# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=731

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 732

---

## [Nginx and Kibana with auth basic](https://discuss.elastic.co/t/nginx-and-kibana-with-auth-basic/163306)

<div class="topic-metadata">

**Author:** [@Mahesh\_H\_Viraktamath](https://discuss.elastic.co/u/Mahesh_H_Viraktamath)\
**Replies:** 2\
**Last updated:** [January 9, 2019, 5:40am UTC](https://discuss.elastic.co/t/nginx-and-kibana-with-auth-basic/163306 "2019-01-09T05:40:21Z")

</div>

I followed this post to configure a reverse proxy using Nginx for Kibana It is working fine when I access Kibana UI using this proxy, but I can't access the UI directly from browser i.e. connecting to Kibana on 5601, …

---

## [Watcher Alert Conditions](https://discuss.elastic.co/t/watcher-alert-conditions/163246)

<div class="topic-metadata">

**Author:** [@Miguel\_Leite](https://discuss.elastic.co/u/Miguel_Leite)\
**Replies:** 1\
**Last updated:** [January 9, 2019, 1:41am UTC](https://discuss.elastic.co/t/watcher-alert-conditions/163246 "2019-01-09T01:41:42Z")

</div>

Hey guys, I was wondering if it's possible to run a watcher alert based on conditions where tags are used. For example, I would like to alert by slack when: count of tags "root\_log\_error" OR "sys\_mon\_error" greater th…

---

## [Dashboard search parameter vis URL](https://discuss.elastic.co/t/dashboard-search-parameter-vis-url/163362)

<div class="topic-metadata">

**Author:** [@zivklara](https://discuss.elastic.co/u/zivklara)\
**Replies:** 1\
**Last updated:** [January 9, 2019, 1:20am UTC](https://discuss.elastic.co/t/dashboard-search-parameter-vis-url/163362 "2019-01-09T01:20:22Z")

</div>

Hi, I have a main dashboard with some basic information, I want one of the fields to be a link field, when clicked another dashboard should be opened with that field value as a filter / query. I only managed to do so u…

---

## [How to extract a single word from keyword in order to put in cloud tags](https://discuss.elastic.co/t/how-to-extract-a-single-word-from-keyword-in-order-to-put-in-cloud-tags/163397)

<div class="topic-metadata">

**Author:** [@Francesco\_De\_Nardi](https://discuss.elastic.co/u/Francesco_De_Nardi)\
**Replies:** 1\
**Last updated:** [January 9, 2019, 1:09am UTC](https://discuss.elastic.co/t/how-to-extract-a-single-word-from-keyword-in-order-to-put-in-cloud-tags/163397 "2019-01-09T01:09:08Z")

</div>

Do you think it's possible to extract a single word from keyword message? for example I have this field @message "type=USER\_AUTH msg=audit(154126859238.015:964219353): pid=272523 uid=0 auid=42943967295 ses=41" and i …

---

## [Configuration of Region Map using Brazil state area code as hash value](https://discuss.elastic.co/t/configuration-of-region-map-using-brazil-state-area-code-as-hash-value/163418)

<div class="topic-metadata">

**Author:** [@pbressan13](https://discuss.elastic.co/u/pbressan13)\
**Replies:** 1\
**Last updated:** [January 8, 2019, 10:43pm UTC](https://discuss.elastic.co/t/configuration-of-region-map-using-brazil-state-area-code-as-hash-value/163418 "2019-01-08T22:43:17Z")

</div>

Hi, I'd like to know, if there's a way to use state area code from Brazil to be translated to a geolocation to be shown on Region Map. Each register of my data has the phone number, and my idea is to extract the state …

---

## [Simple arithmetic for Metrics in Map Visualizations](https://discuss.elastic.co/t/simple-arithmetic-for-metrics-in-map-visualizations/163288)

<div class="topic-metadata">

**Author:** [@avocado](https://discuss.elastic.co/u/avocado)\
**Replies:** 2\
**Last updated:** [January 8, 2019, 5:54pm UTC](https://discuss.elastic.co/t/simple-arithmetic-for-metrics-in-map-visualizations/163288 "2019-01-08T17:54:54Z")

