# Kibana **URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=73 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 74 --- ## [Use watcher index action with multiple documents](https://discuss.elastic.co/t/use-watcher-index-action-with-multiple-documents/351503)
**Author:** [@lizozom](https://discuss.elastic.co/u/lizozom)\ **Replies:** 3\ **Last updated:** [January 22, 2024, 6:35pm UTC](https://discuss.elastic.co/t/use-watcher-index-action-with-multiple-documents/351503 "2024-01-22T18:35:54Z")
I have an index and I am using a watcher to monitor it. When a condition is met, I want to copy each document to a different index. I'm following the example here: "index\_payload": { "transform": { "script… --- ## [One search in discover being used for different visualisation](https://discuss.elastic.co/t/one-search-in-discover-being-used-for-different-visualisation/351543)
**Author:** [@skshandilya69](https://discuss.elastic.co/u/skshandilya69)\ **Replies:** 4\ **Last updated:** [January 22, 2024, 5:47pm UTC](https://discuss.elastic.co/t/one-search-in-discover-being-used-for-different-visualisation/351543 "2024-01-22T17:47:10Z")
I have many nodes, and each node sends an event that happens repeatedly every 12 hours. all nodes do not send this at the same time. I need one saved search which is very generic, I want to visualise this through variou… --- ## [Can Elastic SIEM alerts be configured to work on a time basis?](https://discuss.elastic.co/t/can-elastic-siem-alerts-be-configured-to-work-on-a-time-basis/351547)
**Author:** [@Kiwisaki](https://discuss.elastic.co/u/Kiwisaki)\ **Replies:** 0\ **Last updated:** [January 22, 2024, 2:12pm UTC](https://discuss.elastic.co/t/can-elastic-siem-alerts-be-configured-to-work-on-a-time-basis/351547 "2024-01-22T14:12:39Z")
Hi, Is it possible to configure alerts to work on a clock ? I.e, i want some alarms to trigger during out of hours or weekends, but not during mon-fri hours. Is this possible ? Additionally, Can you stack events and … --- ## [Building Kibana code in WSL giving error](https://discuss.elastic.co/t/building-kibana-code-in-wsl-giving-error/349790)
**Author:** [@vikas.shirke](https://discuss.elastic.co/u/vikas.shirke)\ **Replies:** 7\ **Last updated:** [January 22, 2024, 1:24pm UTC](https://discuss.elastic.co/t/building-kibana-code-in-wsl-giving-error/349790 "2024-01-22T13:24:28Z")
I am trying to build Kibana code locally in wsl enviroment. I am using version 8.11.3 I have ran below commands: git checkout 8.11.3 nvm use yarn kbn clean yarn cache clean rm yarn.lock yarn kbn bootstrap --force-… --- ## [/\_security/api\_key timeout](https://discuss.elastic.co/t/security-api-key-timeout/351366)
**Author:** [@seism0saurus](https://discuss.elastic.co/u/seism0saurus)\ **Replies:** 2\ **Last updated:** [January 22, 2024, 12:50pm UTC](https://discuss.elastic.co/t/security-api-key-timeout/351366 "2024-01-22T12:50:15Z")
Hi, I encounter a problem with the API key management in Kibana. The page behind Stack Management -\> Security -\> API keys does not load. After some time it displays "Could not load API keys." Under technical details i… --- ## [How to see Kibana Dashboard after setup winlogbeat](https://discuss.elastic.co/t/how-to-see-kibana-dashboard-after-setup-winlogbeat/351499)
**Author:** [@aguskhohar](https://discuss.elastic.co/u/aguskhohar)\ **Replies:** 1\ **Last updated:** [January 22, 2024, 11:01am UTC](https://discuss.elastic.co/t/how-to-see-kibana-dashboard-after-setup-winlogbeat/351499 "2024-01-22T11:01:58Z")
Hi All, Could you please arrange to see winlogbeat after installing on kibana (os windows) --- ## [How to create index with a date with a template?](https://discuss.elastic.co/t/how-to-create-index-with-a-date-with-a-template/351440)
