# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=743

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 744

---

## [How to use json input](https://discuss.elastic.co/t/how-to-use-json-input/159848)

<div class="topic-metadata">

**Author:** [@somsin4u](https://discuss.elastic.co/u/somsin4u)\
**Replies:** 1\
**Last updated:** [December 7, 2018, 10:22pm UTC](https://discuss.elastic.co/t/how-to-use-json-input/159848 "2018-12-07T22:22:17Z")

</div>

How to use json input in visualization of kibana

---

## [Questions Regarding Sibling Pipeline Aggregation](https://discuss.elastic.co/t/questions-regarding-sibling-pipeline-aggregation/157590)

<div class="topic-metadata">

**Author:** [@davidb](https://discuss.elastic.co/u/davidb)\
**Replies:** 3\
**Last updated:** [December 7, 2018, 7:33pm UTC](https://discuss.elastic.co/t/questions-regarding-sibling-pipeline-aggregation/157590 "2018-12-07T19:33:11Z")

</div>

Greetings, my question deals with processing of time series data using the sibling pipeline aggregation, e.g. for creating a line chart. As first aggregation, I need to sum up buckets of different time series. The buck…

---

## [ES and kibana documents count difference](https://discuss.elastic.co/t/es-and-kibana-documents-count-difference/159938)

<div class="topic-metadata">

**Author:** [@W.anjum](https://discuss.elastic.co/u/W.anjum)\
**Replies:** 1\
**Last updated:** [December 7, 2018, 2:21pm UTC](https://discuss.elastic.co/t/es-and-kibana-documents-count-difference/159938 "2018-12-07T14:21:33Z")

</div>

I have 5 million documents in two indices and one index pattern on both of the indices in kibana. e.g: Index1, Index2 and index pattern Kpattern. Kibana is showing total count of 2.5M only while it should be same as ES …

---

## [Logstash can't send logs to aws\_elasticsearch from kubernetes](https://discuss.elastic.co/t/logstash-cant-send-logs-to-aws-elasticsearch-from-kubernetes/159564)

<div class="topic-metadata">

**Author:** [@mreynoso](https://discuss.elastic.co/u/mreynoso)\
**Replies:** 2\
**Last updated:** [December 7, 2018, 12:26pm UTC](https://discuss.elastic.co/t/logstash-cant-send-logs-to-aws-elasticsearch-from-kubernetes/159564 "2018-12-07T12:26:06Z")

</div>

Hello, I'm trying to use Amazon Cognito authentication with Kibana on aws\_ElasticSearch and send logs using logstash from kubernetes. Authentication with kibana is working fine, but logstash seems to not be sending log…

---

## [How to add filter-bar in dashboard](https://discuss.elastic.co/t/how-to-add-filter-bar-in-dashboard/159273)

<div class="topic-metadata">

**Author:** [@shwesinhan](https://discuss.elastic.co/u/shwesinhan)\
**Replies:** 4\
**Last updated:** [December 7, 2018, 6:14am UTC](https://discuss.elastic.co/t/how-to-add-filter-bar-in-dashboard/159273 "2018-12-07T06:14:56Z")

</div>

hi there I wonder why I can not add filter-bar Add a filter + in timelion visualizations. The plots are timelions only in my specific dashboard. When users use my dashboard, they are not familiar withlucene query. I …

---

## [6.5.0 - Filters not showing new data](https://discuss.elastic.co/t/6-5-0-filters-not-showing-new-data/159630)

<div class="topic-metadata">

**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Replies:** 2\
**Last updated:** [December 6, 2018, 11:38am UTC](https://discuss.elastic.co/t/6-5-0-filters-not-showing-new-data/159630 "2018-12-06T11:38:58Z")

</div>

Hi, I'm noticing that after ingesting new data, that data does not show up when I add any filters or some something like the drop down control viz. The data is ingested as it shows up in Discovery and manually adding t…

---

## [X-pack kibana\_user role conflicting with spaces permissions](https://discuss.elastic.co/t/x-pack-kibana-user-role-conflicting-with-spaces-permissions/159676)

