# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=583

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 584

---

## [Unable to create index patterns in kibana](https://discuss.elastic.co/t/unable-to-create-index-patterns-in-kibana/206180)

<div class="topic-metadata">

**Author:** [@RiyazM](https://discuss.elastic.co/u/RiyazM)\
**Replies:** 2\
**Last updated:** [November 2, 2019, 2:16am UTC](https://discuss.elastic.co/t/unable-to-create-index-patterns-in-kibana/206180 "2019-11-02T02:16:24Z")

</div>

hello , we have installed EFK stack in kubernetes using the helm chart efk-stack.But there is a issue that sometimes its not possible to create a index pattern in kibana. Even if it succeeds the Index pattern gets dele…

---

## [Sorting in Discover not working](https://discuss.elastic.co/t/sorting-in-discover-not-working/204626)

<div class="topic-metadata">

**Author:** [@Ssingh12](https://discuss.elastic.co/u/Ssingh12)\
**Replies:** 12\
**Last updated:** [November 1, 2019, 7:26pm UTC](https://discuss.elastic.co/t/sorting-in-discover-not-working/204626 "2019-11-01T19:26:23Z")

</div>

Hi, I am struggling to a seeming humble issue. I am not able to get the sorting by fields work on the 'Discover'. So, in Discover, I 'added' a few fields to view and tried clicking on sort up/down arrows. The sorting i…

---

## [Timelion set y-axis from seconds to miliseconds](https://discuss.elastic.co/t/timelion-set-y-axis-from-seconds-to-miliseconds/206046)

<div class="topic-metadata">

**Author:** [@Andrew22](https://discuss.elastic.co/u/Andrew22)\
**Replies:** 2\
**Last updated:** [November 1, 2019, 6:51pm UTC](https://discuss.elastic.co/t/timelion-set-y-axis-from-seconds-to-miliseconds/206046 "2019-11-01T18:51:43Z")

</div>

Hello all, I am trying to convert the value of the y-axis in timelion to duration seconds to miliseconds like you would be able to do in other kibana graphs. is this possible? Regards

---

## [Fresh install of 7.4 Kibana - Kibana does not start listening on expected interface](https://discuss.elastic.co/t/fresh-install-of-7-4-kibana-kibana-does-not-start-listening-on-expected-interface/206055)

<div class="topic-metadata">

**Author:** [@David.CIS](https://discuss.elastic.co/u/David.CIS)\
**Replies:** 3\
**Last updated:** [November 1, 2019, 6:40pm UTC](https://discuss.elastic.co/t/fresh-install-of-7-4-kibana-kibana-does-not-start-listening-on-expected-interface/206055 "2019-11-01T18:40:57Z")

</div>

Hello, I installed Elasticsearch and Kibana 7.4 on a VM running Ubuntu 18.04. Following the instructions in the guide for that version. After finishing I set this single option in kibana.yml server.host:0.0.0.0 From…

---

## [Kibana filter for subfield value](https://discuss.elastic.co/t/kibana-filter-for-subfield-value/205975)

<div class="topic-metadata">

**Author:** [@mjunaidmuzammil](https://discuss.elastic.co/u/mjunaidmuzammil)\
**Replies:** 1\
**Last updated:** [November 1, 2019, 6:22pm UTC](https://discuss.elastic.co/t/kibana-filter-for-subfield-value/205975 "2019-11-01T18:22:51Z")

</div>

HI, We have below mentioned Elasticsearch templates for a number of different string fields. "mapping" : { "doc\_values" : false, "fields" : { "keyword" : { …

---

## [How to show multi field value in discover table](https://discuss.elastic.co/t/how-to-show-multi-field-value-in-discover-table/205863)

<div class="topic-metadata">

**Author:** [@prakhara](https://discuss.elastic.co/u/prakhara)\
**Replies:** 2\
**Last updated:** [November 1, 2019, 5:55pm UTC](https://discuss.elastic.co/t/how-to-show-multi-field-value-in-discover-table/205863 "2019-11-01T17:55:35Z")

