# Kibana **URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=604 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 605 --- ## [Need help to build visualisation in kibana](https://discuss.elastic.co/t/need-help-to-build-visualisation-in-kibana/199944)
**Author:** [@Vikas\_Thakur](https://discuss.elastic.co/u/Vikas_Thakur)\ **Replies:** 3\ **Last updated:** [September 18, 2019, 9:55am UTC](https://discuss.elastic.co/t/need-help-to-build-visualisation-in-kibana/199944 "2019-09-18T09:55:50Z")
Hi Team, I am new to ELK stack. Need help to build visualisation in kibana. Example of logs:- \[13.09.19 12:56:09:824 CEST\] 0000005c SystemOut 12:56:09.824 \[Default Executor-thread-31\] INFO AdapterImpl - { "type" :… --- ## [FATAL Error: Index .kibana belongs to a version of Kibana that cannot be automatically migrated. Reset it or use the X-Pack upgrade assistant](https://discuss.elastic.co/t/fatal-error-index-kibana-belongs-to-a-version-of-kibana-that-cannot-be-automatically-migrated-reset-it-or-use-the-x-pack-upgrade-assistant/199948)
**Author:** [@Hooman\_Bahreini](https://discuss.elastic.co/u/Hooman_Bahreini)\ **Replies:** 1\ **Last updated:** [September 18, 2019, 8:41am UTC](https://discuss.elastic.co/t/fatal-error-index-kibana-belongs-to-a-version-of-kibana-that-cannot-be-automatically-migrated-reset-it-or-use-the-x-pack-upgrade-assistant/199948 "2019-09-18T08:41:20Z")
I have installed elasticsearch cluster on a Linux server. Initially I installed Elasticsearch 7.x (but then changed the elasticsearch to 6.8). Elasticsearch is running fine. I did the same with Kibana on a Windows Serve… --- ## [Horizontal bar chart in Canvas - value of measure positioned inconveniently](https://discuss.elastic.co/t/horizontal-bar-chart-in-canvas-value-of-measure-positioned-inconveniently/199653)
**Author:** [@preetish\_P](https://discuss.elastic.co/u/preetish_P)\ **Replies:** 6\ **Last updated:** [September 18, 2019, 8:33am UTC](https://discuss.elastic.co/t/horizontal-bar-chart-in-canvas-value-of-measure-positioned-inconveniently/199653 "2019-09-18T08:33:44Z")
Hi All, We have recently upgraded to ES6.8 and are exploring capabilities provided by Canvas. My question is around the horizontal bar chart available within Canvas elements. Is there a way to show the value of measure… --- ## [Combining 2 Graphs and disregarding one metric when creating split series](https://discuss.elastic.co/t/combining-2-graphs-and-disregarding-one-metric-when-creating-split-series/198902)
**Author:** [@kdsantos07](https://discuss.elastic.co/u/kdsantos07)\ **Replies:** 2\ **Last updated:** [September 18, 2019, 4:11am UTC](https://discuss.elastic.co/t/combining-2-graphs-and-disregarding-one-metric-when-creating-split-series/198902 "2019-09-18T04:11:00Z")
This will be my first post here since I cannot see similar problem on the internet. So I got this two metric which in this case a "Bar" and a "Line" graph What I want to achieve is the "Line graph" shows the total coun… --- ## [Displaying String (Text) Value in TSVB](https://discuss.elastic.co/t/displaying-string-text-value-in-tsvb/199223)
**Author:** [@arnim](https://discuss.elastic.co/u/arnim)\ **Replies:** 2\ **Last updated:** [September 18, 2019, 2:58am UTC](https://discuss.elastic.co/t/displaying-string-text-value-in-tsvb/199223 "2019-09-18T02:58:34Z")
Hi, I would like to create a markdown in TSVB that display the top hit of following data: query\_id \[string\] longest\_duration \[int\] highest\_concurrent\_transaction \[int\] I would like to display all of them in a single… --- ## [Cannot execute scripts using \[field\] context](https://discuss.elastic.co/t/cannot-execute-scripts-using-field-context/198165)