<div class="topic-metadata">

**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Replies:** 4\
**Last updated:** [December 6, 2018, 11:33pm UTC](https://discuss.elastic.co/t/x-pack-kibana-user-role-conflicting-with-spaces-permissions/159676 "2018-12-06T23:33:52Z")

</div>

Hi, No idea where I should post this as the x-pack forum appears to be locked... I got my users set up with spaces permissions so they can only view the spaces the have access to. Works fine. The problem is that these …

---

## [Date Histogram in Kibana](https://discuss.elastic.co/t/date-histogram-in-kibana/159800)

<div class="topic-metadata">

**Author:** [@malsioufi](https://discuss.elastic.co/u/malsioufi)\
**Replies:** 4\
**Last updated:** [December 6, 2018, 11:07pm UTC](https://discuss.elastic.co/t/date-histogram-in-kibana/159800 "2018-12-06T23:07:53Z")

</div>

Hi, I have data indexed in Elastisearch. The data is sensors readings per hour for multiple stations and it has the following shape { "type": "Temperature", "time": "2012-01-01T01:00:00", "station": "stationX", "value"…

---

## [Kibana search only works with one character](https://discuss.elastic.co/t/kibana-search-only-works-with-one-character/158961)

<div class="topic-metadata">

**Author:** [@daveb](https://discuss.elastic.co/u/daveb)\
**Replies:** 5\
**Last updated:** [December 6, 2018, 8:12pm UTC](https://discuss.elastic.co/t/kibana-search-only-works-with-one-character/158961 "2018-12-06T20:12:01Z")

</div>

I installed Elasticsearch 6.5.1 and Kibana 6.5.1. I loaded my log file with Logstash and set up my index in Kibana the Discover search only works if the search is one character long. With nothing in the search bar I see…

---

## [How to Create Graph using log file timestamp instead of kibana time](https://discuss.elastic.co/t/how-to-create-graph-using-log-file-timestamp-instead-of-kibana-time/158322)

<div class="topic-metadata">

**Author:** [@Sanchit\_Gupta](https://discuss.elastic.co/u/Sanchit_Gupta)\
**Replies:** 11\
**Last updated:** [December 6, 2018, 8:09pm UTC](https://discuss.elastic.co/t/how-to-create-graph-using-log-file-timestamp-instead-of-kibana-time/158322 "2018-12-06T20:09:42Z")

</div>

Hi Experts, Please tell me how to Create a Graph using log file timestamp instead of Kibana time option. Like in below screenshot named "image 1", I want to use logfile timestamp instead of "date histogram" in aggrega…

---

## [Kibana 6.4.3 sort order of dashboards?](https://discuss.elastic.co/t/kibana-6-4-3-sort-order-of-dashboards/156402)

<div class="topic-metadata">

**Author:** [@MarcelHallmann](https://discuss.elastic.co/u/MarcelHallmann)\
**Replies:** 2\
**Last updated:** [December 6, 2018, 7:01pm UTC](https://discuss.elastic.co/t/kibana-6-4-3-sort-order-of-dashboards/156402 "2018-12-06T19:01:46Z")

</div>

Hi, I'm upgrading to 6.4.3 version. When I click on the "dashboard" icon on the left menu all the dashboards occur in an arbitrary sort order, I have to click explicitly on the title to sort them alphabetically. In ve…

---

## [How to get the one record from each aggregation group?](https://discuss.elastic.co/t/how-to-get-the-one-record-from-each-aggregation-group/159773)

<div class="topic-metadata">

**Author:** [@sudhakar\_katakara](https://discuss.elastic.co/u/sudhakar_katakara)\
**Replies:** 2\
**Last updated:** [December 6, 2018, 6:58pm UTC](https://discuss.elastic.co/t/how-to-get-the-one-record-from-each-aggregation-group/159773 "2018-12-06T18:58:23Z")

</div>

We want to get the first record (based on inserted time in ascending order) from each aggregation group. We monitor the servers and events are inserted to elastic search from different sources on same device. Let us ass…

