# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=605

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 606

---

## [Is there a way to see the data used in a timelion chart?](https://discuss.elastic.co/t/is-there-a-way-to-see-the-data-used-in-a-timelion-chart/199502)

<div class="topic-metadata">

**Author:** [@bf31415](https://discuss.elastic.co/u/bf31415)\
**Replies:** 1\
**Last updated:** [September 16, 2019, 1:54pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-see-the-data-used-in-a-timelion-chart/199502 "2019-09-16T13:54:31Z")

</div>

I've got a dashboard which shows, in theory, the same data via a timelion graph and a table. i believe the filters are the same but i'm seeing different results. Specifically, the table shows no data where as the timel…

---

## [Issue With Kibana Line Chart](https://discuss.elastic.co/t/issue-with-kibana-line-chart/198011)

<div class="topic-metadata">

**Author:** [@Sharma3007](https://discuss.elastic.co/u/Sharma3007)\
**Replies:** 1\
**Last updated:** [September 16, 2019, 9:10am UTC](https://discuss.elastic.co/t/issue-with-kibana-line-chart/198011 "2019-09-16T09:10:07Z")

</div>

Hi Team, I am facing issue with my Kibana line chart: My log fields looks like in the below image: And My line Chart looks like in the below image: My Unique Count on y-axis using the value of fields is 31305 a…

---

## [Dashboard: filter over multiple index patterns](https://discuss.elastic.co/t/dashboard-filter-over-multiple-index-patterns/198423)

<div class="topic-metadata">

**Author:** [@slauth](https://discuss.elastic.co/u/slauth)\
**Replies:** 3\
**Last updated:** [September 16, 2019, 8:53am UTC](https://discuss.elastic.co/t/dashboard-filter-over-multiple-index-patterns/198423 "2019-09-16T08:53:32Z")

</div>

Hi, I have two index patterns, both containing a field "stage". Now in a simple dashboard I'm combining visualizations based on both index patterns. What I would like to achieve now is being able to define a filter for …

---

## [Kibana: Range based on count](https://discuss.elastic.co/t/kibana-range-based-on-count/199431)

<div class="topic-metadata">

**Author:** [@megakoresh](https://discuss.elastic.co/u/megakoresh)\
**Replies:** 3\
**Last updated:** [September 16, 2019, 8:27am UTC](https://discuss.elastic.co/t/kibana-range-based-on-count/199431 "2019-09-16T08:27:04Z")

</div>

Hey. We have some host vulnerability data that we'd like to visualize and I am not sure how to do that. The data is in following format: { "id": "5e7473a8-1eda-4a4e-a640-650db8f3c129", "timestamp": "2019-09-13T1…

---

## [Perform some logic for query](https://discuss.elastic.co/t/perform-some-logic-for-query/196466)

<div class="topic-metadata">

**Author:** [@kvtang](https://discuss.elastic.co/u/kvtang)\
**Replies:** 3\
**Last updated:** [September 16, 2019, 7:28am UTC](https://discuss.elastic.co/t/perform-some-logic-for-query/196466 "2019-09-16T07:28:47Z")

</div>

Hi everyone, I would like to ask that is it possible to query the data like one attribute MUST contain two different element. I can't find a better way to describe this so I'm going to give a simple example. Let's say …

---

## [Kibana aggregation sum wrong result](https://discuss.elastic.co/t/kibana-aggregation-sum-wrong-result/199494)

<div class="topic-metadata">

**Author:** [@111210](https://discuss.elastic.co/u/111210)\
**Replies:** 9\
**Last updated:** [September 16, 2019, 5:25am UTC](https://discuss.elastic.co/t/kibana-aggregation-sum-wrong-result/199494 "2019-09-16T05:25:16Z")

</div>

I don't understand why does Kibana sum different result when I just enable filter or disable filter. It should be same. Disable Enable

---

## [Can I calculate in the filters?](https://discuss.elastic.co/t/can-i-calculate-in-the-filters/199164)

<div class="topic-metadata">

**Author:** [@Iceph](https://discuss.elastic.co/u/Iceph)\
**Replies:** 2\
**Last updated:** [September 16, 2019, 2:18am UTC](https://discuss.elastic.co/t/can-i-calculate-in-the-filters/199164 "2019-09-16T02:18:46Z")

</div>

Can I find the way?

