# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=685

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 686

---

## [Scripted field internals](https://discuss.elastic.co/t/scripted-field-internals/176468)

<div class="topic-metadata">

**Author:** [@ravitandur](https://discuss.elastic.co/u/ravitandur)\
**Replies:** 4\
**Last updated:** [April 13, 2019, 9:06am UTC](https://discuss.elastic.co/t/scripted-field-internals/176468 "2019-04-13T09:06:47Z")

</div>

Hi , Can someone please explain how scripted fields works internally. For ex. If I add a scripted field which extract the numeric value from existing field using regular expression and used in aggregations. I want to u…

---

## [Can not import or export Dashboard](https://discuss.elastic.co/t/can-not-import-or-export-dashboard/176301)

<div class="topic-metadata">

**Author:** [@oldcodeoberyn](https://discuss.elastic.co/u/oldcodeoberyn)\
**Replies:** 2\
**Last updated:** [April 13, 2019, 3:22am UTC](https://discuss.elastic.co/t/can-not-import-or-export-dashboard/176301 "2019-04-13T03:22:19Z")

</div>

I try with kibana V6.5.4 and V6.6.1, both are the same: no handler found for uri But even in the document of V6.7.0, it do not mention that this API are not available

---

## [Multi-metric Job](https://discuss.elastic.co/t/multi-metric-job/176213)

<div class="topic-metadata">

**Author:** [@Prabhav](https://discuss.elastic.co/u/Prabhav)\
**Replies:** 5\
**Last updated:** [April 12, 2019, 7:41pm UTC](https://discuss.elastic.co/t/multi-metric-job/176213 "2019-04-12T19:41:26Z")

</div>

I have been trying to perform some tasks for anomaly detection and was using the multi metric viewer to analyze so. But couldn't understand why the the split data field was showing so many metrics? In all the tutoria…

---

## [How to aggregate values by term to make an avarage of the result set?](https://discuss.elastic.co/t/how-to-aggregate-values-by-term-to-make-an-avarage-of-the-result-set/176487)

<div class="topic-metadata">

**Author:** [@allanforms](https://discuss.elastic.co/u/allanforms)\
**Replies:** 2\
**Last updated:** [April 12, 2019, 6:33pm UTC](https://discuss.elastic.co/t/how-to-aggregate-values-by-term-to-make-an-avarage-of-the-result-set/176487 "2019-04-12T18:33:18Z")

</div>

I would like to make an aggregation (or "sql group by" like action) to a index, so the result can be used to make a line chart of the average value of that result set, like this -Index data: |attendance id|clerk id|hou…

---

## [Inspect missing from Dashboard and Embed mode](https://discuss.elastic.co/t/inspect-missing-from-dashboard-and-embed-mode/176509)

<div class="topic-metadata">

**Author:** [@jasmineL](https://discuss.elastic.co/u/jasmineL)\
**Replies:** 2\
**Last updated:** [April 12, 2019, 6:30pm UTC](https://discuss.elastic.co/t/inspect-missing-from-dashboard-and-embed-mode/176509 "2019-04-12T18:30:41Z")

</div>

Hi, We are trying to migrate to 6.6 and doing some exploration. But I found the spy mode which is in 5.6 is no longer there on dashboard. I do see Inspect on visualization page. Do I miss anything? If inspect is not a…

---

## [Sum of Several "Top Hit" Values in Table or as a Metric](https://discuss.elastic.co/t/sum-of-several-top-hit-values-in-table-or-as-a-metric/173526)

<div class="topic-metadata">

**Author:** [@gehogan3](https://discuss.elastic.co/u/gehogan3)\
**Replies:** 3\
**Last updated:** [April 12, 2019, 6:21pm UTC](https://discuss.elastic.co/t/sum-of-several-top-hit-values-in-table-or-as-a-metric/173526 "2019-04-12T18:21:10Z")

</div>

Hello Everyone, I have been knocking my head against the screen trying to figure this out, but the solution is being very elusive to this ES Novice. Say my data looks something like this: timestamp, location, number o…

