# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=767

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 768

---

## [Help with scripted fields](https://discuss.elastic.co/t/help-with-scripted-fields/152415)

<div class="topic-metadata">

**Author:** [@jeremiguel](https://discuss.elastic.co/u/jeremiguel)\
**Replies:** 2\
**Last updated:** [October 15, 2018, 6:54am UTC](https://discuss.elastic.co/t/help-with-scripted-fields/152415 "2018-10-15T06:54:06Z")

</div>

I'm a complete beginner with Kibana and its my first time creating a scripted field. I'm creating a script to retrieve the transaction id's of dropped transactions from all my transaction logs. Below is the script which…

---

## [Kibana filter ,fluentd](https://discuss.elastic.co/t/kibana-filter-fluentd/152419)

<div class="topic-metadata">

**Author:** [@prathyushmr](https://discuss.elastic.co/u/prathyushmr)\
**Replies:** 0\
**Last updated:** [October 15, 2018, 4:53am UTC](https://discuss.elastic.co/t/kibana-filter-fluentd/152419 "2018-10-15T04:53:50Z")

</div>

Issue in displaying numeric data in kibana . Client side Fluentd configuration type tail tag underutilized.log path /var/log/utilization/monthly\_summary.log format /^,HOST,(?\[^,\]+),DATE,(?\[^,\]+),STREAK,(?\[^,\]+),CPU\_DA…

---

## [Kibana Pie Chart](https://discuss.elastic.co/t/kibana-pie-chart/152412)

<div class="topic-metadata">

**Author:** [@Shankrish](https://discuss.elastic.co/u/Shankrish)\
**Replies:** 0\
**Last updated:** [October 14, 2018, 9:26pm UTC](https://discuss.elastic.co/t/kibana-pie-chart/152412 "2018-10-14T21:26:08Z")

</div>

Hi, I have created one index using the CSV file data. The index is containing the values of two columns. One column value is 10 (In progress) and another one value is 90 (ToDo). I want to create a pie chart visualization…

---

## [Wrong sort order in vertical bar chart and wrong number of bars](https://discuss.elastic.co/t/wrong-sort-order-in-vertical-bar-chart-and-wrong-number-of-bars/152403)

<div class="topic-metadata">

**Author:** [@dejard](https://discuss.elastic.co/u/dejard)\
**Replies:** 0\
**Last updated:** [October 14, 2018, 6:44pm UTC](https://discuss.elastic.co/t/wrong-sort-order-in-vertical-bar-chart-and-wrong-number-of-bars/152403 "2018-10-14T18:44:35Z")

</div>

Hi, I have multiple problems displaying my indexed data correctly . Index looks as follows (exemplary data): group number cell number distance header 317 …

---

## [Comparing aggregate data with benchmark data](https://discuss.elastic.co/t/comparing-aggregate-data-with-benchmark-data/152394)

<div class="topic-metadata">

**Author:** [@phil\_hcs\_tech](https://discuss.elastic.co/u/phil_hcs_tech)\
**Replies:** 0\
**Last updated:** [October 14, 2018, 3:38pm UTC](https://discuss.elastic.co/t/comparing-aggregate-data-with-benchmark-data/152394 "2018-10-14T15:38:15Z")

</div>

Hi, I manage a dataset in elastic that stores records of grants allocated across the UK for a charity. There is a need to aggregate the data into regions and then compare that allocation ratios to population statistics.…

---

## [Displaying the selected time interval as a metric visualization](https://discuss.elastic.co/t/displaying-the-selected-time-interval-as-a-metric-visualization/151588)

<div class="topic-metadata">

**Author:** [@Nikhil\_Utane](https://discuss.elastic.co/u/Nikhil_Utane)\
**Replies:** 3\
**Last updated:** [October 14, 2018, 2:36pm UTC](https://discuss.elastic.co/t/displaying-the-selected-time-interval-as-a-metric-visualization/151588 "2018-10-14T14:36:11Z")

</div>

Hi, I want to show a simple metric visualization which will display the selected time interval in human readable format. For e.g. if user selects time interval as 5 PM to 7 PM, then the viz. should display "2 hours". I…

---

## [Production cluster doesn't show up in Kibana on monitoring cluster](https://discuss.elastic.co/t/production-cluster-doesnt-show-up-in-kibana-on-monitoring-cluster/151125)