</div>

Is there a way to do simple arithmetic on fields within a Metric within a Maps Visualization? For example, I want to create a region map where the regions are colored by the ratio of two Fields. So I have field\_1 and fi…

---

## [Is there any way to add one more field data to appear on kibana bar graph comment?](https://discuss.elastic.co/t/is-there-any-way-to-add-one-more-field-data-to-appear-on-kibana-bar-graph-comment/163299)

<div class="topic-metadata">

**Author:** [@puru](https://discuss.elastic.co/u/puru)\
**Replies:** 1\
**Last updated:** [January 8, 2019, 4:11pm UTC](https://discuss.elastic.co/t/is-there-any-way-to-add-one-more-field-data-to-appear-on-kibana-bar-graph-comment/163299 "2019-01-08T16:11:00Z")

</div>

Hello there, once we hover on a bar of bar graph we get a comment showing info about that particular field data. for eg: number of employees present on day x. if we hover on it, it'll show ten. now i want one more da…

---

## [Time Series Visual Builder Bar Chart - Bars/columns not centered](https://discuss.elastic.co/t/time-series-visual-builder-bar-chart-bars-columns-not-centered/162951)

<div class="topic-metadata">

**Author:** [@PeterSkarmyr](https://discuss.elastic.co/u/PeterSkarmyr)\
**Replies:** 2\
**Last updated:** [January 8, 2019, 3:39pm UTC](https://discuss.elastic.co/t/time-series-visual-builder-bar-chart-bars-columns-not-centered/162951 "2019-01-08T15:39:52Z")

</div>

In TSVB bars/columns are not centered around the time point it represents. This is very misleading for the end user. If you hover over a bar, the legend can display numbers from a different bar. Also, if you have one li…

---

## [How to customize scripted field for use date histogram in Kibana table visualization](https://discuss.elastic.co/t/how-to-customize-scripted-field-for-use-date-histogram-in-kibana-table-visualization/163239)

<div class="topic-metadata">

**Author:** [@keep](https://discuss.elastic.co/u/keep)\
**Replies:** 1\
**Last updated:** [January 8, 2019, 3:24pm UTC](https://discuss.elastic.co/t/how-to-customize-scripted-field-for-use-date-histogram-in-kibana-table-visualization/163239 "2019-01-08T15:24:52Z")

</div>

how to customize scripted field Status\_F.keyword type string data field Status\_F.keyword

---

## [URL type format for file downloading](https://discuss.elastic.co/t/url-type-format-for-file-downloading/162819)

<div class="topic-metadata">

**Author:** [@zivklara](https://discuss.elastic.co/u/zivklara)\
**Replies:** 2\
**Last updated:** [January 8, 2019, 12:37pm UTC](https://discuss.elastic.co/t/url-type-format-for-file-downloading/162819 "2019-01-08T12:37:29Z")

</div>

I'm trying to use a string field value as a clickable link, that when clicked a file should be downloaded. I turned it into a link field successfully, but the link being opened includes the localhost, which causes the l…

---

## [Timelion red error bar](https://discuss.elastic.co/t/timelion-red-error-bar/162670)

<div class="topic-metadata">

**Author:** [@drudnicki](https://discuss.elastic.co/u/drudnicki)\
**Replies:** 2\
**Last updated:** [January 7, 2019, 3:37pm UTC](https://discuss.elastic.co/t/timelion-red-error-bar/162670 "2019-01-07T15:37:05Z")

</div>

Hello, I have problem with Timelion showing red bar at the top of the screen " Error Timelion: Error" I can't find any more meaningful message. It does not react either, when I try to run a query. It's Kibana 6.5. H…

---

## [Sankey Charts - Using IP addresses](https://discuss.elastic.co/t/sankey-charts-using-ip-addresses/163069)

<div class="topic-metadata">

**Author:** [@nsheridan](https://discuss.elastic.co/u/nsheridan)\
**Replies:** 3\
**Last updated:** [January 8, 2019, 10:25am UTC](https://discuss.elastic.co/t/sankey-charts-using-ip-addresses/163069 "2019-01-08T10:25:26Z")

