# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=6

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 7

---

## [OTEL Traces not appearing in Observability-Services](https://discuss.elastic.co/t/otel-traces-not-appearing-in-observability-services/384004)

<div class="topic-metadata">

**Author:** [@Steve\_Foster](https://discuss.elastic.co/u/Steve_Foster)\
**Replies:** 1\
**Last updated:** [December 11, 2025, 10:29pm UTC](https://discuss.elastic.co/t/otel-traces-not-appearing-in-observability-services/384004 "2025-12-11T22:29:32Z")

</div>

Posted in Elastic Slack too.. I'm struggling to get OTEL traces from a python application, that are being send to a hosted elastic, to be displayed in observability-\>services.The application is running in AWS ECS and se…

---

## [Is Kibana Canvas in the process of being discontinued?](https://discuss.elastic.co/t/is-kibana-canvas-in-the-process-of-being-discontinued/369912)

<div class="topic-metadata">

**Author:** [@Kevin\_Alexsander1](https://discuss.elastic.co/u/Kevin_Alexsander1)\
**Replies:** 11\
**Last updated:** [December 11, 2025, 6:29pm UTC](https://discuss.elastic.co/t/is-kibana-canvas-in-the-process-of-being-discontinued/369912 "2025-12-11T18:29:10Z")

</div>

I saw that there are topics that report bugs regarding Canvas, and it has not received improvements since versions 7.xx. I offer and execute many screen proposals based on Canvas but I asked myself this today, is it wor…

---

## [Resizing visualization on an existing dashboard after upgrade to 9.2.0 causes page to freeze](https://discuss.elastic.co/t/resizing-visualization-on-an-existing-dashboard-after-upgrade-to-9-2-0-causes-page-to-freeze/383338)

<div class="topic-metadata">

**Author:** [@rcowart](https://discuss.elastic.co/u/rcowart)\
**Replies:** 4\
**Last updated:** [December 11, 2025, 3:56pm UTC](https://discuss.elastic.co/t/resizing-visualization-on-an-existing-dashboard-after-upgrade-to-9-2-0-causes-page-to-freeze/383338 "2025-12-11T15:56:01Z")

</div>

After moving to Kibana 9.2.0, anytime we try to resize a visualization on an existing dashboard the page freezes. The tab then has to be closed. This basically means we can’t edit any previously existing dashboards. Has …

---

## [Unable to remove Default data view](https://discuss.elastic.co/t/unable-to-remove-default-data-view/383604)

<div class="topic-metadata">

**Author:** [@mittal\_rawal](https://discuss.elastic.co/u/mittal_rawal)\
**Replies:** 6\
**Last updated:** [December 10, 2025, 1:55pm UTC](https://discuss.elastic.co/t/unable-to-remove-default-data-view/383604 "2025-12-10T13:55:25Z")

</div>

“I have multiple data views for different dashboards, but the default data view keeps loading even for dashboards where it’s not used. I want to remove the default data view—how can I do that?” ELK stack version: 8.16.1 …

---

## [Kibana 9.1 Security Rule exception edit not possible](https://discuss.elastic.co/t/kibana-9-1-security-rule-exception-edit-not-possible/382710)

<div class="topic-metadata">

**Author:** [@stanley783](https://discuss.elastic.co/u/stanley783)\
**Replies:** 8\
**Last updated:** [December 10, 2025, 6:25am UTC](https://discuss.elastic.co/t/kibana-9-1-security-rule-exception-edit-not-possible/382710 "2025-12-10T06:25:01Z")

</div>

Hey there, since kibana 9.1.0 (i think, we upgraded from 8.17.X to 9.1.3), we are unable to edit exception made under SIEM rules. I cant even edit my own exception. Only possible if I have superuser role which is not des…

---

## [Output in kibana not expected](https://discuss.elastic.co/t/output-in-kibana-not-expected/383888)

<div class="topic-metadata">

**Author:** [@DOkuwa](https://discuss.elastic.co/u/DOkuwa)\
**Replies:** 10\
**Last updated:** [December 9, 2025, 3:13pm UTC](https://discuss.elastic.co/t/output-in-kibana-not-expected/383888 "2025-12-09T15:13:39Z")

</div>

i use filebeat to parse a json file and the expected output is showing all the fields in the different lines and not as one document This the input file { "source": "10.200.10.1:57500", "subscription-name": "defau…