**Author:** [@emoxam](https://discuss.elastic.co/u/emoxam)\ **Replies:** 3\ **Last updated:** [January 22, 2024, 7:56am UTC](https://discuss.elastic.co/t/how-to-create-index-with-a-date-with-a-template/351440 "2024-01-22T07:56:44Z")
When i start logstash it creates index with a date, but if i delete this index it creates by the template without any date. How to create index with a date with a template ? Thanks --- ## [My Kibana Discover or Elasticsearch not displaying documents when adding an index template](https://discuss.elastic.co/t/my-kibana-discover-or-elasticsearch-not-displaying-documents-when-adding-an-index-template/351398)
**Author:** [@Banel\_Angela](https://discuss.elastic.co/u/Banel_Angela)\ **Replies:** 2\ **Last updated:** [January 22, 2024, 2:59am UTC](https://discuss.elastic.co/t/my-kibana-discover-or-elasticsearch-not-displaying-documents-when-adding-an-index-template/351398 "2024-01-22T02:59:18Z")
Hi, My stack version is 8.11.4 When i adding template for analyzing nginx logs.: PUT /\_template/apigw?pretty { "index\_patterns": \[ "api-access-\*", "scoregateway-access-\*" \], "settings": { "number\_of\_… --- ## [Users in Kibana and Elasticsearch](https://discuss.elastic.co/t/users-in-kibana-and-elasticsearch/351496)
**Author:** [@stobbe](https://discuss.elastic.co/u/stobbe)\ **Replies:** 3\ **Last updated:** [January 21, 2024, 3:05pm UTC](https://discuss.elastic.co/t/users-in-kibana-and-elasticsearch/351496 "2024-01-21T15:05:37Z")
Hello, Very basic question, but the documentation is not that clear I think. I am looking how elastic and kibana communicate user info. When creating a user in kibana is this user automaticaly available in elastic or … --- ## [\[Transforms\] How to add an aggregation field?](https://discuss.elastic.co/t/transforms-how-to-add-an-aggregation-field/350657)
**Author:** [@lizozom](https://discuss.elastic.co/u/lizozom)\ **Replies:** 3\ **Last updated:** [January 21, 2024, 11:34am UTC](https://discuss.elastic.co/t/transforms-how-to-add-an-aggregation-field/350657 "2024-01-21T11:34:40Z")
I'm using Transforms to pivot my log data for analytics. I want to add another aggregation to the transform (obviously only for future runs). I don't see this option in the UI neither in the API. Is it possible to add … --- ## [Does not exist target folder in the external plugin in Kibana 8.10.4](https://discuss.elastic.co/t/does-not-exist-target-folder-in-the-external-plugin-in-kibana-8-10-4/350652)
**Author:** [@mzm1370](https://discuss.elastic.co/u/mzm1370)\ **Replies:** 2\ **Last updated:** [January 20, 2024, 8:14am UTC](https://discuss.elastic.co/t/does-not-exist-target-folder-in-the-external-plugin-in-kibana-8-10-4/350652 "2024-01-20T08:14:57Z")
Hi I installed the external plugin in KIbana and there is no exit target folder in the external plugin in Kibana 8.10.4 and no run Kibana 8.10.4 --- ## [How to edit kibana.yml and incress kibana CSV report download size?](https://discuss.elastic.co/t/how-to-edit-kibana-yml-and-incress-kibana-csv-report-download-size/351059)
**Author:** [@MD\_Rezaul\_Karim](https://discuss.elastic.co/u/MD_Rezaul_Karim)\ **Replies:** 3\ **Last updated:** [January 19, 2024, 11:40pm UTC](https://discuss.elastic.co/t/how-to-edit-kibana-yml-and-incress-kibana-csv-report-download-size/351059 "2024-01-19T23:40:02Z")
How to edit kibana.yml and incress kibana CSV report download size? --- ## [Can\`t build and install kibana external plugins](https://discuss.elastic.co/t/can-t-build-and-install-kibana-external-plugins/351007)