</div>

Hi Forum, I am completely new to lab visualisations, and I have seen Sankey Charts and they struck me as particulary useful for charting IP address pairing for flows from DDoS mitigation appliances (I get better informa…

---

## [Save kibana visualization statistics (summary)](https://discuss.elastic.co/t/save-kibana-visualization-statistics-summary/162444)

<div class="topic-metadata">

**Author:** [@kamal](https://discuss.elastic.co/u/kamal)\
**Replies:** 3\
**Last updated:** [January 8, 2019, 8:37am UTC](https://discuss.elastic.co/t/save-kibana-visualization-statistics-summary/162444 "2019-01-08T08:37:13Z")

</div>

Hi I am wondering if it is possible to save summary of data in kibana and remove the index data. I mean, sometimes you don't need the original data after querying it, you have new data, storage is expensive, ... Inde…

---

## [Help using the Trim function](https://discuss.elastic.co/t/help-using-the-trim-function/163046)

<div class="topic-metadata">

**Author:** [@LoZio](https://discuss.elastic.co/u/LoZio)\
**Replies:** 7\
**Last updated:** [January 8, 2019, 7:42am UTC](https://discuss.elastic.co/t/help-using-the-trim-function/163046 "2019-01-08T07:42:01Z")

</div>

I thought it was a simple task, but I'm having a problem trying to trim a field. I have the City field in my index, it contains "MyCity", "blank\_spaceMyCity", "Mycityblank\_space" so I tried to apply the trim funcion in …

---

## [Kibana filter for equality on a field returns two documents with different field values](https://discuss.elastic.co/t/kibana-filter-for-equality-on-a-field-returns-two-documents-with-different-field-values/161841)

<div class="topic-metadata">

**Author:** [@Affan\_Syed](https://discuss.elastic.co/u/Affan_Syed)\
**Replies:** 3\
**Last updated:** [January 8, 2019, 3:54am UTC](https://discuss.elastic.co/t/kibana-filter-for-equality-on-a-field-returns-two-documents-with-different-field-values/161841 "2019-01-08T03:54:12Z")

</div>

While using Kibana Discover mode, we found that for a given index. For a specific time range I found a case where even when filtering on a field "time\_stamp" is equal to a specific value (1545287341), it returned a docum…

---

## [Vega-lite / search context integration possible issue](https://discuss.elastic.co/t/vega-lite-search-context-integration-possible-issue/163236)

<div class="topic-metadata">

**Author:** [@theflyingcarpet](https://discuss.elastic.co/u/theflyingcarpet)\
**Replies:** 2\
**Last updated:** [January 7, 2019, 10:02pm UTC](https://discuss.elastic.co/t/vega-lite-search-context-integration-possible-issue/163236 "2019-01-07T22:02:32Z")

</div>

I may have discovered a problem - well at least I seem to be suffering it. My vega visualization uses the %context% and %timefield% entries and generally works ok. The viz specifically follows the timefield and context f…

---

## [Kibana is not counting each event](https://discuss.elastic.co/t/kibana-is-not-counting-each-event/163263)

<div class="topic-metadata">

**Author:** [@Daniel\_Gonzalez1](https://discuss.elastic.co/u/Daniel_Gonzalez1)\
**Replies:** 2\
**Last updated:** [January 7, 2019, 8:01pm UTC](https://discuss.elastic.co/t/kibana-is-not-counting-each-event/163263 "2019-01-07T20:01:36Z")

</div>

Hello Everyone! Why Kibana is only counting one time each term I'm looking for, when in a single term in the same event, could find many times? I want to count every term that is in a event For example, here it only f…

---

## [Calculate delta time between the log and pervious one](https://discuss.elastic.co/t/calculate-delta-time-between-the-log-and-pervious-one/161713)

<div class="topic-metadata">

**Author:** [@et159](https://discuss.elastic.co/u/et159)\
**Replies:** 3\
**Last updated:** [January 7, 2019, 7:12pm UTC](https://discuss.elastic.co/t/calculate-delta-time-between-the-log-and-pervious-one/161713 "2019-01-07T19:12:58Z")