---

## [Reporting tab missing from toolbar](https://discuss.elastic.co/t/reporting-tab-missing-from-toolbar/159274)

<div class="topic-metadata">

**Author:** [@Vess\_Bakalov](https://discuss.elastic.co/u/Vess_Bakalov)\
**Replies:** 3\
**Last updated:** [December 6, 2018, 6:38pm UTC](https://discuss.elastic.co/t/reporting-tab-missing-from-toolbar/159274 "2018-12-06T18:38:12Z")

</div>

Hello. The Reporting tab is missing from my toolbar and I can't figure it out. Saw a few discussions, but they don't seem to apply to my case. I have enabled the trial license, I have checked Discovery as well as all …

---

## [Injecting malicious IP list to compare against active connections and alert if found - Use case](https://discuss.elastic.co/t/injecting-malicious-ip-list-to-compare-against-active-connections-and-alert-if-found-use-case/159610)

<div class="topic-metadata">

**Author:** [@ciphee](https://discuss.elastic.co/u/ciphee)\
**Replies:** 2\
**Last updated:** [December 6, 2018, 5:46pm UTC](https://discuss.elastic.co/t/injecting-malicious-ip-list-to-compare-against-active-connections-and-alert-if-found-use-case/159610 "2018-12-06T17:46:31Z")

</div>

Hi there, I was trying to setup a usecase to do the following: 1.) Download a txt file containing known malicious IP's. 2.) Compare existing netflow traffic logs to see if there is a match against any of the malicious…

---

## [Individual values of a specific field](https://discuss.elastic.co/t/individual-values-of-a-specific-field/159717)

<div class="topic-metadata">

**Author:** [@imaad](https://discuss.elastic.co/u/imaad)\
**Replies:** 5\
**Last updated:** [December 6, 2018, 4:49pm UTC](https://discuss.elastic.co/t/individual-values-of-a-specific-field/159717 "2018-12-06T16:49:34Z")

</div>

Hello, Is it possible to show individual values of a specific field for each timestamp? Thank you

---

## [How to render images on Kibana 6 vs Kibana 5 within discover search results](https://discuss.elastic.co/t/how-to-render-images-on-kibana-6-vs-kibana-5-within-discover-search-results/159632)

<div class="topic-metadata">

**Author:** [@JA\_e](https://discuss.elastic.co/u/JA_e)\
**Replies:** 2\
**Last updated:** [December 6, 2018, 3:50pm UTC](https://discuss.elastic.co/t/how-to-render-images-on-kibana-6-vs-kibana-5-within-discover-search-results/159632 "2018-12-06T15:50:21Z")

</div>

Hello, I've been using Kibana 5 for quite some time and one of the main features I use is the ability to render images which are stored locally on disk. I use this in various saved searches - mainly in the "discover" pa…

---

## [New Server "Kibana server is not ready yet"](https://discuss.elastic.co/t/new-server-kibana-server-is-not-ready-yet/159751)

<div class="topic-metadata">

**Author:** [@Marcos\_Felix](https://discuss.elastic.co/u/Marcos_Felix)\
**Replies:** 5\
**Last updated:** [December 6, 2018, 3:29pm UTC](https://discuss.elastic.co/t/new-server-kibana-server-is-not-ready-yet/159751 "2018-12-06T15:29:28Z")

</div>

Have been getting this error I cannot see the log file because there isnt one. First time downloading Kibana on this server. I have seen many people getting this error after last months patch. I tried many of the sol…

---

## [Friendly index name rather than UID in visualizations?](https://discuss.elastic.co/t/friendly-index-name-rather-than-uid-in-visualizations/159573)

<div class="topic-metadata">

**Author:** [@\_Ian](https://discuss.elastic.co/u/_Ian)\
**Replies:** 2\
**Last updated:** [December 6, 2018, 3:00pm UTC](https://discuss.elastic.co/t/friendly-index-name-rather-than-uid-in-visualizations/159573 "2018-12-06T15:00:24Z")

</div>

On creation of a visualization the index used appears to be a UID. If the index is deleted and re-created, the UID changes and all the visualizations (and dashboards using those viz) break. It would seem like in the jso…

