# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=748

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 749

---

## [Network Error (tcp\_error)](https://discuss.elastic.co/t/network-error-tcp-error/158460)

<div class="topic-metadata">

**Author:** [@godfather7](https://discuss.elastic.co/u/godfather7)\
**Replies:** 1\
**Last updated:** [November 28, 2018, 2:34pm UTC](https://discuss.elastic.co/t/network-error-tcp-error/158460 "2018-11-28T14:34:42Z")

</div>

The error which i am getting on kibana url: Network Error (tcp\_error) "A communication error occurred: "Connection refused" The Web Server may be down, too busy, or experiencing other problems preventing it from respo…

---

## [Null values appear in line chart with value 0.00](https://discuss.elastic.co/t/null-values-appear-in-line-chart-with-value-0-00/158294)

<div class="topic-metadata">

**Author:** [@ilanas](https://discuss.elastic.co/u/ilanas)\
**Replies:** 5\
**Last updated:** [November 28, 2018, 2:24pm UTC](https://discuss.elastic.co/t/null-values-appear-in-line-chart-with-value-0-00/158294 "2018-11-28T14:24:48Z")

</div>

Good morning, I have a doubt, i have an index with a lot of values of a field with null values in search. When i plot this field in line chart of kibana this all values appears with the 0.00 value. Why catch the value 0…

---

## [Using Aggregates in Watch JSON to eliminate duplicate entries in alert](https://discuss.elastic.co/t/using-aggregates-in-watch-json-to-eliminate-duplicate-entries-in-alert/158420)

<div class="topic-metadata">

**Author:** [@johncam](https://discuss.elastic.co/u/johncam)\
**Replies:** 1\
**Last updated:** [November 28, 2018, 2:22pm UTC](https://discuss.elastic.co/t/using-aggregates-in-watch-json-to-eliminate-duplicate-entries-in-alert/158420 "2018-11-28T14:22:04Z")

</div>

I'm attempting to put together a JSON that will present the maximum value recorded against any host over a designated period. However, although my syntax below parses without error, I am failing to see any entries at al…

---

## [Timelion Y-axis scale wrong?](https://discuss.elastic.co/t/timelion-y-axis-scale-wrong/158380)

<div class="topic-metadata">

**Author:** [@paniccontrol](https://discuss.elastic.co/u/paniccontrol)\
**Replies:** 2\
**Last updated:** [November 28, 2018, 2:18pm UTC](https://discuss.elastic.co/t/timelion-y-axis-scale-wrong/158380 "2018-11-28T14:18:15Z")

</div>

Hello, It looks like there is an issue when dealing with percentiles in aggregations. The Y-Axis is according to the first percentiles in the list. And the other percentiles are not scaled according to this Y-Axis. Loo…

---

## [Pivot table or substitute](https://discuss.elastic.co/t/pivot-table-or-substitute/158125)

<div class="topic-metadata">

**Author:** [@hermann102](https://discuss.elastic.co/u/hermann102)\
**Replies:** 2\
**Last updated:** [November 28, 2018, 2:17pm UTC](https://discuss.elastic.co/t/pivot-table-or-substitute/158125 "2018-11-28T14:17:31Z")

</div>

Hello all, We use the pivot table plugin in kibana 6.2.4 without any problem. But it can not be used with version 6.4. Is there any other plugin that can be used as a pivot table? I have heard of pandas, my research o…

---

## [Kibana 6.2.4 stopped working after x-pack installation](https://discuss.elastic.co/t/kibana-6-2-4-stopped-working-after-x-pack-installation/158266)

<div class="topic-metadata">

**Author:** [@frasmd](https://discuss.elastic.co/u/frasmd)\
**Replies:** 2\
**Last updated:** [November 28, 2018, 2:16pm UTC](https://discuss.elastic.co/t/kibana-6-2-4-stopped-working-after-x-pack-installation/158266 "2018-11-28T14:16:50Z")

</div>

I have installed elasticstack 6.2.4 on a single server. I was able to send data to elasticsearch and also got index created. I wanted to integrate this setup with x-pack for ML and monitoring purpose. Was able to install…