<div class="topic-metadata">

**Author:** [@Jeremy\_Lecour](https://discuss.elastic.co/u/Jeremy_Lecour)\
**Replies:** 2\
**Last updated:** [October 13, 2018, 5:28pm UTC](https://discuss.elastic.co/t/production-cluster-doesnt-show-up-in-kibana-on-monitoring-cluster/151125 "2018-10-13T17:28:01Z")

</div>

Hi I have a production cluster called "elastic1" with 4 nodes (version 6.3.1). It's been running for a few months. I also have built a cluster called "elastic2" (1 node only, version 6.4.2) to collect monitoring data. …

---

## [Can I use the result of a query in other scripted query to perform calculations?](https://discuss.elastic.co/t/can-i-use-the-result-of-a-query-in-other-scripted-query-to-perform-calculations/152301)

<div class="topic-metadata">

**Author:** [@paulo.leao](https://discuss.elastic.co/u/paulo.leao)\
**Replies:** 0\
**Last updated:** [October 12, 2018, 9:00pm UTC](https://discuss.elastic.co/t/can-i-use-the-result-of-a-query-in-other-scripted-query-to-perform-calculations/152301 "2018-10-12T21:00:26Z")

</div>

I am trying to create a query to output a ratio. The first number is the sum aggregation of the OutageTime field. The second number is a scripted field. Here is my mapping: Here is my query: So my question is: is…

---

## [Timelion: How to fill no data with the last value](https://discuss.elastic.co/t/timelion-how-to-fill-no-data-with-the-last-value/151528)

<div class="topic-metadata">

**Author:** [@jspang](https://discuss.elastic.co/u/jspang)\
**Replies:** 1\
**Last updated:** [October 12, 2018, 6:41pm UTC](https://discuss.elastic.co/t/timelion-how-to-fill-no-data-with-the-last-value/151528 "2018-10-12T18:41:30Z")

</div>

Our build system (Jenkins) sends all its data to Elasticsearch, which is fronted by Kibana. I'm trying to build a simple timeline graph of our build system showing when the build is Green (healthy) or Red (broken). Here…

---

## [Kibana cannot connect to elasticsearch cluster](https://discuss.elastic.co/t/kibana-cannot-connect-to-elasticsearch-cluster/152262)

<div class="topic-metadata">

**Author:** [@Ryne\_Keel](https://discuss.elastic.co/u/Ryne_Keel)\
**Replies:** 1\
**Last updated:** [October 12, 2018, 5:32pm UTC](https://discuss.elastic.co/t/kibana-cannot-connect-to-elasticsearch-cluster/152262 "2018-10-12T17:32:02Z")

</div>

Cannot connect to the Elasticsearch cluster currently configured for Kibana. Refer to the Kibana logs for more details and refresh to try again. When I connect to kibana I get the above message ^ elastic.yml: cluster…

---

## [Fields filtered are not added in kibana from grok](https://discuss.elastic.co/t/fields-filtered-are-not-added-in-kibana-from-grok/152279)

<div class="topic-metadata">

**Author:** [@opswell](https://discuss.elastic.co/u/opswell)\
**Replies:** 0\
**Last updated:** [October 12, 2018, 5:25pm UTC](https://discuss.elastic.co/t/fields-filtered-are-not-added-in-kibana-from-grok/152279 "2018-10-12T17:25:45Z")

</div>

hello, i've tried using grok filter for parsing logs like this 2018-10-11 18:40:10,219 \[test\] \[someID: TEST-name\] INFO com.test status=401 duration=16 I've tried grok constructor and came up with this %{TIMESTAMP\_ISO860…

---

## [Heatmaps / missing values / "too many series"](https://discuss.elastic.co/t/heatmaps-missing-values-too-many-series/152252)

<div class="topic-metadata">

**Author:** [@ethrbunny](https://discuss.elastic.co/u/ethrbunny)\
**Replies:** 0\
**Last updated:** [October 12, 2018, 1:54pm UTC](https://discuss.elastic.co/t/heatmaps-missing-values-too-many-series/152252 "2018-10-12T13:54:50Z")

</div>

Im trying to put together a heat map of mount points (x-axis) X host name (y-axis) with "system.filesystem.used\_pct" as the z-axis. There are a few issues surfacing that Im not sure how to address: 1- if I set mount poi…