---

## [Kibana 9.1.4 on Windows fails to start due to Timelion plugin: Cannot find module '../series\_functions/undefined'](https://discuss.elastic.co/t/kibana-9-1-4-on-windows-fails-to-start-due-to-timelion-plugin-cannot-find-module-series-functions-undefined/382144)

<div class="topic-metadata">

**Author:** [@kevin\_wang2](https://discuss.elastic.co/u/kevin_wang2)\
**Replies:** 17\
**Last updated:** [December 4, 2025, 6:19pm UTC](https://discuss.elastic.co/t/kibana-9-1-4-on-windows-fails-to-start-due-to-timelion-plugin-cannot-find-module-series-functions-undefined/382144 "2025-12-04T18:19:37Z")

</div>

Hi team, I’m hitting a fatal startup crash on Kibana 9.1.4 (Windows x64) where the Timelion plugin fails while loading its server-side functions. The process reaches preboot, then shuts down with: \[2025-09-23T10:04:14.…

---

## [Is second wave of Shai-Hulud attack impacting Elastic Stack?](https://discuss.elastic.co/t/is-second-wave-of-shai-hulud-attack-impacting-elastic-stack/383724)

<div class="topic-metadata">

**Author:** [@hkw2pg1](https://discuss.elastic.co/u/hkw2pg1)\
**Replies:** 1\
**Last updated:** [December 1, 2025, 5:00pm UTC](https://discuss.elastic.co/t/is-second-wave-of-shai-hulud-attack-impacting-elastic-stack/383724 "2025-12-01T17:00:18Z")

</div>

The Shai-Hulud attack came back again with approximately 800 npm packages impacted. To which extend is this article still stand? → Navigating the Shai-Hulud worm: Elastic's proactive defense against npm supply chain com…

---

## [Histogram zoom-out status](https://discuss.elastic.co/t/histogram-zoom-out-status/383733)

<div class="topic-metadata">

**Author:** [@jkavalik](https://discuss.elastic.co/u/jkavalik)\
**Replies:** 0\
**Last updated:** [November 27, 2025, 12:39pm UTC](https://discuss.elastic.co/t/histogram-zoom-out-status/383733 "2025-11-27T12:39:23Z")

</div>

What is the current status of previous/next button zoom in/ zoom out for a more convenient data exploration · Issue #54103 · elastic/kibana · GitHub ? It is marked as “completed” for almost two years and I cannot see it…

---

## [We are loading kibana dashboards in angular application using iframe and we found dashboards are taking more time for loading in iframe](https://discuss.elastic.co/t/we-are-loading-kibana-dashboards-in-angular-application-using-iframe-and-we-found-dashboards-are-taking-more-time-for-loading-in-iframe/383715)

<div class="topic-metadata">

**Author:** [@Maneesha](https://discuss.elastic.co/u/Maneesha)\
**Replies:** 0\
**Last updated:** [November 27, 2025, 7:39am UTC](https://discuss.elastic.co/t/we-are-loading-kibana-dashboards-in-angular-application-using-iframe-and-we-found-dashboards-are-taking-more-time-for-loading-in-iframe/383715 "2025-11-27T07:39:58Z")

</div>

we are loading kibana dashboards in angular application using iframe, and we found dashboards are taking more time for loading in iframe. Is there any approaches for reducing the dashboard loading time? any approaches f…

---

## [ES|QL dashboard table visualization displays time fields in UTC time zone](https://discuss.elastic.co/t/es-ql-dashboard-table-visualization-displays-time-fields-in-utc-time-zone/382245)

<div class="topic-metadata">

**Author:** [@allatrue](https://discuss.elastic.co/u/allatrue)\
**Replies:** 5\
**Last updated:** [November 25, 2025, 2:00pm UTC](https://discuss.elastic.co/t/es-ql-dashboard-table-visualization-displays-time-fields-in-utc-time-zone/382245 "2025-11-25T14:00:30Z")

</div>

Hello everyone, is there a way to make ES|QL visualization to display time fields in local time zone, like Lens it does? Discover converts times automatically to local time, as well as Lens dashboard visualizations. Bu…

---

## [Custom rules parameter](https://discuss.elastic.co/t/custom-rules-parameter/383337)

<div class="topic-metadata">

**Author:** [@Le\_Philosophe](https://discuss.elastic.co/u/Le_Philosophe)\
**Replies:** 4\
**Last updated:** [November 22, 2025, 5:08pm UTC](https://discuss.elastic.co/t/custom-rules-parameter/383337 "2025-11-22T17:08:25Z")

