# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=749

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 750

---

## [Business user cannot view any data in Kibana](https://discuss.elastic.co/t/business-user-cannot-view-any-data-in-kibana/158164)

<div class="topic-metadata">

**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\
**Replies:** 2\
**Last updated:** [November 27, 2018, 7:04am UTC](https://discuss.elastic.co/t/business-user-cannot-view-any-data-in-kibana/158164 "2018-11-27T07:04:10Z")

</div>

We enabled XPack Security today to see how it works and created a role "business\_user" (see below) with read access to 2 indices "logs-test" and "logs-prod". However, when users log in they are asked to create an index p…

---

## [Change Metric result](https://discuss.elastic.co/t/change-metric-result/156151)

<div class="topic-metadata">

**Author:** [@Rafael\_Mendoza](https://discuss.elastic.co/u/Rafael_Mendoza)\
**Replies:** 1\
**Last updated:** [November 26, 2018, 11:26pm UTC](https://discuss.elastic.co/t/change-metric-result/156151 "2018-11-26T23:26:20Z")

</div>

Hello It is possible to change the final result of the metric. Example: I have a metric that gives me the total amount and I would like to show it in the following format 1500 to 1.5K 1 200 000 to 1.2M

---

## [Kibana shows different results with AWS Loadbalancers](https://discuss.elastic.co/t/kibana-shows-different-results-with-aws-loadbalancers/158134)

<div class="topic-metadata">

**Author:** [@ErSumit](https://discuss.elastic.co/u/ErSumit)\
**Replies:** 1\
**Last updated:** [November 26, 2018, 11:00pm UTC](https://discuss.elastic.co/t/kibana-shows-different-results-with-aws-loadbalancers/158134 "2018-11-26T23:00:14Z")

</div>

Hi, I have ELK Cluster hosted in AWS EC2 instances. I have two endpoints on kibana instance, one is created using classic loadbalancer and another one with application load balancer. How they differ? My observatins: …

---

## [Special characters and Case sensitive search](https://discuss.elastic.co/t/special-characters-and-case-sensitive-search/158224)

<div class="topic-metadata">

**Author:** [@astupak](https://discuss.elastic.co/u/astupak)\
**Replies:** 1\
**Last updated:** [November 26, 2018, 9:57pm UTC](https://discuss.elastic.co/t/special-characters-and-case-sensitive-search/158224 "2018-11-26T21:57:02Z")

</div>

How to search for special characters (double quotes) in Kibana? For example I need to find this string inside of a message field: \\"input\\":\\"\\" Or how to find a triple tilde occurrence: ~~~ Also is a way to perform …

---

## [Sum two metrics](https://discuss.elastic.co/t/sum-two-metrics/158209)

<div class="topic-metadata">

**Author:** [@asadiya](https://discuss.elastic.co/u/asadiya)\
**Replies:** 1\
**Last updated:** [November 26, 2018, 9:52pm UTC](https://discuss.elastic.co/t/sum-two-metrics/158209 "2018-11-26T21:52:42Z")

</div>

Hi, I got this data table: How can i add a new column that will be the sum between 'Number\_Logins' and 'Number\_votes'? Thanks.

---

## [How can I filter dates for today?](https://discuss.elastic.co/t/how-can-i-filter-dates-for-today/158194)

<div class="topic-metadata">

**Author:** [@aleira27](https://discuss.elastic.co/u/aleira27)\
**Replies:** 1\
**Last updated:** [November 26, 2018, 9:37pm UTC](https://discuss.elastic.co/t/how-can-i-filter-dates-for-today/158194 "2018-11-26T21:37:34Z")

</div>

Hi everybody, how are you? I got this field and I am filtering by now-24h and now, but I get dates for yesterday: How can I get the dates just for today ? Thank you!