---

## [Kibana Access Behind NAT IP](https://discuss.elastic.co/t/kibana-access-behind-nat-ip/197896)

<div class="topic-metadata">

**Author:** [@Jensjp](https://discuss.elastic.co/u/Jensjp)\
**Replies:** 2\
**Last updated:** [September 15, 2019, 9:23pm UTC](https://discuss.elastic.co/t/kibana-access-behind-nat-ip/197896 "2019-09-15T21:23:21Z")

</div>

Hi , I have kibana setup in an external server which is made available inside the corporate network through a Natted IP. The NAT is one-to-one to the kibana host. The issue is when I use the internal IP of the kibana mac…

---

## [Python json array ... minor problems](https://discuss.elastic.co/t/python-json-array-minor-problems/195989)

<div class="topic-metadata">

**Author:** [@mathurin68](https://discuss.elastic.co/u/mathurin68)\
**Replies:** 6\
**Last updated:** [September 15, 2019, 7:41pm UTC](https://discuss.elastic.co/t/python-json-array-minor-problems/195989 "2019-09-15T19:41:59Z")

</div>

Elasticstack 7.3 I did a bulk import some info from shodan in json form, this is one of the hosts... { "host": { "data": \[ { "banner": "421 4.3.2 Service not available\\r\\n", "port": 25, …

---

## [How can I crawling Kibana Chart or insert Kibana Chart to other web application?](https://discuss.elastic.co/t/how-can-i-crawling-kibana-chart-or-insert-kibana-chart-to-other-web-application/199014)

<div class="topic-metadata">

**Author:** [@111208](https://discuss.elastic.co/u/111208)\
**Replies:** 2\
**Last updated:** [September 15, 2019, 1:02pm UTC](https://discuss.elastic.co/t/how-can-i-crawling-kibana-chart-or-insert-kibana-chart-to-other-web-application/199014 "2019-09-15T13:02:19Z")

</div>

I'm developing Dashboard Web application project(Project A). My Client is already using Kibana for Data Viz. They also want to see specific Kibana Chart(they used) in dashboard card on web site I developed. User Flow. …

---

## [Extra chars in kibana message field](https://discuss.elastic.co/t/extra-chars-in-kibana-message-field/199158)

<div class="topic-metadata">

**Author:** [@O\_K](https://discuss.elastic.co/u/O_K)\
**Replies:** 2\
**Last updated:** [September 15, 2019, 7:12am UTC](https://discuss.elastic.co/t/extra-chars-in-kibana-message-field/199158 "2019-09-15T07:12:15Z")

</div>

Hello, Do you know how to deal with these extra chars which don't allow to parse log entries properly? elasticsearch log format contains extra chars like \[0;39m, e\[33m : e\[2m2019-09-11 20:45:43.600e\[0;39m e\[33m WARNe…

---

## [Aggergation with condition](https://discuss.elastic.co/t/aggergation-with-condition/199481)

<div class="topic-metadata">

**Author:** [@Yoav\_Ben\_Moha](https://discuss.elastic.co/u/Yoav_Ben_Moha)\
**Replies:** 3\
**Last updated:** [September 14, 2019, 9:57pm UTC](https://discuss.elastic.co/t/aggergation-with-condition/199481 "2019-09-14T21:57:28Z")

</div>

Hi, Assume that i have personal details (names / adderess / phones / age and etc) of city people I need to build Table Visualization in Kibana 7 based on those details. The visualization should display the following…

---

## [KIBANA - Elastic search PLUGIN IS RED, UI SETTINGS PLUGN IS RED](https://discuss.elastic.co/t/kibana-elastic-search-plugin-is-red-ui-settings-plugn-is-red/199438)

<div class="topic-metadata">

**Author:** [@nirish](https://discuss.elastic.co/u/nirish)\
**Replies:** 7\
**Last updated:** [September 14, 2019, 9:28am UTC](https://discuss.elastic.co/t/kibana-elastic-search-plugin-is-red-ui-settings-plugn-is-red/199438 "2019-09-14T09:28:21Z")

