# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=702

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 703

---

## [Subtract two counts](https://discuss.elastic.co/t/subtract-two-counts/169870)

<div class="topic-metadata">

**Author:** [@Menso](https://discuss.elastic.co/u/Menso)\
**Replies:** 3\
**Last updated:** [March 11, 2019, 9:42am UTC](https://discuss.elastic.co/t/subtract-two-counts/169870 "2019-03-11T09:42:51Z")

</div>

Hi everyone, I'm writing this kind of data into elastic: {'action': 'customer.created', 'user': 'john', '@timestamp': datetime.datetime(2019, 2, 25, 12, 43, 11, 691604)} {'action': 'customer.deleted', 'user': 'john', '…

---

## [Reporting button not available in Discover tab](https://discuss.elastic.co/t/reporting-button-not-available-in-discover-tab/171227)

<div class="topic-metadata">

**Author:** [@groverjatin17](https://discuss.elastic.co/u/groverjatin17)\
**Replies:** 2\
**Last updated:** [March 11, 2019, 7:01am UTC](https://discuss.elastic.co/t/reporting-button-not-available-in-discover-tab/171227 "2019-03-11T07:01:26Z")

</div>

I just installed Elasticsearch and Kibana 6.6.1 version in my windows machine. I loaded some data from sample datasets available. Ultimately, after adding some filters in an Index I want to export the data to CSV file.…

---

## [Lowest Debian Package Version](https://discuss.elastic.co/t/lowest-debian-package-version/171328)

<div class="topic-metadata">

**Author:** [@jeckgit](https://discuss.elastic.co/u/jeckgit)\
**Replies:** 1\
**Last updated:** [March 11, 2019, 7:01am UTC](https://discuss.elastic.co/t/lowest-debian-package-version/171328 "2019-03-11T07:01:07Z")

</div>

Hi, I am trying to create a visualization of the lowest package installed on multiple Hosts. I am using osquery to get the package-list and send it via filebeat (it-compliance-pack). For example I have the following da…

---

## [Create label for existing data](https://discuss.elastic.co/t/create-label-for-existing-data/171465)

<div class="topic-metadata">

**Author:** [@muralasandeep](https://discuss.elastic.co/u/muralasandeep)\
**Replies:** 2\
**Last updated:** [March 11, 2019, 4:43am UTC](https://discuss.elastic.co/t/create-label-for-existing-data/171465 "2019-03-11T04:43:26Z")

</div>

Hi every one , This is Sandeep, i am new at kibana , i have one field Error\_types ,in that field i have 3 types of errors like Table Syntax Failed based on this i created pie chart like this metrics Slice Size: …

---

## [Elasticsearch.hosts config](https://discuss.elastic.co/t/elasticsearch-hosts-config/171611)

<div class="topic-metadata">

**Author:** [@andreacfm](https://discuss.elastic.co/u/andreacfm)\
**Replies:** 3\
**Last updated:** [March 11, 2019, 5:56am UTC](https://discuss.elastic.co/t/elasticsearch-hosts-config/171611 "2019-03-11T05:56:56Z")

</div>

The docs for the new elasticsearch.hosts config says: The URLs of the Elasticsearch instances to use for all your queries. All nodes listed here must be on the same cluster I have 4 cluster that I would like to conne…

---

## [SQL "where not exists" equivalent for Elastic](https://discuss.elastic.co/t/sql-where-not-exists-equivalent-for-elastic/170877)

<div class="topic-metadata">

**Author:** [@CraigMc](https://discuss.elastic.co/u/CraigMc)\
**Replies:** 2\
**Last updated:** [March 10, 2019, 3:38pm UTC](https://discuss.elastic.co/t/sql-where-not-exists-equivalent-for-elastic/170877 "2019-03-10T15:38:00Z")

</div>

Hello, I have a set of stages I am logging. A GUID is on each record to tie the stage together. Example: Guid Stage 1 Stage 1 1 Stage 2 1 Stage 3 1 Stage 4 1 Stage 5 2 Stage …

---

## [Resolve GeoHash with Open Street Map OR Google Geocoding API](https://discuss.elastic.co/t/resolve-geohash-with-open-street-map-or-google-geocoding-api/171439)

<div class="topic-metadata">

**Author:** [@niki](https://discuss.elastic.co/u/niki)\
**Replies:** 2\
**Last updated:** [March 9, 2019, 3:42pm UTC](https://discuss.elastic.co/t/resolve-geohash-with-open-street-map-or-google-geocoding-api/171439 "2019-03-09T15:42:37Z")

</div>

I need to get more accurate results on tile map using geo.location. Is there any way to use google api or my own osrm map to visualise locations?

