# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=698

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 699

---

## [Execute Kibana savedsearch using curl command](https://discuss.elastic.co/t/execute-kibana-savedsearch-using-curl-command/172779)

<div class="topic-metadata">

**Author:** [@elborni96](https://discuss.elastic.co/u/elborni96)\
**Replies:** 4\
**Last updated:** [March 18, 2019, 3:36pm UTC](https://discuss.elastic.co/t/execute-kibana-savedsearch-using-curl-command/172779 "2019-03-18T15:36:43Z")

</div>

Hi all, i have create a new savedsearch on Kibana. Now I need to use the curl command from my terminal to recall the results of this savedsearch. The name of the savedsearch is : S-Cert-Feed How can i do this task? …

---

## [NSSM, Connect ECONNREFUSED, Unable to revive connection, No living connections](https://discuss.elastic.co/t/nssm-connect-econnrefused-unable-to-revive-connection-no-living-connections/172770)

<div class="topic-metadata">

**Author:** [@namnyefr](https://discuss.elastic.co/u/namnyefr)\
**Replies:** 1\
**Last updated:** [March 18, 2019, 3:20pm UTC](https://discuss.elastic.co/t/nssm-connect-econnrefused-unable-to-revive-connection-no-living-connections/172770 "2019-03-18T15:20:17Z")

</div>

I'm on a Windows 2016 Server Virtual Machine. The Windows Firewall is turned off on this machine as is HIPS. We are using Internet Explorer browser. Both Elasticsearch and Kibana are installed on this VM. I've installed…

---

## [Automatic login into Kibana iframe for AD group members](https://discuss.elastic.co/t/automatic-login-into-kibana-iframe-for-ad-group-members/172593)

<div class="topic-metadata">

**Author:** [@rahulkothanath](https://discuss.elastic.co/u/rahulkothanath)\
**Replies:** 1\
**Last updated:** [March 18, 2019, 2:13pm UTC](https://discuss.elastic.co/t/automatic-login-into-kibana-iframe-for-ad-group-members/172593 "2019-03-18T14:13:39Z")

</div>

Hi , I know this issue has been raised before many times but I was not able to find solution. I am using kibana iframe on our internal website and I want to disable the login screen in kibana for my users. we have de…

---

## [How to access data without knowing the field names in vega?](https://discuss.elastic.co/t/how-to-access-data-without-knowing-the-field-names-in-vega/172511)

<div class="topic-metadata">

**Author:** [@fernsrea](https://discuss.elastic.co/u/fernsrea)\
**Replies:** 4\
**Last updated:** [March 18, 2019, 2:01pm UTC](https://discuss.elastic.co/t/how-to-access-data-without-knowing-the-field-names-in-vega/172511 "2019-03-18T14:01:17Z")

</div>

Hi! I wanted to know if there is a way to access data from my index (which contains multiple documents and each document contains different type of fields, for eg., one document might contain fields Aa, Ba and Ca wherea…

---

## [Cannot Create Index Pattern Cannot find Elasticsearch Data](https://discuss.elastic.co/t/cannot-create-index-pattern-cannot-find-elasticsearch-data/172782)

<div class="topic-metadata">

**Author:** [@Meredith](https://discuss.elastic.co/u/Meredith)\
**Replies:** 1\
**Last updated:** [March 18, 2019, 1:45pm UTC](https://discuss.elastic.co/t/cannot-create-index-pattern-cannot-find-elasticsearch-data/172782 "2019-03-18T13:45:20Z")

</div>

I have indicies in Elasticsearch and need to create an index pattern in Kibana. When I run a GET /\_cat/indices?v I get the following: health status index uuid pri rep docs.count docs.dele…

---

## [How to add zip file as kibana plugin in windows](https://discuss.elastic.co/t/how-to-add-zip-file-as-kibana-plugin-in-windows/172766)

<div class="topic-metadata">

**Author:** [@PRUDHVI\_CHOWDHARY\_NE](https://discuss.elastic.co/u/PRUDHVI_CHOWDHARY_NE)\
**Replies:** 1\
**Last updated:** [March 18, 2019, 12:26pm UTC](https://discuss.elastic.co/t/how-to-add-zip-file-as-kibana-plugin-in-windows/172766 "2019-03-18T12:26:20Z")

</div>

how to add zip file as kibana plugin in windows ?

