# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=615

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 616

---

## [Fields not appearing in Metrics -\> Sum -\> Field drop-down](https://discuss.elastic.co/t/fields-not-appearing-in-metrics-sum-field-drop-down/195372)

<div class="topic-metadata">

**Author:** [@penguinairlines](https://discuss.elastic.co/u/penguinairlines)\
**Replies:** 3\
**Last updated:** [August 25, 2019, 11:30pm UTC](https://discuss.elastic.co/t/fields-not-appearing-in-metrics-sum-field-drop-down/195372 "2019-08-25T23:30:50Z")

</div>

I have a new index for which I'm trying to create my first dashboard, but I cannot select any of my fields! The only field I can see is log.offset. I am specifically expecting to see a field called rx\_bytes or rx\_byte…

---

## [Child "meta\_fields" fails?](https://discuss.elastic.co/t/child-meta-fields-fails/193211)

<div class="topic-metadata">

**Author:** [@Kenneth\_M\_Kolano](https://discuss.elastic.co/u/Kenneth_M_Kolano)\
**Replies:** 8\
**Last updated:** [August 25, 2019, 10:03pm UTC](https://discuss.elastic.co/t/child-meta-fields-fails/193211 "2019-08-25T22:03:15Z")

</div>

Tried updating to 7.3 today. I now get this error when opening the Discover pane, or trying to review the fields of specific indexes under "Management / Index patterns" child "meta\_fields" fails because \["meta\_fields" m…

---

## [Kibana 7.3.1 "discover" tab won't load after enabling "Stack Monitoring"](https://discuss.elastic.co/t/kibana-7-3-1-discover-tab-wont-load-after-enabling-stack-monitoring/196632)

<div class="topic-metadata">

**Author:** [@pcgeek86](https://discuss.elastic.co/u/pcgeek86)\
**Replies:** 2\
**Last updated:** [August 25, 2019, 5:11pm UTC](https://discuss.elastic.co/t/kibana-7-3-1-discover-tab-wont-load-after-enabling-stack-monitoring/196632 "2019-08-25T17:11:54Z")

</div>

I am trying to learn about Elasticsearch and Kibana. I launched both Elasticsearch 7.3.1 and Kibana 7.3.1 in Docker containers, with --net host on an Ubuntu 18.04 VM. I configured Kibana to find the Elasticsearch server …

---

## [Index issue returns empty](https://discuss.elastic.co/t/index-issue-returns-empty/196668)

<div class="topic-metadata">

**Author:** [@Greg\_Mercado](https://discuss.elastic.co/u/Greg_Mercado)\
**Replies:** 1\
**Last updated:** [August 25, 2019, 5:00pm UTC](https://discuss.elastic.co/t/index-issue-returns-empty/196668 "2019-08-25T17:00:49Z")

</div>

I am trying to create a scripted field that takes a integer status and returns a string status from a list. the doc field returns an integer value and the list returns a string when I manually input an integer, but when…

---

## [\[warning\]\[stats-collection\] \[index\_not\_found\_exception\] no such index \[.kibana\], with { resource.type="index\_or\_alias" & resource.id=".kibana"](https://discuss.elastic.co/t/warning-stats-collection-index-not-found-exception-no-such-index-kibana-with-resource-type-index-or-alias-resource-id-kibana/196663)

<div class="topic-metadata">

**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\
**Replies:** 3\
**Last updated:** [August 25, 2019, 4:52pm UTC](https://discuss.elastic.co/t/warning-stats-collection-index-not-found-exception-no-such-index-kibana-with-resource-type-index-or-alias-resource-id-kibana/196663 "2019-08-25T16:52:58Z")

</div>

Hi, I am running ES 7.3 and Kibana 7.3 ,Elasticsearch is started and running fine ,but when i start kibana i am getting below error , what is the cause? \[stats-collection\] Unable to fetch data from visualization\_types…

---

## [HELP! Kibana suricata attack map with attack lines?](https://discuss.elastic.co/t/help-kibana-suricata-attack-map-with-attack-lines/194481)

<div class="topic-metadata">

**Author:** [@iukea](https://discuss.elastic.co/u/iukea)\
**Replies:** 6\
**Last updated:** [August 25, 2019, 3:58pm UTC](https://discuss.elastic.co/t/help-kibana-suricata-attack-map-with-attack-lines/194481 "2019-08-25T15:58:54Z")