---

## [Annotations in Time Series flicker if close to the edge](https://discuss.elastic.co/t/annotations-in-time-series-flicker-if-close-to-the-edge/158185)

<div class="topic-metadata">

**Author:** [@HenrikT](https://discuss.elastic.co/u/HenrikT)\
**Replies:** 1\
**Last updated:** [November 26, 2018, 9:29pm UTC](https://discuss.elastic.co/t/annotations-in-time-series-flicker-if-close-to-the-edge/158185 "2018-11-26T21:29:58Z")

</div>

Hello everyone! I'm using Kibana 6.4.0 I have a timeseries that shows some data, doesn't matter what it shows, then I have a annotation in that that writes out three different values from a machine learning run. It sh…

---

## [Is is possible to add a menu dropdown on sidebar with links to my dashboards?](https://discuss.elastic.co/t/is-is-possible-to-add-a-menu-dropdown-on-sidebar-with-links-to-my-dashboards/158077)

<div class="topic-metadata">

**Author:** [@Riany\_Oliveira](https://discuss.elastic.co/u/Riany_Oliveira)\
**Replies:** 1\
**Last updated:** [November 26, 2018, 9:08pm UTC](https://discuss.elastic.co/t/is-is-possible-to-add-a-menu-dropdown-on-sidebar-with-links-to-my-dashboards/158077 "2018-11-26T21:08:38Z")

</div>

something like this: i didnt found any plugin similar

---

## [Line chart data problem](https://discuss.elastic.co/t/line-chart-data-problem/158063)

<div class="topic-metadata">

**Author:** [@developer\_nextaqua](https://discuss.elastic.co/u/developer_nextaqua)\
**Replies:** 1\
**Last updated:** [November 26, 2018, 9:04pm UTC](https://discuss.elastic.co/t/line-chart-data-problem/158063 "2018-11-26T21:04:19Z")

</div>

{ "\_index": "c3b9c3185925\_d2f4e63c26c7\_1", "\_type": "aerator", "\_id": "1542985469", "\_version": 1, "\_score": 1, "\_source": { "timeStamp": "20:32:06 23-11-18", "deviceType": 11, "powerStatus": 0, "nodeMacId": "d…

---

## [Create a data table with columns based off of key value in metric](https://discuss.elastic.co/t/create-a-data-table-with-columns-based-off-of-key-value-in-metric/155959)

<div class="topic-metadata">

**Author:** [@dsollen](https://discuss.elastic.co/u/dsollen)\
**Replies:** 4\
**Last updated:** [November 26, 2018, 8:21pm UTC](https://discuss.elastic.co/t/create-a-data-table-with-columns-based-off-of-key-value-in-metric/155959 "2018-11-26T20:21:24Z")

</div>

I have data set which has a number of key value pairs with each pair being a metric. so for example I may have: \<component = A, key = "foo" value = "hello"\> \<component = A, key = "Bar" value = "World"\> \<component = B…

---

## [Copy to curl button does not work in 6.5](https://discuss.elastic.co/t/copy-to-curl-button-does-not-work-in-6-5/157662)

<div class="topic-metadata">

**Author:** [@james.knight](https://discuss.elastic.co/u/james.knight)\
**Replies:** 2\
**Last updated:** [November 26, 2018, 5:36pm UTC](https://discuss.elastic.co/t/copy-to-curl-button-does-not-work-in-6-5/157662 "2018-11-26T17:36:37Z")

</div>

Kibana Version: 6.5 Elasticsearch Version 6.5 I was testing some changes in the Kibana console window and once I had them working I wanted to copy my commands as curl. I found that when the copy as curl button is click…

---

## [Kibana - sentinl calculating alert](https://discuss.elastic.co/t/kibana-sentinl-calculating-alert/156459)

<div class="topic-metadata">

**Author:** [@cemkuleyin](https://discuss.elastic.co/u/cemkuleyin)\
**Replies:** 4\
**Last updated:** [November 26, 2018, 3:41pm UTC](https://discuss.elastic.co/t/kibana-sentinl-calculating-alert/156459 "2018-11-26T15:41:18Z")

</div>

Hi everyone, I want to create alert on sentinl. But i stucked. In our case, we have two field, i want to calculate field1 / field2 and sent notification via email. But i cannot do that. Our codes are, input =\> { "s…