---

## [Assign Dashboard to Space](https://discuss.elastic.co/t/assign-dashboard-to-space/158283)

<div class="topic-metadata">

**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\
**Replies:** 2\
**Last updated:** [November 28, 2018, 2:15pm UTC](https://discuss.elastic.co/t/assign-dashboard-to-space/158283 "2018-11-28T14:15:33Z")

</div>

ELK 6.5 Windows How does one assign Dashboards to Spaces? If it's there it's well hidden... Also, the experimentel spaces API is returning only 404: GET /api/spaces/space { "error" : { "root\_cause" : \[ { …

---

## [Elastic Cloud trial - keep getting failed to fetch error](https://discuss.elastic.co/t/elastic-cloud-trial-keep-getting-failed-to-fetch-error/158499)

<div class="topic-metadata">

**Author:** [@Ian\_Morris](https://discuss.elastic.co/u/Ian_Morris)\
**Replies:** 1\
**Last updated:** [November 28, 2018, 2:01pm UTC](https://discuss.elastic.co/t/elastic-cloud-trial-keep-getting-failed-to-fetch-error/158499 "2018-11-28T14:01:39Z")

</div>

I can't find an Elastic Cloud category so I've put it in the Elastic Cloud Enterprise category. I just setup an Elastic Cloud trial. I used filebeats to import some Jenkins logs but when I went to Discover in the Elasti…

---

## [Kibana 6.5.1 refresh on dashboards not working after extended idle time](https://discuss.elastic.co/t/kibana-6-5-1-refresh-on-dashboards-not-working-after-extended-idle-time/158393)

<div class="topic-metadata">

**Author:** [@Jamalarm](https://discuss.elastic.co/u/Jamalarm)\
**Replies:** 5\
**Last updated:** [November 28, 2018, 1:38pm UTC](https://discuss.elastic.co/t/kibana-6-5-1-refresh-on-dashboards-not-working-after-extended-idle-time/158393 "2018-11-28T13:38:11Z")

</div>

Hi Guys, I'm finding the refresh button on Kibana is ceasing to function after I leave the tab open for an extended period. On reopening the tab and clicking refresh (to update a dashboard or search, for example) I'm g…

---

## [LInk from one Dashboard to another through one coloumn in a table](https://discuss.elastic.co/t/link-from-one-dashboard-to-another-through-one-coloumn-in-a-table/156711)

<div class="topic-metadata">

**Author:** [@alokpandeyrc](https://discuss.elastic.co/u/alokpandeyrc)\
**Replies:** 3\
**Last updated:** [November 28, 2018, 1:06pm UTC](https://discuss.elastic.co/t/link-from-one-dashboard-to-another-through-one-coloumn-in-a-table/156711 "2018-11-28T13:06:48Z")

</div>

Hi Elastic Techies, Need help in stiching one coulumn of a dashboard in to another dashobord which has filter on top or else at least transfer the value to coloumn in table. Passing the timestamp as well. Any help would…

---

## [Re-index indices from disk after a re-installation](https://discuss.elastic.co/t/re-index-indices-from-disk-after-a-re-installation/158366)

<div class="topic-metadata">

**Author:** [@m4rtin](https://discuss.elastic.co/u/m4rtin)\
**Replies:** 3\
**Last updated:** [November 28, 2018, 12:46pm UTC](https://discuss.elastic.co/t/re-index-indices-from-disk-after-a-re-installation/158366 "2018-11-28T12:46:15Z")

</div>

Hello, I would like to ask you, whether it's possible to re-read all the indices stored on disk, if we lost all kibana configuration? We had to install it from scratch, so no indexes available in Kibana and we have no i…

---

## [How to create a new script field to group values](https://discuss.elastic.co/t/how-to-create-a-new-script-field-to-group-values/158290)

<div class="topic-metadata">

**Author:** [@vinay.rao](https://discuss.elastic.co/u/vinay.rao)\
**Replies:** 3\
**Last updated:** [November 28, 2018, 12:44pm UTC](https://discuss.elastic.co/t/how-to-create-a-new-script-field-to-group-values/158290 "2018-11-28T12:44:17Z")

</div>

Dear All, Am trying to create a new scripted field and need to group values. Please help me to write the script to get the values if ( Status='Closed' or Status="Resolved' then 'Closed' else 'Pending'). How to write t…

