# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=64

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 65

---

## [Kibana dashboard - drill down to dashboard into new tab - want to keep embed=true](https://discuss.elastic.co/t/kibana-dashboard-drill-down-to-dashboard-into-new-tab-want-to-keep-embed-true/354985)

<div class="topic-metadata">

**Author:** [@longtake](https://discuss.elastic.co/u/longtake)\
**Replies:** 2\
**Last updated:** [March 13, 2024, 11:23am UTC](https://discuss.elastic.co/t/kibana-dashboard-drill-down-to-dashboard-into-new-tab-want-to-keep-embed-true/354985 "2024-03-13T11:23:40Z")

</div>

Hi there In one of my spaces, I have a dashboard which is opened from a canvas link which includes the embed=true parameter to prevent the elastic top menu showing. If I create a drilldown to another dashboard from this…

---

## [Fleet UI not displaying CPU and Memory stats for some agents](https://discuss.elastic.co/t/fleet-ui-not-displaying-cpu-and-memory-stats-for-some-agents/354468)

<div class="topic-metadata">

**Author:** [@elastic\_fan](https://discuss.elastic.co/u/elastic_fan)\
**Replies:** 3\
**Last updated:** [March 13, 2024, 9:47am UTC](https://discuss.elastic.co/t/fleet-ui-not-displaying-cpu-and-memory-stats-for-some-agents/354468 "2024-03-13T09:47:42Z")

</div>

Hello, I have some agents that are not showing their CPU and Memory usage on the fleet page, but do have the metric updating every few seconds on the agent details page. Elasticsearch version 8.8.2 Elastic agent versi…

---

## [Issues with setting up urltemplate in Kibana](https://discuss.elastic.co/t/issues-with-setting-up-urltemplate-in-kibana/355262)

<div class="topic-metadata">

**Author:** [@b2ron](https://discuss.elastic.co/u/b2ron)\
**Replies:** 1\
**Last updated:** [March 13, 2024, 8:58am UTC](https://discuss.elastic.co/t/issues-with-setting-up-urltemplate-in-kibana/355262 "2024-03-13T08:58:31Z")

</div>

Question 1: How to use fields from the document in urltemplate instead of {{value}}? While configuring urltemplate in Kibana, I've encountered an issue. I'm attempting to include another field from the document in the q…

---

## [Kibana 7 inline script wildcard on viz converts to incorrect filter query within dash](https://discuss.elastic.co/t/kibana-7-inline-script-wildcard-on-viz-converts-to-incorrect-filter-query-within-dash/355268)

<div class="topic-metadata">

**Author:** [@TimC](https://discuss.elastic.co/u/TimC)\
**Replies:** 0\
**Last updated:** [March 13, 2024, 1:07am UTC](https://discuss.elastic.co/t/kibana-7-inline-script-wildcard-on-viz-converts-to-incorrect-filter-query-within-dash/355268 "2024-03-13T01:07:17Z")

</div>

I was trying to come up with a way to store filters with a Dashboard since I had read that is not possible, and I found this bug where inline is not converting to query dsl correctly when used between a visualization and…

---

## [Fleet permissons](https://discuss.elastic.co/t/fleet-permissons/353465)

<div class="topic-metadata">

**Author:** [@Dilma\_David](https://discuss.elastic.co/u/Dilma_David)\
**Replies:** 1\
**Last updated:** [March 12, 2024, 4:44pm UTC](https://discuss.elastic.co/t/fleet-permissons/353465 "2024-03-12T16:44:08Z")

</div>

Hello, I am trying to use the Elastic search for the first time, I installed Elasticsearch and Kibana in an Ubunto Virtual Machine in VirtualBox. Now Im trying to configure the fleet and Elastic Agent, but I am havi…

---

## [Kibana - cant connect to self hosted elastic](https://discuss.elastic.co/t/kibana-cant-connect-to-self-hosted-elastic/355190)

<div class="topic-metadata">

**Author:** [@Nick\_Dart](https://discuss.elastic.co/u/Nick_Dart)\
**Replies:** 2\
**Last updated:** [March 12, 2024, 2:50pm UTC](https://discuss.elastic.co/t/kibana-cant-connect-to-self-hosted-elastic/355190 "2024-03-12T14:50:28Z")

</div>

Hi there, I recently launched my self hosted elastic service, but I can't get Kibana to connect to it. In my browser, I can access the instance i.e. health, license using a username + password. However, when launching …