**Author:** [@laripour](https://discuss.elastic.co/u/laripour)\ **Replies:** 2\ **Last updated:** [January 19, 2024, 11:25pm UTC](https://discuss.elastic.co/t/can-t-build-and-install-kibana-external-plugins/351007 "2024-01-19T23:25:01Z")
hi everyone. i have problem on Kibana 8.10.4 when i execute kibana plugin build command, target directory is not created in given .zip, and also .zip file can not be installed on production mode. thanks. --- ## [Visualization lens chart filter by max and min timestamp](https://discuss.elastic.co/t/visualization-lens-chart-filter-by-max-and-min-timestamp/350922)
**Author:** [@Liam619](https://discuss.elastic.co/u/Liam619)\ **Replies:** 1\ **Last updated:** [January 19, 2024, 11:13pm UTC](https://discuss.elastic.co/t/visualization-lens-chart-filter-by-max-and-min-timestamp/350922 "2024-01-19T23:13:38Z")
Hi everyone, I'm trying to figure out how to filter timestamp by getting the max and min of 2 date. I have tried to use "aggs" but I get error instead. I have a sql query condition that I need to turn into kibana chart… --- ## [View only Dashboard on ELK 8.6.2!](https://discuss.elastic.co/t/view-only-dashboard-on-elk-8-6-2/350816)
**Author:** [@Kvoyce2023](https://discuss.elastic.co/u/Kvoyce2023)\ **Replies:** 4\ **Last updated:** [January 19, 2024, 11:08pm UTC](https://discuss.elastic.co/t/view-only-dashboard-on-elk-8-6-2/350816 "2024-01-19T23:08:52Z")
Hi all, So I got a working cross cluster Kibana dashboard which we have built as superuser. Now we have a request to share this dashboard as view only mode with another department. For the above request , I created a … --- ## [Dashboards using \_cat APIs](https://discuss.elastic.co/t/dashboards-using-cat-apis/350888)
**Author:** [@jcruz](https://discuss.elastic.co/u/jcruz)\ **Replies:** 1\ **Last updated:** [January 19, 2024, 11:04pm UTC](https://discuss.elastic.co/t/dashboards-using-cat-apis/350888 "2024-01-19T23:04:32Z")
Hello guys, I would like to create some visualizations using the \_cat/indices API, so I can monitoring and understand the index usage during time. Is there any way to get the \_cat API output into some lens panels to c… --- ## [Kibana markdown - clickable location for an image linked to URL - take 2](https://discuss.elastic.co/t/kibana-markdown-clickable-location-for-an-image-linked-to-url-take-2/350753)
**Author:** [@Buddha](https://discuss.elastic.co/u/Buddha)\ **Replies:** 1\ **Last updated:** [January 19, 2024, 10:47pm UTC](https://discuss.elastic.co/t/kibana-markdown-clickable-location-for-an-image-linked-to-url-take-2/350753 "2024-01-19T22:47:43Z")
Hello, Background: I had this issue where the clickable image area was only the bottom portion of the image. A fix (\[Dashboard\] Add styling to allow clickable TSVB markdown images by Heenawter · Pull Request #147802 ·… --- ## [\[ERROR\]\[plugins.fleet\] Failed to fetch latest version of cloud\_defend from registry:](https://discuss.elastic.co/t/error-plugins-fleet-failed-to-fetch-latest-version-of-cloud-defend-from-registry/350742)
**Author:** [@Ekta](https://discuss.elastic.co/u/Ekta)\ **Replies:** 1\ **Last updated:** [January 19, 2024, 10:45pm UTC](https://discuss.elastic.co/t/error-plugins-fleet-failed-to-fetch-latest-version-of-cloud-defend-from-registry/350742 "2024-01-19T22:45:16Z")
Hi I am upgrading kibana from 7.17.13 to 8.11.3. Kibana working fine but I got a error logs in my syslog like below OS: ububtu 22.04 Jan 10 16:37:20 TEST02 kibana\[1285\]: \[2024-01-10T16:37:20.641+05:30\]\[ERROR\]\[plugins.… --- ## [Kibana - elasticsearch connexion](https://discuss.elastic.co/t/kibana-elasticsearch-connexion/350698)