---

## [Error in table widget with sum biucket agg](https://discuss.elastic.co/t/error-in-table-widget-with-sum-biucket-agg/159730)

<div class="topic-metadata">

**Author:** [@1862347ba9566e72a47d](https://discuss.elastic.co/u/1862347ba9566e72a47d)\
**Replies:** 4\
**Last updated:** [December 6, 2018, 2:47pm UTC](https://discuss.elastic.co/t/error-in-table-widget-with-sum-biucket-agg/159730 "2018-12-06T14:47:09Z")

</div>

It is necessary to build a table in a kibana, where aggregation by sum is used when building. The field(term) on which the table is built is not in all documents of the index. In table first add a "Filters" bucket with 1…

---

## [Combining metricbeat and filebeat data](https://discuss.elastic.co/t/combining-metricbeat-and-filebeat-data/159372)

<div class="topic-metadata">

**Author:** [@LucaZ92](https://discuss.elastic.co/u/LucaZ92)\
**Replies:** 2\
**Last updated:** [December 6, 2018, 2:20pm UTC](https://discuss.elastic.co/t/combining-metricbeat-and-filebeat-data/159372 "2018-12-06T14:20:24Z")

</div>

Hi, I have data of cpu usage in time(from metricbeat and sent to elastisearch directly) and some variable also changing in time taken from filebeat, parsed in logstash and sent to elastic search. Now i want to combine …

---

## [Configuring Alerts for Oracle Databases](https://discuss.elastic.co/t/configuring-alerts-for-oracle-databases/159745)

<div class="topic-metadata">

**Author:** [@johncam](https://discuss.elastic.co/u/johncam)\
**Replies:** 0\
**Last updated:** [December 6, 2018, 2:17pm UTC](https://discuss.elastic.co/t/configuring-alerts-for-oracle-databases/159745 "2018-12-06T14:17:06Z")

</div>

I'm looking to define a number of alerts based on Oracle performing monitoring, such as alerting in the case of excessive database locks and blocking chains. Is anyone aware of a beat that has been specifically designed…

---

## [Exporting Source Data from Visualization](https://discuss.elastic.co/t/exporting-source-data-from-visualization/159541)

<div class="topic-metadata">

**Author:** [@johncam](https://discuss.elastic.co/u/johncam)\
**Replies:** 2\
**Last updated:** [December 6, 2018, 1:52pm UTC](https://discuss.elastic.co/t/exporting-source-data-from-visualization/159541 "2018-12-06T13:52:31Z")

</div>

I have built a time series visualization and have defined an absolute timeframe. I would now like to export the source data to a CSV / Excel file. How is this best achieved, as I can't seem to find any export functional…

---

## [Vertical Bar](https://discuss.elastic.co/t/vertical-bar/159669)

<div class="topic-metadata">

**Author:** [@NeelakandanM](https://discuss.elastic.co/u/NeelakandanM)\
**Replies:** 3\
**Last updated:** [December 6, 2018, 1:03pm UTC](https://discuss.elastic.co/t/vertical-bar/159669 "2018-12-06T13:03:33Z")

</div>

Hi, We have an input as CSV file to generate the reports in Kibana and got the below expected output vertical bar, But the value “ 201848 ” (yyyymm), which I given in the “Custom Label” should be dynamic. Is it possib…

---

## [Is Canvas is a open source or linked with the X Pack](https://discuss.elastic.co/t/is-canvas-is-a-open-source-or-linked-with-the-x-pack/159686)

<div class="topic-metadata">

**Author:** [@Sunil\_Edupuganti](https://discuss.elastic.co/u/Sunil_Edupuganti)\
**Replies:** 6\
**Last updated:** [December 6, 2018, 11:48am UTC](https://discuss.elastic.co/t/is-canvas-is-a-open-source-or-linked-with-the-x-pack/159686 "2018-12-06T11:48:54Z")

</div>

Hi, Is Canvas is a open source or linked with the X Pack?