---

## [Plot results of a script aggregation](https://discuss.elastic.co/t/plot-results-of-a-script-aggregation/152057)

<div class="topic-metadata">

**Author:** [@parosio](https://discuss.elastic.co/u/parosio)\
**Replies:** 2\
**Last updated:** [October 12, 2018, 1:19pm UTC](https://discuss.elastic.co/t/plot-results-of-a-script-aggregation/152057 "2018-10-12T13:19:21Z")

</div>

Hello, I'm trying to plot the results of a custom scripted aggregation, such as the following (based on flight data from https://demo.elastic.co) The aggregation returns the number of flights with the same weather in Or…

---

## [JSON input count](https://discuss.elastic.co/t/json-input-count/152236)

<div class="topic-metadata">

**Author:** [@Pierre2](https://discuss.elastic.co/u/Pierre2)\
**Replies:** 0\
**Last updated:** [October 12, 2018, 12:11pm UTC](https://discuss.elastic.co/t/json-input-count/152236 "2018-10-12T12:11:01Z")

</div>

Hello ! I want to use the JSON input for the metric visualisation. I want to do the calculation below : (Count all document where the field "echec" is equal to true ) / (count all document) How can I do that ?

---

## [Adding Field Columns to the Documents Table](https://discuss.elastic.co/t/adding-field-columns-to-the-documents-table/152216)

<div class="topic-metadata">

**Author:** [@npontes](https://discuss.elastic.co/u/npontes)\
**Replies:** 0\
**Last updated:** [October 12, 2018, 10:09am UTC](https://discuss.elastic.co/t/adding-field-columns-to-the-documents-table/152216 "2018-10-12T10:09:27Z")

</div>

Hello everyone, I have something in Kibana like this: What I want to do is add more columns to it: I want to know if it's possible to add columns dinamically/automatically without having to click on the add butt…

---

## [Index pattern creation and setting it as default at once](https://discuss.elastic.co/t/index-pattern-creation-and-setting-it-as-default-at-once/152212)

<div class="topic-metadata">

**Author:** [@shiveshabhishek](https://discuss.elastic.co/u/shiveshabhishek)\
**Replies:** 0\
**Last updated:** [October 12, 2018, 9:50am UTC](https://discuss.elastic.co/t/index-pattern-creation-and-setting-it-as-default-at-once/152212 "2018-10-12T09:50:29Z")

</div>

Hey, I am using Kibana's API to create index-patterns. So, I want to know that is there a way to create a index-pattern and at that time only, make it the default index-pattern? Basically, I want to do both the tasks wit…

---

## [Data table visualization count bug on wildcard index](https://discuss.elastic.co/t/data-table-visualization-count-bug-on-wildcard-index/152200)

<div class="topic-metadata">

**Author:** [@Florian\_Ajir](https://discuss.elastic.co/u/Florian_Ajir)\
**Replies:** 0\
**Last updated:** [October 12, 2018, 9:10am UTC](https://discuss.elastic.co/t/data-table-visualization-count-bug-on-wildcard-index/152200 "2018-10-12T09:10:34Z")

</div>

I created a data table visualization on a big sized elasticsearch wildcard index from logstash, with count metric aggregation, split rows by term order descending. When I try different size in the split row section the …

---

## [Not able to create default deshboard in kibana for arcsight module. My elk version is 6.4.2](https://discuss.elastic.co/t/not-able-to-create-default-deshboard-in-kibana-for-arcsight-module-my-elk-version-is-6-4-2/152195)

<div class="topic-metadata">

**Author:** [@Rohit\_Gautam](https://discuss.elastic.co/u/Rohit_Gautam)\
**Replies:** 0\
**Last updated:** [October 12, 2018, 8:59am UTC](https://discuss.elastic.co/t/not-able-to-create-default-deshboard-in-kibana-for-arcsight-module-my-elk-version-is-6-4-2/152195 "2018-10-12T08:59:49Z")

</div>

elk@elk:~$ sudo /usr/share/logstash/bin/logstash --modules arcsight --setup -M "arcsight.var.inputs=smartconnector" -M "arcsight.var.elasticsearch.hosts= localhost:9200" -M "arcsight.var.kibana.host=localhost:5601" \[s…