---

## [Kibana CORS on hosted cluster](https://discuss.elastic.co/t/kibana-cors-on-hosted-cluster/171588)

<div class="topic-metadata">

**Author:** [@nessche](https://discuss.elastic.co/u/nessche)\
**Replies:** 0\
**Last updated:** [March 9, 2019, 11:25am UTC](https://discuss.elastic.co/t/kibana-cors-on-hosted-cluster/171588 "2019-03-09T11:25:51Z")

</div>

Hi, as many before me I am trying to embed Kibana dashboards without the need for the user to authenticate twice (once to our app and once to Kibana). Unluckily our app requires dynamic login because different user shou…

---

## [How to get the counts of log messages based on the error type in Elasticsearch visualization](https://discuss.elastic.co/t/how-to-get-the-counts-of-log-messages-based-on-the-error-type-in-elasticsearch-visualization/171213)

<div class="topic-metadata">

**Author:** [@vampire](https://discuss.elastic.co/u/vampire)\
**Replies:** 5\
**Last updated:** [March 9, 2019, 7:58am UTC](https://discuss.elastic.co/t/how-to-get-the-counts-of-log-messages-based-on-the-error-type-in-elasticsearch-visualization/171213 "2019-03-09T07:58:47Z")

</div>

I have some sample data on the Elasticsearch, which looks like the following: I am using the data table in the Visualize section to get the counts for each error type, for example: it should output Error: Update fai…

---

## [Help with Watcher Script Transform](https://discuss.elastic.co/t/help-with-watcher-script-transform/171411)

<div class="topic-metadata">

**Author:** [@uklipse](https://discuss.elastic.co/u/uklipse)\
**Replies:** 2\
**Last updated:** [March 9, 2019, 4:22am UTC](https://discuss.elastic.co/t/help-with-watcher-script-transform/171411 "2019-03-09T04:22:41Z")

</div>

I am trying to pass some data from a watcher to another index. I was looking to use the Script Transform with Index Action to insert data from the watch. With this code, I'm getting a "could not parse action \[inlined/tra…

---

## [Is it possible to customize the default five display colors and data range](https://discuss.elastic.co/t/is-it-possible-to-customize-the-default-five-display-colors-and-data-range/171477)

<div class="topic-metadata">

**Author:** [@Yipin](https://discuss.elastic.co/u/Yipin)\
**Replies:** 2\
**Last updated:** [March 9, 2019, 3:54am UTC](https://discuss.elastic.co/t/is-it-possible-to-customize-the-default-five-display-colors-and-data-range/171477 "2019-03-09T03:54:57Z")

</div>

Hi There, Once you configure a region map properly, you'll see it on the map, but unfortunately, you are only able to see 5 different colors on the map, and if the data range from very big to very small, then the map do…

---

## [Uploading Shakespeare json to index in Kibana](https://discuss.elastic.co/t/uploading-shakespeare-json-to-index-in-kibana/171554)

<div class="topic-metadata">

**Author:** [@Vincent\_Stevenson](https://discuss.elastic.co/u/Vincent_Stevenson)\
**Replies:** 1\
**Last updated:** [March 8, 2019, 11:10pm UTC](https://discuss.elastic.co/t/uploading-shakespeare-json-to-index-in-kibana/171554 "2019-03-08T23:10:36Z")

</div>

Hi, I am trying to upload the Shakespeare json into the Shakespeare index I created. From Kibana, I executed: PUT /shakespeare { "mappings": { "doc": { "properties": { "speaker": {"type": "keyword"}, "play\_name":…

---

## [Text in Line Chart - Canvas Kibana](https://discuss.elastic.co/t/text-in-line-chart-canvas-kibana/170801)

<div class="topic-metadata">

**Author:** [@Deyvis\_Valladares](https://discuss.elastic.co/u/Deyvis_Valladares)\
**Replies:** 4\
**Last updated:** [March 8, 2019, 8:59pm UTC](https://discuss.elastic.co/t/text-in-line-chart-canvas-kibana/170801 "2019-03-08T20:59:12Z")

</div>

Hi Team, Could you help me in this case? I try to put labels in my line chart, but I don't now how move the text to over the line. Thanks.