---

## [Timeline bar chart in Kibana](https://discuss.elastic.co/t/timeline-bar-chart-in-kibana/176416)

<div class="topic-metadata">

**Author:** [@Borivoj\_Vlk](https://discuss.elastic.co/u/Borivoj_Vlk)\
**Replies:** 1\
**Last updated:** [April 12, 2019, 6:06pm UTC](https://discuss.elastic.co/t/timeline-bar-chart-in-kibana/176416 "2019-04-12T18:06:30Z")

</div>

Hi All, I would like to create a timeline bar chart in Kibana, preferably using canvas. I have records stored in elastic in following format: "ParamName": "Status", "serverTime": 1554929754800, "value": 5, "valueStr": …

---

## [Pcap visualization using Kibana](https://discuss.elastic.co/t/pcap-visualization-using-kibana/175379)

<div class="topic-metadata">

**Author:** [@Prabhav](https://discuss.elastic.co/u/Prabhav)\
**Replies:** 4\
**Last updated:** [April 12, 2019, 5:10pm UTC](https://discuss.elastic.co/t/pcap-visualization-using-kibana/175379 "2019-04-12T17:10:55Z")

</div>

I want to visualize anomalies in data and need some lead on that. Anyone having any prior experience in "visualizing anomalies in pcap using elk stack " kindly let me know.

---

## [Find average of max in each bucket](https://discuss.elastic.co/t/find-average-of-max-in-each-bucket/175934)

<div class="topic-metadata">

**Author:** [@Natalia\_Kuleniuk](https://discuss.elastic.co/u/Natalia_Kuleniuk)\
**Replies:** 1\
**Last updated:** [April 12, 2019, 4:13pm UTC](https://discuss.elastic.co/t/find-average-of-max-in-each-bucket/175934 "2019-04-12T16:13:32Z")

</div>

Hi, having trouble using Sibling aggregation in Kibana () I have records like following: { “EventId”: “123”, “intPayloadNumber”: 234, “someField”: “someValue” } I can have multiple records in Kibana for the same e…

---

## [Compare lists which are from group by](https://discuss.elastic.co/t/compare-lists-which-are-from-group-by/176517)

<div class="topic-metadata">

**Author:** [@Keuntek\_Lee](https://discuss.elastic.co/u/Keuntek_Lee)\
**Replies:** 1\
**Last updated:** [April 12, 2019, 3:29pm UTC](https://discuss.elastic.co/t/compare-lists-which-are-from-group-by/176517 "2019-04-12T15:29:46Z")

</div>

Hello, i'm working on KIBANA recently, and creating lots of beautiful & helpful widget :slight\_smile: from now, i can make widgets which i planned with informative blogs, posts, guidepage. but i stuck on one widget, w…

---

## [Kibana Plugin generator error](https://discuss.elastic.co/t/kibana-plugin-generator-error/176366)

<div class="topic-metadata">

**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\
**Replies:** 2\
**Last updated:** [April 12, 2019, 2:25pm UTC](https://discuss.elastic.co/t/kibana-plugin-generator-error/176366 "2019-04-12T14:25:44Z")

</div>

Hello Team, I was able to build Kibana source code using yarn kbn bootstrap However, when I try to generate plugin, I am getting following error. Cli error : depends on \[@elastic/eslint-config-kibana\] using 'link' ,…

---

## [.security\* log has millions of record with 'kibana' principle accessing empty .reporting-$date$ indices](https://discuss.elastic.co/t/security-log-has-millions-of-record-with-kibana-principle-accessing-empty-reporting-date-indices/176166)

<div class="topic-metadata">

**Author:** [@mje](https://discuss.elastic.co/u/mje)\
**Replies:** 5\
**Last updated:** [April 12, 2019, 2:08pm UTC](https://discuss.elastic.co/t/security-log-has-millions-of-record-with-kibana-principle-accessing-empty-reporting-date-indices/176166 "2019-04-12T14:08:45Z")

</div>

Our 'kibana' principle figures in 20-80+ million log records pr day in our .security\* xpack/security indices daily, related to searches in .reporting-$date indices, constantly. We dont have any report jobs, and the cont…