---

## [Getting access denied error while acessing monitoring tab in kibana](https://discuss.elastic.co/t/getting-access-denied-error-while-acessing-monitoring-tab-in-kibana/172731)

<div class="topic-metadata">

**Author:** [@arvind297](https://discuss.elastic.co/u/arvind297)\
**Replies:** 2\
**Last updated:** [March 18, 2019, 12:21pm UTC](https://discuss.elastic.co/t/getting-access-denied-error-while-acessing-monitoring-tab-in-kibana/172731 "2019-03-18T12:21:23Z")

</div>

Hi, We have set up a dedicated monitoring cluster and saml/filebased authentication is setup for user authentication. When I connect to kibana through file based authentication user(elk\_user-username) and try to acess …

---

## [Query that parses and works fine in ES, fails to parse/work in Watcher](https://discuss.elastic.co/t/query-that-parses-and-works-fine-in-es-fails-to-parse-work-in-watcher/172762)

<div class="topic-metadata">

**Author:** [@mje](https://discuss.elastic.co/u/mje)\
**Replies:** 2\
**Last updated:** [March 18, 2019, 12:18pm UTC](https://discuss.elastic.co/t/query-that-parses-and-works-fine-in-es-fails-to-parse-work-in-watcher/172762 "2019-03-18T12:18:08Z")

</div>

Hi all, I've ventured out to depths where I cannot reach the bottom. I have a search that finds events from a standard winlogbeat index, where I look at events from a set of specific users, with the 'should' bool - bec…

---

## [Significant text aggregation in Kibana](https://discuss.elastic.co/t/significant-text-aggregation-in-kibana/169093)

<div class="topic-metadata">

**Author:** [@giggio68](https://discuss.elastic.co/u/giggio68)\
**Replies:** 2\
**Last updated:** [March 18, 2019, 11:53am UTC](https://discuss.elastic.co/t/significant-text-aggregation-in-kibana/169093 "2019-03-18T11:53:35Z")

</div>

Hi, are there any plans to expose significant text aggregation in Kibana? Up to then, is it the only way to render result buckets of such aggregation in kibana to query elastic with a client and then inject the result …

---

## [Bad JSON interpretation on Kibana Discover view](https://discuss.elastic.co/t/bad-json-interpretation-on-kibana-discover-view/172135)

<div class="topic-metadata">

**Author:** [@Mikolaj\_Solik](https://discuss.elastic.co/u/Mikolaj_Solik)\
**Replies:** 4\
**Last updated:** [March 18, 2019, 10:27am UTC](https://discuss.elastic.co/t/bad-json-interpretation-on-kibana-discover-view/172135 "2019-03-18T10:27:38Z")

</div>

Hello all, I have a question, if someone know what can be issue, when on Discovery view I get a JSON on each row, insted of separated rows, eg.: I get this: ? beat { "name": "hostname.domain", "hostname": "hostname.dom…

---

## [Need helpppppp](https://discuss.elastic.co/t/need-helpppppp/172161)

<div class="topic-metadata">

**Author:** [@souheil](https://discuss.elastic.co/u/souheil)\
**Replies:** 2\
**Last updated:** [March 18, 2019, 10:23am UTC](https://discuss.elastic.co/t/need-helpppppp/172161 "2019-03-18T10:23:45Z")

</div>

okey so i have a problem i have a colon called EVENT, in this colon contains(failed,success,...) so i want to make a scripted field, def k=0; for (int i = 0; i \< doc\['event'\].length; i++) { if(doc\['event'\]\[i\] == "fai…

---

## [Timelion default daily offset problem](https://discuss.elastic.co/t/timelion-default-daily-offset-problem/171944)

<div class="topic-metadata">

**Author:** [@Wietse](https://discuss.elastic.co/u/Wietse)\
**Replies:** 4\
**Last updated:** [March 18, 2019, 10:05am UTC](https://discuss.elastic.co/t/timelion-default-daily-offset-problem/171944 "2019-03-18T10:05:04Z")

