1\ **Last updated:** [November 4, 2019, 12:36pm UTC](https://discuss.elastic.co/t/azure-ad-kibana/206329 "2019-11-04T12:36:39Z")
Trying to setup the SAML configuration towards Azure AD for an elastic cloud setup, but fails to access Kibana when using SAML. Any suggestion on what is wrong? (Extra annoying as i had the the setup working 3 weeks ag… --- ## [\[Kibana visualization\] max of sum](https://discuss.elastic.co/t/kibana-visualization-max-of-sum/206201)
**Author:** [@yazid](https://discuss.elastic.co/u/yazid)\ **Replies:** 3\ **Last updated:** [November 4, 2019, 7:28am UTC](https://discuss.elastic.co/t/kibana-visualization-max-of-sum/206201 "2019-11-04T07:28:05Z")
Hi need your help to do a max of sum group by document's date field Assuming I have 2 series , can you please tell me what metric aggregation I have to use to do this: each line is in the separate document Thanks i… --- ## [Getting the transformed data into condition in kibana watcher](https://discuss.elastic.co/t/getting-the-transformed-data-into-condition-in-kibana-watcher/206326)
**Author:** [@Shan\_Chathusanda](https://discuss.elastic.co/u/Shan_Chathusanda)\ **Replies:** 4\ **Last updated:** [November 4, 2019, 10:10am UTC](https://discuss.elastic.co/t/getting-the-transformed-data-into-condition-in-kibana-watcher/206326 "2019-11-04T10:10:24Z")
Hi, I am currently developing a kibana watcher alert and I am comparing two values to generate an email if the condition comes true. For that I calculated an average value and it comes with many decimal places (nearly 2… --- ## [Roles, users and viewing the dashboard](https://discuss.elastic.co/t/roles-users-and-viewing-the-dashboard/205826)
**Author:** [@\_Louw](https://discuss.elastic.co/u/_Louw)\ **Replies:** 2\ **Last updated:** [November 4, 2019, 8:55am UTC](https://discuss.elastic.co/t/roles-users-and-viewing-the-dashboard/205826 "2019-11-04T08:55:19Z")
I have two dashboards - one displaying data from the client system and one displaying data from Kibanas own .security index. I have made two roles: user\_data user\_security I want the people in "user\_data" to be able … --- ## [Visualization with conditional aggregation](https://discuss.elastic.co/t/visualization-with-conditional-aggregation/206142)
**Author:** [@earthpatipon](https://discuss.elastic.co/u/earthpatipon)\ **Replies:** 6\ **Last updated:** [November 4, 2019, 5:18am UTC](https://discuss.elastic.co/t/visualization-with-conditional-aggregation/206142 "2019-11-04T05:18:49Z")
Hi there, Let's say I define the index like below PUT my\_index/\_doc/1 { "user": \[ { "first": "John", "last": "Frank" }, { "first": "Hero", "last": "Tim" } \] } PUT my\_index/\_… --- ## [Adding timezone to kibana watcher](https://discuss.elastic.co/t/adding-timezone-to-kibana-watcher/206114)
**Author:** [@Shan\_Chathusanda](https://discuss.elastic.co/u/Shan_Chathusanda)\ **Replies:** 2\ **Last updated:** [November 4, 2019, 4:26am UTC](https://discuss.elastic.co/t/adding-timezone-to-kibana-watcher/206114 "2019-11-04T04:26:07Z")
Hi, Currently I am developing a kibana advanced watcher and I need to get an average value of items from the previous day. I used the time range query in watcher but the watcher only executes in UTC time. I use now-1d/d… --- ## [VIsualize 2 array in data table](https://discuss.elastic.co/t/visualize-2-array-in-data-table/206017)
**Author:** [@DawitCh](https://discuss.elastic.co/u/DawitCh)\ **Replies:** 2\ **Last updated:** [November 4, 2019, 3:47am UTC](https://discuss.elastic.co/t/visualize-2-array-in-data-table/206017 "2019-11-04T03:47:24Z")
Hi, I'm trying to create a data table visualization from a log that contains 2 arrays. For example, the log has 2 fields which are a and b. In the Discover page, it will show field value a aa,bb,c… --- ## [Create Or Update Role API returns 404](https://discuss.elastic.co/t/create-or-update-role-api-returns-404/206066)
**Author:** [@Netanel\_Malka](https://discuss.elastic.co/u/Netanel_Malka)\ **Replies:** 2\ **Last updated:** [November 3, 2019, 1:12pm UTC](https://discuss.elastic.co/t/create-or-update-role-api-returns-404/206066 "2019-11-03T13:12:13Z")
Hi, We follow the instructions as described here We are trying to create a role via the Kibana security API, but we are getting 404. If we try to send a "GET" request instead of "PUT" it works. Elastic + Kibana vers… --- ## [How to attach a URL to a string in painless](https://discuss.elastic.co/t/how-to-attach-a-url-to-a-string-in-painless/205951)
**Author:** [@hedi.guedidi](https://discuss.elastic.co/u/hedi.guedidi)\ **Replies:** 2\ **Last updated:** [November 2, 2019, 10:56am UTC](https://discuss.elastic.co/t/how-to-attach-a-url-to-a-string-in-painless/205951 "2019-11-02T10:56:44Z")
Hey everyone, I want to create a scripted field with painless that basically does this: If(doc\['field'\].value== val){ return("go to site 1");} Else{return ("go to site 2");} And I don't see how I can add a hyperlink… --- ## [Missing doc in kibana](https://discuss.elastic.co/t/missing-doc-in-kibana/206147)
**Author:** [@Gordon\_Ooi](https://discuss.elastic.co/u/Gordon_Ooi)\ **Replies:** 2\ **Last updated:** [November 2, 2019, 3:55am UTC](https://discuss.elastic.co/t/missing-doc-in-kibana/206147 "2019-11-02T03:55:42Z")
Hi, I've observed my kibana having some of the doc missing as compared to the elasticsearch query. I did a query on the \_id in elasticsearch and return 1 hits But I did the same query in Kibana Discover, it did not … [Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=581) [Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=583)