</div>

I have created a field as multi field in elastic mapping, originalfield as text and originalfield.keyword as keyword for aggregation but while showing the data in discover table only I get the value in originalfield and …

---

## ["Forgot your password?" - Password Reset Server/Tool for Kibana](https://discuss.elastic.co/t/forgot-your-password-password-reset-server-tool-for-kibana/206074)

<div class="topic-metadata">

**Author:** [@avocado](https://discuss.elastic.co/u/avocado)\
**Replies:** 1\
**Last updated:** [November 1, 2019, 5:44pm UTC](https://discuss.elastic.co/t/forgot-your-password-password-reset-server-tool-for-kibana/206074 "2019-11-01T17:44:18Z")

</div>

Our organization has reached a large number of internal users on our Elastic implementation, and we are now struggling with password management. A main issue is that there is no straightforward way for a user to reset th…

---

## [Alerts on Message strings](https://discuss.elastic.co/t/alerts-on-message-strings/206198)

<div class="topic-metadata">

**Author:** [@Brad\_Wadsworth](https://discuss.elastic.co/u/Brad_Wadsworth)\
**Replies:** 1\
**Last updated:** [November 1, 2019, 5:37pm UTC](https://discuss.elastic.co/t/alerts-on-message-strings/206198 "2019-11-01T17:37:05Z")

</div>

With Watcher, is it possible to alert on a string value in a message field?

---

## [\[visualization\] \> Cannot read property 'appState' of undefined](https://discuss.elastic.co/t/visualization-cannot-read-property-appstate-of-undefined/204091)

<div class="topic-metadata">

**Author:** [@Classic](https://discuss.elastic.co/u/Classic)\
**Replies:** 3\
**Last updated:** [November 1, 2019, 4:43pm UTC](https://discuss.elastic.co/t/visualization-cannot-read-property-appstate-of-undefined/204091 "2019-11-01T16:43:39Z")

</div>

Hi, i have a big Problem with my Visualization. I have ELK 7.3.2 When i try to open my plugin transform\_vis i get this message: \[visualization\] \> Cannot read property 'appState' of undefined I get this message in F12 …

---

## [Data Table Set up in Kibana](https://discuss.elastic.co/t/data-table-set-up-in-kibana/206093)

<div class="topic-metadata">

**Author:** [@mbrown007](https://discuss.elastic.co/u/mbrown007)\
**Replies:** 7\
**Last updated:** [November 1, 2019, 5:19pm UTC](https://discuss.elastic.co/t/data-table-set-up-in-kibana/206093 "2019-11-01T17:19:05Z")

</div>

It appears that the data tables I can not just list the data based on a selection of columns. Can this be done? I have only been attempted to do aggregation on particular fields.

---

## [How to Merge Data from Two Tables in One Visualization?](https://discuss.elastic.co/t/how-to-merge-data-from-two-tables-in-one-visualization/205936)

<div class="topic-metadata">

**Author:** [@redapplesonly](https://discuss.elastic.co/u/redapplesonly)\
**Replies:** 2\
**Last updated:** [November 1, 2019, 4:31pm UTC](https://discuss.elastic.co/t/how-to-merge-data-from-two-tables-in-one-visualization/205936 "2019-11-01T16:31:15Z")

</div>

Hi Kibana Jedi Masters, Suppose I have a Kibana data chart Visualisation tracking the inventory of my fruit store: | Product Code | Qnty | ========================= | 100 | 15 | | 400 | 8 |…

---

## ["CPU Usage" in monitoring shows "N/A" for Docker-based nodes](https://discuss.elastic.co/t/cpu-usage-in-monitoring-shows-n-a-for-docker-based-nodes/205890)

<div class="topic-metadata">

**Author:** [@tomhe](https://discuss.elastic.co/u/tomhe)\
**Replies:** 1\
**Last updated:** [November 1, 2019, 3:51pm UTC](https://discuss.elastic.co/t/cpu-usage-in-monitoring-shows-n-a-for-docker-based-nodes/205890 "2019-11-01T15:51:01Z")

