# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=606

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 607

---

## [Kibana is slowly reponsing](https://discuss.elastic.co/t/kibana-is-slowly-reponsing/198402)

<div class="topic-metadata">

**Author:** [@zbawio](https://discuss.elastic.co/u/zbawio)\
**Replies:** 2\
**Last updated:** [September 13, 2019, 12:20pm UTC](https://discuss.elastic.co/t/kibana-is-slowly-reponsing/198402 "2019-09-13T12:20:01Z")

</div>

Hi all, I have 57.000 documents in a 1 index (1 shard and 1 replicas). total size of index is 1.2 gb but my logs are so long i mean 1 document has 120 -150 k characters or more. my elasticsearch is using 8gb of ram a…

---

## [How to Setup Frequency on Alerts/Watcher?](https://discuss.elastic.co/t/how-to-setup-frequency-on-alerts-watcher/199411)

<div class="topic-metadata">

**Author:** [@sonal\_singh](https://discuss.elastic.co/u/sonal_singh)\
**Replies:** 2\
**Last updated:** [September 13, 2019, 11:34am UTC](https://discuss.elastic.co/t/how-to-setup-frequency-on-alerts-watcher/199411 "2019-09-13T11:34:59Z")

</div>

Here is a scenario: I have setup a watcher which runs every hour searching a "keyword", and if the occurrence of this keyword is more than "100" then it sends an alert. Now it could be possible I am receiving it every …

---

## [Multiple Plotted Lines on a Line Chart - Canvas](https://discuss.elastic.co/t/multiple-plotted-lines-on-a-line-chart-canvas/198424)

<div class="topic-metadata">

**Author:** [@ShaneDaly](https://discuss.elastic.co/u/ShaneDaly)\
**Replies:** 2\
**Last updated:** [September 13, 2019, 11:31am UTC](https://discuss.elastic.co/t/multiple-plotted-lines-on-a-line-chart-canvas/198424 "2019-09-13T11:31:53Z")

</div>

Hello, I am looking to create a line chart in a Canvas workbook with two different lines present on the graph. filters | esdocs index="e4000\*" fields="humidity, temperature, @timestamp" sort="@timestamp, DESC" | points…

---

## [Aggregate Value based on 2 Date/ time fields](https://discuss.elastic.co/t/aggregate-value-based-on-2-date-time-fields/199347)

<div class="topic-metadata">

**Author:** [@christeven94](https://discuss.elastic.co/u/christeven94)\
**Replies:** 1\
**Last updated:** [September 13, 2019, 11:19am UTC](https://discuss.elastic.co/t/aggregate-value-based-on-2-date-time-fields/199347 "2019-09-13T11:19:44Z")

</div>

Hi I have a data set with 2 different time fields (Start Time and End Time), and 1 count value. Let Say I have Start Time - End Time - Count 6.00 - 8.00 - 5 7.00 - 9.00 …

---

## [Custom web and other stuffs in Kibana](https://discuss.elastic.co/t/custom-web-and-other-stuffs-in-kibana/199394)

<div class="topic-metadata">

**Author:** [@Donny\_Nightfrost](https://discuss.elastic.co/u/Donny_Nightfrost)\
**Replies:** 1\
**Last updated:** [September 13, 2019, 11:13am UTC](https://discuss.elastic.co/t/custom-web-and-other-stuffs-in-kibana/199394 "2019-09-13T11:13:41Z")

</div>

Greetings, I'm currently working on making ELK as SIEM and was wondering: is there a way for my custom web to appear on Kibana? The custom web is used to insert and view entries from database. Right clicking on logs an…

---

## [Query To Compare Two Columns From Two Different Indexes](https://discuss.elastic.co/t/query-to-compare-two-columns-from-two-different-indexes/198341)

<div class="topic-metadata">

**Author:** [@Ramya\_Tanikanti](https://discuss.elastic.co/u/Ramya_Tanikanti)\
**Replies:** 2\
**Last updated:** [September 13, 2019, 11:04am UTC](https://discuss.elastic.co/t/query-to-compare-two-columns-from-two-different-indexes/198341 "2019-09-13T11:04:21Z")