</div>

Hello, I am trying to build some cool looking maps, but I am a bit stumped. goal Trying to build an attack map out of Suricata logs I have the src\_ip address and the dst\_ip address, and my goal is to do kinda what th…

---

## [Number of hosts displayed in Kibana dashboard (is wrong)](https://discuss.elastic.co/t/number-of-hosts-displayed-in-kibana-dashboard-is-wrong/196256)

<div class="topic-metadata">

**Author:** [@JustinJ](https://discuss.elastic.co/u/JustinJ)\
**Replies:** 3\
**Last updated:** [August 25, 2019, 5:31am UTC](https://discuss.elastic.co/t/number-of-hosts-displayed-in-kibana-dashboard-is-wrong/196256 "2019-08-25T05:31:16Z")

</div>

In my cluster configuration, I have two ingest nodes, two data node and 1 kibana(coordinate node). Also, i have configured a central event collector in Windows server 2016 and installed winlog beat and filebeat on the sa…

---

## [Kibana freezing when creating TSVB](https://discuss.elastic.co/t/kibana-freezing-when-creating-tsvb/195745)

<div class="topic-metadata">

**Author:** [@pinguin](https://discuss.elastic.co/u/pinguin)\
**Replies:** 9\
**Last updated:** [August 24, 2019, 8:59am UTC](https://discuss.elastic.co/t/kibana-freezing-when-creating-tsvb/195745 "2019-08-24T08:59:26Z")

</div>

Hello, we have an elk cluster from 5 ES nodes, xpack security enabled basic license. whenever we try to create a TSVB (previously Visual Builder) visualization Kibana freezes and the java node process shows high CPU co…

---

## [Kibana+elasticsearch with authentication from elastic git repository fails](https://discuss.elastic.co/t/kibana-elasticsearch-with-authentication-from-elastic-git-repository-fails/190511)

<div class="topic-metadata">

**Author:** [@techcraft](https://discuss.elastic.co/u/techcraft)\
**Replies:** 20\
**Last updated:** [August 24, 2019, 8:17am UTC](https://discuss.elastic.co/t/kibana-elasticsearch-with-authentication-from-elastic-git-repository-fails/190511 "2019-08-24T08:17:52Z")

</div>

Hello you all, Im trying to configure kibana with elasticsearch using the xpack security module from the elastic helm official repository (https://github.com/elastic/helm-charts) I followed the guides for the security …

---

## [How to turn on query features for all Kibana users permanently](https://discuss.elastic.co/t/how-to-turn-on-query-features-for-all-kibana-users-permanently/196209)

<div class="topic-metadata">

**Author:** [@anhlqn](https://discuss.elastic.co/u/anhlqn)\
**Replies:** 3\
**Last updated:** [August 24, 2019, 6:56am UTC](https://discuss.elastic.co/t/how-to-turn-on-query-features-for-all-kibana-users-permanently/196209 "2019-08-24T06:56:18Z")

</div>

We upgraded to Elastic stack 6.8.1 recently and love the autocomplete feature on Kibana. Is there a way to turn on the "Turn on query features" permanently on all Kibana apps for all users? Currently, we have to turn …

---

## [Kibana 7.2 behind nginx](https://discuss.elastic.co/t/kibana-7-2-behind-nginx/195772)

<div class="topic-metadata">

**Author:** [@usfbh95](https://discuss.elastic.co/u/usfbh95)\
**Replies:** 7\
**Last updated:** [August 24, 2019, 1:02am UTC](https://discuss.elastic.co/t/kibana-7-2-behind-nginx/195772 "2019-08-24T01:02:06Z")

</div>

I'm trying to use nginx to authenticate users into kibana with a token that is passed as an query parameter (i.e. ?token=XXXXXX), I'm totally new to nginx and I'm facing several problem and would really appreciate some h…

---

## [ES and Kibana 5.2.2 how to use timelion to view data size ingestion per day](https://discuss.elastic.co/t/es-and-kibana-5-2-2-how-to-use-timelion-to-view-data-size-ingestion-per-day/196564)