---

## [How to increment a field with JSON input?](https://discuss.elastic.co/t/how-to-increment-a-field-with-json-input/151230)

<div class="topic-metadata">

**Author:** [@Krone](https://discuss.elastic.co/u/Krone)\
**Replies:** 2\
**Last updated:** [October 12, 2018, 8:56am UTC](https://discuss.elastic.co/t/how-to-increment-a-field-with-json-input/151230 "2018-10-12T08:56:16Z")

</div>

Hello all. I'm having some trouble with the JSON input field , i have read all the documentation i can find yet this script does not work either syntactically , runtime error or compilation error { "script" : { "sour…

---

## [Scanning Window Search through Index?](https://discuss.elastic.co/t/scanning-window-search-through-index/152163)

<div class="topic-metadata">

**Author:** [@SpaceMoose](https://discuss.elastic.co/u/SpaceMoose)\
**Replies:** 0\
**Last updated:** [October 12, 2018, 6:16am UTC](https://discuss.elastic.co/t/scanning-window-search-through-index/152163 "2018-10-12T06:16:39Z")

</div>

Hello... I have an index built from the log of a requests/incident ticket reporting/tracking system. Each incident has the following time fields present: open\_time (the time the incident/req was submitted); and close…

---

## [Sum with aggregation](https://discuss.elastic.co/t/sum-with-aggregation/151403)

<div class="topic-metadata">

**Author:** [@RAMIAFARA\_Voriasy](https://discuss.elastic.co/u/RAMIAFARA_Voriasy)\
**Replies:** 3\
**Last updated:** [October 12, 2018, 5:39am UTC](https://discuss.elastic.co/t/sum-with-aggregation/151403 "2018-10-12T05:39:09Z")

</div>

Hi, I'd like to create a line graph with kibana here is my log csv : 2018-07-06 10:32:52;Q34QRM;ICaYoB;MSC\_MTC;Y1;X1 2018-07-06 10:32:52;uRtEg6;ICaYoB;MSC\_MTSMS;Y1;X2 2018-07-06 10:32:52;YCKCRq;ICaYoB;MSC\_MOSMS;Y1;X3 …

---

## [How to get the value of count in JSON Input!](https://discuss.elastic.co/t/how-to-get-the-value-of-count-in-json-input/151986)

<div class="topic-metadata">

**Author:** [@MaxWang](https://discuss.elastic.co/u/MaxWang)\
**Replies:** 3\
**Last updated:** [October 12, 2018, 1:47am UTC](https://discuss.elastic.co/t/how-to-get-the-value-of-count-in-json-input/151986 "2018-10-12T01:47:34Z")

</div>

I want to modify the value of count in JSON Input like that but it dosn't work,however,it work for other Metric Aggregation,sum, min and so on.

---

## [No x-pack: Login is currently disabled. Administrators should consult the Kibana logs for more details](https://discuss.elastic.co/t/no-x-pack-login-is-currently-disabled-administrators-should-consult-the-kibana-logs-for-more-details/143648)

<div class="topic-metadata">

**Author:** [@Shree](https://discuss.elastic.co/u/Shree)\
**Replies:** 17\
**Last updated:** [October 11, 2018, 10:30pm UTC](https://discuss.elastic.co/t/no-x-pack-login-is-currently-disabled-administrators-should-consult-the-kibana-logs-for-more-details/143648 "2018-10-11T22:30:40Z")

</div>

Hi, I have installed 6.3.2 elasticsearch and kibana on my vm when I tried to open kibana it's showing the below error. Since I referred with the same error in this forum people say it's because of x-pack but I didn't i…

---

## [Elasticsearch, logstash, filebeat, kibana 6.4 x-pack Security issue](https://discuss.elastic.co/t/elasticsearch-logstash-filebeat-kibana-6-4-x-pack-security-issue/151911)

<div class="topic-metadata">

**Author:** [@mreloysanchez](https://discuss.elastic.co/u/mreloysanchez)\
**Replies:** 2\
**Last updated:** [October 11, 2018, 4:30pm UTC](https://discuss.elastic.co/t/elasticsearch-logstash-filebeat-kibana-6-4-x-pack-security-issue/151911 "2018-10-11T16:30:44Z")

</div>

Hello, I configured my logstash output as noted here:https://www.elastic.co/guide/en/beats/filebeat/current/logstash-output.html I created the logstash pipeline as noted here: https://www.elastic.co/guide/en/elastic-st…

