# Kibana **URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=691 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 692 --- ## [Calculation time difference between two document](https://discuss.elastic.co/t/calculation-time-difference-between-two-document/174876)
**Author:** [@Pradyumna\_Jha](https://discuss.elastic.co/u/Pradyumna_Jha)\ **Replies:** 4\ **Last updated:** [April 1, 2019, 11:01pm UTC](https://discuss.elastic.co/t/calculation-time-difference-between-two-document/174876 "2019-04-01T23:01:00Z")
I am collecting log data and putting it into elastic search. Each document has 4 columns containing timestamp, key(not unique), Interface and Message. I need to calculate the time difference between two rows with same va… --- ## [Metric count aggregation field in geo\_point visualizations](https://discuss.elastic.co/t/metric-count-aggregation-field-in-geo-point-visualizations/174814)
**Author:** [@Sergio\_Redondo](https://discuss.elastic.co/u/Sergio_Redondo)\ **Replies:** 1\ **Last updated:** [April 1, 2019, 9:38pm UTC](https://discuss.elastic.co/t/metric-count-aggregation-field-in-geo-point-visualizations/174814 "2019-04-01T21:38:37Z")
Hello, I would like to be able to change the name that appears when I pass the cursor through the different points that are created, that is, when I move the mouse cursor over the point a box with some interesting inform… --- ## [Shortened url from painless](https://discuss.elastic.co/t/shortened-url-from-painless/171793)
**Author:** [@Matt\_McGovern](https://discuss.elastic.co/u/Matt_McGovern)\ **Replies:** 4\ **Last updated:** [April 1, 2019, 8:35pm UTC](https://discuss.elastic.co/t/shortened-url-from-painless/171793 "2019-04-01T20:35:51Z")
Is there any way to call the shortened url api from a painless script, preferably without making a post/put call? I have a stored script that all our watchers use...and it returns back the link to one of our kibana dash… --- ## [Automatically overwrite all saved objects?](https://discuss.elastic.co/t/automatically-overwrite-all-saved-objects/156415)
**Author:** [@Balu](https://discuss.elastic.co/u/Balu)\ **Replies:** 2\ **Last updated:** [April 1, 2019, 8:31pm UTC](https://discuss.elastic.co/t/automatically-overwrite-all-saved-objects/156415 "2019-04-01T20:31:59Z")
Hello Elastic searchers, this might be a silly question, but does Management =\> Kibana / Saved Objects =\> Import =\> Automatically overwrite all saved objects? actually overwrite all saved objects (so there's only the on… --- ## [Advanced filter -\> OR condition?](https://discuss.elastic.co/t/advanced-filter-or-condition/174789)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 2\ **Last updated:** [April 1, 2019, 7:02pm UTC](https://discuss.elastic.co/t/advanced-filter-or-condition/174789 "2019-04-01T19:02:33Z")
Hi there, I currently have two instances for parallel loadtesting. Each instance is consists of a load generator server (esrally) and an elasticsearch single instance which is tested against. Additionally I have an ela… --- ## [How to search text existence in kibana using filter](https://discuss.elastic.co/t/how-to-search-text-existence-in-kibana-using-filter/174728)
**Author:** [@ankit\_aggarwal](https://discuss.elastic.co/u/ankit_aggarwal)\ **Replies:** 1\ **Last updated:** [April 1, 2019, 7:01pm UTC](https://discuss.elastic.co/t/how-to-search-text-existence-in-kibana-using-filter/174728 "2019-04-01T19:01:10Z")
Hi, I have text in data.msg : "Generate Settlement Response SettlementResponseVO(settlementId=c540a785-6e0f-4e3f-aad9-8c92ef9d2511, locationId=6d86595c-7c44-4f8f-9b65-6826a27dc2fd, accountId=5055822b-c8f4-42fd-ba8c-c40… --- ## [Unable to connect to Elasticsearch from Kibana](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-from-kibana/174587)