<div class="topic-metadata">

**Author:** [@rbendik](https://discuss.elastic.co/u/rbendik)\
**Replies:** 5\
**Last updated:** [August 24, 2019, 12:28am UTC](https://discuss.elastic.co/t/es-and-kibana-5-2-2-how-to-use-timelion-to-view-data-size-ingestion-per-day/196564 "2019-08-24T00:28:39Z")

</div>

Hi all, Is there a way for me to visualize in Timelion the actual data size of the total indexes being ingested per day? .es(index=app\_log\*) shows total count. In the legend I see 'q:\* \> count' Can someone please provi…

---

## [Realtime dashboard update using Kibana from Elasticsearch Service using push notification](https://discuss.elastic.co/t/realtime-dashboard-update-using-kibana-from-elasticsearch-service-using-push-notification/196424)

<div class="topic-metadata">

**Author:** [@sxsarkar](https://discuss.elastic.co/u/sxsarkar)\
**Replies:** 7\
**Last updated:** [August 23, 2019, 10:42pm UTC](https://discuss.elastic.co/t/realtime-dashboard-update-using-kibana-from-elasticsearch-service-using-push-notification/196424 "2019-08-23T22:42:17Z")

</div>

Hi I have seen multiple discussions on sending push notification on Kibana Dashboard from Elasticsearch services so Kibana dashboard can get updated in realtime. Is it part of Kinaba 7.3 feature now, I know earlier it wa…

---

## [New Control visualization with scripted field](https://discuss.elastic.co/t/new-control-visualization-with-scripted-field/196284)

<div class="topic-metadata">

**Author:** [@Chris\_Sarkkinen](https://discuss.elastic.co/u/Chris_Sarkkinen)\
**Replies:** 3\
**Last updated:** [August 23, 2019, 9:01pm UTC](https://discuss.elastic.co/t/new-control-visualization-with-scripted-field/196284 "2019-08-23T21:01:15Z")

</div>

I’m currently pulling data from Pipedrive and would like to make a new control filter that would be based on string values in my data. My index contains Deal\_title that is in the form - CompanyName Ltd (xxxx) The inform…

---

## [Discover: view limited fields -\> export: all used fields](https://discuss.elastic.co/t/discover-view-limited-fields-export-all-used-fields/196289)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 3\
**Last updated:** [August 23, 2019, 8:11pm UTC](https://discuss.elastic.co/t/discover-view-limited-fields-export-all-used-fields/196289 "2019-08-23T20:11:37Z")

</div>

Hi, we want to use elastic stack to aggregate logs and to filter easily for errors and corresponding stack traces. We also want to combine multiple log files, that we can trace the function calls by the logs. Target is…

---

## [Raw Data Visualization Plugin](https://discuss.elastic.co/t/raw-data-visualization-plugin/196577)

<div class="topic-metadata">

**Author:** [@ekappotis](https://discuss.elastic.co/u/ekappotis)\
**Replies:** 1\
**Last updated:** [August 23, 2019, 7:46pm UTC](https://discuss.elastic.co/t/raw-data-visualization-plugin/196577 "2019-08-23T19:46:34Z")

</div>

Hello, I am attempting to develop a Visualization plugin. I would like to be able to get the raw index data (filtered or not) from the elastic search and then allow my visualization to aggregate it correctly. Is there …

---

## [Read env on kibana load](https://discuss.elastic.co/t/read-env-on-kibana-load/195239)

<div class="topic-metadata">

**Author:** [@Ali\_Muhammad](https://discuss.elastic.co/u/Ali_Muhammad)\
**Replies:** 1\
**Last updated:** [August 23, 2019, 7:10pm UTC](https://discuss.elastic.co/t/read-env-on-kibana-load/195239 "2019-08-23T19:10:05Z")

</div>

Hi. In continuation to post, i have another question. There are a bunch of redirects that we hit on kibana load using hack.js file. In order to read env at this level the method using injectUiAppVars doesn't work since …

---

## [Creating a Vertical bar from json](https://discuss.elastic.co/t/creating-a-vertical-bar-from-json/195994)

<div class="topic-metadata">

**Author:** [@aayushg](https://discuss.elastic.co/u/aayushg)\
**Replies:** 2\
**Last updated:** [August 23, 2019, 6:36pm UTC](https://discuss.elastic.co/t/creating-a-vertical-bar-from-json/195994 "2019-08-23T18:36:49Z")