---

## [How can we use "Group By" separately for 2 Metrics in Metric Visual Builder?](https://discuss.elastic.co/t/how-can-we-use-group-by-separately-for-2-metrics-in-metric-visual-builder/176340)

<div class="topic-metadata">

**Author:** [@Sonam\_Verma](https://discuss.elastic.co/u/Sonam_Verma)\
**Replies:** 2\
**Last updated:** [April 12, 2019, 2:02pm UTC](https://discuss.elastic.co/t/how-can-we-use-group-by-separately-for-2-metrics-in-metric-visual-builder/176340 "2019-04-12T14:02:40Z")

</div>

Hi, I am stucked in some calculation. I want to calculate following from an index which is having a merged data of employees who left the company and employees who are still working in the company. So, I have 2 types of …

---

## [Error loading kibana 6.7](https://discuss.elastic.co/t/error-loading-kibana-6-7/176436)

<div class="topic-metadata">

**Author:** [@masterThomas](https://discuss.elastic.co/u/masterThomas)\
**Replies:** 1\
**Last updated:** [April 12, 2019, 1:21pm UTC](https://discuss.elastic.co/t/error-loading-kibana-6-7/176436 "2019-04-12T13:21:36Z")

</div>

hi team, can you help with my issue in kibana or ways to restore last successful config to start it ?

---

## [Kibana and nagios](https://discuss.elastic.co/t/kibana-and-nagios/176604)

<div class="topic-metadata">

**Author:** [@Samya\_Ouk](https://discuss.elastic.co/u/Samya_Ouk)\
**Replies:** 2\
**Last updated:** [April 12, 2019, 1:09pm UTC](https://discuss.elastic.co/t/kibana-and-nagios/176604 "2019-04-12T13:09:12Z")

</div>

Hello ! pleaaase i need your help , how can i combine kibana with nagios . i am using eyes of network to monitor hosts ? is it possible to combine between them ? heeelp pleaase

---

## [Kibana filter ip address or network](https://discuss.elastic.co/t/kibana-filter-ip-address-or-network/176549)

<div class="topic-metadata">

**Author:** [@taku](https://discuss.elastic.co/u/taku)\
**Replies:** 1\
**Last updated:** [April 12, 2019, 1:05pm UTC](https://discuss.elastic.co/t/kibana-filter-ip-address-or-network/176549 "2019-04-12T13:05:24Z")

</div>

Hello all, tell me plz how to do a search in kibana filter on site demo.elastic.co across the subnet this query don't show any address in 10.12.1.0/24 where I was wrong in the request { "query": { "match": { "apach…

---

## [Rollup index pattern bug with erroneously detected multiple histograms?](https://discuss.elastic.co/t/rollup-index-pattern-bug-with-erroneously-detected-multiple-histograms/176021)

<div class="topic-metadata">

**Author:** [@Bankert](https://discuss.elastic.co/u/Bankert)\
**Replies:** 1\
**Last updated:** [April 12, 2019, 11:08am UTC](https://discuss.elastic.co/t/rollup-index-pattern-bug-with-erroneously-detected-multiple-histograms/176021 "2019-04-12T11:08:19Z")

</div>

note: this question is obviously similar to this post, but it was closed without any replies. When I want to create an index pattern on a rollup job I get the message "Rollup index pattern error: Multiple date histogram…

---

## [Is posible make this?](https://discuss.elastic.co/t/is-posible-make-this/175973)

<div class="topic-metadata">

**Author:** [@Jaime\_Teixido](https://discuss.elastic.co/u/Jaime_Teixido)\
**Replies:** 1\
**Last updated:** [April 12, 2019, 10:17am UTC](https://discuss.elastic.co/t/is-posible-make-this/175973 "2019-04-12T10:17:10Z")

</div>

Hi, { "id":121212121221, "type":1, "text":test, "timestamp":2019-04-09 9:47:304 } I want to create a pie chart that filters by a type and tells me the number of texts, taking into account that only 1 can be coun…

---

## [Dashboard data restrictions](https://discuss.elastic.co/t/dashboard-data-restrictions/176013)

<div class="topic-metadata">

**Author:** [@LJB999](https://discuss.elastic.co/u/LJB999)\
**Replies:** 1\
**Last updated:** [April 12, 2019, 10:13am UTC](https://discuss.elastic.co/t/dashboard-data-restrictions/176013 "2019-04-12T10:13:47Z")