---

## [Stacked and normal bar chart](https://discuss.elastic.co/t/stacked-and-normal-bar-chart/152086)

<div class="topic-metadata">

**Author:** [@M.alsioufi](https://discuss.elastic.co/u/M.alsioufi)\
**Replies:** 0\
**Last updated:** [October 11, 2018, 3:41pm UTC](https://discuss.elastic.co/t/stacked-and-normal-bar-chart/152086 "2018-10-11T15:41:43Z")

</div>

Hi, I have log files that contains 4 different levels of messages (Start, , Go, Run, Skip, Finish). So in my flow I expect to have a series of log messages that follow one of 3 scenarios: Start, Skip, Finish Start, G…

---

## [Show months on X-Axis while maintaining daily granularity of data](https://discuss.elastic.co/t/show-months-on-x-axis-while-maintaining-daily-granularity-of-data/152051)

<div class="topic-metadata">

**Author:** [@Kult](https://discuss.elastic.co/u/Kult)\
**Replies:** 5\
**Last updated:** [October 11, 2018, 3:34pm UTC](https://discuss.elastic.co/t/show-months-on-x-axis-while-maintaining-daily-granularity-of-data/152051 "2018-10-11T15:34:22Z")

</div>

Hi, I have a Kibana visualisation that represents disk capacity utilisation on a few servers. New data gets ingested daily, and should go a few months back on the visualisation. This is what it currently looks like: …

---

## [Kibana cannot be accessed on different port other than 5601](https://discuss.elastic.co/t/kibana-cannot-be-accessed-on-different-port-other-than-5601/152068)

<div class="topic-metadata">

**Author:** [@vnallamothu](https://discuss.elastic.co/u/vnallamothu)\
**Replies:** 4\
**Last updated:** [October 11, 2018, 3:00pm UTC](https://discuss.elastic.co/t/kibana-cannot-be-accessed-on-different-port-other-than-5601/152068 "2018-10-11T15:00:06Z")

</div>

I cannot access Kibana on different port other than 5601. I changed the server.port property in Kibana.yml file to several different unused ports. But I cannot access it from those ports. I can only access it on port 560…

---

## [Visualization: Controls - Dropdown limited to 10 entries](https://discuss.elastic.co/t/visualization-controls-dropdown-limited-to-10-entries/152060)

<div class="topic-metadata">

**Author:** [@faulander](https://discuss.elastic.co/u/faulander)\
**Replies:** 2\
**Last updated:** [October 11, 2018, 2:13pm UTC](https://discuss.elastic.co/t/visualization-controls-dropdown-limited-to-10-entries/152060 "2018-10-11T14:13:21Z")

</div>

documentation mentions a size field, but it doesn't show for me and i am stuck with 10 entries in the dropdown, even i know i have 20+ for that given filter.

---

## [Struggling to get Top-Hits Visualization to work](https://discuss.elastic.co/t/struggling-to-get-top-hits-visualization-to-work/151848)

<div class="topic-metadata">

**Author:** [@faulander](https://discuss.elastic.co/u/faulander)\
**Replies:** 11\
**Last updated:** [October 11, 2018, 2:11pm UTC](https://discuss.elastic.co/t/struggling-to-get-top-hits-visualization-to-work/151848 "2018-10-11T14:11:27Z")

</div>

I did understand that Top-Hits always shows the latest value. In my visualization it jumps from Zero Values to real values every 2-3 refreshs, and i cannot figure out why. Here is the setting: Running Elastic and…

---

## [Canvas Time Filter not using correct date format](https://discuss.elastic.co/t/canvas-time-filter-not-using-correct-date-format/151175)

<div class="topic-metadata">

**Author:** [@FWerner](https://discuss.elastic.co/u/FWerner)\
**Replies:** 2\
**Last updated:** [October 11, 2018, 1:45pm UTC](https://discuss.elastic.co/t/canvas-time-filter-not-using-correct-date-format/151175 "2018-10-11T13:45:53Z")

</div>

Hi Guys, This is my first post here :slight\_smile: I am trying to get Canvas to work with my Timelion expression. I am using ES 6.4.2. In Timelion, my query .es(q=\*, index=att\*\_touchpoints, timefield=fields.timestamp…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=766)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=768)