**Author:** [@boubou](https://discuss.elastic.co/u/boubou)\ **Replies:** 1\ **Last updated:** [January 19, 2024, 10:36pm UTC](https://discuss.elastic.co/t/kibana-elasticsearch-connexion/350698 "2024-01-19T22:36:25Z")
Hello everyone, I just installed Kibana and Elasticsearch on my server. I downloaded versions 8.2.0 in tar.gz on Linux. To set up these two software, I modified two documents: elasticsearch.yml kibana.yml Here is th… --- ## [Elastic runtimes fields](https://discuss.elastic.co/t/elastic-runtimes-fields/350677)
**Author:** [@Rossana](https://discuss.elastic.co/u/Rossana)\ **Replies:** 3\ **Last updated:** [January 19, 2024, 9:53pm UTC](https://discuss.elastic.co/t/elastic-runtimes-fields/350677 "2024-01-19T21:53:50Z")
Hi, I try to make a dashboard with term agg (with three different values). But one of the values is too big, so it does not show it. This is the field value So I guess thats why it does not appears on my visuali… --- ## [Index got locked](https://discuss.elastic.co/t/index-got-locked/351464)
**Author:** [@Keith\_Lin](https://discuss.elastic.co/u/Keith_Lin)\ **Replies:** 1\ **Last updated:** [January 19, 2024, 9:51pm UTC](https://discuss.elastic.co/t/index-got-locked/351464 "2024-01-19T21:51:12Z")
Jan 19, 2024 @ 12:17 PM PUT /\*/\_settings { "index": { "blocks.read\_only": false, "blocks.read\_only\_allow\_delete": null, "blocks.write": true } } The run the above. The blocks.write: true block all index… --- ## [Need help building dashboard](https://discuss.elastic.co/t/need-help-building-dashboard/351467)
**Author:** [@gnatola](https://discuss.elastic.co/u/gnatola)\ **Replies:** 1\ **Last updated:** [January 19, 2024, 9:45pm UTC](https://discuss.elastic.co/t/need-help-building-dashboard/351467 "2024-01-19T21:45:18Z")
Hello, I want to build a dashboard that shows users with failed logins and the number of failed logins for the last 24 hours. I built a dashboard, but it shows all users, even those whose login did not fail. How do I lim… --- ## [Software Inventory Management](https://discuss.elastic.co/t/software-inventory-management/350585)
**Author:** [@praveen\_raju](https://discuss.elastic.co/u/praveen_raju)\ **Replies:** 1\ **Last updated:** [January 19, 2024, 9:15pm UTC](https://discuss.elastic.co/t/software-inventory-management/350585 "2024-01-19T21:15:20Z")
Hi, We currently have 5000 virtual machines under monitoring using the Elastic Stack (using elastic agent). In light of recent changes, specifically the removal of the SAM module from ServiceNow, we are interested in cr… --- ## [How to delete kibana dashboard via API in ELK 8.11.3?](https://discuss.elastic.co/t/how-to-delete-kibana-dashboard-via-api-in-elk-8-11-3/350520)
**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\ **Replies:** 1\ **Last updated:** [January 19, 2024, 8:29pm UTC](https://discuss.elastic.co/t/how-to-delete-kibana-dashboard-via-api-in-elk-8-11-3/350520 "2024-01-19T20:29:55Z")
Right now I'm using ELK 8.11.3 I made a Kibana Dashboard with the id 7eb136ba-4ef4-4f99-8ec3-b58673a748ec. Then I ran this curl statement to delete the dashboard: curl -k -X DELETE -u elastic:changeme "https://kibana:… --- ## [Metrics system overview dashboard redirects to a 404 Dashboard not found page in Kibana](https://discuss.elastic.co/t/metrics-system-overview-dashboard-redirects-to-a-404-dashboard-not-found-page-in-kibana/351033)