---

## [Creating an Index Pattern in Kibana spining forever](https://discuss.elastic.co/t/creating-an-index-pattern-in-kibana-spining-forever/171379)

<div class="topic-metadata">

**Author:** [@User\_key](https://discuss.elastic.co/u/User_key)\
**Replies:** 3\
**Last updated:** [March 8, 2019, 7:37pm UTC](https://discuss.elastic.co/t/creating-an-index-pattern-in-kibana-spining-forever/171379 "2019-03-08T19:37:12Z")

</div>

Hi All, I have Elasticsearch + Kibana + Logstash version 6.6.1 running my machine. I have ingested a record from Logstash and it created a default index logstash\*. When I login to Kibana and tried to create an index pa…

---

## [Vega is Awesome... Customizable Graphs, Maps and fully searchable Visualizations](https://discuss.elastic.co/t/vega-is-awesome-customizable-graphs-maps-and-fully-searchable-visualizations/171545)

<div class="topic-metadata">

**Author:** [@avocado](https://discuss.elastic.co/u/avocado)\
**Replies:** 1\
**Last updated:** [March 8, 2019, 7:26pm UTC](https://discuss.elastic.co/t/vega-is-awesome-customizable-graphs-maps-and-fully-searchable-visualizations/171545 "2019-03-08T19:26:48Z")

</div>

The Vega type visualization opens up so many possibilities in Kibana, and has allowed me to create lots custom visualizations that go beyond the standard options (which are also great!). Here are a few super helpful res…

---

## [Vega vertical bar chart: Inline data vs elasticsearch index url data](https://discuss.elastic.co/t/vega-vertical-bar-chart-inline-data-vs-elasticsearch-index-url-data/171546)

<div class="topic-metadata">

**Author:** [@mgolubov55](https://discuss.elastic.co/u/mgolubov55)\
**Replies:** 1\
**Last updated:** [March 8, 2019, 7:18pm UTC](https://discuss.elastic.co/t/vega-vertical-bar-chart-inline-data-vs-elasticsearch-index-url-data/171546 "2019-03-08T19:18:48Z")

</div>

I created a simple index: Testing vs inline data - the following works: The following does not work - Why? - complete source code will follow the illustration. Here is the complete source code: { "$schem…

---

## [Monitoring - "Node" page node\_id hrr6uI-eSUutju5ssFQeBQ](https://discuss.elastic.co/t/monitoring-node-page-node-id-hrr6ui-esuutju5ssfqebq/171445)

<div class="topic-metadata">

**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\
**Replies:** 1\
**Last updated:** [March 8, 2019, 6:03pm UTC](https://discuss.elastic.co/t/monitoring-node-page-node-id-hrr6ui-esuutju5ssfqebq/171445 "2019-03-08T18:03:46Z")

</div>

Hi Elastic & kibana 6.6.1, Centos 7.6 I have noticed that node\_id is showing this ID, not the node name I have specified in elastisearch.yml config file. I do remember that few releases back that there was this user…

---

## [Deleting index in kibana](https://discuss.elastic.co/t/deleting-index-in-kibana/171427)

<div class="topic-metadata">

**Author:** [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)\
**Replies:** 3\
**Last updated:** [March 8, 2019, 5:17pm UTC](https://discuss.elastic.co/t/deleting-index-in-kibana/171427 "2019-03-08T17:17:16Z")

</div>

I was trying to delete the index in kibana..but wasn't able to delete the index getting error messages. I tried restarting the kibana still nothing happened

---

## [Debian 9: ./bin/kibana running, but connection to port 5601 refused](https://discuss.elastic.co/t/debian-9-bin-kibana-running-but-connection-to-port-5601-refused/171458)