---

## [Watcher payload json array access](https://discuss.elastic.co/t/watcher-payload-json-array-access/157840)

<div class="topic-metadata">

**Author:** [@kaushik.vankayala](https://discuss.elastic.co/u/kaushik.vankayala)\
**Replies:** 3\
**Last updated:** [November 28, 2018, 10:31am UTC](https://discuss.elastic.co/t/watcher-payload-json-array-access/157840 "2018-11-28T10:31:43Z")

</div>

Hi There, I have created an advances watch/alert in Watcher, Kibana UI. I have an input which returns a payload that contains an array. I would like to access a specific field of all the elements in that array and add i…

---

## [How to calculate time difference between 2 log lines for a unique ID](https://discuss.elastic.co/t/how-to-calculate-time-difference-between-2-log-lines-for-a-unique-id/155870)

<div class="topic-metadata">

**Author:** [@Roshan\_r](https://discuss.elastic.co/u/Roshan_r)\
**Replies:** 4\
**Last updated:** [November 28, 2018, 2:46am UTC](https://discuss.elastic.co/t/how-to-calculate-time-difference-between-2-log-lines-for-a-unique-id/155870 "2018-11-28T02:46:26Z")

</div>

I need to calculate the difference in time between 2 log lines for http code 200. The difference should be done for a unique id. Please find the log line below. 2018/01/16 00:13:44.890 \[HCServiceImpl\] \[\*\*qtp5720769-243\*…

---

## [Attaching metadata to groups of objects -new user needs high level guidance](https://discuss.elastic.co/t/attaching-metadata-to-groups-of-objects-new-user-needs-high-level-guidance/158406)

<div class="topic-metadata">

**Author:** [@awerner](https://discuss.elastic.co/u/awerner)\
**Replies:** 1\
**Last updated:** [November 27, 2018, 9:49pm UTC](https://discuss.elastic.co/t/attaching-metadata-to-groups-of-objects-new-user-needs-high-level-guidance/158406 "2018-11-27T21:49:49Z")

</div>

Hi, very new user of Kibana, so my terminology may be way off, please bear with me. We (video game company) are considering using Kibana/Elasticsearch to track non-fatal error reports. Each report is a string like "not …

---

## [Total and Cardinality in Single Visualization](https://discuss.elastic.co/t/total-and-cardinality-in-single-visualization/158405)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 1\
**Last updated:** [November 27, 2018, 9:41pm UTC](https://discuss.elastic.co/t/total-and-cardinality-in-single-visualization/158405 "2018-11-27T21:41:21Z")

</div>

I have a field that is IP addresses indexed as a term and keyword. I would like to be able to make a metric visualization that shows the Total Count of IPs (So total events) and then Cardinality or Unique Count of value…

---

## [TypeError: Cannot read property 'aggConfig' of undefined](https://discuss.elastic.co/t/typeerror-cannot-read-property-aggconfig-of-undefined/157945)

<div class="topic-metadata">

**Author:** [@flalar](https://discuss.elastic.co/u/flalar)\
**Replies:** 4\
**Last updated:** [November 27, 2018, 8:23pm UTC](https://discuss.elastic.co/t/typeerror-cannot-read-property-aggconfig-of-undefined/157945 "2018-11-27T20:23:31Z")

</div>

After upgrade from 6.4 to 6.5 we get the following warning when loading a dashboard consisting of some pie and heatmap visualisations Deprecation warning: value provided is not in a recognized RFC2822 or ISO format. mo…

---

## [Filter: use kibana timepicker as "now" value?](https://discuss.elastic.co/t/filter-use-kibana-timepicker-as-now-value/156373)

<div class="topic-metadata">

**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Replies:** 3\
**Last updated:** [November 27, 2018, 8:22pm UTC](https://discuss.elastic.co/t/filter-use-kibana-timepicker-as-now-value/156373 "2018-11-27T20:22:01Z")

</div>

Hi, I was wondering whether its somehow possible to use the current "now" value of the Kibana timepicker in filters? I want to limit a visualization to 7 days of data while other visualizations can display a longer ran…