</div>

Hello, I have some data i collected and visualizing in Kibana.Now I have defined a ML job to monitor high/low filerate but I want the ML analysis to stop outside the range the data is collected(eg: 7 to 9pm data are not…

---

## [Unable to remove extra fields when using filebeat](https://discuss.elastic.co/t/unable-to-remove-extra-fields-when-using-filebeat/383579)

<div class="topic-metadata">

**Author:** [@Zhi\_Yang](https://discuss.elastic.co/u/Zhi_Yang)\
**Replies:** 1\
**Last updated:** [November 21, 2025, 6:43pm UTC](https://discuss.elastic.co/t/unable-to-remove-extra-fields-when-using-filebeat/383579 "2025-11-21T18:43:16Z")

</div>

so i had a very simple ELK install with a very simple filebeat install as well elk works fine, however with filebeat i get a bunch of fields that i do not want like nginx.error.message mongodb.log.message and a bunch…

---

## [Using winlogbeat 9.2.0 to import event logs from a client for analysis. The Dashboard fields are not matching the records](https://discuss.elastic.co/t/using-winlogbeat-9-2-0-to-import-event-logs-from-a-client-for-analysis-the-dashboard-fields-are-not-matching-the-records/383583)

<div class="topic-metadata">

**Author:** [@mmopwcdk](https://discuss.elastic.co/u/mmopwcdk)\
**Replies:** 2\
**Last updated:** [November 21, 2025, 1:19pm UTC](https://discuss.elastic.co/t/using-winlogbeat-9-2-0-to-import-event-logs-from-a-client-for-analysis-the-dashboard-fields-are-not-matching-the-records/383583 "2025-11-21T13:19:16Z")

</div>

Hi there. I am trying to analyze some Windows security logs (as that is all I was given) from a client, using Elastic Stack and the security features and dashboards it provides. I have managed to have winlogbeat create…

---

## [Rule Consumer explanation](https://discuss.elastic.co/t/rule-consumer-explanation/383264)

<div class="topic-metadata">

**Author:** [@lduvnjak](https://discuss.elastic.co/u/lduvnjak)\
**Replies:** 3\
**Last updated:** [November 21, 2025, 11:40am UTC](https://discuss.elastic.co/t/rule-consumer-explanation/383264 "2025-11-21T11:40:57Z")

</div>

Hi everyone, Can someone give me a rundown of what each consumer means and is tied to? Regarding the Rule APIs (Create/Update). There's an open Github issue for improving the documentation but it seems to be in one he…

---

## [Kibana Service Infrastructure tab displays some empty fields](https://discuss.elastic.co/t/kibana-service-infrastructure-tab-displays-some-empty-fields/383571)

<div class="topic-metadata">

**Author:** [@IvanovOleg](https://discuss.elastic.co/u/IvanovOleg)\
**Replies:** 1\
**Last updated:** [November 20, 2025, 9:26pm UTC](https://discuss.elastic.co/t/kibana-service-infrastructure-tab-displays-some-empty-fields/383571 "2025-11-20T21:26:15Z")

</div>

Observability → APM → Service Name → Infrastructure This tab in kibana displays some empty fields f.e # of CPU, Memory Total, Memory usage. Same fields in the Observability → Infrastructure → Infrastructure Inventory → …

---

## [Disable AI Assistant in Kibana 9.2.1](https://discuss.elastic.co/t/disable-ai-assistant-in-kibana-9-2-1/383550)

<div class="topic-metadata">

**Author:** [@cisupport-zkb](https://discuss.elastic.co/u/cisupport-zkb)\
**Replies:** 4\
**Last updated:** [November 20, 2025, 1:46pm UTC](https://discuss.elastic.co/t/disable-ai-assistant-in-kibana-9-2-1/383550 "2025-11-20T13:46:05Z")

</div>

Hi Everyone, I want to disable the AI Assistent in Kibana 9.2.1, how to do that? I noticed on the documentation Manage access to AI features | Elastic Docs that can be done in GenAI Settings page, but I don’t find it (a…

---

## [How do I update advanced settings via Kibana API?](https://discuss.elastic.co/t/how-do-i-update-advanced-settings-via-kibana-api/383526)

<div class="topic-metadata">

**Author:** [@Dhruv\_Naik](https://discuss.elastic.co/u/Dhruv_Naik)\
**Replies:** 2\
**Last updated:** [November 19, 2025, 2:05pm UTC](https://discuss.elastic.co/t/how-do-i-update-advanced-settings-via-kibana-api/383526 "2025-11-19T14:05:25Z")