---

## [Rounding error in lens sum aggregation (8.12.1)](https://discuss.elastic.co/t/rounding-error-in-lens-sum-aggregation-8-12-1/355141)

<div class="topic-metadata">

**Author:** [@Jim\_Panzee](https://discuss.elastic.co/u/Jim_Panzee)\
**Replies:** 12\
**Last updated:** [March 12, 2024, 1:59pm UTC](https://discuss.elastic.co/t/rounding-error-in-lens-sum-aggregation-8-12-1/355141 "2024-03-12T13:59:38Z")

</div>

I have the same three values reoccurring every 10 seconds as shown in Discover: (Here was a picture, I couldn't post, because I'm a new user.) The sum should add up to 1.642. This also shows in lens in an area visualiz…

---

## [Which version of elasticsearch solve the CVE-2022-1471(snakeyaml need bump to 2.0 version)](https://discuss.elastic.co/t/which-version-of-elasticsearch-solve-the-cve-2022-1471-snakeyaml-need-bump-to-2-0-version/355162)

<div class="topic-metadata">

**Author:** [@DeBruyne2020](https://discuss.elastic.co/u/DeBruyne2020)\
**Replies:** 1\
**Last updated:** [March 12, 2024, 10:12am UTC](https://discuss.elastic.co/t/which-version-of-elasticsearch-solve-the-cve-2022-1471-snakeyaml-need-bump-to-2-0-version/355162 "2024-03-12T10:12:03Z")

</div>

I have a question ： the elasticsearch that I use now( version 7.11.2) has CVE-2022-1471 (about snakeyaml), which version of elasticsearch solve this problem ? (As I know, snakeyaml need bump to 2.0 version which solv…

---

## [What privilege required for Dev Tools to show in Kibana?](https://discuss.elastic.co/t/what-privilege-required-for-dev-tools-to-show-in-kibana/354881)

<div class="topic-metadata">

**Author:** [@qd-danh](https://discuss.elastic.co/u/qd-danh)\
**Replies:** 1\
**Last updated:** [March 11, 2024, 10:30pm UTC](https://discuss.elastic.co/t/what-privilege-required-for-dev-tools-to-show-in-kibana/354881 "2024-03-11T22:30:28Z")

</div>

Title pretty much says it all. I have added the Kibana Privilege for "Dev Tools" to the space, but users with this role still don't see Dev Tools in the menu, or can't type it in the search bar at the top. I understand…

---

## [Failed to start Kibana after upgrade 7.17 to 8.12](https://discuss.elastic.co/t/failed-to-start-kibana-after-upgrade-7-17-to-8-12/355032)

<div class="topic-metadata">

**Author:** [@michael8](https://discuss.elastic.co/u/michael8)\
**Replies:** 5\
**Last updated:** [March 11, 2024, 1:26pm UTC](https://discuss.elastic.co/t/failed-to-start-kibana-after-upgrade-7-17-to-8-12/355032 "2024-03-11T13:26:02Z")

</div>

Hi, I've already looked through all the posts about errors and I can't find a solution for myself. After updating Kibana from 7.17 to 8.12, Kibana does not want to start. All errors were previously eliminated. Elastic…

---

## [Operate with sum-bucket?](https://discuss.elastic.co/t/operate-with-sum-bucket/355154)

<div class="topic-metadata">

**Author:** [@Kilastic](https://discuss.elastic.co/u/Kilastic)\
**Replies:** 0\
**Last updated:** [March 11, 2024, 12:39pm UTC](https://discuss.elastic.co/t/operate-with-sum-bucket/355154 "2024-03-11T12:39:23Z")

</div>

Hello. Please can someone help me to create a calculated data field? I have a table that shows: API name (Split rows, aggregation Terms of API name field) API version (Split rows, aggregation Terms of API version fiel…

---

## [CSV exports alignment problem at every 500 events](https://discuss.elastic.co/t/csv-exports-alignment-problem-at-every-500-events/355139)

<div class="topic-metadata">

**Author:** [@ismailctest\_C](https://discuss.elastic.co/u/ismailctest_C)\
**Replies:** 1\
**Last updated:** [March 11, 2024, 11:31am UTC](https://discuss.elastic.co/t/csv-exports-alignment-problem-at-every-500-events/355139 "2024-03-11T11:31:45Z")