**Author:** [@surya2](https://discuss.elastic.co/u/surya2)\ **Replies:** 6\ **Last updated:** [April 1, 2019, 6:42pm UTC](https://discuss.elastic.co/t/unable-to-connect-to-elasticsearch-from-kibana/174587 "2019-04-01T18:42:16Z")
Hello, I am getting below error in kibana 6.5.4 "message":"Rejecting mapping update to \[.kibana\_1\] as the final mapping would have more than 1 type: \[doc, type\]: \[illegal\_argument\_exception\] Rejecting mapping update to… --- ## [Field.keyword is empty, yet something is shown under field](https://discuss.elastic.co/t/field-keyword-is-empty-yet-something-is-shown-under-field/174113)
**Author:** [@Ebisu](https://discuss.elastic.co/u/Ebisu)\ **Replies:** 5\ **Last updated:** [April 1, 2019, 6:30pm UTC](https://discuss.elastic.co/t/field-keyword-is-empty-yet-something-is-shown-under-field/174113 "2019-04-01T18:30:09Z")
My field msg is a result of using grok with %{GREEDYDATA}. If I apply the following filter in Kibana's "Disover": NOT msg.keyword: "exists", roughly half of all events match. But for those msg is not empty. Can somebody … --- ## [Search in kibana Discovery ignores some characters](https://discuss.elastic.co/t/search-in-kibana-discovery-ignores-some-characters/172911)
**Author:** [@ssinternalit](https://discuss.elastic.co/u/ssinternalit)\ **Replies:** 3\ **Last updated:** [April 1, 2019, 5:52pm UTC](https://discuss.elastic.co/t/search-in-kibana-discovery-ignores-some-characters/172911 "2019-04-01T17:52:03Z")
Hi there I've observed that in kibana 6.5.4 and also 6.6.0. If I do a search for: message:"35=R" The = is ignored and also what follows, in this case =R. This same behaviour is shown with other "special" characters. … --- ## [How to filter records containing a particular string in a field value for a kibana visualization](https://discuss.elastic.co/t/how-to-filter-records-containing-a-particular-string-in-a-field-value-for-a-kibana-visualization/174532)
**Author:** [@tismayank](https://discuss.elastic.co/u/tismayank)\ **Replies:** 3\ **Last updated:** [April 1, 2019, 5:49pm UTC](https://discuss.elastic.co/t/how-to-filter-records-containing-a-particular-string-in-a-field-value-for-a-kibana-visualization/174532 "2019-04-01T17:49:48Z")
I have a kibana visualization that shows the counts of clicks on a field that contains a url as value. I want to filter the data that contains the particular url. For e.g : I am having a field namely "pageUrl" and values… --- ## [Kibana custom plugin default timezone](https://discuss.elastic.co/t/kibana-custom-plugin-default-timezone/174593)
**Author:** [@bbking](https://discuss.elastic.co/u/bbking)\ **Replies:** 2\ **Last updated:** [April 1, 2019, 4:52pm UTC](https://discuss.elastic.co/t/kibana-custom-plugin-default-timezone/174593 "2019-04-01T16:52:32Z")
Hi, is there a way to set a default timezone in a custom Kibana plugin? The timezone in front end can be use by import 'ui/autoload/settings' in app.js. Is there similar ways to set it up on server side of the plugin a… --- ## [Kiban Security Related question](https://discuss.elastic.co/t/kiban-security-related-question/174721)