</div>

Hi, I want to know if there is a supported way to update Kibana Advanced Settings (specifically the defaultRoute attribute) using an API. I’m trying to automate this through Jenkins so that each Kibana space gets a cus…

---

## [Kibana rule for detecting lost applicattions](https://discuss.elastic.co/t/kibana-rule-for-detecting-lost-applicattions/383475)

<div class="topic-metadata">

**Author:** [@juanmgarciaf](https://discuss.elastic.co/u/juanmgarciaf)\
**Replies:** 2\
**Last updated:** [November 18, 2025, 10:50am UTC](https://discuss.elastic.co/t/kibana-rule-for-detecting-lost-applicattions/383475 "2025-11-18T10:50:34Z")

</div>

Hello, I'm trying to create a rule in Kibana (v 8.18.7) to detect when an application has suddenly stop to inject documents in Kibana. My idea is to create a Kibana rule for that (without use transforms and Machine Lear…

---

## [Unable to create CSV report in kibana despite having superuser-like privileges](https://discuss.elastic.co/t/unable-to-create-csv-report-in-kibana-despite-having-superuser-like-privileges/383479)

<div class="topic-metadata">

**Author:** [@Brumi](https://discuss.elastic.co/u/Brumi)\
**Replies:** 2\
**Last updated:** [November 18, 2025, 8:49am UTC](https://discuss.elastic.co/t/unable-to-create-csv-report-in-kibana-despite-having-superuser-like-privileges/383479 "2025-11-18T08:49:15Z")

</div>

Hello, I have an Elasticsearch+Kibana cluster set up (version 8.17.2). Regular users (given the editor) role cannot create CSV reports from Discover, while I (having the superuser role) can. I have been trying to figur…

---

## [What happened to the logs explorer?](https://discuss.elastic.co/t/what-happened-to-the-logs-explorer/372165)

<div class="topic-metadata">

**Author:** [@catn0b0t](https://discuss.elastic.co/u/catn0b0t)\
**Replies:** 11\
**Last updated:** [November 17, 2025, 12:16pm UTC](https://discuss.elastic.co/t/what-happened-to-the-logs-explorer/372165 "2025-11-17T12:16:07Z")

</div>

So actually just recently discovered the "Logs explorer" beta feature and was super impressed by it: the way it tagged services and showed the agentname in the message was really user friendly. Now today we upgraded to 8…

---

## [No line breaks in strings within Data Lens Table](https://discuss.elastic.co/t/no-line-breaks-in-strings-within-data-lens-table/383445)

<div class="topic-metadata">

**Author:** [@edgarcloud](https://discuss.elastic.co/u/edgarcloud)\
**Replies:** 2\
**Last updated:** [November 15, 2025, 9:46am UTC](https://discuss.elastic.co/t/no-line-breaks-in-strings-within-data-lens-table/383445 "2025-11-15T09:46:18Z")

</div>

Hello everyone, I have a problem with line breaks in strings. In the Discovery view, the line breaks are displayed correctly. Unfortunately, in the Lens Data Table, the line breaks are not displayed. Everything is writte…

---

## [Transform creation error - request body is required](https://discuss.elastic.co/t/transform-creation-error-request-body-is-required/383394)

<div class="topic-metadata">

**Author:** [@dot-mike](https://discuss.elastic.co/u/dot-mike)\
**Replies:** 5\
**Last updated:** [November 15, 2025, 7:46am UTC](https://discuss.elastic.co/t/transform-creation-error-request-body-is-required/383394 "2025-11-15T07:46:37Z")

</div>

Hi community, I was looking to create a transform to show count of documents aggregated over unique syslog hostnames. So I proceeded to create the transform through the Kibana GUI and encountered an error: Internal Serv…

---

## [Create a canvas page per document](https://discuss.elastic.co/t/create-a-canvas-page-per-document/383455)

<div class="topic-metadata">

**Author:** [@jfsardon](https://discuss.elastic.co/u/jfsardon)\
**Replies:** 0\
**Last updated:** [November 14, 2025, 10:02pm UTC](https://discuss.elastic.co/t/create-a-canvas-page-per-document/383455 "2025-11-14T22:02:21Z")

</div>

I would like to create a Canvas with one page (\< 50 pages per canvas ) for each row (1 row = 1 agent name) of my datastream, all pages being based on the same template with by example a filter based on the agent name . I…