---

## [Canvas: suitable for my usecase?](https://discuss.elastic.co/t/canvas-suitable-for-my-usecase/157651)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 2\
**Last updated:** [November 26, 2018, 2:20pm UTC](https://discuss.elastic.co/t/canvas-suitable-for-my-usecase/157651 "2018-11-26T14:20:37Z")

</div>

Hi there, I would like to understand how canvas is used, where it's limitations are and if it suits to my usecases. I tried to play with it a bit, but I did not get familiar with it yet. On all demos I saw, it always…

---

## ["Index Patterns" is broken in 6.5](https://discuss.elastic.co/t/index-patterns-is-broken-in-6-5/158024)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 10\
**Last updated:** [November 26, 2018, 1:14pm UTC](https://discuss.elastic.co/t/index-patterns-is-broken-in-6-5/158024 "2018-11-26T13:14:54Z")

</div>

Hello, Whenever I try to navigate through Management -\> Index Patterns (w/ 6.5.0 and 6.5.1), only single "default index" is shown, I cannot add, remove any of patterns and I can only refresh default one. Please advise. …

---

## [Winlogbeat/Kibana how to visualize a user logon time over 1 month?](https://discuss.elastic.co/t/winlogbeat-kibana-how-to-visualize-a-user-logon-time-over-1-month/157990)

<div class="topic-metadata">

**Author:** [@Loggeruk](https://discuss.elastic.co/u/Loggeruk)\
**Replies:** 3\
**Last updated:** [November 26, 2018, 1:08pm UTC](https://discuss.elastic.co/t/winlogbeat-kibana-how-to-visualize-a-user-logon-time-over-1-month/157990 "2018-11-26T13:08:06Z")

</div>

Hi all, I am trying to visualize in some way the first initial logon time for a user each day over a month, is this possible ? everything just seems to be based on count and i cant figure out the best way to do it. eg …

---

## [Human readable duration issue for metrics visualisation with split](https://discuss.elastic.co/t/human-readable-duration-issue-for-metrics-visualisation-with-split/157695)

<div class="topic-metadata">

**Author:** [@camfizz](https://discuss.elastic.co/u/camfizz)\
**Replies:** 2\
**Last updated:** [November 26, 2018, 1:06pm UTC](https://discuss.elastic.co/t/human-readable-duration-issue-for-metrics-visualisation-with-split/157695 "2018-11-26T13:06:48Z")

</div>

I have created a scripted field converting seconds into a human readable duration. When I display it on a simple metric graph it is human readable : When I want to use "Split Group" to split by a certain term, the…

---

## [Kibana is not detecting Date type](https://discuss.elastic.co/t/kibana-is-not-detecting-date-type/158039)

<div class="topic-metadata">

**Author:** [@Hichem\_Noomeni](https://discuss.elastic.co/u/Hichem_Noomeni)\
**Replies:** 1\
**Last updated:** [November 26, 2018, 10:28am UTC](https://discuss.elastic.co/t/kibana-is-not-detecting-date-type/158039 "2018-11-26T10:28:28Z")

</div>

Hi all, After creating an index with mapping and bulking same data, I found that Kibana was not detecting the type Date for my field 'date'. My mapping is "date": { "type": "date", "format": "MM-yyyy||MM/yyyy" } B…

---

## [Why shard failed exception is happening when trying to get a sub-string using scripetd fields?](https://discuss.elastic.co/t/why-shard-failed-exception-is-happening-when-trying-to-get-a-sub-string-using-scripetd-fields/158085)

<div class="topic-metadata">

**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\
**Replies:** 5\
**Last updated:** [November 26, 2018, 6:36am UTC](https://discuss.elastic.co/t/why-shard-failed-exception-is-happening-when-trying-to-get-a-sub-string-using-scripetd-fields/158085 "2018-11-26T06:36:59Z")

</div>

Hi, I am using ELK GA 6.3.0. I am trying to create a scripted field using the below script, in Kibana; return doc\['field\_a.keyword'\].value.substring(17,4); below is a sample data in field\_a; qw\_er\_qwerty\_123\_1234.Qw…