<div class="topic-metadata">

**Author:** [@realtebo](https://discuss.elastic.co/u/realtebo)\
**Replies:** 1\
**Last updated:** [March 8, 2019, 4:55pm UTC](https://discuss.elastic.co/t/debian-9-bin-kibana-running-but-connection-to-port-5601-refused/171458 "2019-03-08T16:55:18Z")

</div>

Hi ! I'm here for first time. I installed on a debian 9 elastic search and then I installed kibana. I am testing that is working, using ./bin/kibana Is it supposed to run using sudo ? In both normal and sudo mode, …

---

## [Kibana Government Compliance](https://discuss.elastic.co/t/kibana-government-compliance/171418)

<div class="topic-metadata">

**Author:** [@mingqin1](https://discuss.elastic.co/u/mingqin1)\
**Replies:** 2\
**Last updated:** [March 8, 2019, 4:53pm UTC](https://discuss.elastic.co/t/kibana-government-compliance/171418 "2019-03-08T16:53:01Z")

</div>

Is Kibana compliant with DON Application and Database Management System (DADMS)?

---

## [Kibana 6.6.1 plugin install stuck at Optimizing and caching browser bundles](https://discuss.elastic.co/t/kibana-6-6-1-plugin-install-stuck-at-optimizing-and-caching-browser-bundles/171391)

<div class="topic-metadata">

**Author:** [@bbking](https://discuss.elastic.co/u/bbking)\
**Replies:** 1\
**Last updated:** [March 8, 2019, 4:51pm UTC](https://discuss.elastic.co/t/kibana-6-6-1-plugin-install-stuck-at-optimizing-and-caching-browser-bundles/171391 "2019-03-08T16:51:22Z")

</div>

Hi, I'm trying to add a custom plugin with bin/kibana-plugin install file://\[path\], but the process is stuck at Optimizing and caching browser bundles... forever. I updated kibana.yml with custom configurations before c…

---

## [Vega animated scatter chart json file url vs elasticsearch index url - (2nd attempt)](https://discuss.elastic.co/t/vega-animated-scatter-chart-json-file-url-vs-elasticsearch-index-url-2nd-attempt/171523)

<div class="topic-metadata">

**Author:** [@mgolubov55](https://discuss.elastic.co/u/mgolubov55)\
**Replies:** 1\
**Last updated:** [March 8, 2019, 4:24pm UTC](https://discuss.elastic.co/t/vega-animated-scatter-chart-json-file-url-vs-elasticsearch-index-url-2nd-attempt/171523 "2019-03-08T16:24:36Z")

</div>

I am adapting the Vega animated scatter chart to display test data. When the data is loaded from a json file, the chart looks like this: When the data is loaded from an elasticsearch index, the result is empty data: …

---

## [KIBANA Can't Download GeoJSON Map Due To CORS Error](https://discuss.elastic.co/t/kibana-cant-download-geojson-map-due-to-cors-error/169540)

<div class="topic-metadata">

**Author:** [@upchair](https://discuss.elastic.co/u/upchair)\
**Replies:** 3\
**Last updated:** [March 8, 2019, 4:22pm UTC](https://discuss.elastic.co/t/kibana-cant-download-geojson-map-due-to-cors-error/169540 "2019-03-08T16:22:50Z")

</div>

Hello All, I tried starting my Kibana Server but I got the an error. I included the necessary enable CORS parameters which I need to visualize a map in Kibana but when I try to visualize the map in Kibana I get the foll…

---

## [Monitoring error after enabling security](https://discuss.elastic.co/t/monitoring-error-after-enabling-security/171395)

<div class="topic-metadata">

**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\
**Replies:** 2\
**Last updated:** [March 8, 2019, 4:12pm UTC](https://discuss.elastic.co/t/monitoring-error-after-enabling-security/171395 "2019-03-08T16:12:52Z")

</div>

We are trying to learn how to setup security. We have TLS for the transport using certutil, we have TSL for http using a commercial cert, setup default account passwords and connected via Kibana using the elastic accou…

---

## [Vega animated scatter chart json file url vs elasticsearch index url](https://discuss.elastic.co/t/vega-animated-scatter-chart-json-file-url-vs-elasticsearch-index-url/171520)

