# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=69

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 70

---

## [Min/Max aggregation in Discover](https://discuss.elastic.co/t/min-max-aggregation-in-discover/353114)

<div class="topic-metadata">

**Author:** [@elementmg](https://discuss.elastic.co/u/elementmg)\
**Replies:** 4\
**Last updated:** [February 13, 2024, 7:37pm UTC](https://discuss.elastic.co/t/min-max-aggregation-in-discover/353114 "2024-02-13T19:37:41Z")

</div>

When utilizing Elasticsearch's Discover feature, I'm aiming to construct a query that fetches the maximum and minimum logs for each user, based on three fields: username, app name, and environment. Currently, my query i…

---

## [Highlighting slows down Kibana searches considerably](https://discuss.elastic.co/t/highlighting-slows-down-kibana-searches-considerably/353089)

<div class="topic-metadata">

**Author:** [@boernd](https://discuss.elastic.co/u/boernd)\
**Replies:** 3\
**Last updated:** [February 13, 2024, 10:19pm UTC](https://discuss.elastic.co/t/highlighting-slows-down-kibana-searches-considerably/353089 "2024-02-13T22:19:29Z")

</div>

Hi, we have Kibana Discover queries in our env where the highlighting functionality seems to have a big impact on the search experience. It is not really clear to me why highlighting is a bottleneck at all for this quer…

---

## [Aggregation of individual array elements](https://discuss.elastic.co/t/aggregation-of-individual-array-elements/353207)

<div class="topic-metadata">

**Author:** [@JeremyP](https://discuss.elastic.co/u/JeremyP)\
**Replies:** 0\
**Last updated:** [February 13, 2024, 7:59pm UTC](https://discuss.elastic.co/t/aggregation-of-individual-array-elements/353207 "2024-02-13T19:59:00Z")

</div>

Hello, I need some advice on how to proceed. I'm trying to visualize some trending I have from an asset discovery tool. Each time the asset is discovered a new array element is added the Elasticsearch document. Here is …

---

## [Continous Monitoring of Disk Allocation in Kibana Stack Monitoring](https://discuss.elastic.co/t/continous-monitoring-of-disk-allocation-in-kibana-stack-monitoring/352195)

<div class="topic-metadata">

**Author:** [@ibollman](https://discuss.elastic.co/u/ibollman)\
**Replies:** 12\
**Last updated:** [February 13, 2024, 7:26pm UTC](https://discuss.elastic.co/t/continous-monitoring-of-disk-allocation-in-kibana-stack-monitoring/352195 "2024-02-13T19:26:08Z")

</div>

Hello, we are using Elastic Cloud Enterprise and we send all the Logs and Metrics of our Deployments to a Monitoring cluster we have created just for the cluster monitoring purposes - just as the best practices suggest. …

---

## [How to use divide() function with field](https://discuss.elastic.co/t/how-to-use-divide-function-with-field/352534)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 3\
**Last updated:** [February 13, 2024, 4:46pm UTC](https://discuss.elastic.co/t/how-to-use-divide-function-with-field/352534 "2024-02-13T16:46:25Z")

</div>

Hey there, I was trying to divide the value of a specific field but I cannot do that since I am facing the error "The operation divide does not accept any field as argument". My field contains only numbers but I cannot…

---

## [Elasticsearch tuning](https://discuss.elastic.co/t/elasticsearch-tuning/353163)

<div class="topic-metadata">

**Author:** [@Mathews\_Ignatius](https://discuss.elastic.co/u/Mathews_Ignatius)\
**Replies:** 3\
**Last updated:** [February 13, 2024, 1:47pm UTC](https://discuss.elastic.co/t/elasticsearch-tuning/353163 "2024-02-13T13:47:59Z")

</div>

Hi, I am trying to reduce storage size of index. I tried customising the mapping, shrinking shards, compression algorithms and all but nothing seems to work the size is not getting reduced. Is there anything else that c…