---

## [Disable X-Pack Feature in Kibana](https://discuss.elastic.co/t/disable-x-pack-feature-in-kibana/156783)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 10\
**Last updated:** [November 26, 2018, 5:40am UTC](https://discuss.elastic.co/t/disable-x-pack-feature-in-kibana/156783 "2018-11-26T05:40:35Z")

</div>

I'm looking at X-Pack Settings in Kibana | Kibana User Guide \[6.5\] | Elastic How does one disable app (X-Pack Feature) such as: Canvas, Infrastructure, Logs? Please advise.

---

## [Cannot Delete Space?](https://discuss.elastic.co/t/cannot-delete-space/157411)

<div class="topic-metadata">

**Author:** [@Matt\_Vasquez](https://discuss.elastic.co/u/Matt_Vasquez)\
**Replies:** 6\
**Last updated:** [November 20, 2018, 3:27pm UTC](https://discuss.elastic.co/t/cannot-delete-space/157411 "2018-11-20T15:27:54Z")

</div>

I cannot delete any space. There are two notifications that pop up: "Error Deleting Space:" "Deleted "Name\_of\_Space" space." Yet the space still remains. I looked for the error in the kibana.log did not find anything…

---

## [Help with MachineLearning job](https://discuss.elastic.co/t/help-with-machinelearning-job/156049)

<div class="topic-metadata">

**Author:** [@Rohlik](https://discuss.elastic.co/u/Rohlik)\
**Replies:** 5\
**Last updated:** [November 24, 2018, 4:16pm UTC](https://discuss.elastic.co/t/help-with-machinelearning-job/156049 "2018-11-24T16:16:59Z")

</div>

Hello there, We are currently playing with x-pack and mainly with Machine-learning. Can you, please, show me way how we can create Machine-learning job for our use case? Our logs contains many fields but there are two…

---

## [The index pattern associated with this object no longer exists](https://discuss.elastic.co/t/the-index-pattern-associated-with-this-object-no-longer-exists/157967)

<div class="topic-metadata">

**Author:** [@godfather7](https://discuss.elastic.co/u/godfather7)\
**Replies:** 1\
**Last updated:** [November 23, 2018, 10:44pm UTC](https://discuss.elastic.co/t/the-index-pattern-associated-with-this-object-no-longer-exists/157967 "2018-11-23T22:44:48Z")

</div>

Whenever i Save the graph, it is showing that There is a problem with this saved object. the error is The index pattern associated with this object no longer exists. i am sending winlogbeat data to kibana.

---

## [AWS ElasticSearch Kibana Limits](https://discuss.elastic.co/t/aws-elasticsearch-kibana-limits/158050)

<div class="topic-metadata">

**Author:** [@Enrique\_Rosales](https://discuss.elastic.co/u/Enrique_Rosales)\
**Replies:** 1\
**Last updated:** [November 23, 2018, 10:16pm UTC](https://discuss.elastic.co/t/aws-elasticsearch-kibana-limits/158050 "2018-11-23T22:16:33Z")

</div>

Hi Elastic Community, I'm using the Kibana version 6.2.3 through a generated link via AWS ElasticSearch service. I generated a dashboard and i need to share a report of it (email or pdf). After read the documentation i …

---

## [Kibana for access in my site](https://discuss.elastic.co/t/kibana-for-access-in-my-site/158046)

<div class="topic-metadata">

**Author:** [@Jeison\_Guimaraes](https://discuss.elastic.co/u/Jeison_Guimaraes)\
**Replies:** 1\
**Last updated:** [November 23, 2018, 10:13pm UTC](https://discuss.elastic.co/t/kibana-for-access-in-my-site/158046 "2018-11-23T22:13:56Z")

</div>

Good afternoon, I'm new to kibana and elasticserach, I installed kibana and elasticserach on my machine and they work normally, now that I put this application on a server in my own machine for external access, but I hav…