</div>

Hi Team, Facing alignment issues at every 500 events when generating csv reports from Discover. Please find the attached sample screenshot. In this screenshot, TLS version moved to the subject column after 500 lines, …

---

## [Kibana stores "Jan 2001 - now" instead of configured time in dashboard](https://discuss.elastic.co/t/kibana-stores-jan-2001-now-instead-of-configured-time-in-dashboard/355127)

<div class="topic-metadata">

**Author:** [@snicoll](https://discuss.elastic.co/u/snicoll)\
**Replies:** 2\
**Last updated:** [March 11, 2024, 9:36am UTC](https://discuss.elastic.co/t/kibana-stores-jan-2001-now-instead-of-configured-time-in-dashboard/355127 "2024-03-11T09:36:46Z")

</div>

I don't understand if this is something I am doing wrong or if that's an issue in Kibana. I've created a new space, with a visualization and a dashboard. It's showing download rate for which we have data several times a …

---

## [Kibana Stack Monitoring Total Shards](https://discuss.elastic.co/t/kibana-stack-monitoring-total-shards/354704)

<div class="topic-metadata">

**Author:** [@CCee](https://discuss.elastic.co/u/CCee)\
**Replies:** 2\
**Last updated:** [March 11, 2024, 3:59am UTC](https://discuss.elastic.co/t/kibana-stack-monitoring-total-shards/354704 "2024-03-11T03:59:21Z")

</div>

Hello, I saw the value of "Total shards" in stack monitoring within Kibana. How is this value obtained? Can I set up an alert for this value? For example, send an email if total shards \> 800, given the default value is …

---

## [Alerting - Search Threshold/ES Query Rule](https://discuss.elastic.co/t/alerting-search-threshold-es-query-rule/354553)

<div class="topic-metadata">

**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\
**Replies:** 5\
**Last updated:** [March 8, 2024, 9:33pm UTC](https://discuss.elastic.co/t/alerting-search-threshold-es-query-rule/354553 "2024-03-08T21:33:00Z")

</div>

Hello, So I created a rule with filters to alert me if a specific document comes. This is working as expected. I was wondering since I am using {{context.hits}} to read through the documents. I was wondering how can I …

---

## [Automate setting fleet outputs to remote\_elasticsearch in kibana.yml](https://discuss.elastic.co/t/automate-setting-fleet-outputs-to-remote-elasticsearch-in-kibana-yml/354953)

<div class="topic-metadata">

**Author:** [@0lzi](https://discuss.elastic.co/u/0lzi)\
**Replies:** 2\
**Last updated:** [March 8, 2024, 2:21pm UTC](https://discuss.elastic.co/t/automate-setting-fleet-outputs-to-remote-elasticsearch-in-kibana-yml/354953 "2024-03-08T14:21:01Z")

</div>

Hi, Im currently trying to automate kibana setup using ansible. I can configure the outputs and the fleetServerHosts, but the agents do not come online until i go into the UI to add the service token to the outputs. cu…

---

## [Elastic Latest Transform is not working if sync time and sort time is different](https://discuss.elastic.co/t/elastic-latest-transform-is-not-working-if-sync-time-and-sort-time-is-different/355001)

<div class="topic-metadata">

**Author:** [@shivaraj\_kv](https://discuss.elastic.co/u/shivaraj_kv)\
**Replies:** 6\
**Last updated:** [March 8, 2024, 1:44pm UTC](https://discuss.elastic.co/t/elastic-latest-transform-is-not-working-if-sync-time-and-sort-time-is-different/355001 "2024-03-08T13:44:19Z")

</div>

{ "id": "poc.transform", "version": "7.17.11", "create\_time": 1709818588566, "source": { "index": \[ "poc.test.source\*" \], "query": { "match\_all": {} } }, "dest": { "index": "po…

---

## [Can I replicate the same dashboard for different index pattern?](https://discuss.elastic.co/t/can-i-replicate-the-same-dashboard-for-different-index-pattern/354937)

<div class="topic-metadata">

**Author:** [@sudhir\_singh1](https://discuss.elastic.co/u/sudhir_singh1)\
**Replies:** 1\
**Last updated:** [March 8, 2024, 1:15pm UTC](https://discuss.elastic.co/t/can-i-replicate-the-same-dashboard-for-different-index-pattern/354937 "2024-03-08T13:15:37Z")

</div>

Can I replicate the same dashboard with all the visualization for different index pattern so I don't have to create again a new dashboard for new index pattern