</div>

I have a Column in one Index with a number of Countries in it, I want to check whether these countries are similar or same as the countries in the Column in another index. So it is like, in one index we have user data w…

---

## [How to use Central Management Pipelines without specifying pipeline id and restarting logstash](https://discuss.elastic.co/t/how-to-use-central-management-pipelines-without-specifying-pipeline-id-and-restarting-logstash/198333)

<div class="topic-metadata">

**Author:** [@rwatts3](https://discuss.elastic.co/u/rwatts3)\
**Replies:** 1\
**Last updated:** [September 13, 2019, 11:03am UTC](https://discuss.elastic.co/t/how-to-use-central-management-pipelines-without-specifying-pipeline-id-and-restarting-logstash/198333 "2019-09-13T11:03:05Z")

</div>

Greetings, I am running an ELK stack using docker. I have configured logstash and kibana to enable the central management pipelines. Unfortunately when I create a new pipeline via the UI it doesn't seem to register un…

---

## [Create fields for data in Kibana](https://discuss.elastic.co/t/create-fields-for-data-in-kibana/198334)

<div class="topic-metadata">

**Author:** [@kvtang](https://discuss.elastic.co/u/kvtang)\
**Replies:** 1\
**Last updated:** [September 13, 2019, 10:54am UTC](https://discuss.elastic.co/t/create-fields-for-data-in-kibana/198334 "2019-09-13T10:54:17Z")

</div>

Hi, Recently I just make some changes to the logstash and the new data that are flowing into Kibana comes with field. However, for the data that has already been inside Kibana, obviously it will not be affected by the …

---

## [Forum for development topics](https://discuss.elastic.co/t/forum-for-development-topics/198392)

<div class="topic-metadata">

**Author:** [@dantonag](https://discuss.elastic.co/u/dantonag)\
**Replies:** 1\
**Last updated:** [September 13, 2019, 10:45am UTC](https://discuss.elastic.co/t/forum-for-development-topics/198392 "2019-09-13T10:45:26Z")

</div>

Hello, is there a topic specific on Kibana development? For example, to ask how to do a specific thing with code, architectural questions, etc. Thanks

---

## [Upload several csv files to kibana](https://discuss.elastic.co/t/upload-several-csv-files-to-kibana/198513)

<div class="topic-metadata">

**Author:** [@yaharin\_ben\_ayon](https://discuss.elastic.co/u/yaharin_ben_ayon)\
**Replies:** 1\
**Last updated:** [September 13, 2019, 10:24am UTC](https://discuss.elastic.co/t/upload-several-csv-files-to-kibana/198513 "2019-09-13T10:24:09Z")

</div>

Hello, does anyone know how can i upload several csv files (i converted excel to csv) into kibana to work on the same dashboard? right now i can only upload one. Thank you.

---

## [Add Hyperlinks in canvas shape](https://discuss.elastic.co/t/add-hyperlinks-in-canvas-shape/197663)

<div class="topic-metadata">

**Author:** [@atamarnath](https://discuss.elastic.co/u/atamarnath)\
**Replies:** 2\
**Last updated:** [September 13, 2019, 7:57am UTC](https://discuss.elastic.co/t/add-hyperlinks-in-canvas-shape/197663 "2019-09-13T07:57:33Z")

</div>

Hi, I have created a canvas workpad that has a circular shape which changes color based on the filter condition. I have dashboard that has the drilled down information related to that shape/filter condition. I want to m…

---

## [How to embed kibana 6.8 within an iframe](https://discuss.elastic.co/t/how-to-embed-kibana-6-8-within-an-iframe/199277)

<div class="topic-metadata">

**Author:** [@amanciao](https://discuss.elastic.co/u/amanciao)\
**Replies:** 2\
**Last updated:** [September 13, 2019, 7:12am UTC](https://discuss.elastic.co/t/how-to-embed-kibana-6-8-within-an-iframe/199277 "2019-09-13T07:12:16Z")

</div>

I want to wrap kibana 6.8 within an Iframe so that I can have navbar with my own logo.