---

## [Puppet-kibana module and kibana.yaml](https://discuss.elastic.co/t/puppet-kibana-module-and-kibana-yaml/157937)

<div class="topic-metadata">

**Author:** [@xzhou](https://discuss.elastic.co/u/xzhou)\
**Replies:** 3\
**Last updated:** [November 23, 2018, 4:53pm UTC](https://discuss.elastic.co/t/puppet-kibana-module-and-kibana-yaml/157937 "2018-11-23T16:53:35Z")

</div>

Hi In puppet templates, the following is what we defined. class { 'kibana': ensure =\> $elastic\_version, manage\_repo =\> false, config =\> { ..... 'elasticsearch.url' =\> 'https://localhost:9200', ........ what we g…

---

## [How change de vertical bar visualization code](https://discuss.elastic.co/t/how-change-de-vertical-bar-visualization-code/157857)

<div class="topic-metadata">

**Author:** [@ilanas](https://discuss.elastic.co/u/ilanas)\
**Replies:** 1\
**Last updated:** [November 23, 2018, 4:01pm UTC](https://discuss.elastic.co/t/how-change-de-vertical-bar-visualization-code/157857 "2018-11-23T16:01:11Z")

</div>

Good morning, How can i do or change the vertical bar code visualization to draw negative bars alwais in red colour? Thank you

---

## [How to open file using Kibana table visualization](https://discuss.elastic.co/t/how-to-open-file-using-kibana-table-visualization/158002)

<div class="topic-metadata">

**Author:** [@suripaleru](https://discuss.elastic.co/u/suripaleru)\
**Replies:** 3\
**Last updated:** [November 23, 2018, 2:21pm UTC](https://discuss.elastic.co/t/how-to-open-file-using-kibana-table-visualization/158002 "2018-11-23T14:21:41Z")

</div>

I added file path to table and I would like to open file from the link. But Kibana is adding "localhost:5601" to the original file link. Could you please let me know how to handle this case ?

---

## [How to disable pie filter for some metric](https://discuss.elastic.co/t/how-to-disable-pie-filter-for-some-metric/157912)

<div class="topic-metadata">

**Author:** [@Cyber\_Bobak](https://discuss.elastic.co/u/Cyber_Bobak)\
**Replies:** 4\
**Last updated:** [November 23, 2018, 1:46pm UTC](https://discuss.elastic.co/t/how-to-disable-pie-filter-for-some-metric/157912 "2018-11-23T13:46:10Z")

</div>

Hello, I've in dashboard 2 metrics, every has different index source & pie which is using the second index.The pie is filtering on field 'severity' which exist only in second index. Issue is that when I click on the pie…

---

## [Sorting in Visualize mode make my table empty](https://discuss.elastic.co/t/sorting-in-visualize-mode-make-my-table-empty/157933)

<div class="topic-metadata">

**Author:** [@forthgate](https://discuss.elastic.co/u/forthgate)\
**Replies:** 1\
**Last updated:** [November 23, 2018, 1:09pm UTC](https://discuss.elastic.co/t/sorting-in-visualize-mode-make-my-table-empty/157933 "2018-11-23T13:09:13Z")

</div>

I builded small query which shows me two fields - user\_id and id. When i try to sort by user\_id in Discover mode, all is work but then i created table in Visualise, and after sorting i see only empty space. This happens …

---

## [FATAL ValidationError - new config values](https://discuss.elastic.co/t/fatal-validationerror-new-config-values/157931)

<div class="topic-metadata">

**Author:** [@23141](https://discuss.elastic.co/u/23141)\
**Replies:** 1\
**Last updated:** [November 23, 2018, 1:06pm UTC](https://discuss.elastic.co/t/fatal-validationerror-new-config-values/157931 "2018-11-23T13:06:49Z")

</div>

Hey, My plugin is going to need some config. I put it into the config/kibana.yaml file like so: my-kibana-plugin.zuser: "user" my-kibana-plugin.zpass: "pass" but I get the following error: FATAL ValidationError:…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=748)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=750)