**Author:** [@shadow\_air](https://discuss.elastic.co/u/shadow_air)\ **Replies:** 5\ **Last updated:** [September 18, 2019, 2:47am UTC](https://discuss.elastic.co/t/cannot-execute-scripts-using-field-context/198165 "2019-09-18T02:47:20Z")
Dear Team When i want to add a new script field by kibana management menu, i got a error, i find the request is looks like this: path: elasticsearch/\_msearch request payload: {"index":"myIndex","ignore\_unavaila… --- ## [Plotting data from Elasticsearch using Vega](https://discuss.elastic.co/t/plotting-data-from-elasticsearch-using-vega/198976)
**Author:** [@EricJohnson](https://discuss.elastic.co/u/EricJohnson)\ **Replies:** 3\ **Last updated:** [September 17, 2019, 8:45pm UTC](https://discuss.elastic.co/t/plotting-data-from-elasticsearch-using-vega/198976 "2019-09-17T20:45:12Z")
Greetings, I bet this problem will be easy for someone out there - but I can't see what I'm doing wrong. I have data in an Elasticsearch index called "plotting\_test" that I'd like to plot with Vega. I'm looking at the… --- ## [Visualize real data](https://discuss.elastic.co/t/visualize-real-data/199742)
**Author:** [@davidcsc2002](https://discuss.elastic.co/u/davidcsc2002)\ **Replies:** 1\ **Last updated:** [September 17, 2019, 6:30pm UTC](https://discuss.elastic.co/t/visualize-real-data/199742 "2019-09-17T18:30:30Z")
Hi, I'm new in ELK, I get telemetry data from cisco switch and send to elasticsearch, these datas include real transport bytes, packets... based on time. so I want reveal the real transport bytes, packets as metrics i… --- ## [Elk container upgrade](https://discuss.elastic.co/t/elk-container-upgrade/197376)
**Author:** [@Walter\_Hiranpat](https://discuss.elastic.co/u/Walter_Hiranpat)\ **Replies:** 6\ **Last updated:** [September 17, 2019, 3:24pm UTC](https://discuss.elastic.co/t/elk-container-upgrade/197376 "2019-09-17T15:24:35Z")
Hello, I have deploy elasticsearch and kibana using docker container with mounted storage. It was at version 6.8 and now I have upgrade to 7.3 so I stoped the container and redeployed it with the new container images. E… --- ## [Importing canvas workpads via saved-objects API results in internal server error](https://discuss.elastic.co/t/importing-canvas-workpads-via-saved-objects-api-results-in-internal-server-error/199837)
**Author:** [@tarkin67](https://discuss.elastic.co/u/tarkin67)\ **Replies:** 2\ **Last updated:** [September 17, 2019, 2:52pm UTC](https://discuss.elastic.co/t/importing-canvas-workpads-via-saved-objects-api-results-in-internal-server-error/199837 "2019-09-17T14:52:08Z")
Hi all, I am running into an issue with importing canvas workpads via the saved-objects API. We have implemented a script that fetches saved objects via "/api/saved\_objects". The script fetches kibana dashboards, visual… --- ## [Kibana IFrame - Limit Data Searchable](https://discuss.elastic.co/t/kibana-iframe-limit-data-searchable/199799)
**Author:** [@j\_a\_griffiths](https://discuss.elastic.co/u/j_a_griffiths)\ **Replies:** 2\ **Last updated:** [September 17, 2019, 2:47pm UTC](https://discuss.elastic.co/t/kibana-iframe-limit-data-searchable/199799 "2019-09-17T14:47:12Z")
Very new to ELK so excuse if this is a stupid question. basically I have a number of indexes in elastic and I want to display kibana dashboards in a iFrame. I want the dashboards to be dynamic and allow the user to searc… --- ## [Where can I find the "Index Pattern" in the console command?](https://discuss.elastic.co/t/where-can-i-find-the-index-pattern-in-the-console-command/199724)