---

## [Scripted field convert string to number](https://discuss.elastic.co/t/scripted-field-convert-string-to-number/198646)

<div class="topic-metadata">

**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Replies:** 4\
**Last updated:** [September 13, 2019, 6:45am UTC](https://discuss.elastic.co/t/scripted-field-convert-string-to-number/198646 "2019-09-13T06:45:58Z")

</div>

Hi, I need to convert a string to a number. I wrote this script but it does not work and causes no data to display anymore when looking at discovery. if (doc\['stringnumber'\]) { Integer.parseInt(doc\['stringnumber'\]…

---

## [Heavy queries in Kibana](https://discuss.elastic.co/t/heavy-queries-in-kibana/199282)

<div class="topic-metadata">

**Author:** [@smerzlyakov](https://discuss.elastic.co/u/smerzlyakov)\
**Replies:** 2\
**Last updated:** [September 13, 2019, 6:02am UTC](https://discuss.elastic.co/t/heavy-queries-in-kibana/199282 "2019-09-13T06:02:24Z")

</div>

Hello! We use ELK a a SIEM solution. And sometimes we need to do heavy queries. We do not want to do it fast - it is ok, if it take an hour or more. Is it possible to do in Kibana? Like search jobs in other products. …

---

## [Time Visual Builder](https://discuss.elastic.co/t/time-visual-builder/199243)

<div class="topic-metadata">

**Author:** [@Syed.Ubaid](https://discuss.elastic.co/u/Syed.Ubaid)\
**Replies:** 3\
**Last updated:** [September 13, 2019, 4:51am UTC](https://discuss.elastic.co/t/time-visual-builder/199243 "2019-09-13T04:51:34Z")

</div>

I am using kibana interface using visual builder visualization can i add two values in the same bucket please check th e attached images In the image 1 i have 10 categories i want to add only 2 category in the 2nd imag…

---

## [Not able to create new user in kibana dashboard by the help of api](https://discuss.elastic.co/t/not-able-to-create-new-user-in-kibana-dashboard-by-the-help-of-api/199296)

<div class="topic-metadata">

**Author:** [@GRV](https://discuss.elastic.co/u/GRV)\
**Replies:** 2\
**Last updated:** [September 13, 2019, 2:16am UTC](https://discuss.elastic.co/t/not-able-to-create-new-user-in-kibana-dashboard-by-the-help-of-api/199296 "2019-09-13T02:16:04Z")

</div>

I am using kibana version 7.3, elastic search version 7.3 I am trying to create user through API. PUT /\_security/user/jacknich { "password" : "j@rV1s", "roles" : \[ "admin", "other\_role1" \], "full\_name" : "Jack Nich…

---

## [How to call lock APIs using call with request](https://discuss.elastic.co/t/how-to-call-lock-apis-using-call-with-request/199026)

<div class="topic-metadata">

**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\
**Replies:** 3\
**Last updated:** [September 12, 2019, 11:04pm UTC](https://discuss.elastic.co/t/how-to-call-lock-apis-using-call-with-request/199026 "2019-09-12T23:04:19Z")

</div>

Hello Team, Could you please help me understand how can we call lock create/ delete APIs using callwithrequest. For example PUT /FS/lock/\<index\_name\>/\_create DELETE /FS/lock/\<index\_name\>/ I'm referring to the Solvi…

---

## [What does = do in Filters?](https://discuss.elastic.co/t/what-does-do-in-filters/199291)

<div class="topic-metadata">

**Author:** [@Alan\_Home](https://discuss.elastic.co/u/Alan_Home)\
**Replies:** 3\
**Last updated:** [September 12, 2019, 9:29pm UTC](https://discuss.elastic.co/t/what-does-do-in-filters/199291 "2019-09-12T21:29:04Z")

</div>

I know the correct way to look for user 12345678 in Discover is to say userId:12345678 But if I type userId=12345678, I get every message that contains any userId. So what does = do? Does it do anything? Does Kibana…

---

## [Adding Custom Page](https://discuss.elastic.co/t/adding-custom-page/198732)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 4\
**Last updated:** [September 12, 2019, 8:36pm UTC](https://discuss.elastic.co/t/adding-custom-page/198732 "2019-09-12T20:36:19Z")