</div>

All our cluster nodes are Docker-based. The "Nodes" monitoring page shows "N/A" for "CPU Usage": Kibana has this configured: xpack.monitoring.ui.container.elasticsearch.enabled: true (Also, the detail page for each …

---

## [Timelion request error ---\> \[parsing exception\]](https://discuss.elastic.co/t/timelion-request-error-parsing-exception/205695)

<div class="topic-metadata">

**Author:** [@Anne\_Kim](https://discuss.elastic.co/u/Anne_Kim)\
**Replies:** 14\
**Last updated:** [November 1, 2019, 3:28pm UTC](https://discuss.elastic.co/t/timelion-request-error-parsing-exception/205695 "2019-11-01T15:28:54Z")

</div>

Hi there, I'm trying to visualize and compare a daily unique count of "player\_id" from 2 different indices (session\_data and gameplay\_stat) using timelion. The request just for the first index vizualization looks like: …

---

## [Count the number of text type records](https://discuss.elastic.co/t/count-the-number-of-text-type-records/205883)

<div class="topic-metadata">

**Author:** [@andres\_cvilla](https://discuss.elastic.co/u/andres_cvilla)\
**Replies:** 1\
**Last updated:** [November 1, 2019, 3:07pm UTC](https://discuss.elastic.co/t/count-the-number-of-text-type-records/205883 "2019-11-01T15:07:08Z")

</div>

Hello everyone, I need to count a string field, to create a percentage graph. I've tried script fields but this one doesn't work with typos string. I wear this: Any ideas ?, thank you very much

---

## [Using Point To Point in Maps](https://discuss.elastic.co/t/using-point-to-point-in-maps/206108)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 5\
**Last updated:** [November 1, 2019, 3:05pm UTC](https://discuss.elastic.co/t/using-point-to-point-in-maps/206108 "2019-11-01T15:05:58Z")

</div>

I have an index with multiple geo\_point data types that I'd like to visualize in Maps using the new point to point data source. However, it tells me Selected index pattern does not contain source and destination fields. …

---

## [Error installing local plugin](https://discuss.elastic.co/t/error-installing-local-plugin/206175)

<div class="topic-metadata">

**Author:** [@devbot](https://discuss.elastic.co/u/devbot)\
**Replies:** 1\
**Last updated:** [November 1, 2019, 3:05pm UTC](https://discuss.elastic.co/t/error-installing-local-plugin/206175 "2019-11-01T15:05:04Z")

</div>

I have in my kibana directory a custom plugin "custom\_plugin" My impression from reading this portion of the elastic docs is that the directory needs to be zipped. So based on that, I do: zip -r custom\_plugin.zip custo…

---

## [Query in filters view](https://discuss.elastic.co/t/query-in-filters-view/205836)

<div class="topic-metadata">

**Author:** [@RickT](https://discuss.elastic.co/u/RickT)\
**Replies:** 1\
**Last updated:** [November 1, 2019, 3:04pm UTC](https://discuss.elastic.co/t/query-in-filters-view/205836 "2019-11-01T15:04:19Z")

</div>

Hi, my problem is using filters in view. I simply want to count values greater than 0. First try with Range : the result is correct Second try with "filters" (i prefer it, to put specific label) : the result…

---

## [Vega Stacked bar chart](https://discuss.elastic.co/t/vega-stacked-bar-chart/205866)

<div class="topic-metadata">

**Author:** [@Jeremy\_A](https://discuss.elastic.co/u/Jeremy_A)\
**Replies:** 1\
**Last updated:** [November 1, 2019, 2:52pm UTC](https://discuss.elastic.co/t/vega-stacked-bar-chart/205866 "2019-11-01T14:52:55Z")

</div>

I'm trying to make a stacked bar chart. The X axis should be time series by day, and the y axis should show the sum of two fields, where each field is a separate color. The Elasticsearch query gives the expected results …