</div>

Hi - I want to create a Vertical bar depicting count on Y-axis and State/status of files in X-axis. Hovering/Drilling down/Clicking on each bar should show files names. The state of files would be updated every hour. I…

---

## [How to open file from Kibana using path.real (or any other data) from Fscrawler](https://discuss.elastic.co/t/how-to-open-file-from-kibana-using-path-real-or-any-other-data-from-fscrawler/196435)

<div class="topic-metadata">

**Author:** [@ymorayko](https://discuss.elastic.co/u/ymorayko)\
**Replies:** 4\
**Last updated:** [August 23, 2019, 6:25pm UTC](https://discuss.elastic.co/t/how-to-open-file-from-kibana-using-path-real-or-any-other-data-from-fscrawler/196435 "2019-08-23T18:25:21Z")

</div>

Hello everyone. I am new to Elasticsearch. I am indexing some pdf, word files using Fscrawler (which works great!) and using Kibana to filter, search. I am wandering if there is a way to open file from Kibana using the…

---

## [Machine learning - Series point shown as anomaly even if inside model plot bounds](https://discuss.elastic.co/t/machine-learning-series-point-shown-as-anomaly-even-if-inside-model-plot-bounds/196513)

<div class="topic-metadata">

**Author:** [@dantonag](https://discuss.elastic.co/u/dantonag)\
**Replies:** 1\
**Last updated:** [August 23, 2019, 6:17pm UTC](https://discuss.elastic.co/t/machine-learning-series-point-shown-as-anomaly-even-if-inside-model-plot-bounds/196513 "2019-08-23T18:17:00Z")

</div>

Hello, Kibana 6.8.0 and Elastic 6.8.0 here. Some machine learning job show points inside the model plot band as anomalies. Is this a normal behaviour or not? In the attached image you can find an example of this beha…

---

## [Metricbeat host overview dashboard filter](https://discuss.elastic.co/t/metricbeat-host-overview-dashboard-filter/196389)

<div class="topic-metadata">

**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\
**Replies:** 2\
**Last updated:** [August 23, 2019, 5:56pm UTC](https://discuss.elastic.co/t/metricbeat-host-overview-dashboard-filter/196389 "2019-08-23T17:56:59Z")

</div>

Hi, I have setup a host "elksrv" with elasticsearch, kibana and logstash. then i configured a second server "elk-lab" with metricbeat and filebeat. When i configure metricbeat on "elk-lab" i configured setup.dashboards.…

---

## [Visualisation - Term Aggregate on field alias](https://discuss.elastic.co/t/visualisation-term-aggregate-on-field-alias/193087)

<div class="topic-metadata">

**Author:** [@pisxx](https://discuss.elastic.co/u/pisxx)\
**Replies:** 1\
**Last updated:** [August 23, 2019, 4:04pm UTC](https://discuss.elastic.co/t/visualisation-term-aggregate-on-field-alias/193087 "2019-08-23T16:04:17Z")

</div>

Hi, I wanted to ask if it is possible to use Term aggregation on field alias? We have logs from mutiple sources and I wanted to have a data table visualisation with IP count. I created an index alias to combine to be …

---

## [Problem with last 15 minute date time filter in Kibana](https://discuss.elastic.co/t/problem-with-last-15-minute-date-time-filter-in-kibana/196441)

<div class="topic-metadata">

**Author:** [@Sharma3007](https://discuss.elastic.co/u/Sharma3007)\
**Replies:** 1\
**Last updated:** [August 23, 2019, 3:31pm UTC](https://discuss.elastic.co/t/problem-with-last-15-minute-date-time-filter-in-kibana/196441 "2019-08-23T15:31:23Z")

</div>

Hi Team, I am getting date time filter issue in Kibana. My log has been generated on machine in Italy timezone . When I try to apply last 15 minute filter then no result found. When I apply with today filter it will d…

---

## [Show most recent documents by entity](https://discuss.elastic.co/t/show-most-recent-documents-by-entity/195929)

<div class="topic-metadata">

**Author:** [@dominikw](https://discuss.elastic.co/u/dominikw)\
**Replies:** 10\
**Last updated:** [August 23, 2019, 3:17pm UTC](https://discuss.elastic.co/t/show-most-recent-documents-by-entity/195929 "2019-08-23T15:17:11Z")