**Author:** [@Ramachandra\_Bhaskar](https://discuss.elastic.co/u/Ramachandra_Bhaskar)\ **Replies:** 1\ **Last updated:** [April 1, 2019, 4:24pm UTC](https://discuss.elastic.co/t/kiban-security-related-question/174721 "2019-04-01T16:24:07Z")
In our internal security review we are asked if "kibana does any kind of encoding to prevent malicious characters from being displayed ?" or rephrasing what kind of security measures kibana takes while rendering data w… --- ## [Kibana 6.7 cannot connect to elasticsearch](https://discuss.elastic.co/t/kibana-6-7-cannot-connect-to-elasticsearch/174655)
**Author:** [@Mike\_H](https://discuss.elastic.co/u/Mike_H)\ **Replies:** 2\ **Last updated:** [April 1, 2019, 4:14pm UTC](https://discuss.elastic.co/t/kibana-6-7-cannot-connect-to-elasticsearch/174655 "2019-04-01T16:14:06Z")
Hiya, we're upgrading our elastic stack from 6.6.2 to 6.7.0. The stack is run using the official docker images on Kubernetes. Elasticsearch upgraded without issue. However, Kibana 6.7.0 cannot connect to Elasticsearch. … --- ## [KIbana 6.7.0 broken upgrade](https://discuss.elastic.co/t/kibana-6-7-0-broken-upgrade/174162)
**Author:** [@paulsbuxton](https://discuss.elastic.co/u/paulsbuxton)\ **Replies:** 8\ **Last updated:** [April 1, 2019, 2:53pm UTC](https://discuss.elastic.co/t/kibana-6-7-0-broken-upgrade/174162 "2019-04-01T14:53:09Z")
Running on Ubuntu, and post upgrade of the stack from 6.6.1 to 6.7.0, kibana has a problem!! When trying to start Kibana, the outoput dumped to screen has the following entries log \[15:15:01.468\] \[info\]\[status\]\[plugi… --- ## [Kibana Unreachable from Network, Only local](https://discuss.elastic.co/t/kibana-unreachable-from-network-only-local/174463)
**Author:** [@teamg](https://discuss.elastic.co/u/teamg)\ **Replies:** 2\ **Last updated:** [April 1, 2019, 2:34pm UTC](https://discuss.elastic.co/t/kibana-unreachable-from-network-only-local/174463 "2019-04-01T14:34:58Z")
Just installed ELK 6.7 on a single node and it's working fine with the exception of Kibana. I can get to Kibana if I access it from a browser on the localhost but from a remote browser it times out. I have server.host … --- ## [Mapping data error](https://discuss.elastic.co/t/mapping-data-error/174755)
**Author:** [@Sergio\_Redondo](https://discuss.elastic.co/u/Sergio_Redondo)\ **Replies:** 1\ **Last updated:** [April 1, 2019, 12:27pm UTC](https://discuss.elastic.co/t/mapping-data-error/174755 "2019-04-01T12:27:04Z")
Good morning, I am trying to index JSON-LD information to visualize it later. When I edit the mapping I get an error. Before doing it I tested with JSON information and it has left me without problem to edit the location… --- ## [Kibana - Controls - Fuzziness/Case sensitive](https://discuss.elastic.co/t/kibana-controls-fuzziness-case-sensitive/174101)
**Author:** [@Francisca\_Lima](https://discuss.elastic.co/u/Francisca_Lima)\ **Replies:** 10\ **Last updated:** [April 1, 2019, 8:55am UTC](https://discuss.elastic.co/t/kibana-controls-fuzziness-case-sensitive/174101 "2019-04-01T08:55:23Z")
Hello, There is a way to add fuzziness/Case sensitive in my controls in Kibana? Because when I type "a" no results are presented, but if I type "A" the results appears. Any idea? Thank you, Francisca --- ## [I need the kibana discover more than 5](https://discuss.elastic.co/t/i-need-the-kibana-discover-more-than-5/174671)
**Author:** [@waelco](https://discuss.elastic.co/u/waelco)\ **Replies:** 1\ **Last updated:** [April 1, 2019, 6:09am UTC](https://discuss.elastic.co/t/i-need-the-kibana-discover-more-than-5/174671 "2019-04-01T06:09:49Z")
Dears I Install Elasticsearch, Logstash, and Kibana (ELK Stack) on CentOS 7 every thing work fine but i would the kibana discover more than 5 severs can you help me for this issue notes I followed this guide fo… --- ## [Timelion timestamp is distorted](https://discuss.elastic.co/t/timelion-timestamp-is-distorted/172108)