---

## [Kibana deprecated settings](https://discuss.elastic.co/t/kibana-deprecated-settings/352747)

<div class="topic-metadata">

**Author:** [@miiroslavkardos](https://discuss.elastic.co/u/miiroslavkardos)\
**Replies:** 10\
**Last updated:** [February 13, 2024, 1:31pm UTC](https://discuss.elastic.co/t/kibana-deprecated-settings/352747 "2024-02-13T13:31:19Z")

</div>

Hello, Can you help me, how to get of rid of this deprecated setting in KIbana GUI under Upgrade asistant? I Already removed these settings in my kibana.yml but it is still shwoing. How to fix Remove the "xpack.repor…

---

## [New to Kibana: How to Remove Lingering Active Alerts? (Rules Deleted)](https://discuss.elastic.co/t/new-to-kibana-how-to-remove-lingering-active-alerts-rules-deleted/353072)

<div class="topic-metadata">

**Author:** [@skumarsingh](https://discuss.elastic.co/u/skumarsingh)\
**Replies:** 1\
**Last updated:** [February 12, 2024, 1:52pm UTC](https://discuss.elastic.co/t/new-to-kibana-how-to-remove-lingering-active-alerts-rules-deleted/353072 "2024-02-12T13:52:24Z")

</div>

Hi everyone, I'm relatively new to Kibana and I'm encountering some persistent active alerts that I'd like to remove. I've already deleted the rules associated with these alerts, but they're still showing up under "Acti…

---

## [Kibana for open mobility data in Berlin](https://discuss.elastic.co/t/kibana-for-open-mobility-data-in-berlin/353056)

<div class="topic-metadata">

**Author:** [@CargoBikoMeter](https://discuss.elastic.co/u/CargoBikoMeter)\
**Replies:** 0\
**Last updated:** [February 12, 2024, 11:12am UTC](https://discuss.elastic.co/t/kibana-for-open-mobility-data-in-berlin/353056 "2024-02-12T11:12:42Z")

</div>

In Berlin we have setup a Kibana based dashboard for open mobility data, which are based on data from Telraam devices. We have setup a system which reads the data via Telraam-API and provides these data as CSV files. The…

---

## [I am having this pipeline problem while integrating Wazuh with ELK](https://discuss.elastic.co/t/i-am-having-this-pipeline-problem-while-integrating-wazuh-with-elk/353034)

<div class="topic-metadata">

**Author:** [@fahim2024](https://discuss.elastic.co/u/fahim2024)\
**Replies:** 3\
**Last updated:** [February 12, 2024, 10:14am UTC](https://discuss.elastic.co/t/i-am-having-this-pipeline-problem-while-integrating-wazuh-with-elk/353034 "2024-02-12T10:14:10Z")

</div>

What can I do ?

---

## [Canvas table to have a count](https://discuss.elastic.co/t/canvas-table-to-have-a-count/353028)

<div class="topic-metadata">

**Author:** [@encathal](https://discuss.elastic.co/u/encathal)\
**Replies:** 1\
**Last updated:** [February 12, 2024, 3:18am UTC](https://discuss.elastic.co/t/canvas-table-to-have-a-count/353028 "2024-02-12T03:18:29Z")

</div>

Hi, I have a question how can I turn my fields.userinfo.Email.Keywords into a count column. I tried a few ways and I keep getting errors. Thanks

---

## [Kibana CPU Load](https://discuss.elastic.co/t/kibana-cpu-load/353030)

<div class="topic-metadata">

**Author:** [@zsnops](https://discuss.elastic.co/u/zsnops)\
**Replies:** 2\
**Last updated:** [February 12, 2024, 1:49am UTC](https://discuss.elastic.co/t/kibana-cpu-load/353030 "2024-02-12T01:49:35Z")

</div>

Hi, I am running a small single ELK instance just for visualizing some logs. Because the process consumes around 12 % CPU when idle, I have tried to deactivate a few things in kibana.yml: telemetry.enabled: false xpac…

---

## [Jar hell issue during loading custom plugin in elastic 8.4.1](https://discuss.elastic.co/t/jar-hell-issue-during-loading-custom-plugin-in-elastic-8-4-1/353016)