</div>

Hi, I have a very annoying problem using Timelion. Data comes in continuously, but I want to visualize my data with a day-granularity. However the data as it appears in Timelion is always off by a day. I fixed this usin…

---

## [Data Table with Days](https://discuss.elastic.co/t/data-table-with-days/172716)

<div class="topic-metadata">

**Author:** [@mert](https://discuss.elastic.co/u/mert)\
**Replies:** 1\
**Last updated:** [March 18, 2019, 9:32am UTC](https://discuss.elastic.co/t/data-table-with-days/172716 "2019-03-18T09:32:29Z")

</div>

Hi, I want to create a data table in Kibana Visulation. Data Table should be like this: Event name March 13 March 14 March15 March 16 March17 A \*126…

---

## [Control on aggregation](https://discuss.elastic.co/t/control-on-aggregation/172481)

<div class="topic-metadata">

**Author:** [@luklan](https://discuss.elastic.co/u/luklan)\
**Replies:** 2\
**Last updated:** [March 18, 2019, 9:16am UTC](https://discuss.elastic.co/t/control-on-aggregation/172481 "2019-03-18T09:16:38Z")

</div>

Hello Elastic Community, I would like to filter data on a dashboard. The filter would be based on a count aggregation on some fields, with min\_doc\_count keyword. I would like to change that min\_doc\_count dynamically wit…

---

## [Error when opening Kibana dashboard second time](https://discuss.elastic.co/t/error-when-opening-kibana-dashboard-second-time/170450)

<div class="topic-metadata">

**Author:** [@sl1729](https://discuss.elastic.co/u/sl1729)\
**Replies:** 2\
**Last updated:** [March 18, 2019, 7:30am UTC](https://discuss.elastic.co/t/error-when-opening-kibana-dashboard-second-time/170450 "2019-03-18T07:30:18Z")

</div>

I have created a dashboard for my logs which I am reading from docker logs. When I open the dashboard for the first time it is working but when I go and open the dashboard one more time I am getting below error and I am …

---

## [Show my user details in a table](https://discuss.elastic.co/t/show-my-user-details-in-a-table/172037)

<div class="topic-metadata">

**Author:** [@syedsfayaz](https://discuss.elastic.co/u/syedsfayaz)\
**Replies:** 4\
**Last updated:** [March 18, 2019, 5:53am UTC](https://discuss.elastic.co/t/show-my-user-details-in-a-table/172037 "2019-03-18T05:53:08Z")

</div>

I am new to kibana. Elastic stack version 6.6.1 Currently I have a setup Filebeats --\> Logstash --\> Elastic Search --\> Kibana. I am using this to parse the IIS access logs. Since I tried to load the default dashboard…

---

## [What the difference between basic license canvas and enterprise license canvas in kibana?](https://discuss.elastic.co/t/what-the-difference-between-basic-license-canvas-and-enterprise-license-canvas-in-kibana/172705)

<div class="topic-metadata">

**Author:** [@levi\_munthe](https://discuss.elastic.co/u/levi_munthe)\
**Replies:** 1\
**Last updated:** [March 18, 2019, 4:18am UTC](https://discuss.elastic.co/t/what-the-difference-between-basic-license-canvas-and-enterprise-license-canvas-in-kibana/172705 "2019-03-18T04:18:01Z")

</div>

Hallo guys, i want to know if in basic license we can still using canvas permanently. cause i have meet some problem to access datasource from elasticsearch, it only can get data from demo only.

---

## [Date Range not Starting at 1st](https://discuss.elastic.co/t/date-range-not-starting-at-1st/172414)

<div class="topic-metadata">

**Author:** [@aneeshakella](https://discuss.elastic.co/u/aneeshakella)\
**Replies:** 3\
**Last updated:** [March 18, 2019, 3:19am UTC](https://discuss.elastic.co/t/date-range-not-starting-at-1st/172414 "2019-03-18T03:19:30Z")

</div>

Hi, Currently, the bucket start day is not consistent between months. For instance, I want to have buckets that begin on the 1st (Feb 1, March 1, April 1, ...). However, right now, I have buckets that begin on (Feb …