<div class="topic-metadata">

**Author:** [@mgolubov55](https://discuss.elastic.co/u/mgolubov55)\
**Replies:** 1\
**Last updated:** [March 8, 2019, 4:13pm UTC](https://discuss.elastic.co/t/vega-animated-scatter-chart-json-file-url-vs-elasticsearch-index-url/171520 "2019-03-08T16:13:16Z")

</div>

I am adapting the Vega animated scatter chart to display test data. When the data is loaded from a json file, the chart looks like this:

---

## [Vega animated scatter chart json file url vs elasticsearch index url - (2nd attempt) - source code completed](https://discuss.elastic.co/t/vega-animated-scatter-chart-json-file-url-vs-elasticsearch-index-url-2nd-attempt-source-code-completed/171524)

<div class="topic-metadata">

**Author:** [@mgolubov55](https://discuss.elastic.co/u/mgolubov55)\
**Replies:** 1\
**Last updated:** [March 8, 2019, 4:05pm UTC](https://discuss.elastic.co/t/vega-animated-scatter-chart-json-file-url-vs-elasticsearch-index-url-2nd-attempt-source-code-completed/171524 "2019-03-08T16:05:01Z")

</div>

here is the rest of the source code: (still a little truncated at the end) "name": "trackSettlementcurrencies", "on": \[ {"trigger": "active", "toggle": "{settlementcurrency: active.settlementcurrency}"} \] } \]…

---

## [Importing the filebeat dashboards into Kibana](https://discuss.elastic.co/t/importing-the-filebeat-dashboards-into-kibana/171315)

<div class="topic-metadata">

**Author:** [@albgus](https://discuss.elastic.co/u/albgus)\
**Replies:** 1\
**Last updated:** [March 8, 2019, 3:59pm UTC](https://discuss.elastic.co/t/importing-the-filebeat-dashboards-into-kibana/171315 "2019-03-08T15:59:22Z")

</div>

Hello, I would like to import the pre-made dashboards of filebeat into Kibana, but using another index name. Is there any way to import the JSON files that are distributed with filebeat manually? I can't seem to find an…

---

## [System.cpu.total.narm.pct always shows 0% in visualization even though values are there](https://discuss.elastic.co/t/system-cpu-total-narm-pct-always-shows-0-in-visualization-even-though-values-are-there/171064)

<div class="topic-metadata">

**Author:** [@PrasanthDaya](https://discuss.elastic.co/u/PrasanthDaya)\
**Replies:** 2\
**Last updated:** [March 8, 2019, 2:08pm UTC](https://discuss.elastic.co/t/system-cpu-total-narm-pct-always-shows-0-in-visualization-even-though-values-are-there/171064 "2019-03-08T14:08:41Z")

</div>

Hi, I'm trying to create the visualization for CPU utilization by using system.cpu.total.narm.pct to show the total utilization of CPU but visualization shows always 0% even though there is value (I can see some value i…

---

## [Get min value with timestamp](https://discuss.elastic.co/t/get-min-value-with-timestamp/170700)

<div class="topic-metadata">

**Author:** [@itsroot](https://discuss.elastic.co/u/itsroot)\
**Replies:** 3\
**Last updated:** [March 8, 2019, 12:28pm UTC](https://discuss.elastic.co/t/get-min-value-with-timestamp/170700 "2019-03-08T12:28:20Z")

</div>

Hello, I'm quite new to kibana and elasticsearch and I'm currently at creating a dashboard. I have a series of numbers and I want to know the min value of a given period of time. But I need to know at which time the val…

---

## [Machine Learning detecting highest change of a value](https://discuss.elastic.co/t/machine-learning-detecting-highest-change-of-a-value/171102)

<div class="topic-metadata">

**Author:** [@jong99](https://discuss.elastic.co/u/jong99)\
**Replies:** 8\
**Last updated:** [March 8, 2019, 10:10am UTC](https://discuss.elastic.co/t/machine-learning-detecting-highest-change-of-a-value/171102 "2019-03-08T10:10:37Z")

</div>

I'm experimenting with machine learning in our evaluation and trying to find population members with the largest absolute change of a value of field in the time period; that is the largest max(field) - min(field) in the …

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=701)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=703)