<div class="topic-metadata">

**Author:** [@msubbu](https://discuss.elastic.co/u/msubbu)\
**Replies:** 1\
**Last updated:** [February 11, 2024, 4:00pm UTC](https://discuss.elastic.co/t/jar-hell-issue-during-loading-custom-plugin-in-elastic-8-4-1/353016 "2024-02-11T16:00:31Z")

</div>

Hello Team, we are facing below while loading one of our custom plugin into Elasticsearch 8.4.1. Kindly need your valuable inputs on below issue.. Exception in thread "main" java.lang.IllegalStateException: failed to lo…

---

## [Kibana not optimizing custom plugins](https://discuss.elastic.co/t/kibana-not-optimizing-custom-plugins/352939)

<div class="topic-metadata">

**Author:** [@ssimmons](https://discuss.elastic.co/u/ssimmons)\
**Replies:** 1\
**Last updated:** [February 9, 2024, 4:21pm UTC](https://discuss.elastic.co/t/kibana-not-optimizing-custom-plugins/352939 "2024-02-09T16:21:10Z")

</div>

I'm trying to move our custom plugins from Kibana 8.6 to 8.12. On version 8.6, I can run yarn knb bootstrap and then yarn start. This would run the optimizer on my custom plugins and then do a hot reload of Kibana when …

---

## [Display a home page other than the default](https://discuss.elastic.co/t/display-a-home-page-other-than-the-default/352954)

<div class="topic-metadata">

**Author:** [@gnatola](https://discuss.elastic.co/u/gnatola)\
**Replies:** 1\
**Last updated:** [February 9, 2024, 3:37pm UTC](https://discuss.elastic.co/t/display-a-home-page-other-than-the-default/352954 "2024-02-09T15:37:59Z")

</div>

I would like to the Elastic home page to display a particular dashboard on login, rather than the default home page. How do I accomplish that? At the bottom of the default home page there is a link, "Display a different …

---

## [Metric and multi-option controls](https://discuss.elastic.co/t/metric-and-multi-option-controls/352807)

<div class="topic-metadata">

**Author:** [@rastro](https://discuss.elastic.co/u/rastro)\
**Replies:** 3\
**Last updated:** [February 9, 2024, 9:51am UTC](https://discuss.elastic.co/t/metric-and-multi-option-controls/352807 "2024-02-09T09:51:58Z")

</div>

Here's a simplified example. I run a business with 2 locations. I have a daily document in an index that stores the number of employees in that location. Now, I'd like to have a dashboard that shows a legacy metric fo…

---

## [Event Correlation - Can Elastic do this?](https://discuss.elastic.co/t/event-correlation-can-elastic-do-this/352880)

<div class="topic-metadata">

**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\
**Replies:** 0\
**Last updated:** [February 8, 2024, 4:49pm UTC](https://discuss.elastic.co/t/event-correlation-can-elastic-do-this/352880 "2024-02-08T16:49:38Z")

</div>

Hello, With the introduction of AIOPs, I was wondering if Elastic can do event correlation among different systems and different apps more easily? I know currently we can display variety of systems data in one dashboar…

---

## [Kibana restarting in a loop](https://discuss.elastic.co/t/kibana-restarting-in-a-loop/352877)

<div class="topic-metadata">

**Author:** [@ramiwashere](https://discuss.elastic.co/u/ramiwashere)\
**Replies:** 0\
**Last updated:** [February 8, 2024, 4:10pm UTC](https://discuss.elastic.co/t/kibana-restarting-in-a-loop/352877 "2024-02-08T16:10:00Z")

</div>

Hi, After an upgrade , kibana is restarting in a loop. On kibana.logs, I can see: "message":"\[{\\"type\\":\\"unavailable\_shards\_exception\\",\\"reason\\":\\"\[.kibana\_security\_solution\_8.9.2\_001\]\[0\] Not enough active copies t…

---

## [Alert for multiple indices without summing them up](https://discuss.elastic.co/t/alert-for-multiple-indices-without-summing-them-up/352721)