</div>

Hello , I have 30 logs and they are repeated every three minutes, I need to calculate the time difference between each two logs and keep this values tracked, 12/20/2018 Time: 09:40:01.123456 Operation1 12/20/2018 Time:…

---

## [Catbox cache calls fail in 6.5+](https://discuss.elastic.co/t/catbox-cache-calls-fail-in-6-5/163019)

<div class="topic-metadata">

**Author:** [@znwilkins](https://discuss.elastic.co/u/znwilkins)\
**Replies:** 2\
**Last updated:** [January 7, 2019, 4:11pm UTC](https://discuss.elastic.co/t/catbox-cache-calls-fail-in-6-5/163019 "2019-01-07T16:11:26Z")

</div>

Hello, I wrote a Kibana plugin last summer that employs Catbox caching from Hapi, and it's been working quite well until the release of Kibana 6.5. A simple example: module.exports = function (server, options) { cons…

---

## [Follow up: Unable to fetch data from kibana collector](https://discuss.elastic.co/t/follow-up-unable-to-fetch-data-from-kibana-collector/162469)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 4\
**Last updated:** [January 7, 2019, 3:49pm UTC](https://discuss.elastic.co/t/follow-up-unable-to-fetch-data-from-kibana-collector/162469 "2019-01-07T15:49:25Z")

</div>

I'm still getting same behavior w/ 6.5.4 as well: Unable to fetch data from kibana collector - Kibana - Discuss the Elastic Stack @chrisronline - I'm not getting anything else in logs. After I set logging.verbose to t…

---

## [Average Line Chart](https://discuss.elastic.co/t/average-line-chart/162601)

<div class="topic-metadata">

**Author:** [@Anup\_Kurup](https://discuss.elastic.co/u/Anup_Kurup)\
**Replies:** 4\
**Last updated:** [January 7, 2019, 3:45pm UTC](https://discuss.elastic.co/t/average-line-chart/162601 "2019-01-07T15:45:59Z")

</div>

Hi, I have documents containing feedback data like user, rating(1,2,3,4,5), date. I want to create a line chart where the x-axis will be date and there will 2 line charts one shows the average feedback on that particul…

---

## [Graph shows inconsistent values by time range](https://discuss.elastic.co/t/graph-shows-inconsistent-values-by-time-range/162258)

<div class="topic-metadata">

**Author:** [@fb-ok](https://discuss.elastic.co/u/fb-ok)\
**Replies:** 1\
**Last updated:** [January 7, 2019, 3:04pm UTC](https://discuss.elastic.co/t/graph-shows-inconsistent-values-by-time-range/162258 "2019-01-07T15:04:32Z")

</div>

I have a histogram that buckets status code. When I view for the last hour I have thousands of hits, but when I view for the last 12 hours it doesn't show the thousands of hits.

---

## [Kibana bootstrap needs sudo access](https://discuss.elastic.co/t/kibana-bootstrap-needs-sudo-access/162380)

<div class="topic-metadata">

**Author:** [@atifazad](https://discuss.elastic.co/u/atifazad)\
**Replies:** 1\
**Last updated:** [January 7, 2019, 2:58pm UTC](https://discuss.elastic.co/t/kibana-bootstrap-needs-sudo-access/162380 "2019-01-07T14:58:15Z")

</div>

Hello I setup the development environment on my mac according to guidelines: https://github.com/atifazad/kibana/blob/master/CONTRIBUTING.md#setting-up-your-development-environment While I was trying the command yarn k…

---

## [How can I create index pattern from console?](https://discuss.elastic.co/t/how-can-i-create-index-pattern-from-console/162399)

<div class="topic-metadata">

**Author:** [@Russ91](https://discuss.elastic.co/u/Russ91)\
**Replies:** 1\
**Last updated:** [January 7, 2019, 2:57pm UTC](https://discuss.elastic.co/t/how-can-i-create-index-pattern-from-console/162399 "2019-01-07T14:57:21Z")