---

## [Making Tabs for different dashboard in single dashboard](https://discuss.elastic.co/t/making-tabs-for-different-dashboard-in-single-dashboard/205859)

<div class="topic-metadata">

**Author:** [@Prashant\_Kumar3](https://discuss.elastic.co/u/Prashant_Kumar3)\
**Replies:** 1\
**Last updated:** [November 1, 2019, 2:46pm UTC](https://discuss.elastic.co/t/making-tabs-for-different-dashboard-in-single-dashboard/205859 "2019-11-01T14:46:48Z")

</div>

Hi, I want to make a dashboard which will contain different tabs/widgets for different dashboards, I have tried markdown and it's not the solution. Thanks in advance.

---

## [Display 2 line charts based on filter](https://discuss.elastic.co/t/display-2-line-charts-based-on-filter/206123)

<div class="topic-metadata">

**Author:** [@rahul\_saini](https://discuss.elastic.co/u/rahul_saini)\
**Replies:** 1\
**Last updated:** [November 1, 2019, 2:18pm UTC](https://discuss.elastic.co/t/display-2-line-charts-based-on-filter/206123 "2019-11-01T14:18:11Z")

</div>

Hello, I'm very new to Kibana. In my single data record I've fields like: code\_status.keyword : "Failed" code\_status.keyword : "Passed" I want to draw 2 line graphs in a single visualization, one for passed and one…

---

## [Searching message that contains "--------------"](https://discuss.elastic.co/t/searching-message-that-contains/206132)

<div class="topic-metadata">

**Author:** [@Jacob\_Larsson](https://discuss.elastic.co/u/Jacob_Larsson)\
**Replies:** 1\
**Last updated:** [November 1, 2019, 2:13pm UTC](https://discuss.elastic.co/t/searching-message-that-contains/206132 "2019-11-01T14:13:45Z")

</div>

Hi, We have managed to get Kibana running with beats and elasticsearch at my work which means that we can do more root cause analysis reading logs from an IIS instance. However I do not manage get the search for messag…

---

## [Let kibana convert certain lines from epoch to human understandable](https://discuss.elastic.co/t/let-kibana-convert-certain-lines-from-epoch-to-human-understandable/206144)

<div class="topic-metadata">

**Author:** [@tmans1991](https://discuss.elastic.co/u/tmans1991)\
**Replies:** 1\
**Last updated:** [November 1, 2019, 2:07pm UTC](https://discuss.elastic.co/t/let-kibana-convert-certain-lines-from-epoch-to-human-understandable/206144 "2019-11-01T14:07:07Z")

</div>

hello, very new to kibana, need some help with the folowing: there are certain files that i have imported, and some lines in these files contain epoch, and therefore not understandable example rec\_time: 1572603306.4…

---

## [How to calculate the average count per unique term](https://discuss.elastic.co/t/how-to-calculate-the-average-count-per-unique-term/205213)

<div class="topic-metadata">

**Author:** [@astickler](https://discuss.elastic.co/u/astickler)\
**Replies:** 8\
**Last updated:** [November 1, 2019, 1:06pm UTC](https://discuss.elastic.co/t/how-to-calculate-the-average-count-per-unique-term/205213 "2019-11-01T13:06:41Z")

</div>

Maybe I need more coffee, but I can't work this out... I have say 10000 documents in a time period, one of the fields in a document is 'type' and there are, say 50 different values for 'type' in this document set. I wa…

---

## [Set up Users](https://discuss.elastic.co/t/set-up-users/205967)

<div class="topic-metadata">

**Author:** [@mbrown007](https://discuss.elastic.co/u/mbrown007)\
**Replies:** 3\
**Last updated:** [November 1, 2019, 6:02am UTC](https://discuss.elastic.co/t/set-up-users/205967 "2019-11-01T06:02:20Z")

</div>

I want to set up users to log into the kibana dashboard so that they can see different dashboards, etc. I know starting in 6.3 or 6.4 the security option for this I thought was part of but when I set up my 6.8 stack no d…