---

## [Filter ip with pie](https://discuss.elastic.co/t/filter-ip-with-pie/172084)

<div class="topic-metadata">

**Author:** [@nurhambali](https://discuss.elastic.co/u/nurhambali)\
**Replies:** 2\
**Last updated:** [March 18, 2019, 3:06am UTC](https://discuss.elastic.co/t/filter-ip-with-pie/172084 "2019-03-18T03:06:55Z")

</div>

hi all, i have problem with multi ip this is my logs : attack.src\_ip : 36.86.63.182, 223.202.110.11, 36.71.158.217, 182.30.24.21, 103.78.103.49, 180.252.157.49, 180.246.39.42, 139.224.18.42, 207.226.218.72, 223.202.110…

---

## [Drop first bucket in visual builder aggregation](https://discuss.elastic.co/t/drop-first-bucket-in-visual-builder-aggregation/172691)

<div class="topic-metadata">

**Author:** [@nandrik](https://discuss.elastic.co/u/nandrik)\
**Replies:** 1\
**Last updated:** [March 18, 2019, 12:56am UTC](https://discuss.elastic.co/t/drop-first-bucket-in-visual-builder-aggregation/172691 "2019-03-18T00:56:39Z")

</div>

I've seen the post: Dropping first point sum aggregation visual builder and I wonder if there are any updates on being able to drop the first aggregation bucket that distorts the graph, similarly to the way you can drop …

---

## [Kibana two csv date](https://discuss.elastic.co/t/kibana-two-csv-date/172674)

<div class="topic-metadata">

**Author:** [@andrew\_xoa](https://discuss.elastic.co/u/andrew_xoa)\
**Replies:** 1\
**Last updated:** [March 17, 2019, 11:44pm UTC](https://discuss.elastic.co/t/kibana-two-csv-date/172674 "2019-03-17T23:44:12Z")

</div>

Hi, I have two csv files containing both date field. the first file csv data field contains numerous dates belonging to the same day, the second file csv contains in the date field a single day having further informatio…

---

## [Are these features free?](https://discuss.elastic.co/t/are-these-features-free/172690)

<div class="topic-metadata">

**Author:** [@smlbiobot](https://discuss.elastic.co/u/smlbiobot)\
**Replies:** 2\
**Last updated:** [March 17, 2019, 10:38pm UTC](https://discuss.elastic.co/t/are-these-features-free/172690 "2019-03-17T22:38:51Z")

</div>

I just upgraded my ES cluster from 6.2.2 to 6.6.2 and found these new features in Kibana. I recalled that some of these used to be in X-Pack which is not free. I’ve double-checked and made sure that I don’t have X-Pack i…

---

## [Shading in Timelion or Vega](https://discuss.elastic.co/t/shading-in-timelion-or-vega/172041)

<div class="topic-metadata">

**Author:** [@Marty\_Eriksson1](https://discuss.elastic.co/u/Marty_Eriksson1)\
**Replies:** 1\
**Last updated:** [March 17, 2019, 10:34pm UTC](https://discuss.elastic.co/t/shading-in-timelion-or-vega/172041 "2019-03-17T22:34:00Z")

</div>

Hi all, Basically i'm trying to plot a prediction range, and an actual value in Timelion (or vega). To make it useful to look at, i want to shade between the two prediction range data points (lower and upper range - e.…

---

## [How to apply aggregations and filters on aggregated data](https://discuss.elastic.co/t/how-to-apply-aggregations-and-filters-on-aggregated-data/171144)

<div class="topic-metadata">

**Author:** [@adityaPsl](https://discuss.elastic.co/u/adityaPsl)\
**Replies:** 4\
**Last updated:** [March 17, 2019, 11:12am UTC](https://discuss.elastic.co/t/how-to-apply-aggregations-and-filters-on-aggregated-data/171144 "2019-03-17T11:12:09Z")

</div>

Hello Team, I have a use case where i need to apply filters and metrics on aggregated data. for example i have below employee promotion data. +----+-------+------+-------------+---------------------+ | id | empid | na…