---

## [Dashboard Backups](https://discuss.elastic.co/t/dashboard-backups/158382)

<div class="topic-metadata">

**Author:** [@rdesanno](https://discuss.elastic.co/u/rdesanno)\
**Replies:** 2\
**Last updated:** [November 27, 2018, 7:15pm UTC](https://discuss.elastic.co/t/dashboard-backups/158382 "2018-11-27T19:15:41Z")

</div>

Can anyone recommend a programmatic way to import/export custom dashboards in Kibana? I realize that I can go into the UI and manually do this but would like to have a way to automate it, or, at minimum, make daily backu…

---

## [Visualize sql query result](https://discuss.elastic.co/t/visualize-sql-query-result/158207)

<div class="topic-metadata">

**Author:** [@asadiya](https://discuss.elastic.co/u/asadiya)\
**Replies:** 3\
**Last updated:** [November 27, 2018, 6:48pm UTC](https://discuss.elastic.co/t/visualize-sql-query-result/158207 "2018-11-27T18:48:23Z")

</div>

Hi, How can visualize the result of a sql query in Kibana? For example: Query: POST \_xpack/sql?format=txt { "query":"SELECT ip\_client, count(\*) AS Number\_Logins FROM splunk\_logs WHERE result='000' AND channel='WEB…

---

## [Use JSON Input on an aggregation in visualization](https://discuss.elastic.co/t/use-json-input-on-an-aggregation-in-visualization/158271)

<div class="topic-metadata">

**Author:** [@nils](https://discuss.elastic.co/u/nils)\
**Replies:** 1\
**Last updated:** [November 27, 2018, 6:42am UTC](https://discuss.elastic.co/t/use-json-input-on-an-aggregation-in-visualization/158271 "2018-11-27T06:42:05Z")

</div>

hi, I have a visualization on Kibana of type Data table, I use JSON Input to make more filter on request instead of "Add filter" button, but the result didn't show in table. Any thought about how to make it ? Thanks …

---

## [Post bulk on elastic xpack role](https://discuss.elastic.co/t/post-bulk-on-elastic-xpack-role/158036)

<div class="topic-metadata">

**Author:** [@totsugeki](https://discuss.elastic.co/u/totsugeki)\
**Replies:** 2\
**Last updated:** [November 27, 2018, 3:39pm UTC](https://discuss.elastic.co/t/post-bulk-on-elastic-xpack-role/158036 "2018-11-27T15:39:43Z")

</div>

Hello everyone, I have an Elastic cluster + kibana, with xpack enable. I'd like to make a backup of all roles created : GET \_xpack/security/role =\> I get a big json, ex : { "kibana\_dashboard\_only\_user": { "clu…

---

## [Count Unique IP ranges from IP's](https://discuss.elastic.co/t/count-unique-ip-ranges-from-ips/158196)

<div class="topic-metadata">

**Author:** [@WillyWonka](https://discuss.elastic.co/u/WillyWonka)\
**Replies:** 3\
**Last updated:** [November 27, 2018, 3:28pm UTC](https://discuss.elastic.co/t/count-unique-ip-ranges-from-ips/158196 "2018-11-27T15:28:58Z")

</div>

Hi guys, I want to create a Visualization that shows the total amount of different IP ranges. Currently i have a Visualization that counts ALL unique IP addresses from servers that connect with our server. However this…

---

## [Dropdown to select the agregation of a chart](https://discuss.elastic.co/t/dropdown-to-select-the-agregation-of-a-chart/158357)

<div class="topic-metadata">

**Author:** [@ilanas](https://discuss.elastic.co/u/ilanas)\
**Replies:** 4\
**Last updated:** [November 27, 2018, 2:54pm UTC](https://discuss.elastic.co/t/dropdown-to-select-the-agregation-of-a-chart/158357 "2018-11-27T14:54:46Z")

</div>

Good afternoon, Is there any option to insert one dropdown in a dashboard? For example, one dropdown with this two options:sumfield1,sumfield2. This dropdown point to one line chart and this chart change de data dependi…

---

## [User auto-logout in Elastic Cloud hosted Kibana](https://discuss.elastic.co/t/user-auto-logout-in-elastic-cloud-hosted-kibana/158342)