</div>

Hi, I'm trying to use one of the features introduced in Kibana 7.3 for Maps. I'm tracking vehicles, and because of that I have a lot of documents with Geo-points and indices of object. When I'm adding a new layer I wa…

---

## [What does timelion return in zero division (kibana 7.1.1)?](https://discuss.elastic.co/t/what-does-timelion-return-in-zero-division-kibana-7-1-1/196228)

<div class="topic-metadata">

**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Replies:** 1\
**Last updated:** [August 23, 2019, 2:21pm UTC](https://discuss.elastic.co/t/what-does-timelion-return-in-zero-division-kibana-7-1-1/196228 "2019-08-23T14:21:27Z")

</div>

I would like to ask question about timelion. (1) Below code displays no chart. .static(1).divide(0) It seems that zero is not the value return from divide .static(1).divide(0).if(eq, 0, 0 ,1) null is also not th…

---

## [Canvas ESSQL current date - 30 days query](https://discuss.elastic.co/t/canvas-essql-current-date-30-days-query/193486)

<div class="topic-metadata">

**Author:** [@samgs](https://discuss.elastic.co/u/samgs)\
**Replies:** 4\
**Last updated:** [August 23, 2019, 12:14pm UTC](https://discuss.elastic.co/t/canvas-essql-current-date-30-days-query/193486 "2019-08-23T12:14:21Z")

</div>

Hello! I'm trying to make a relative date query in elasticsearch SQL. I have this code: SELECT \* FROM index WHERE date \> CURRENT\_DATE - INTERVAL '30' DAY Which seems to be correct. However when I run it, it gives the f…

---

## [Kibana dashboard only User](https://discuss.elastic.co/t/kibana-dashboard-only-user/194155)

<div class="topic-metadata">

**Author:** [@vinu89](https://discuss.elastic.co/u/vinu89)\
**Replies:** 8\
**Last updated:** [August 23, 2019, 10:06am UTC](https://discuss.elastic.co/t/kibana-dashboard-only-user/194155 "2019-08-23T10:06:59Z")

</div>

Hi, I have setup kibana 7.3 i need some of my teammates to view only the kibana dashboard so i created the new user and assigned role as kibana dashboard only user the user was successfully created.When they login login…

---

## [Problem dynamically render image in canvas](https://discuss.elastic.co/t/problem-dynamically-render-image-in-canvas/196266)

<div class="topic-metadata">

**Author:** [@LacioDrom](https://discuss.elastic.co/u/LacioDrom)\
**Replies:** 2\
**Last updated:** [August 23, 2019, 8:25am UTC](https://discuss.elastic.co/t/problem-dynamically-render-image-in-canvas/196266 "2019-08-23T08:25:31Z")

</div>

Hi all, I'm new with canvas expression language, so probably my question is trivial: I'm trying to dinamically render an image in a canvas using switch statement, but I've got this error: Here my code: filters …

---

## [Maps / Apply global filter to main vector layer and/or joined source only](https://discuss.elastic.co/t/maps-apply-global-filter-to-main-vector-layer-and-or-joined-source-only/196247)

<div class="topic-metadata">

**Author:** [@fxprunayre](https://discuss.elastic.co/u/fxprunayre)\
**Replies:** 2\
**Last updated:** [August 23, 2019, 8:23am UTC](https://discuss.elastic.co/t/maps-apply-global-filter-to-main-vector-layer-and-or-joined-source-only/196247 "2019-08-23T08:23:04Z")

</div>

Hi, Would it make sense to add an option to decide if the global filter has to be applied to the vector layer and/or the join layer only? In a number of situation, the vector layer may be a background map (eg. admin bo…

---

## [Passing user and password from Angulat to kibana Iframe](https://discuss.elastic.co/t/passing-user-and-password-from-angulat-to-kibana-iframe/195902)

<div class="topic-metadata">

**Author:** [@haythem](https://discuss.elastic.co/u/haythem)\
**Replies:** 4\
**Last updated:** [August 23, 2019, 8:08am UTC](https://discuss.elastic.co/t/passing-user-and-password-from-angulat-to-kibana-iframe/195902 "2019-08-23T08:08:22Z")

</div>

hi guys , i'm new to the ELK stack , so i have an angular web application that displays iframe kibana dashboard , so my problem is that kibana asks for user and password in the application and i have already a login page…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=614)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=616)