---

## [Visualize metrics as a column using Metric Visualization](https://discuss.elastic.co/t/visualize-metrics-as-a-column-using-metric-visualization/172536)

<div class="topic-metadata">

**Author:** [@Fabio-sama](https://discuss.elastic.co/u/Fabio-sama)\
**Replies:** 4\
**Last updated:** [March 17, 2019, 10:41am UTC](https://discuss.elastic.co/t/visualize-metrics-as-a-column-using-metric-visualization/172536 "2019-03-17T10:41:42Z")

</div>

Hi there! My question is simple: is there any way to visualize some data similar to how I do using Metric Visualization but as a column rather than a row? I have a field "accidents" and a field "city". I'd like to have…

---

## [Kibana Markdown : Is there any way to put text data with markdown plugin using indexed fields as well?](https://discuss.elastic.co/t/kibana-markdown-is-there-any-way-to-put-text-data-with-markdown-plugin-using-indexed-fields-as-well/172112)

<div class="topic-metadata">

**Author:** [@Sujata\_Yadav](https://discuss.elastic.co/u/Sujata_Yadav)\
**Replies:** 4\
**Last updated:** [March 17, 2019, 5:44am UTC](https://discuss.elastic.co/t/kibana-markdown-is-there-any-way-to-put-text-data-with-markdown-plugin-using-indexed-fields-as-well/172112 "2019-03-17T05:44:31Z")

</div>

Hi All, I am trying to create a Report-Card kind of view for my indexed data fields by highlighting critical fields. Is there any way to achieve this using markdown visualization? Regards, Sujata

---

## [How to get data from call manager](https://discuss.elastic.co/t/how-to-get-data-from-call-manager/170199)

<div class="topic-metadata">

**Author:** [@biggizod](https://discuss.elastic.co/u/biggizod)\
**Replies:** 4\
**Last updated:** [March 17, 2019, 3:12am UTC](https://discuss.elastic.co/t/how-to-get-data-from-call-manager/170199 "2019-03-17T03:12:01Z")

</div>

Hi, is it possible to for dashboard on KIbana based on data from cisco call manager? Can Kibana send script/commands, curl commands to call manager and receive data and form dashboard/tables?

---

## [Kibana update error](https://discuss.elastic.co/t/kibana-update-error/172468)

<div class="topic-metadata">

**Author:** [@Lorenzo\_De\_Francesco](https://discuss.elastic.co/u/Lorenzo_De_Francesco)\
**Replies:** 2\
**Last updated:** [March 16, 2019, 5:56pm UTC](https://discuss.elastic.co/t/kibana-update-error/172468 "2019-03-16T17:56:04Z")

</div>

Hi guys i updated kibana from version 5.x to 6.x and i get this error on CentOS \[warning\]\[stats-collection\] Unable to fetch data from reporting collector error \[07:03:20.326\] \[warning\]\[stats-collection\] \[illegal\_a…

---

## [Kibana server is not ready yet in Ubuntu](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-in-ubuntu/172455)

<div class="topic-metadata">

**Author:** [@muralasandeep](https://discuss.elastic.co/u/muralasandeep)\
**Replies:** 6\
**Last updated:** [March 16, 2019, 4:50am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready-yet-in-ubuntu/172455 "2019-03-16T04:50:08Z")

</div>

Hi , i have installed kibana 6.5.4 in the last month ,it was working good some days but now i am getting this error "kibana server is not ready yet" when i am trying to open my kibana in my browser using this loca…

---

## [Refresh doesn't help with question marks](https://discuss.elastic.co/t/refresh-doesnt-help-with-question-marks/172599)

<div class="topic-metadata">

**Author:** [@mathurin68](https://discuss.elastic.co/u/mathurin68)\
**Replies:** 1\
**Last updated:** [March 15, 2019, 9:45pm UTC](https://discuss.elastic.co/t/refresh-doesnt-help-with-question-marks/172599 "2019-03-15T21:45:26Z")

</div>

I renamed winlogbeat fields in logstash filter { if \[event\_id\] == 4624 { # https://github.com/MicrosoftDocs/windows-itpro- docs/blob/master/windows/security/threat-protection/auditing/event-4624.md …

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=697)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=699)