**Author:** [@Rosho](https://discuss.elastic.co/u/Rosho)\ **Replies:** 3\ **Last updated:** [September 17, 2019, 2:44pm UTC](https://discuss.elastic.co/t/where-can-i-find-the-index-pattern-in-the-console-command/199724 "2019-09-17T14:44:51Z")
Hi Where can I find the "Path" in the console to the index patterns? By path I mean something like this: /usr/share/kibana/ By index pattern I mean: humhub-2019.0\* Thank you --- ## [Log sequence issue in Kibana](https://discuss.elastic.co/t/log-sequence-issue-in-kibana/199607)
**Author:** [@Vipin\_Gaur](https://discuss.elastic.co/u/Vipin_Gaur)\ **Replies:** 3\ **Last updated:** [September 17, 2019, 2:18pm UTC](https://discuss.elastic.co/t/log-sequence-issue-in-kibana/199607 "2019-09-17T14:18:15Z")
All, We are successfully shipping logs to ELK,Actual App Logs are generating in Kibana but with different sequence.Basically I want the log lines shown on Kibana to be in the same order as I would see them in the actual… --- ## [Can I use json input for metrics in a table?](https://discuss.elastic.co/t/can-i-use-json-input-for-metrics-in-a-table/199595)
**Author:** [@Yungyoung\_Ok](https://discuss.elastic.co/u/Yungyoung_Ok)\ **Replies:** 3\ **Last updated:** [September 17, 2019, 2:15pm UTC](https://discuss.elastic.co/t/can-i-use-json-input-for-metrics-in-a-table/199595 "2019-09-17T14:15:18Z")
Can I use json input for metrics in a table? I want to indicate whether or not to check, depending on the value of the state field. For example, if the state value is 1, I want ok, and if the state value is 0, I wan… --- ## [Kibana Canvas Pie Chart showing data from two different queries](https://discuss.elastic.co/t/kibana-canvas-pie-chart-showing-data-from-two-different-queries/199791)
**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\ **Replies:** 1\ **Last updated:** [September 17, 2019, 1:52pm UTC](https://discuss.elastic.co/t/kibana-canvas-pie-chart-showing-data-from-two-different-queries/199791 "2019-09-17T13:52:39Z")
Hi everybody! I have two tables where I have opposite results that I'd like to see together in some chart (Pie Chart if possible :smiley: ) The queries are almost the same: | essql query="select num1.keyword from data… --- ## [Kibana not starting for enabling AD security](https://discuss.elastic.co/t/kibana-not-starting-for-enabling-ad-security/199417)
**Author:** [@bharat1](https://discuss.elastic.co/u/bharat1)\ **Replies:** 13\ **Last updated:** [September 17, 2019, 1:51pm UTC](https://discuss.elastic.co/t/kibana-not-starting-for-enabling-ad-security/199417 "2019-09-17T13:51:03Z")
Dear All, Recently enabled elasticsearch with AD with xpack and able to authenticate successfully via curl command. Kibana is not properly starting up, any help will be appreciated. My intention is to have Kibana secure… --- ## [How to get difference of min timestamp and max timestamp?](https://discuss.elastic.co/t/how-to-get-difference-of-min-timestamp-and-max-timestamp/199589)
**Author:** [@samath\_kumar](https://discuss.elastic.co/u/samath_kumar)\ **Replies:** 2\ **Last updated:** [September 17, 2019, 8:58am UTC](https://discuss.elastic.co/t/how-to-get-difference-of-min-timestamp-and-max-timestamp/199589 "2019-09-17T08:58:05Z")
I am new to kibana and elastic search, i want a metrics for average , total , longest of the timespans generated by taking difference of max and min timestamp fields. First I got min and max timestamps from the visualiza… --- ## [Kibana Canvas querying](https://discuss.elastic.co/t/kibana-canvas-querying/199593)