---

## [Compatibility with Elasticsearch](https://discuss.elastic.co/t/compatibility-with-elasticsearch/159714)

<div class="topic-metadata">

**Author:** [@igorc](https://discuss.elastic.co/u/igorc)\
**Replies:** 3\
**Last updated:** [December 6, 2018, 11:47am UTC](https://discuss.elastic.co/t/compatibility-with-elasticsearch/159714 "2018-12-06T11:47:32Z")

</div>

Hi, Just wonder if Kibana 6.5 is compatible with Elasticsearch 6.3? Is it expected to work or am I going to hit some issues? Thanks

---

## [Visual link to Dashboard](https://discuss.elastic.co/t/visual-link-to-dashboard/159685)

<div class="topic-metadata">

**Author:** [@le\_walt](https://discuss.elastic.co/u/le_walt)\
**Replies:** 2\
**Last updated:** [December 6, 2018, 10:52am UTC](https://discuss.elastic.co/t/visual-link-to-dashboard/159685 "2018-12-06T10:52:49Z")

</div>

:loudspeaker: Not sure if this is the right platform, hope so!! Under Visualize - to keep track of Used Visuals vs Unused Visuals, can you add a list of Dashboards a Visual is linked to? I work with quite a number of Da…

---

## [Term Aggregation: Count Duplicates](https://discuss.elastic.co/t/term-aggregation-count-duplicates/159569)

<div class="topic-metadata">

**Author:** [@cebor](https://discuss.elastic.co/u/cebor)\
**Replies:** 6\
**Last updated:** [December 6, 2018, 9:36am UTC](https://discuss.elastic.co/t/term-aggregation-count-duplicates/159569 "2018-12-06T09:36:57Z")

</div>

Hello, my TA pushes following doc to my elasticsearch: I want to visualize the count of all doc.test\_cases\[''\].verdict terms. The visualisation omits duplicate verdicts. Got the following result: passed: 1 skipped…

---

## [How can I subtract 1375 - 1875 and show me the difference in the graph](https://discuss.elastic.co/t/how-can-i-subtract-1375-1875-and-show-me-the-difference-in-the-graph/159412)

<div class="topic-metadata">

**Author:** [@elopezgo](https://discuss.elastic.co/u/elopezgo)\
**Replies:** 2\
**Last updated:** [December 6, 2018, 9:02am UTC](https://discuss.elastic.co/t/how-can-i-subtract-1375-1875-and-show-me-the-difference-in-the-graph/159412 "2018-12-06T09:02:13Z")

</div>

how can I subtract 1375 - 1875 and show me the difference in the graph ?

---

## [Unable to install kibana plugin in Dockerfile](https://discuss.elastic.co/t/unable-to-install-kibana-plugin-in-dockerfile/159652)

<div class="topic-metadata">

**Author:** [@Nikhil\_Utane](https://discuss.elastic.co/u/Nikhil_Utane)\
**Replies:** 1\
**Last updated:** [December 6, 2018, 8:57am UTC](https://discuss.elastic.co/t/unable-to-install-kibana-plugin-in-dockerfile/159652 "2018-12-06T08:57:06Z")

</div>

Hi, I am facing this annoying problem. I am not able to install the sentinl plugin inside Dockerfile. I tried both online (http/https) and offline options. Dockerfile: FROM docker.elastic.co/kibana/kibana:6.3.1 COPY …

---

## [Unable to find usable node.js executable while staring kibana server](https://discuss.elastic.co/t/unable-to-find-usable-node-js-executable-while-staring-kibana-server/159307)

<div class="topic-metadata">

**Author:** [@shubh235](https://discuss.elastic.co/u/shubh235)\
**Replies:** 2\
**Last updated:** [December 6, 2018, 8:39am UTC](https://discuss.elastic.co/t/unable-to-find-usable-node-js-executable-while-staring-kibana-server/159307 "2018-12-06T08:39:46Z")

</div>

Hi, While starting the Kibana server I am getting the below error : I'm running Kibana-6.5.1 development build on Windows 10 64-bit. I have installed all the dependencies with the yarn bootstrap command. The node.js …

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=742)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=744)