</div>

LOGS FROM data ingestion server failed to execute pipeline for a bulk request org.elasticsearch.common.util.concurrent.EsRejectedExecutionException: rejected execution of org.elasticsearch.ingest.PipelineExecu tionS…

---

## [Wazuh-Kibana API is too slow and wrong protocol being used to connect to the Wazuh API (after few days)](https://discuss.elastic.co/t/wazuh-kibana-api-is-too-slow-and-wrong-protocol-being-used-to-connect-to-the-wazuh-api-after-few-days/199497)

<div class="topic-metadata">

**Author:** [@rpendela](https://discuss.elastic.co/u/rpendela)\
**Replies:** 1\
**Last updated:** [September 14, 2019, 9:07am UTC](https://discuss.elastic.co/t/wazuh-kibana-api-is-too-slow-and-wrong-protocol-being-used-to-connect-to-the-wazuh-api-after-few-days/199497 "2019-09-14T09:07:50Z")

</div>

Hello Community, we have recently upgraded the ELK stack from 6.5.2 to 6.8.1 (Wazuh version 3.9.3) and everything seems working fine except Kibana-Wazuh API, it is extremely slow and some times getting wazuh not ready y…

---

## [Need to skip some docs in Kibana visualization](https://discuss.elastic.co/t/need-to-skip-some-docs-in-kibana-visualization/198725)

<div class="topic-metadata">

**Author:** [@santiago\_lator](https://discuss.elastic.co/u/santiago_lator)\
**Replies:** 3\
**Last updated:** [September 13, 2019, 8:30pm UTC](https://discuss.elastic.co/t/need-to-skip-some-docs-in-kibana-visualization/198725 "2019-09-13T20:30:10Z")

</div>

Hi all! I'm starting to use Kibana (currently using 6.7.2) and I came upon this difficulty. I have a pie chart that shows which users used which IP: And I need to show those results that show more than one IP ocurren…

---

## [Custom labels on the Right side panel](https://discuss.elastic.co/t/custom-labels-on-the-right-side-panel/199288)

<div class="topic-metadata">

**Author:** [@eemtzc](https://discuss.elastic.co/u/eemtzc)\
**Replies:** 5\
**Last updated:** [September 13, 2019, 8:29pm UTC](https://discuss.elastic.co/t/custom-labels-on-the-right-side-panel/199288 "2019-09-13T20:29:21Z")

</div>

Hello everyone, I am trying to custom the labels on the right-side panel in Kibana in order to have a custom name instead of the IP address, that way its easier to get an exact location instead of memorizing all the IP …

---

## [Cannot connect my Kibana instance to AWS Elastic Search service {Kibana server is not ready yet}](https://discuss.elastic.co/t/cannot-connect-my-kibana-instance-to-aws-elastic-search-service-kibana-server-is-not-ready-yet/199475)

<div class="topic-metadata">

**Author:** [@sshrivastava](https://discuss.elastic.co/u/sshrivastava)\
**Replies:** 1\
**Last updated:** [September 13, 2019, 8:04pm UTC](https://discuss.elastic.co/t/cannot-connect-my-kibana-instance-to-aws-elastic-search-service-kibana-server-is-not-ready-yet/199475 "2019-09-13T20:04:18Z")

</div>

Hi all, I'm trying to setup wazuh cluster in aws with AWS ES instead of regular elastic search service. The problem i'm facing is after making changes in /etc/kibana/kibana.yml: kibana.index: ".kibana" elasticsearch.…

---

## [Kibana service uninstall windows 10](https://discuss.elastic.co/t/kibana-service-uninstall-windows-10/198327)

<div class="topic-metadata">

**Author:** [@sunny1](https://discuss.elastic.co/u/sunny1)\
**Replies:** 2\
**Last updated:** [September 13, 2019, 7:52pm UTC](https://discuss.elastic.co/t/kibana-service-uninstall-windows-10/198327 "2019-09-13T19:52:29Z")

</div>

Hello Team, I wanted to uninstall kibana 6.5 service i had installed on windows 10. I tried using cmd with admin previlages and i am not able to do so. When i do sc delete service name, i get openservie failed access de…