<div class="topic-metadata">

**Author:** [@Jamalarm](https://discuss.elastic.co/u/Jamalarm)\
**Replies:** 1\
**Last updated:** [November 27, 2018, 2:18pm UTC](https://discuss.elastic.co/t/user-auto-logout-in-elastic-cloud-hosted-kibana/158342 "2018-11-27T14:18:36Z")

</div>

Hi Guys, My first post here so I hope I'm in the right place. I'm looking for a way to add a more aggressive auto-logout time on Kibana in my hosted Elastic Cloud clusters. We have sensitive customer in these clusters …

---

## [Embeed canvas](https://discuss.elastic.co/t/embeed-canvas/158129)

<div class="topic-metadata">

**Author:** [@michimau](https://discuss.elastic.co/u/michimau)\
**Replies:** 2\
**Last updated:** [November 27, 2018, 12:57pm UTC](https://discuss.elastic.co/t/embeed-canvas/158129 "2018-11-27T12:57:03Z")

</div>

Hi there, is it possible to to use canvas in an iframe in embed mode? Iframe works fine, but the controls on the right hand side are persistent. Best! M

---

## [Another unable to create index pattern or delete index pattern when index has been deleted](https://discuss.elastic.co/t/another-unable-to-create-index-pattern-or-delete-index-pattern-when-index-has-been-deleted/158042)

<div class="topic-metadata">

**Author:** [@reswob](https://discuss.elastic.co/u/reswob)\
**Replies:** 7\
**Last updated:** [November 27, 2018, 11:02am UTC](https://discuss.elastic.co/t/another-unable-to-create-index-pattern-or-delete-index-pattern-when-index-has-been-deleted/158042 "2018-11-27T11:02:36Z")

</div>

In my home lab, I am running 6.2.2 of Elasticsearch, Logstash and Kibana all on a single machine. I really only had three logs or so going into it, pfsense, windows, and bro and three index patterns. But after I added …

---

## [Duplicate notifcations getting created in Slack for one watcher alert trigger](https://discuss.elastic.co/t/duplicate-notifcations-getting-created-in-slack-for-one-watcher-alert-trigger/157946)

<div class="topic-metadata">

**Author:** [@marvnz](https://discuss.elastic.co/u/marvnz)\
**Replies:** 4\
**Last updated:** [November 27, 2018, 9:27am UTC](https://discuss.elastic.co/t/duplicate-notifcations-getting-created-in-slack-for-one-watcher-alert-trigger/157946 "2018-11-27T09:27:33Z")

</div>

I have created the following advanced watch, that should create one slack notification when triggered but it is creating 2 notifications every time it is triggered: { "trigger": { "schedule": { "interval": "15m" } …

---

## [\[Canvas\] Mapping Conflict in Index Alias leads to failing visualizations](https://discuss.elastic.co/t/canvas-mapping-conflict-in-index-alias-leads-to-failing-visualizations/158143)

<div class="topic-metadata">

**Author:** [@tarkin67](https://discuss.elastic.co/u/tarkin67)\
**Replies:** 2\
**Last updated:** [November 27, 2018, 9:21am UTC](https://discuss.elastic.co/t/canvas-mapping-conflict-in-index-alias-leads-to-failing-visualizations/158143 "2018-11-27T09:21:02Z")

</div>

Hi all, I used the canvas plugin to create a workpad with Kibana 6.4.2. After the upgrade to 6.5.x with canvas built in, all visualizations that query a certain index alias fail. The alias points to two indices, one hav…

---

## [Watcher Metadata Error for Date Calculations](https://discuss.elastic.co/t/watcher-metadata-error-for-date-calculations/156773)

<div class="topic-metadata">

**Author:** [@droberts](https://discuss.elastic.co/u/droberts)\
**Replies:** 4\
**Last updated:** [November 27, 2018, 8:51am UTC](https://discuss.elastic.co/t/watcher-metadata-error-for-date-calculations/156773 "2018-11-27T08:51:47Z")

</div>

I'm working on a team that has set up an Elastic cluster (6.3.2) and we've ingested a group of files containing old Bro data. We've previously tested Watcher with this data by using the following metadata block to simula…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=747)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=749)