<div class="topic-metadata">

**Author:** [@vymk](https://discuss.elastic.co/u/vymk)\
**Replies:** 1\
**Last updated:** [February 8, 2024, 3:46pm UTC](https://discuss.elastic.co/t/alert-for-multiple-indices-without-summing-them-up/352721 "2024-02-08T15:46:15Z")

</div>

Hi, I'd like to have alerts if indices don't receive any new documents for a few minutes, therefore I have a rule like this: Now if I add another index to the rule, they get summarized, so as long as one index receiv…

---

## [Disable Stack Monitoring access in Kibana spaces](https://discuss.elastic.co/t/disable-stack-monitoring-access-in-kibana-spaces/352870)

<div class="topic-metadata">

**Author:** [@Manal\_A](https://discuss.elastic.co/u/Manal_A)\
**Replies:** 1\
**Last updated:** [February 8, 2024, 3:38pm UTC](https://discuss.elastic.co/t/disable-stack-monitoring-access-in-kibana-spaces/352870 "2024-02-08T15:38:55Z")

</div>

I want to create spaces in Kibana with some limited privileges, and I also want to disable "Stack Management" within those spaces. I want to know what privileges to give to those users so they can only manage their indi…

---

## [Generate multi resolution dashboard/visualize just by url](https://discuss.elastic.co/t/generate-multi-resolution-dashboard-visualize-just-by-url/352455)

<div class="topic-metadata">

**Author:** [@lstoneir](https://discuss.elastic.co/u/lstoneir)\
**Replies:** 1\
**Last updated:** [February 8, 2024, 2:47pm UTC](https://discuss.elastic.co/t/generate-multi-resolution-dashboard-visualize-just-by-url/352455 "2024-02-08T14:47:34Z")

</div>

Hi friends, How are you? I want to say a story for you! in these days, when i want to create minutely, hourly, daily visualizations. I create 3 visualize. one for minutely resolution, one for hourly and the last one fo…

---

## [Can we create kibana dashboards as code?](https://discuss.elastic.co/t/can-we-create-kibana-dashboards-as-code/352783)

<div class="topic-metadata">

**Author:** [@senyam08](https://discuss.elastic.co/u/senyam08)\
**Replies:** 1\
**Last updated:** [February 8, 2024, 1:57pm UTC](https://discuss.elastic.co/t/can-we-create-kibana-dashboards-as-code/352783 "2024-02-08T13:57:53Z")

</div>

Is there a way we can automate kibana dashboard creation? It would be great if we could create via version controlled source for better tracking and easy maintenance. Thanks

---

## [Kibana alerts under stack management](https://discuss.elastic.co/t/kibana-alerts-under-stack-management/352597)

<div class="topic-metadata">

**Author:** [@anushasweety](https://discuss.elastic.co/u/anushasweety)\
**Replies:** 1\
**Last updated:** [February 8, 2024, 11:57am UTC](https://discuss.elastic.co/t/kibana-alerts-under-stack-management/352597 "2024-02-08T11:57:38Z")

</div>

Hi, I'm trying to create alert in kibana for the device\_id creating highest number of logs and trigger a mail( we have number of edge device connected and file beat is installed to collect the logs and it will send it t…

---

## [Index not showing current metric data](https://discuss.elastic.co/t/index-not-showing-current-metric-data/352643)

<div class="topic-metadata">

**Author:** [@sajmeister](https://discuss.elastic.co/u/sajmeister)\
**Replies:** 1\
**Last updated:** [February 8, 2024, 11:24am UTC](https://discuss.elastic.co/t/index-not-showing-current-metric-data/352643 "2024-02-08T11:24:02Z")

</div>

Hi, Our newly created Index named 'alerts\_to\_snow' used to show us the latest metric data when in Kibana \> Discover and then select data view named 'alerts\_to\_snow'. The data we get presented is up to Jan 29th 2024 on…

---

## [What is the meaning of \[YES... and \[NO... in kibana displayed error messages?](https://discuss.elastic.co/t/what-is-the-meaning-of-yes-and-no-in-kibana-displayed-error-messages/352555)

<div class="topic-metadata">

**Author:** [@mpniel](https://discuss.elastic.co/u/mpniel)\
**Replies:** 2\
**Last updated:** [February 8, 2024, 6:51am UTC](https://discuss.elastic.co/t/what-is-the-meaning-of-yes-and-no-in-kibana-displayed-error-messages/352555 "2024-02-08T06:51:19Z")

</div>

What is the meaning of \[YES... and \[NO... in kibana displayed error messages?