---

## [Table Aggregating On Text Field](https://discuss.elastic.co/t/table-aggregating-on-text-field/202588)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 3\
**Last updated:** [October 31, 2019, 9:30pm UTC](https://discuss.elastic.co/t/table-aggregating-on-text-field/202588 "2019-10-31T21:30:10Z")

</div>

Ive got two tables of URLs, one of them counts the number of visits for the root path of a URL and the other is a list of all URLs visited. The field, url.path, is indexed as both a text and keyword field. I would like…

---

## [Datatable/Discover Drilldown to child elements](https://discuss.elastic.co/t/datatable-discover-drilldown-to-child-elements/205816)

<div class="topic-metadata">

**Author:** [@j\_a\_griffiths](https://discuss.elastic.co/u/j_a_griffiths)\
**Replies:** 1\
**Last updated:** [October 31, 2019, 9:20pm UTC](https://discuss.elastic.co/t/datatable-discover-drilldown-to-child-elements/205816 "2019-10-31T21:20:16Z")

</div>

I have some data in an index similar to below Name - This is a string id - This is an integer childid - This is a csv list of integers stored in a string So I may have "Jon", 1, "2,3" "James", 2, "" "Lisa", 3, "" …

---

## [Check if vehicle is driving on water](https://discuss.elastic.co/t/check-if-vehicle-is-driving-on-water/205862)

<div class="topic-metadata">

**Author:** [@AstroSlazak](https://discuss.elastic.co/u/AstroSlazak)\
**Replies:** 3\
**Last updated:** [October 31, 2019, 7:13pm UTC](https://discuss.elastic.co/t/check-if-vehicle-is-driving-on-water/205862 "2019-10-31T19:13:25Z")

</div>

Hi, I have map with vehicles, some times i have an error with position data and i want to check if some of vehicle is not driving on water, if yes get an alert. How can i do it ?

---

## [Cannot access Kibana remotely or on local machine](https://discuss.elastic.co/t/cannot-access-kibana-remotely-or-on-local-machine/196986)

<div class="topic-metadata">

**Author:** [@Terran](https://discuss.elastic.co/u/Terran)\
**Replies:** 15\
**Last updated:** [October 31, 2019, 5:33pm UTC](https://discuss.elastic.co/t/cannot-access-kibana-remotely-or-on-local-machine/196986 "2019-10-31T17:33:56Z")

</div>

I have installed ES in a 3 node cluster. I have Kibana on #3 as well. ES is running fine as far as I can tell. Kibana installed and started fine. I have edited the .yml file with the following Contents of kibana.yml …

---

## [Kibana and spaces API](https://discuss.elastic.co/t/kibana-and-spaces-api/205878)

<div class="topic-metadata">

**Author:** [@boubakr](https://discuss.elastic.co/u/boubakr)\
**Replies:** 2\
**Last updated:** [October 31, 2019, 1:23pm UTC](https://discuss.elastic.co/t/kibana-and-spaces-api/205878 "2019-10-31T13:23:17Z")

</div>

How can I create and manage spaces in kibana 7.4? I've tried to follow this documentation but when i post the request in the example I get this error: #! Deprecation: \[types removal\] Specifying types in document index …

---

## [Kibana not gerating default index pattern i.e logstash-\*](https://discuss.elastic.co/t/kibana-not-gerating-default-index-pattern-i-e-logstash/204761)

<div class="topic-metadata">

**Author:** [@Ekta1234](https://discuss.elastic.co/u/Ekta1234)\
**Replies:** 2\
**Last updated:** [October 31, 2019, 5:59am UTC](https://discuss.elastic.co/t/kibana-not-gerating-default-index-pattern-i-e-logstash/204761 "2019-10-31T05:59:41Z")

</div>

Kibana is not taking logstash-\* as index pattern...I'm using 7.4.0 of ELK . However, when I'm using Spring boot for generating logs and running Kibana on localhost:5601 it's not taking the default index pattern configura…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=582)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=584)