**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\ **Replies:** 4\ **Last updated:** [September 17, 2019, 7:11am UTC](https://discuss.elastic.co/t/kibana-canvas-querying/199593 "2019-09-17T07:11:07Z")
Hi everyone! I have log messages that look like "number.suffix" and the message can have two different suffix values either dn or mt. If message has the same number and both suffix are occurred it means that log message… --- ## [Kibana keyword aggregation for visualisation](https://discuss.elastic.co/t/kibana-keyword-aggregation-for-visualisation/199599)
**Author:** [@philippkahr](https://discuss.elastic.co/u/philippkahr)\ **Replies:** 2\ **Last updated:** [September 17, 2019, 5:50am UTC](https://discuss.elastic.co/t/kibana-keyword-aggregation-for-visualisation/199599 "2019-09-17T05:50:04Z")
Hi, I am struggeling with a little aggregation task. Let's say we have to following data from winlogbeat: First data: { "param1": "1.2.3.4:5555" } Second data: { "param1": "1.2.3.4:6666" } If I perform a pie chart… --- ## [Representing Parent and Child relationship in Kibana](https://discuss.elastic.co/t/representing-parent-and-child-relationship-in-kibana/199654)
**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\ **Replies:** 2\ **Last updated:** [September 17, 2019, 5:08am UTC](https://discuss.elastic.co/t/representing-parent-and-child-relationship-in-kibana/199654 "2019-09-17T05:08:32Z")
Is it possible to represent/visualize the parent - Child relationship in Kibana? --- ## [Upgrade es 6.2 to 6.3 and kibana doesn't work](https://discuss.elastic.co/t/upgrade-es-6-2-to-6-3-and-kibana-doesnt-work/199627)
**Author:** [@Bowen\_Liu](https://discuss.elastic.co/u/Bowen_Liu)\ **Replies:** 4\ **Last updated:** [September 17, 2019, 1:56am UTC](https://discuss.elastic.co/t/upgrade-es-6-2-to-6-3-and-kibana-doesnt-work/199627 "2019-09-17T01:56:16Z")
Hi, all. I managed to upgrade es from es 6.2.4 to 6.3.0 two days ago and I'm now starting to upgrade kibana too.But when I download kibana 6.3.0 and copy old config of kibana 6.2.4 to 6.3.0 and start kibana, it just can'… --- ## [Auto authenticating kibana iframe without logging in again from external web application](https://discuss.elastic.co/t/auto-authenticating-kibana-iframe-without-logging-in-again-from-external-web-application/199726)
**Author:** [@vishal\_M](https://discuss.elastic.co/u/vishal_M)\ **Replies:** 1\ **Last updated:** [September 16, 2019, 9:55pm UTC](https://discuss.elastic.co/t/auto-authenticating-kibana-iframe-without-logging-in-again-from-external-web-application/199726 "2019-09-16T21:55:32Z")
Hello Team, I have embedded a dashboard into my external web application and able to see the dashboard (1 user). But, Kibana is asking me to enter the credentials every-time manually. I shouldn't enter the Kibana creden… --- ## [Kibana grok debug custom pattern failure](https://discuss.elastic.co/t/kibana-grok-debug-custom-pattern-failure/199655)
**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\ **Replies:** 3\ **Last updated:** [September 16, 2019, 8:08pm UTC](https://discuss.elastic.co/t/kibana-grok-debug-custom-pattern-failure/199655 "2019-09-16T20:08:38Z")
Hello I have a grok pattern with multiline pattern. On version 6.x everything worked but since I have migrated to 7.3.0 is not working anymore. I have tried to see if it is still matching in kibana but I always get an er… --- ## [Response time](https://discuss.elastic.co/t/response-time/199698)
**Author:** [@Mohamad-Sobhie](https://discuss.elastic.co/u/Mohamad-Sobhie)\ **Replies:** 3\ **Last updated:** [September 16, 2019, 8:07pm UTC](https://discuss.elastic.co/t/response-time/199698 "2019-09-16T20:07:48Z")
Is there any monitoring tool in kibana to view the response time of queries? --- ## [Type of aggregation?](https://discuss.elastic.co/t/type-of-aggregation/198478)