---

## [Kibana CSP configuration](https://discuss.elastic.co/t/kibana-csp-configuration/353681)

<div class="topic-metadata">

**Author:** [@ishank](https://discuss.elastic.co/u/ishank)\
**Replies:** 1\
**Last updated:** [March 8, 2024, 1:10pm UTC](https://discuss.elastic.co/t/kibana-csp-configuration/353681 "2024-03-08T13:10:20Z")

</div>

Hi I am having difficulty changing CSP configuration in kibana.yml file. I have tried multiple ways to change like: csp.script\_src: "'self' 'unsafe-eval' 'unsafe-inline';" csp.script\_src: \['self', 'unsafe-eval', 'unsa…

---

## [\[kibana 8.12.1\] Plugin generator generates a plugin shows server error](https://discuss.elastic.co/t/kibana-8-12-1-plugin-generator-generates-a-plugin-shows-server-error/354103)

<div class="topic-metadata">

**Author:** [@Theone0305](https://discuss.elastic.co/u/Theone0305)\
**Replies:** 1\
**Last updated:** [March 8, 2024, 12:55pm UTC](https://discuss.elastic.co/t/kibana-8-12-1-plugin-generator-generates-a-plugin-shows-server-error/354103 "2024-03-08T12:55:13Z")

</div>

Hi, I use Kibana 8.12.1 and make kiban plugin using " \[kbn-plugin-generator \] . \[kibana/packages/kbn-plugin-generator at main · elastic/kibana · GitHub \]. Unfortunately, after generating the plug-in and starting with "y…

---

## [Can kibana 7.4.2 enable automatic monthly auto-creation of indexes for different spaces?](https://discuss.elastic.co/t/can-kibana-7-4-2-enable-automatic-monthly-auto-creation-of-indexes-for-different-spaces/354613)

<div class="topic-metadata">

**Author:** [@wangyu](https://discuss.elastic.co/u/wangyu)\
**Replies:** 1\
**Last updated:** [March 8, 2024, 11:44am UTC](https://discuss.elastic.co/t/can-kibana-7-4-2-enable-automatic-monthly-auto-creation-of-indexes-for-different-spaces/354613 "2024-03-08T11:44:22Z")

</div>

I use space in ELK to put different indexes in different space： my indexes are created on a monthly basis, part of my logstash is configured as shown below: Currently I create indexes manually, is it possible to …

---

## [duplicated index patterns elasticsearch after import objects ?](https://discuss.elastic.co/t/duplicated-index-patterns-elasticsearch-after-import-objects/354823)

<div class="topic-metadata">

**Author:** [@Ofek\_avigdor1](https://discuss.elastic.co/u/Ofek_avigdor1)\
**Replies:** 1\
**Last updated:** [March 8, 2024, 11:22am UTC](https://discuss.elastic.co/t/duplicated-index-patterns-elasticsearch-after-import-objects/354823 "2024-03-08T11:22:08Z")

</div>

I create dashboards and want to move them between different environments on which I have elastic. What happens when I import the dashboard from one environment to another I get another filebeat index pattern. It is impor…

---

## [Creating dashboard panels with code](https://discuss.elastic.co/t/creating-dashboard-panels-with-code/354617)

<div class="topic-metadata">

**Author:** [@upizs](https://discuss.elastic.co/u/upizs)\
**Replies:** 1\
**Last updated:** [March 8, 2024, 10:33am UTC](https://discuss.elastic.co/t/creating-dashboard-panels-with-code/354617 "2024-03-08T10:33:49Z")

</div>

Hello, I have created a rich dashboard of panels for visual reasons. However this dashboard is incomplete, I need to now copy paste this panels and repeat the process some 50+ more times to show all what we need. I have…

---

## [Create a query that looks for list of names/numbers](https://discuss.elastic.co/t/create-a-query-that-looks-for-list-of-names-numbers/354825)

<div class="topic-metadata">

**Author:** [@thomas4](https://discuss.elastic.co/u/thomas4)\
**Replies:** 1\
**Last updated:** [March 8, 2024, 10:29am UTC](https://discuss.elastic.co/t/create-a-query-that-looks-for-list-of-names-numbers/354825 "2024-03-08T10:29:53Z")

</div>

cIs there a way i can use a query like below to look for any name like this GY-CAD2-10C-001, rather than creating a filter and writing in 30-50 entries, can you create a query that will look for the all that start with G…