</div>

Hi. I try create new index pattern in Kibana 5.6 from console. curl -XPOST -u AdminUser "http://URL:PORT/.kibana/doc/index-pattern:NEW-index-pattern-" -H 'Content-Type: application/json' -d' { "type" : "index-pattern"…

---

## [\[Help\] Dividing two columns without Aggregation](https://discuss.elastic.co/t/help-dividing-two-columns-without-aggregation/162498)

<div class="topic-metadata">

**Author:** [@chapost1](https://discuss.elastic.co/u/chapost1)\
**Replies:** 1\
**Last updated:** [January 7, 2019, 2:51pm UTC](https://discuss.elastic.co/t/help-dividing-two-columns-without-aggregation/162498 "2019-01-07T14:51:46Z")

</div>

Hello all, i'm enjoying using kibana but in the last few days i'm struggling in achiving a task which I thought is going to be simple. I have an index which have couple of fields indexed: \['revenue', 'spend'\].. in orde…

---

## [Math in Timelion](https://discuss.elastic.co/t/math-in-timelion/162708)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 1\
**Last updated:** [January 7, 2019, 2:45pm UTC](https://discuss.elastic.co/t/math-in-timelion/162708 "2019-01-07T14:45:38Z")

</div>

I have an Excel spreadsheet that I am doing some math on a field that I was hoping to move over to Kibana using TimeLion. Below is a screenshot of what I am doing. In Kibana, I have a metric visualization that sums a f…

---

## [Json query via dev tools](https://discuss.elastic.co/t/json-query-via-dev-tools/162363)

<div class="topic-metadata">

**Author:** [@Inkrk](https://discuss.elastic.co/u/Inkrk)\
**Replies:** 2\
**Last updated:** [January 7, 2019, 2:42pm UTC](https://discuss.elastic.co/t/json-query-via-dev-tools/162363 "2019-01-07T14:42:46Z")

</div>

hi, i would like to query all the logs from server1 , via json , how can i do it? via discover menu i just input the name of the server but we would like to do it in dev tools example: curl -XGET 'localhost:9200/\_se…

---

## [How to toggle visibility of lines from line chart](https://discuss.elastic.co/t/how-to-toggle-visibility-of-lines-from-line-chart/163200)

<div class="topic-metadata">

**Author:** [@Hackqueet](https://discuss.elastic.co/u/Hackqueet)\
**Replies:** 1\
**Last updated:** [January 7, 2019, 2:18pm UTC](https://discuss.elastic.co/t/how-to-toggle-visibility-of-lines-from-line-chart/163200 "2019-01-07T14:18:37Z")

</div>

Apologies in advance - I suspect this is just a n00b question :frowning: I have an issue whereby I would like to filter out some lines on graphs in my visualisations... I see this issue was pretty much previously rais…

---

## [Dynamic configuration for Timelion](https://discuss.elastic.co/t/dynamic-configuration-for-timelion/163210)

<div class="topic-metadata">

**Author:** [@matanper](https://discuss.elastic.co/u/matanper)\
**Replies:** 2\
**Last updated:** [January 7, 2019, 2:02pm UTC](https://discuss.elastic.co/t/dynamic-configuration-for-timelion/163210 "2019-01-07T14:02:05Z")

</div>

I've created a graph of outbound network traffic using metricbeat and timelion as shown in the timelion guide: .es(index=metricbeat\*, timefield=@timestamp, metric=avg:system.network.in.bytes).derivative() The traffic s…

---

## [Input OSINT feeds in kibana](https://discuss.elastic.co/t/input-osint-feeds-in-kibana/163209)

<div class="topic-metadata">

**Author:** [@bhuvan2099](https://discuss.elastic.co/u/bhuvan2099)\
**Replies:** 1\
**Last updated:** [January 7, 2019, 1:52pm UTC](https://discuss.elastic.co/t/input-osint-feeds-in-kibana/163209 "2019-01-07T13:52:55Z")

</div>

Hi All, I'm new to the elk stack and still discovering it. I want the OSINT feeds to be available in my kibana instance. I believ the feeds can either used from a MISP instance or elsewhere. How do i achieve this? Than…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=730)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=732)