**Author:** [@SirJune](https://discuss.elastic.co/u/SirJune)\ **Replies:** 3\ **Last updated:** [September 16, 2019, 7:56pm UTC](https://discuss.elastic.co/t/type-of-aggregation/198478 "2019-09-16T19:56:18Z")
Hi, I have these documents in ElasticSearch (single indexname) |datetime|, |label|, |count| 2019-09-06 13:32:18,host1 service1,876 2019-09-06 13:32:18,host1 service1,353 2019-09-06 13:32:18,host2 ser… --- ## [Create Pie Chart in Kibana based on query DSL](https://discuss.elastic.co/t/create-pie-chart-in-kibana-based-on-query-dsl/193162)
**Author:** [@Vladpov](https://discuss.elastic.co/u/Vladpov)\ **Replies:** 13\ **Last updated:** [September 16, 2019, 7:43pm UTC](https://discuss.elastic.co/t/create-pie-chart-in-kibana-based-on-query-dsl/193162 "2019-09-16T19:43:35Z")
Hello everyone, I have this query which mi find all message numbers that have two suffix's GET /my\_index3/\_search { "size": 0, "aggs": { "num1": { "terms": { "field": "n… --- ## [Uptime: "no uptime monitors found" for heartbeat](https://discuss.elastic.co/t/uptime-no-uptime-monitors-found-for-heartbeat/193767)
**Author:** [@andre22](https://discuss.elastic.co/u/andre22)\ **Replies:** 4\ **Last updated:** [September 16, 2019, 3:23pm UTC](https://discuss.elastic.co/t/uptime-no-uptime-monitors-found-for-heartbeat/193767 "2019-09-16T15:23:26Z")
Hi, I am getting the output above when looking at the uptime: As you can see, heartbeat data ist being delivered to Elasticsearch. How can I fix this? EDIT: some more Info: everything is on 7.3.0 heartbeat is on t… --- ## [Show the specific field value in a time series spot line](https://discuss.elastic.co/t/show-the-specific-field-value-in-a-time-series-spot-line/197068)
**Author:** [@wl105500396](https://discuss.elastic.co/u/wl105500396)\ **Replies:** 9\ **Last updated:** [September 16, 2019, 3:46pm UTC](https://discuss.elastic.co/t/show-the-specific-field-value-in-a-time-series-spot-line/197068 "2019-09-16T15:46:22Z")
Hi there, I'm stuck for days creating a visulization which shows the specifc field value in a time series spot line. Lets say I have an index named costs, and its docs look like below {"@timestamp": "2019-08-27T09:59:… --- ## [How to get data or request query from Kibana Dashboard card](https://discuss.elastic.co/t/how-to-get-data-or-request-query-from-kibana-dashboard-card/199538)
**Author:** [@111208](https://discuss.elastic.co/u/111208)\ **Replies:** 1\ **Last updated:** [September 16, 2019, 3:31pm UTC](https://discuss.elastic.co/t/how-to-get-data-or-request-query-from-kibana-dashboard-card/199538 "2019-09-16T15:31:01Z")
I search Kibana REST API. In saved\_objects API, there is no data or query information just VIZ params. I'm testing with "kibana\_sample\_data\_flights" sample data. In Kibana Dashboard, I can get Request Parameters throu… --- ## [Does case matter in timelion queries (which use "and" or "or")](https://discuss.elastic.co/t/does-case-matter-in-timelion-queries-which-use-and-or-or/199542)
**Author:** [@bf31415](https://discuss.elastic.co/u/bf31415)\ **Replies:** 1\ **Last updated:** [September 16, 2019, 2:35pm UTC](https://discuss.elastic.co/t/does-case-matter-in-timelion-queries-which-use-and-or-or/199542 "2019-09-16T14:35:05Z")
I'm trying to build a query for ssh traffic-- for my field names, if the ipProtocol is 6 (tcp) and srcPort is 22 or dstPort is 22, then this is a match. In timelion I've created the following two queries: .es(index=ses… [Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=603) [Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=605)