---

## [No notification from Alert if still Active after Maintenance Window ends](https://discuss.elastic.co/t/no-notification-from-alert-if-still-active-after-maintenance-window-ends/353116)

<div class="topic-metadata">

**Author:** [@mkf1](https://discuss.elastic.co/u/mkf1)\
**Replies:** 1\
**Last updated:** [March 8, 2024, 10:19am UTC](https://discuss.elastic.co/t/no-notification-from-alert-if-still-active-after-maintenance-window-ends/353116 "2024-03-08T10:19:16Z")

</div>

Hi, I have alert rules with actions that send notifications to a Teams channel. I have setup a Maintenance Windows for Sundays between 12:00 AM and 05:00 AM to suppress any notifications during this time period. I hav…

---

## [Kibana Maps - adding filter hides layers which dont have the filter field](https://discuss.elastic.co/t/kibana-maps-adding-filter-hides-layers-which-dont-have-the-filter-field/354773)

<div class="topic-metadata">

**Author:** [@longtake](https://discuss.elastic.co/u/longtake)\
**Replies:** 5\
**Last updated:** [March 7, 2024, 9:10pm UTC](https://discuss.elastic.co/t/kibana-maps-adding-filter-hides-layers-which-dont-have-the-filter-field/354773 "2024-03-07T21:10:23Z")

</div>

Say I have 2 layers on a map view which shows plots from elastic index documents. Say the first layer comes from index1 which has say fields "field1", "field2" + a geopoint And the second layer from index2 which has fi…

---

## [Lens: Line Graph Keyword Fields](https://discuss.elastic.co/t/lens-line-graph-keyword-fields/352556)

<div class="topic-metadata">

**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\
**Replies:** 5\
**Last updated:** [March 7, 2024, 7:38pm UTC](https://discuss.elastic.co/t/lens-line-graph-keyword-fields/352556 "2024-03-07T19:38:55Z")

</div>

Hello , I am attempting to create a line graph where it can show a change in field's value. This field is a keyword. is this possible?

---

## [Find index with conflicting field](https://discuss.elastic.co/t/find-index-with-conflicting-field/354963)

<div class="topic-metadata">

**Author:** [@Balu](https://discuss.elastic.co/u/Balu)\
**Replies:** 2\
**Last updated:** [March 7, 2024, 3:41pm UTC](https://discuss.elastic.co/t/find-index-with-conflicting-field/354963 "2024-03-07T15:41:32Z")

</div>

Hello, I do have fields in indexes that are listed as "Mapping conflict" (keyword, IP for example). I know I have to reindex documents to fix that, but how I do I figure out what indices have the wrong type of a field? …

---

## [Yarn build --skip-os-packages --release removes added dependencies](https://discuss.elastic.co/t/yarn-build-skip-os-packages-release-removes-added-dependencies/353417)

<div class="topic-metadata">

**Author:** [@Dallas\_Toth](https://discuss.elastic.co/u/Dallas_Toth)\
**Replies:** 6\
**Last updated:** [March 7, 2024, 3:06pm UTC](https://discuss.elastic.co/t/yarn-build-skip-os-packages-release-removes-added-dependencies/353417 "2024-03-07T15:06:13Z")

</div>

We have a plugin that we have built that we are now needing to add additional dependencies to. yarn add react-paginate@^8.2.0 react-tooltip@^5.26.2 yarn kbn bootstrap respects that these dependencies exist and will incl…

---

## [Need to check whether counts of specific URL at specific hour is crossing the average value of last week for that specified hour](https://discuss.elastic.co/t/need-to-check-whether-counts-of-specific-url-at-specific-hour-is-crossing-the-average-value-of-last-week-for-that-specified-hour/354839)

<div class="topic-metadata">

**Author:** [@2328943\_dc](https://discuss.elastic.co/u/2328943_dc)\
**Replies:** 0\
**Last updated:** [March 6, 2024, 12:26pm UTC](https://discuss.elastic.co/t/need-to-check-whether-counts-of-specific-url-at-specific-hour-is-crossing-the-average-value-of-last-week-for-that-specified-hour/354839 "2024-03-06T12:26:02Z")

</div>

Dear Team, We need to check whether counts of specific URL at specific hour is crossing the average value of last week for that specific hour. Example, As shown in above charts, we need to highlight when the averag…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=63)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=65)