</div>

I have values that currently point to a single link for information lookup. I would like to send this data over to a custom page that has links for multiple sources of information lookup and would like the page to be ho…

---

## [Painless Cannot cast from \[java.time.LocalDateTime\] to \[double\]](https://discuss.elastic.co/t/painless-cannot-cast-from-java-time-localdatetime-to-double/198776)

<div class="topic-metadata">

**Author:** [@BrunoSdeMenezes](https://discuss.elastic.co/u/BrunoSdeMenezes)\
**Replies:** 4\
**Last updated:** [September 12, 2019, 7:42pm UTC](https://discuss.elastic.co/t/painless-cannot-cast-from-java-time-localdatetime-to-double/198776 "2019-09-12T19:42:12Z")

</div>

Hello all, I'm trying to create a scripted field that joins two fields into one. If any of fields is null, it returns the minimal LocalDateTime. The preview runs everything right, but when I try to order in the discove…

---

## [Help with custom vega visualization](https://discuss.elastic.co/t/help-with-custom-vega-visualization/199297)

<div class="topic-metadata">

**Author:** [@alvaro\_lopez](https://discuss.elastic.co/u/alvaro_lopez)\
**Replies:** 1\
**Last updated:** [September 12, 2019, 6:17pm UTC](https://discuss.elastic.co/t/help-with-custom-vega-visualization/199297 "2019-09-12T18:17:15Z")

</div>

Hello I'm new in Vega visualization, is it possible to create a visualization to compare 2 different dates in the same period? Something similar to timelion offset, for example today between 10 AM and 11 AM and last we…

---

## [Index has exceeded \[1000000\] - maximum allowed to be analyzed for highlighting](https://discuss.elastic.co/t/index-has-exceeded-1000000-maximum-allowed-to-be-analyzed-for-highlighting/199273)

<div class="topic-metadata">

**Author:** [@oobi89](https://discuss.elastic.co/u/oobi89)\
**Replies:** 2\
**Last updated:** [September 12, 2019, 6:01pm UTC](https://discuss.elastic.co/t/index-has-exceeded-1000000-maximum-allowed-to-be-analyzed-for-highlighting/199273 "2019-09-12T18:01:22Z")

</div>

Hello, I've came across strange problem when trying to get postgresql logs using Filebeats to elasticsearch and displaying it using kibana. I have configured elasticsearch with kibana and logstash on one of my server a…

---

## [Creating a custom visualization with if/switch statement](https://discuss.elastic.co/t/creating-a-custom-visualization-with-if-switch-statement/198738)

<div class="topic-metadata">

**Author:** [@druffner](https://discuss.elastic.co/u/druffner)\
**Replies:** 1\
**Last updated:** [September 12, 2019, 5:28pm UTC](https://discuss.elastic.co/t/creating-a-custom-visualization-with-if-switch-statement/198738 "2019-09-12T17:28:59Z")

</div>

Hey Forum, I am working on creating a dashboard based on connections that are made to a particular node. One of the things that I have visualized is the top 5 destination port numbers as an aggregate of all of the conne…

---

## [Calculate number of occurrences of an event and then get total percentage out of whole](https://discuss.elastic.co/t/calculate-number-of-occurrences-of-an-event-and-then-get-total-percentage-out-of-whole/198903)

<div class="topic-metadata">

**Author:** [@parmeet\_devops](https://discuss.elastic.co/u/parmeet_devops)\
**Replies:** 1\
**Last updated:** [September 12, 2019, 5:04pm UTC](https://discuss.elastic.co/t/calculate-number-of-occurrences-of-an-event-and-then-get-total-percentage-out-of-whole/198903 "2019-09-12T17:04:46Z")

</div>

I am trying to calculate the total number of occurrence of an metric (Which I am able to visualize) and then I want to calculate the percentage of occurrence out of total requests. For example: I have a metric ABC\_Code…

---

## [How to plot months on the x axis, count on the y axis and have terms displayed](https://discuss.elastic.co/t/how-to-plot-months-on-the-x-axis-count-on-the-y-axis-and-have-terms-displayed/198951)

<div class="topic-metadata">

**Author:** [@nizztizz](https://discuss.elastic.co/u/nizztizz)\
**Replies:** 1\
**Last updated:** [September 12, 2019, 4:57pm UTC](https://discuss.elastic.co/t/how-to-plot-months-on-the-x-axis-count-on-the-y-axis-and-have-terms-displayed/198951 "2019-09-12T16:57:23Z")

</div>

I want to plot a vertical bar graph where months would be at the bottom (x axis) and count would be on the y axis and I am graphing a term for each month. So i get total hits for each month for that term.