---

## [Fields in Index but not in Discover or JSON output](https://discuss.elastic.co/t/fields-in-index-but-not-in-discover-or-json-output/199454)

<div class="topic-metadata">

**Author:** [@necrolingus](https://discuss.elastic.co/u/necrolingus)\
**Replies:** 6\
**Last updated:** [September 13, 2019, 6:54pm UTC](https://discuss.elastic.co/t/fields-in-index-but-not-in-discover-or-json-output/199454 "2019-09-13T18:54:51Z")

</div>

Hi all ELK version: 6.2.4 Platform: Windows Server 2012 I am using the IIS module which is working perfectly. I added 2 headers to my log file in IIS and they are showing in the log file. I then updated my IIS grok p…

---

## [Best way to create a watcher that checks index store size](https://discuss.elastic.co/t/best-way-to-create-a-watcher-that-checks-index-store-size/199456)

<div class="topic-metadata">

**Author:** [@Matt\_McGovern](https://discuss.elastic.co/u/Matt_McGovern)\
**Replies:** 2\
**Last updated:** [September 13, 2019, 6:34pm UTC](https://discuss.elastic.co/t/best-way-to-create-a-watcher-that-checks-index-store-size/199456 "2019-09-13T18:34:19Z")

</div>

I'm trying to create a watcher that checks on the store size of an index pattern. I can easily see the information from Devtools by GET /index/stats/store, but how do I do this in a watcher? I'm trying to do an http typ…

---

## [TSVB index-pattern usage](https://discuss.elastic.co/t/tsvb-index-pattern-usage/199469)

<div class="topic-metadata">

**Author:** [@Ron70](https://discuss.elastic.co/u/Ron70)\
**Replies:** 1\
**Last updated:** [September 13, 2019, 6:32pm UTC](https://discuss.elastic.co/t/tsvb-index-pattern-usage/199469 "2019-09-13T18:32:55Z")

</div>

Hi, I just stumbled across a strange behaviour of Kibana (7.3.1) regarding the usage of index patterns. I have a dashboard which contains some TSVB visualizations and „normal“ visualizations like a data table for examp…

---

## [How can I test the geoIP in the map visualization if I do not have logs with public addresses?](https://discuss.elastic.co/t/how-can-i-test-the-geoip-in-the-map-visualization-if-i-do-not-have-logs-with-public-addresses/199458)

<div class="topic-metadata">

**Author:** [@Rosho](https://discuss.elastic.co/u/Rosho)\
**Replies:** 3\
**Last updated:** [September 13, 2019, 6:29pm UTC](https://discuss.elastic.co/t/how-can-i-test-the-geoip-in-the-map-visualization-if-i-do-not-have-logs-with-public-addresses/199458 "2019-09-13T18:29:11Z")

</div>

Hi I am testing the geoIP. How can I test the geoIP in the map visualization if I do not have logs with public addresses? Does anyone one know where can I download some logs, maybe? How can I make the geoIP work with …

---

## [Filter on metric Count](https://discuss.elastic.co/t/filter-on-metric-count/198515)

<div class="topic-metadata">

**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\
**Replies:** 4\
**Last updated:** [September 13, 2019, 5:52pm UTC](https://discuss.elastic.co/t/filter-on-metric-count/198515 "2019-09-13T17:52:10Z")

</div>

With Kibana 6.8 is it now possible to filter based results of a Count metric, so I could just see eg. documents w/Count \> 1 like asked here

---

## [Show values as percent of a bucket](https://discuss.elastic.co/t/show-values-as-percent-of-a-bucket/198459)

<div class="topic-metadata">

**Author:** [@rafael.cunha](https://discuss.elastic.co/u/rafael.cunha)\
**Replies:** 2\
**Last updated:** [September 13, 2019, 5:22pm UTC](https://discuss.elastic.co/t/show-values-as-percent-of-a-bucket/198459 "2019-09-13T17:22:56Z")

</div>

I'm trying to create a sales pipeline chart that will show me, per campaing, the percent conversion of each stage based on the audience of each campaing. For example, my index writes the following data per campaign: Sen…