**Author:** [@Tonbon](https://discuss.elastic.co/u/Tonbon)\ **Replies:** 5\ **Last updated:** [April 1, 2019, 5:38am UTC](https://discuss.elastic.co/t/timelion-timestamp-is-distorted/172108 "2019-04-01T05:38:04Z")
Hello, I'm not sure what happens with my timelion graphs but everytime I try to execute my .es search the timestamp is not accurate. Timelion graph's timestamp is few minutes ahead of the current time. Here's an exampl… --- ## [Display hostname instead of mouse hover under infrastructure tab in kibana](https://discuss.elastic.co/t/display-hostname-instead-of-mouse-hover-under-infrastructure-tab-in-kibana/174476)
**Author:** [@ksunil](https://discuss.elastic.co/u/ksunil)\ **Replies:** 2\ **Last updated:** [April 1, 2019, 3:02am UTC](https://discuss.elastic.co/t/display-hostname-instead-of-mouse-hover-under-infrastructure-tab-in-kibana/174476 "2019-04-01T03:02:41Z")
In Kibana,Under infrastructure tab when i mouse hovere the square blocks will display the hostname but need to display the hostname instead of mouse hover on square blocks Need the help to achieve it --- ## [Create Pie graph with filter](https://discuss.elastic.co/t/create-pie-graph-with-filter/174430)
**Author:** [@xefil](https://discuss.elastic.co/u/xefil)\ **Replies:** 2\ **Last updated:** [March 31, 2019, 2:37pm UTC](https://discuss.elastic.co/t/create-pie-graph-with-filter/174430 "2019-03-31T14:37:47Z")
Hi all, I'm new to this product and it's amazing! BTW I've a lot to learn and I'm already having issues with a simple graph. I'm logging pfSense logs (firewall). I would like to create i.e. a pie graph that shows me b… --- ## [How to hide the top menu of virtualization when embedding to your own web page](https://discuss.elastic.co/t/how-to-hide-the-top-menu-of-virtualization-when-embedding-to-your-own-web-page/174592)
**Author:** [@kbkibana](https://discuss.elastic.co/u/kbkibana)\ **Replies:** 1\ **Last updated:** [March 29, 2019, 11:16pm UTC](https://discuss.elastic.co/t/how-to-hide-the-top-menu-of-virtualization-when-embedding-to-your-own-web-page/174592 "2019-03-29T23:16:21Z")
Hi there, I made a virtualization in kibana and I copy the iframe tag to my own web page... Is there any way to hide the top menu (I mean "Add a filter" situated at top of virtualization)? Since the user is not allow… --- ## [Track Changes to Text Configuration File](https://discuss.elastic.co/t/track-changes-to-text-configuration-file/174598)
**Author:** [@aerstelle](https://discuss.elastic.co/u/aerstelle)\ **Replies:** 1\ **Last updated:** [March 29, 2019, 11:05pm UTC](https://discuss.elastic.co/t/track-changes-to-text-configuration-file/174598 "2019-03-29T23:05:29Z")
I'm looking for help in figuring out the right approach to take for tracking changes to files. Originally I thought Auditbeat's file\_integrity module would work, but (as the name suggests) it only tracks that "a change" … --- ## [Hostnames not aligned](https://discuss.elastic.co/t/hostnames-not-aligned/174411)
**Author:** [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)\ **Replies:** 2\ **Last updated:** [March 29, 2019, 10:58pm UTC](https://discuss.elastic.co/t/hostnames-not-aligned/174411 "2019-03-29T22:58:13Z")
Hi I am getting data using metric beats on kibana. i see the default dashboard. As seen in the attached image. Is there a setting where I can set the hostnames in such a way I can see them side by side. --- ## [How can i setup kibana server logs for capturing the user logged in and dashboards viewed info](https://discuss.elastic.co/t/how-can-i-setup-kibana-server-logs-for-capturing-the-user-logged-in-and-dashboards-viewed-info/174575)