---

## [Real time alert in Elasticsearch](https://discuss.elastic.co/t/real-time-alert-in-elasticsearch/352816)

<div class="topic-metadata">

**Author:** [@akashmaharana93](https://discuss.elastic.co/u/akashmaharana93)\
**Replies:** 1\
**Last updated:** [February 8, 2024, 6:49am UTC](https://discuss.elastic.co/t/real-time-alert-in-elasticsearch/352816 "2024-02-08T06:49:17Z")

</div>

Hi Team I want to configure an alert in KIbana in such a way that it will be triggered for every specific error message comes to Elasticsearch. Ex : Suppose for a JWT validation failure my error code is ERROR1. So i wa…

---

## [Allocate all unassigned shards at once!](https://discuss.elastic.co/t/allocate-all-unassigned-shards-at-once/352614)

<div class="topic-metadata">

**Author:** [@Johannes\_Haufila](https://discuss.elastic.co/u/Johannes_Haufila)\
**Replies:** 1\
**Last updated:** [February 7, 2024, 10:32pm UTC](https://discuss.elastic.co/t/allocate-all-unassigned-shards-at-once/352614 "2024-02-07T22:32:16Z")

</div>

how to allocate all unassigned shards at once. In my case I have 2897 missing replicas on my cluster

---

## [Migrating Kibana Plugins from Angular.js](https://discuss.elastic.co/t/migrating-kibana-plugins-from-angular-js/352546)

<div class="topic-metadata">

**Author:** [@Neeecu](https://discuss.elastic.co/u/Neeecu)\
**Replies:** 6\
**Last updated:** [February 7, 2024, 8:15pm UTC](https://discuss.elastic.co/t/migrating-kibana-plugins-from-angular-js/352546 "2024-02-07T20:15:49Z")

</div>

Hello! I have an application with Elasticsearch 7.9.3 and Kibana 7.9.3 with some plugins which are written in plain Angular.js (directives, controllers, templates etc.) and no React code. I plan on migrating and upgrad…

---

## [‏is there a shortcut instead of click to send request in kibana dev tools?](https://discuss.elastic.co/t/is-there-a-shortcut-instead-of-click-to-send-request-in-kibana-dev-tools/352740)

<div class="topic-metadata">

**Author:** [@mpniel](https://discuss.elastic.co/u/mpniel)\
**Replies:** 5\
**Last updated:** [February 7, 2024, 7:40pm UTC](https://discuss.elastic.co/t/is-there-a-shortcut-instead-of-click-to-send-request-in-kibana-dev-tools/352740 "2024-02-07T19:40:24Z")

</div>

Is there a shortcut instead of click to send request in kibana dev tools?

---

## [I need to get store.size in GB from \_cat/indices for all indices](https://discuss.elastic.co/t/i-need-to-get-store-size-in-gb-from-cat-indices-for-all-indices/352566)

<div class="topic-metadata">

**Author:** [@mpniel](https://discuss.elastic.co/u/mpniel)\
**Replies:** 9\
**Last updated:** [February 7, 2024, 5:30pm UTC](https://discuss.elastic.co/t/i-need-to-get-store-size-in-gb-from-cat-indices-for-all-indices/352566 "2024-02-07T17:30:55Z")

</div>

I need to get store.size in GB from \_cat/indices for all indices in order to load the command results in excel and process the results in excel. That's what I need the store.size column to be all rows in the same measur…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=68)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=70)