---

## [Mixing collapsable sections with saved searches makes dashboard corrupt](https://discuss.elastic.co/t/mixing-collapsable-sections-with-saved-searches-makes-dashboard-corrupt/382420)

<div class="topic-metadata">

**Author:** [@willemdh](https://discuss.elastic.co/u/willemdh)\
**Replies:** 4\
**Last updated:** [November 13, 2025, 12:38pm UTC](https://discuss.elastic.co/t/mixing-collapsable-sections-with-saved-searches-makes-dashboard-corrupt/382420 "2025-11-13T12:38:11Z")

</div>

Hello, Elastic Security Serverless. Mixing collapsable sections with saved searches makes dashboard corrupt. Once I add the Saved Search, it it not possible to resize and when you try you end up with the above situ…

---

## [Can't generate reports - Error: Unable to grant an API Key, request does not contain an authorization header](https://discuss.elastic.co/t/cant-generate-reports-error-unable-to-grant-an-api-key-request-does-not-contain-an-authorization-header/383385)

<div class="topic-metadata">

**Author:** [@stmx38](https://discuss.elastic.co/u/stmx38)\
**Replies:** 1\
**Last updated:** [November 12, 2025, 11:31am UTC](https://discuss.elastic.co/t/cant-generate-reports-error-unable-to-grant-an-api-key-request-does-not-contain-an-authorization-header/383385 "2025-11-12T11:31:50Z")

</div>

Hello, We recently observed that we can’t generate reports in Kibana and get the following error Unable to create report Unable to grant an API Key, request does not contain an authorization header We are using…

---

## [Visualizing Weekly Data Changes in Kibana](https://discuss.elastic.co/t/visualizing-weekly-data-changes-in-kibana/383038)

<div class="topic-metadata">

**Author:** [@MaximeBon](https://discuss.elastic.co/u/MaximeBon)\
**Replies:** 3\
**Last updated:** [November 12, 2025, 7:36am UTC](https://discuss.elastic.co/t/visualizing-weekly-data-changes-in-kibana/383038 "2025-11-12T07:36:38Z")

</div>

Hello everyone, I am a cybersecurity engineer utilizing Elasticsearch to analyze vulnerabilities detected within my systems. Every week, I import a list of newly detected vulnerabilities into my Elasticsearch index, inc…

---

## [Kibana 9.x internal APIs blocked – how to support iframe SSO login from external app](https://discuss.elastic.co/t/kibana-9-x-internal-apis-blocked-how-to-support-iframe-sso-login-from-external-app/383276)

<div class="topic-metadata">

**Author:** [@Shivam\_Mahajan](https://discuss.elastic.co/u/Shivam_Mahajan)\
**Replies:** 2\
**Last updated:** [November 11, 2025, 3:26am UTC](https://discuss.elastic.co/t/kibana-9-x-internal-apis-blocked-how-to-support-iframe-sso-login-from-external-app/383276 "2025-11-11T03:26:35Z")

</div>

We upgraded from Kibana 8.9.0 to 9.2.0 and our previous integration stopped working. Earlier, our external application (Application A) used the /internal/security/login endpoint to authenticate users programmatically and…

---

## [Anomaly Scores Differ on Same UI](https://discuss.elastic.co/t/anomaly-scores-differ-on-same-ui/383251)

<div class="topic-metadata">

**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\
**Replies:** 1\
**Last updated:** [November 9, 2025, 6:38am UTC](https://discuss.elastic.co/t/anomaly-scores-differ-on-same-ui/383251 "2025-11-09T06:38:33Z")

</div>

Hello, I've been leveraging the Anomaly Detection jobs in Elastic. I think this might be a visual bug but I see an influencer with an anomaly score of 98: But down at the bottom it reveals a score of 77: Even th…

---

## [The Service list in Kibana APM](https://discuss.elastic.co/t/the-service-list-in-kibana-apm/383206)

<div class="topic-metadata">

**Author:** [@Henk\_Stobbe](https://discuss.elastic.co/u/Henk_Stobbe)\
**Replies:** 1\
**Last updated:** [November 9, 2025, 5:55am UTC](https://discuss.elastic.co/t/the-service-list-in-kibana-apm/383206 "2025-11-09T05:55:27Z")

</div>

Hello, I want to export the list of Services from Kibana, is this stored in an seperate index or does Kibana looks in the traces for this when you open the Dashboard? Who knows? KR Henk

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=5)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=7)