**Author:** [@rajkumar.m](https://discuss.elastic.co/u/rajkumar.m)\ **Replies:** 1\ **Last updated:** [March 29, 2019, 9:48pm UTC](https://discuss.elastic.co/t/how-can-i-setup-kibana-server-logs-for-capturing-the-user-logged-in-and-dashboards-viewed-info/174575 "2019-03-29T21:48:43Z")
Hi Elastic Team, How can I setup "kibana" server logs for capturing the user logged in & dashboards viewed info. I would like to capture the user info whenever user logs into Kibana UI and views the dashboards. please… --- ## [Kibana SavedObject API](https://discuss.elastic.co/t/kibana-savedobject-api/173831)
**Author:** [@Joseph\_Mak](https://discuss.elastic.co/u/Joseph_Mak)\ **Replies:** 4\ **Last updated:** [March 29, 2019, 6:46pm UTC](https://discuss.elastic.co/t/kibana-savedobject-api/173831 "2019-03-29T18:46:16Z")
I am able to use SavedObject API (https://www.elastic.co/guide/en/kibana/current/saved-objects-api.html) via http POST in local elastic search by using localhost 5601. However, in cloud Elastic Search there is https and… --- ## ["PollError \[illegal\_argument\_exception\]](https://discuss.elastic.co/t/pollerror-illegal-argument-exception/174017)
**Author:** [@sblancocr](https://discuss.elastic.co/u/sblancocr)\ **Replies:** 11\ **Last updated:** [March 28, 2019, 1:24pm UTC](https://discuss.elastic.co/t/pollerror-illegal-argument-exception/174017 "2019-03-28T13:24:24Z")
Hi. I have a Kibana server, that this configuration: server.port: 5601 server.host: "log-kibana-01.alpha.ci.ucr.ac.cr" server.name: "log-kibana-01.alpha.ci.ucr.ac.cr" elasticsearch.hosts: \["http://log-elasticsearch-… --- ## [Populate field Static Lookup data programmatically](https://discuss.elastic.co/t/populate-field-static-lookup-data-programmatically/174246)
**Author:** [@tomr](https://discuss.elastic.co/u/tomr)\ **Replies:** 3\ **Last updated:** [March 29, 2019, 5:14pm UTC](https://discuss.elastic.co/t/populate-field-static-lookup-data-programmatically/174246 "2019-03-29T17:14:56Z")
Using the Static Lookup field formatter (https://github.com/elastic/kibana/pull/19637).. Is there a recommended way to populate the static lookup field programmatically, with a largeish table? I want to convert mlcatego… --- ## [Ansible kibana keystore elastic user fails](https://discuss.elastic.co/t/ansible-kibana-keystore-elastic-user-fails/173414)
**Author:** [@Kevin\_Comer](https://discuss.elastic.co/u/Kevin_Comer)\ **Replies:** 2\ **Last updated:** [March 29, 2019, 5:05pm UTC](https://discuss.elastic.co/t/ansible-kibana-keystore-elastic-user-fails/173414 "2019-03-29T17:05:56Z")
I'm trying to automate creation of the kibana user for elasticsearch which is stored in the kibana keystore. I am getting a failure when I do this on an initial create. The setting elasticsearch.username is getting crea… --- ## [Sending Payload with email alert](https://discuss.elastic.co/t/sending-payload-with-email-alert/174477)
**Author:** [@ApekshaB](https://discuss.elastic.co/u/ApekshaB)\ **Replies:** 1\ **Last updated:** [March 29, 2019, 5:02pm UTC](https://discuss.elastic.co/t/sending-payload-with-email-alert/174477 "2019-03-29T17:02:26Z")
Dear team, I have a watcher as below. I wish to send payload with my email, but below is displaying result as: "Hit Count : 7 Other test: " Kindly help me in this regards. { "actions": { "Email\_alarm\_4bb3efa5-8b8b-4… [Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=690) [Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=692)