**Author:** [@Patr123](https://discuss.elastic.co/u/Patr123)\ **Replies:** 10\ **Last updated:** [January 19, 2024, 2:22pm UTC](https://discuss.elastic.co/t/metrics-system-overview-dashboard-redirects-to-a-404-dashboard-not-found-page-in-kibana/351033 "2024-01-19T14:22:04Z")
Hello, We are using Kibana v8.10.4 and have installed elastic agent on one linux and a windows system. I do see logs/metrics coming in and see the dashboard visualizations getting populated for the Metrics system overv… --- ## [Kibana Area Chart -Split chart twice i.e per release, per brand on X axis](https://discuss.elastic.co/t/kibana-area-chart-split-chart-twice-i-e-per-release-per-brand-on-x-axis/351347)
**Author:** [@PRASHANT\_MEHTA](https://discuss.elastic.co/u/PRASHANT_MEHTA)\ **Replies:** 0\ **Last updated:** [January 18, 2024, 10:04am UTC](https://discuss.elastic.co/t/kibana-area-chart-split-chart-twice-i-e-per-release-per-brand-on-x-axis/351347 "2024-01-18T10:04:30Z")
Hello All, I've a requirement and mostly I'm aware this won't be possible , but for second opinion need feedback if this can be done in some way. I am using normal area chart and problem is can SPLIT THE CHART TWICE , … --- ## [Calculating Windows User Session Duration](https://discuss.elastic.co/t/calculating-windows-user-session-duration/351362)
**Author:** [@pcharles1](https://discuss.elastic.co/u/pcharles1)\ **Replies:** 0\ **Last updated:** [January 18, 2024, 3:05pm UTC](https://discuss.elastic.co/t/calculating-windows-user-session-duration/351362 "2024-01-18T15:05:28Z")
I need to calculate Windows user session duration times using winlogbeat event codes like 4624 (login) and 4634 (logout) & create a visualization to display each user's duration. I'm using a heatmap visualization. I foun… --- ## [Generate multiple alerts from elastic query](https://discuss.elastic.co/t/generate-multiple-alerts-from-elastic-query/351113)
**Author:** [@umesh2020](https://discuss.elastic.co/u/umesh2020)\ **Replies:** 10\ **Last updated:** [January 18, 2024, 3:03pm UTC](https://discuss.elastic.co/t/generate-multiple-alerts-from-elastic-query/351113 "2024-01-18T15:03:19Z")
I want to generate an alert whenever a pod is restarted in kubernetes. I am planning to use kubernetes.container.status.restarts to identify whether pods are restarted or not. I would like to have a single elasticsear… --- ## [Arabic decode](https://discuss.elastic.co/t/arabic-decode/351027)
**Author:** [@abdullah144](https://discuss.elastic.co/u/abdullah144)\ **Replies:** 3\ **Last updated:** [January 18, 2024, 2:44pm UTC](https://discuss.elastic.co/t/arabic-decode/351027 "2024-01-18T14:44:37Z")
Hi , when I log some data in Arabic is came like this on Kibana : "شــريك" how can I let the Kibana convert it to Arabic direct? Thanks, --- ## [Duplicate Documents Generated by Kibana for ICMP Monitor Down and Recovery Statuses](https://discuss.elastic.co/t/duplicate-documents-generated-by-kibana-for-icmp-monitor-down-and-recovery-statuses/351258)
**Author:** [@Adriann](https://discuss.elastic.co/u/Adriann)\ **Replies:** 2\ **Last updated:** [January 18, 2024, 9:42am UTC](https://discuss.elastic.co/t/duplicate-documents-generated-by-kibana-for-icmp-monitor-down-and-recovery-statuses/351258 "2024-01-18T09:42:31Z")
Hello, I've been experiencing an issue where Kibana's monitoring is generating duplicate documents for both 'down' and 'recovery' statuses across all hosts. Below, I have provided the configuration of the rule and addit… [Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=72) [Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=74)