---

## [I'm so CONFUSE with the UNIQUE COUNT](https://discuss.elastic.co/t/im-so-confuse-with-the-unique-count/199005)

<div class="topic-metadata">

**Author:** [@Iceph](https://discuss.elastic.co/u/Iceph)\
**Replies:** 1\
**Last updated:** [September 12, 2019, 4:53pm UTC](https://discuss.elastic.co/t/im-so-confuse-with-the-unique-count/199005 "2019-09-12T16:53:27Z")

</div>

on my work i used the Unique count metric and suppose the value is 6 \<\< remember this value and then i would make a metric visualization i used unique count and i play value is 6 still ok but then I Filters this on …

---

## [Error attempting to use absolute date time ranges for Date Histogram](https://discuss.elastic.co/t/error-attempting-to-use-absolute-date-time-ranges-for-date-histogram/199098)

<div class="topic-metadata">

**Author:** [@Kevin\_Bourne](https://discuss.elastic.co/u/Kevin_Bourne)\
**Replies:** 1\
**Last updated:** [September 12, 2019, 4:51pm UTC](https://discuss.elastic.co/t/error-attempting-to-use-absolute-date-time-ranges-for-date-histogram/199098 "2019-09-12T16:51:55Z")

</div>

Using Kibana 7.1.1 I am attempting to create a Date Histogram Visualization from log data from an older log file that was parsed using Logstash. I want the histogram X-Axis to only show an absolute time frame like 20190…

---

## [readFromDocValues attribute from Kibana saved objects API](https://discuss.elastic.co/t/readfromdocvalues-attribute-from-kibana-saved-objects-api/199118)

<div class="topic-metadata">

**Author:** [@Ailurus](https://discuss.elastic.co/u/Ailurus)\
**Replies:** 1\
**Last updated:** [September 12, 2019, 4:46pm UTC](https://discuss.elastic.co/t/readfromdocvalues-attribute-from-kibana-saved-objects-api/199118 "2019-09-12T16:46:50Z")

</div>

Hello, I recently upgraded my ELK stack from 5.6 to 6.8. I noticed there is now a Kibana REST API to perform CRUD operations on saved objects such as index pattern. After using it to retrieve some index pattern I saw …

---

## [Creating a difference list in Kibana](https://discuss.elastic.co/t/creating-a-difference-list-in-kibana/199167)

<div class="topic-metadata">

**Author:** [@arunpmohan](https://discuss.elastic.co/u/arunpmohan)\
**Replies:** 1\
**Last updated:** [September 12, 2019, 3:15pm UTC](https://discuss.elastic.co/t/creating-a-difference-list-in-kibana/199167 "2019-09-12T15:15:54Z")

</div>

I am shipping the data from, say 10 devices using Filebeat to an index ,say data-devices Suppose the data format is as below from each device { "message": "log message goes here", "device" : "device-01" } Assuming …

---

## [Canvas -Display Time diff](https://discuss.elastic.co/t/canvas-display-time-diff/198935)

<div class="topic-metadata">

**Author:** [@cesarlino](https://discuss.elastic.co/u/cesarlino)\
**Replies:** 3\
**Last updated:** [September 12, 2019, 3:13pm UTC](https://discuss.elastic.co/t/canvas-display-time-diff/198935 "2019-09-12T15:13:20Z")

</div>

Hi, I read https://discuss.elastic.co/t/difference-between-two-datetimes-in-essql-in-canvas-no-script-fields/175471 that TIMESTAMPDIFF is not yet available for elasticsearch sql. I am wondering if there is another way t…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=605)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=607)