</div>

Hi I have read the below link about security & spaces but I wanted to just clarify is the below possible ? ES Index holds data about children/schools Create a Space for School 1. Create a dashboard showing data for S…

---

## [Default Index .kibana not getting created on restoring kibana and ES](https://discuss.elastic.co/t/default-index-kibana-not-getting-created-on-restoring-kibana-and-es/176352)

<div class="topic-metadata">

**Author:** [@virendra\_oswal](https://discuss.elastic.co/u/virendra_oswal)\
**Replies:** 2\
**Last updated:** [April 12, 2019, 10:02am UTC](https://discuss.elastic.co/t/default-index-kibana-not-getting-created-on-restoring-kibana-and-es/176352 "2019-04-12T10:02:07Z")

</div>

Getting below error :slight\_smile: \[2019-04-11T04:33:23,607\]\[DEBUG\]\[r.suppressed \] path: /.kibana/\_mappings, params: {index=.kibana} org.elasticsearch.index.IndexNotFoundException: no such index Re-insta…

---

## [Implement component with react](https://discuss.elastic.co/t/implement-component-with-react/176102)

<div class="topic-metadata">

**Author:** [@jasmineL](https://discuss.elastic.co/u/jasmineL)\
**Replies:** 1\
**Last updated:** [April 12, 2019, 9:56am UTC](https://discuss.elastic.co/t/implement-component-with-react/176102 "2019-04-12T09:56:52Z")

</div>

Hi, I am trying to create a component in Kibana using React. Like below. \<new-react-component\> \<div\>some existing code in .html file \</div\> \</new-react-component\> The new-react-component is a react component. A…

---

## [Can we update index pattern in the existing visualization](https://discuss.elastic.co/t/can-we-update-index-pattern-in-the-existing-visualization/176330)

<div class="topic-metadata">

**Author:** [@Swati123](https://discuss.elastic.co/u/Swati123)\
**Replies:** 1\
**Last updated:** [April 12, 2019, 9:33am UTC](https://discuss.elastic.co/t/can-we-update-index-pattern-in-the-existing-visualization/176330 "2019-04-12T09:33:22Z")

</div>

I have visualization created on some X index pattern but unfortunately, the index pattern got deleted and now I am not able to see any data. Now I have another index pattern with similar data but the pattern is differen…

---

## [Kibana Logs are not getting created/captured](https://discuss.elastic.co/t/kibana-logs-are-not-getting-created-captured/175531)

<div class="topic-metadata">

**Author:** [@Hazoopr](https://discuss.elastic.co/u/Hazoopr)\
**Replies:** 4\
**Last updated:** [April 11, 2019, 5:41pm UTC](https://discuss.elastic.co/t/kibana-logs-are-not-getting-created-captured/175531 "2019-04-11T17:41:38Z")

</div>

Kibana Service Logs are not getting created/captured for both kibana.stderr and kibana.stdout \[abc@abc log\]$ ll | grep kibana drwxrwxrwx 2 kibana kibana 48 Jan 30 13:09 kibana \[abc@abc log\]$ cd ki…

---

## [Visualizing log files in table](https://discuss.elastic.co/t/visualizing-log-files-in-table/175848)

<div class="topic-metadata">

**Author:** [@akshatsa](https://discuss.elastic.co/u/akshatsa)\
**Replies:** 7\
**Last updated:** [April 11, 2019, 4:58pm UTC](https://discuss.elastic.co/t/visualizing-log-files-in-table/175848 "2019-04-11T16:58:24Z")

</div>

Hi, I have created one table from logs in Discover which looks fine. Now In the table , we have one field "instance\_id" which is an integer. I need to create a table which will show records corresponding to only maximum …

---

## [Kibana service goes down & result in systemctl daemon-reload (without any changes)](https://discuss.elastic.co/t/kibana-service-goes-down-result-in-systemctl-daemon-reload-without-any-changes/175557)