---

## [Kibana group visualization](https://discuss.elastic.co/t/kibana-group-visualization/198913)

<div class="topic-metadata">

**Author:** [@anon42972578](https://discuss.elastic.co/u/anon42972578)\
**Replies:** 3\
**Last updated:** [September 13, 2019, 5:00pm UTC](https://discuss.elastic.co/t/kibana-group-visualization/198913 "2019-09-13T17:00:08Z")

</div>

Hello, i try to build an visualization ( vertical bar ) , where i can group my elements. For example: server-prod-1 server-prod-2 server-prod-3 --\> in legend visible as server-prod server-test-1 server-test-2 se…

---

## [Vega Map Visualization with no Internet accessibility](https://discuss.elastic.co/t/vega-map-visualization-with-no-internet-accessibility/199457)

<div class="topic-metadata">

**Author:** [@melbsurfer](https://discuss.elastic.co/u/melbsurfer)\
**Replies:** 1\
**Last updated:** [September 13, 2019, 3:53pm UTC](https://discuss.elastic.co/t/vega-map-visualization-with-no-internet-accessibility/199457 "2019-09-13T15:53:56Z")

</div>

Hi, We are attempting to implement a Vega Map Visualization (in Kibana 6.8) that does not have any connections to the Internet. The map works fine when an Internet connection is available, but offline it fails with the…

---

## [Kibana error "Request Timeout after 30000ms" during login](https://discuss.elastic.co/t/kibana-error-request-timeout-after-30000ms-during-login/198564)

<div class="topic-metadata">

**Author:** [@O\_K](https://discuss.elastic.co/u/O_K)\
**Replies:** 13\
**Last updated:** [September 13, 2019, 3:13pm UTC](https://discuss.elastic.co/t/kibana-error-request-timeout-after-30000ms-during-login/198564 "2019-09-13T15:13:28Z")

</div>

Hello, Do you know what might be the reason of this error? It's very annoying {"type":"log","@timestamp":"2019-09-08T14:50:12Z","tags":\["error","task\_manager"\],"pid":1,"message":"Failed to poll for work: Error: Request…

---

## [Kibana Error: 503 Service Unavailable](https://discuss.elastic.co/t/kibana-error-503-service-unavailable/199262)

<div class="topic-metadata">

**Author:** [@alesabat](https://discuss.elastic.co/u/alesabat)\
**Replies:** 2\
**Last updated:** [September 13, 2019, 2:54pm UTC](https://discuss.elastic.co/t/kibana-error-503-service-unavailable/199262 "2019-09-13T14:54:04Z")

</div>

Hi, I'm new with Kibana. Client asked me to solve this problem with Kibana. They can't reach web GUI, gettin 404 Not found error from nginx. I'm checking /var/log/messages, this is what I see: Sep 12 10:32:12 syslog k…

---

## [Kibana stopping due to error](https://discuss.elastic.co/t/kibana-stopping-due-to-error/198968)

<div class="topic-metadata">

**Author:** [@cool\_guy99](https://discuss.elastic.co/u/cool_guy99)\
**Replies:** 3\
**Last updated:** [September 13, 2019, 1:36pm UTC](https://discuss.elastic.co/t/kibana-stopping-due-to-error/198968 "2019-09-13T13:36:02Z")

</div>

Hi guys, I am using Kibana 7.2.0 and facing the issue of: events.js:174 throw er; // Unhandled 'error' event ^ Error: read ECONNRESET at TCP.onStreamRead (internal/stream\_base\_commons.js:111:27) Emitted 'error' …

---

## [Terms aggregation by field, but shows another field in Kibana](https://discuss.elastic.co/t/terms-aggregation-by-field-but-shows-another-field-in-kibana/198430)

<div class="topic-metadata">

**Author:** [@gferrette](https://discuss.elastic.co/u/gferrette)\
**Replies:** 2\
**Last updated:** [September 13, 2019, 12:30pm UTC](https://discuss.elastic.co/t/terms-aggregation-by-field-but-shows-another-field-in-kibana/198430 "2019-09-13T12:30:23Z")

</div>

Hello, I have the sample data below and i want to know if is it possible to make a Terms aggregation in Kibana by the field "codigo", but showing on the chart the field "nome". For example, with the sample data below …

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=604)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=606)