<div class="topic-metadata">

**Author:** [@Hazoopr](https://discuss.elastic.co/u/Hazoopr)\
**Replies:** 1\
**Last updated:** [April 5, 2019, 9:39am UTC](https://discuss.elastic.co/t/kibana-service-goes-down-result-in-systemctl-daemon-reload-without-any-changes/175557 "2019-04-05T09:39:31Z")

</div>

\[elasticsearch@gcp6207hdfqa02 ~\]$ sudo systemctl status kibana.service -l ● kibana.service - Kibana Loaded: loaded (/etc/systemd/system/kibana.service; enabled; vendor preset: disabled) Active: inactive (dead) since F…

---

## [Kibana down during Nessus scanning](https://discuss.elastic.co/t/kibana-down-during-nessus-scanning/175823)

<div class="topic-metadata">

**Author:** [@sstest](https://discuss.elastic.co/u/sstest)\
**Replies:** 5\
**Last updated:** [April 11, 2019, 10:38am UTC](https://discuss.elastic.co/t/kibana-down-during-nessus-scanning/175823 "2019-04-11T10:38:33Z")

</div>

We recently implemented Nessus vulnerability scanning on top of Kibana ports \[80, 8080\] and found Kibana going down during scanning automatically. Looks like Nessus performing Soap API checks on 8080 port and if Kibana …

---

## [Get time from Time Range from custom plugin](https://discuss.elastic.co/t/get-time-from-time-range-from-custom-plugin/175800)

<div class="topic-metadata">

**Author:** [@bard0x](https://discuss.elastic.co/u/bard0x)\
**Replies:** 2\
**Last updated:** [April 11, 2019, 9:35am UTC](https://discuss.elastic.co/t/get-time-from-time-range-from-custom-plugin/175800 "2019-04-11T09:35:23Z")

</div>

I am trying to access the queried date range from within a plugin, so that I can do calculations based on the length of time being queried. Is there a way to do this? In the past existed a timefilter service for angular…

---

## [Can we create multiple metric using line chart in canvas](https://discuss.elastic.co/t/can-we-create-multiple-metric-using-line-chart-in-canvas/176267)

<div class="topic-metadata">

**Author:** [@Prashant\_Agrawal](https://discuss.elastic.co/u/Prashant_Agrawal)\
**Replies:** 2\
**Last updated:** [April 11, 2019, 7:43am UTC](https://discuss.elastic.co/t/can-we-create-multiple-metric-using-line-chart-in-canvas/176267 "2019-04-11T07:43:15Z")

</div>

Is there a way we can create a line chart in canvas with multiple metrics in same graph. Basically the similar to what we do in visualization -\> Line chart -\> select multiple metric as aggregation. I want to create belo…

---

## [Error while creating new visualization](https://discuss.elastic.co/t/error-while-creating-new-visualization/176239)

<div class="topic-metadata">

**Author:** [@masterThomas](https://discuss.elastic.co/u/masterThomas)\
**Replies:** 2\
**Last updated:** [April 11, 2019, 7:08am UTC](https://discuss.elastic.co/t/error-while-creating-new-visualization/176239 "2019-04-11T07:08:13Z")

</div>

hi team, do the tutorial Creating new visualization types and create my visualazation. I have issue while imported my visualization after starting kibana: ERROR in ./plugins/kibana\_sample\_visualization/public/test\_vis…

---

## [How to calculate average headcount of a company using Kibana visual builder 6.7?](https://discuss.elastic.co/t/how-to-calculate-average-headcount-of-a-company-using-kibana-visual-builder-6-7/176040)

<div class="topic-metadata">

**Author:** [@Sonam\_Verma](https://discuss.elastic.co/u/Sonam_Verma)\
**Replies:** 1\
**Last updated:** [April 11, 2019, 6:17am UTC](https://discuss.elastic.co/t/how-to-calculate-average-headcount-of-a-company-using-kibana-visual-builder-6-7/176040 "2019-04-11T06:17:50Z")

</div>

Hi, I am looking to calculate Average Headcount of a company using Kibana Metric Visual Builder. The formula is: Avg HC= (Opening HC + Closing HC) /2 where HC= Headcount; But my index data is coming from 2 CSV files-…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=684)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=686)
