# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=768

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 769

---

## [DataTable customized metric?](https://discuss.elastic.co/t/datatable-customized-metric/151520)

<div class="topic-metadata">

**Author:** [@Matt\_McGovern](https://discuss.elastic.co/u/Matt_McGovern)\
**Replies:** 4\
**Last updated:** [October 11, 2018, 1:28pm UTC](https://discuss.elastic.co/t/datatable-customized-metric/151520 "2018-10-11T13:28:56Z")

</div>

I'm trying to have a data table with 3 columns, where the 3rd column is a Status (Success or Failure)...I don't want the 3rd column to repeat as a different row each time---I'd rather I just had a calculation of percenta…

---

## [Kibana "No living Connections" behind IPV6 reverse proxy](https://discuss.elastic.co/t/kibana-no-living-connections-behind-ipv6-reverse-proxy/151487)

<div class="topic-metadata">

**Author:** [@Kirack2040](https://discuss.elastic.co/u/Kirack2040)\
**Replies:** 1\
**Last updated:** [October 11, 2018, 12:59pm UTC](https://discuss.elastic.co/t/kibana-no-living-connections-behind-ipv6-reverse-proxy/151487 "2018-10-11T12:59:11Z")

</div>

Hello, Here is my configuration : Elasticsearch, Logstash and Kibana are running behind a reverse proxy Nginx. ELK are all running in docker containers at the latest stable version (6.4.1) using network host configura…

---

## [Kibana and mapper-size Plugin](https://discuss.elastic.co/t/kibana-and-mapper-size-plugin/151658)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 1\
**Last updated:** [October 11, 2018, 12:52pm UTC](https://discuss.elastic.co/t/kibana-and-mapper-size-plugin/151658 "2018-10-11T12:52:37Z")

</div>

Hi, I'm using kibana & elasticsearch 5.6.9 along with the mapper-size plugin (also 5.6.9). Our other environments, running 5.6.3, display the '\_size' field fine in kibana, but not at this version. Note that it is presen…

---

## [Painless - calculation of the ration of number of two contexts with status code](https://discuss.elastic.co/t/painless-calculation-of-the-ration-of-number-of-two-contexts-with-status-code/151676)

<div class="topic-metadata">

**Author:** [@bm\_rec](https://discuss.elastic.co/u/bm_rec)\
**Replies:** 1\
**Last updated:** [October 11, 2018, 12:49pm UTC](https://discuss.elastic.co/t/painless-calculation-of-the-ration-of-number-of-two-contexts-with-status-code/151676 "2018-10-11T12:49:41Z")

</div>

Hello! I need to calculate ratio of two URI with status codes 200 and status code above 200, then pass it in Grafana and finally get alert. I'm going to create extra scripted field. Can somebody help me, please?

---

## [Navigation from one dashboard to another dashboard](https://discuss.elastic.co/t/navigation-from-one-dashboard-to-another-dashboard/151981)

<div class="topic-metadata">

**Author:** [@gsantoshkumar](https://discuss.elastic.co/u/gsantoshkumar)\
**Replies:** 3\
**Last updated:** [October 11, 2018, 12:38pm UTC](https://discuss.elastic.co/t/navigation-from-one-dashboard-to-another-dashboard/151981 "2018-10-11T12:38:27Z")

</div>

Hi, I have the requirement like, Need to display master page when login to kibana. The page has details and if click on filed has to navigate to a particular dashboard. From the dashboard to again click on will navig…

---

## [Buckets - size and order](https://discuss.elastic.co/t/buckets-size-and-order/149998)

<div class="topic-metadata">

**Author:** [@wheelq](https://discuss.elastic.co/u/wheelq)\
**Replies:** 2\
**Last updated:** [October 11, 2018, 11:55am UTC](https://discuss.elastic.co/t/buckets-size-and-order/149998 "2018-10-11T11:55:33Z")

</div>

How does the size option work inside the buckets? Why do I have to define it if I do not know how many buckets I'll have? I am using this if I want to show 5 top counts, but what should I put in there if I'd like to have…

---

## [Time range not working in kibana 6.2](https://discuss.elastic.co/t/time-range-not-working-in-kibana-6-2/151984)

<div class="topic-metadata">

**Author:** [@ammy](https://discuss.elastic.co/u/ammy)\
**Replies:** 2\
**Last updated:** [October 11, 2018, 11:37am UTC](https://discuss.elastic.co/t/time-range-not-working-in-kibana-6-2/151984 "2018-10-11T11:37:00Z")

</div>

I created an index and inserted documents on Elasticsearch 6.2. I have a mapping for the "timestamp" field and it has a "date" type. Dates are showed using the correct date format in the "Discover" tab . When I create …

---

## [Is that possible to only show results with count of a condition](https://discuss.elastic.co/t/is-that-possible-to-only-show-results-with-count-of-a-condition/151916)

<div class="topic-metadata">

**Author:** [@jasmine.liang](https://discuss.elastic.co/u/jasmine.liang)\
**Replies:** 1\
**Last updated:** [October 11, 2018, 11:08am UTC](https://discuss.elastic.co/t/is-that-possible-to-only-show-results-with-count-of-a-condition/151916 "2018-10-11T11:08:15Z")

</div>

Hi, I am creating a visualization with metrics of count and buckets by terms of id. And the counts can be 1 to 20. Is that possible to add some condition to show results when counts more than 1? Thanks, Jasmine

---

## [Values in x axis for non zero field having value as 50 is not showing in vertical bar chart](https://discuss.elastic.co/t/values-in-x-axis-for-non-zero-field-having-value-as-50-is-not-showing-in-vertical-bar-chart/151650)

<div class="topic-metadata">

**Author:** [@Sofia](https://discuss.elastic.co/u/Sofia)\
**Replies:** 1\
**Last updated:** [October 11, 2018, 10:53am UTC](https://discuss.elastic.co/t/values-in-x-axis-for-non-zero-field-having-value-as-50-is-not-showing-in-vertical-bar-chart/151650 "2018-10-11T10:53:37Z")

</div>

values in x axis for non zero field having value as 50 is not showing up in vertical bar chart as it is overlapping with zero axis line

---

## [How to calculate time difference between two events in postprocessing?](https://discuss.elastic.co/t/how-to-calculate-time-difference-between-two-events-in-postprocessing/152023)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 1\
**Last updated:** [October 11, 2018, 10:44am UTC](https://discuss.elastic.co/t/how-to-calculate-time-difference-between-two-events-in-postprocessing/152023 "2018-10-11T10:44:13Z")

</div>

Hi there, I have logs which contain a log line for starting and finishing a process. it looks like this: . I need the time difference between the "tux state retrieved" and "tux state retrieved". Since the data is alre…

---

## [I'm Unable to create index pattern](https://discuss.elastic.co/t/im-unable-to-create-index-pattern/150755)

<div class="topic-metadata">

**Author:** [@lzukel](https://discuss.elastic.co/u/lzukel)\
**Replies:** 7\
**Last updated:** [October 11, 2018, 10:40am UTC](https://discuss.elastic.co/t/im-unable-to-create-index-pattern/150755 "2018-10-11T10:40:27Z")

</div>

Fresh install of Elasticsearch 6.3.2 Clean install of Kibana 6.3.2 in Docker Searchguard plugin installed in both ES & Kibana Issue as shown here: Indices exist with documents in the indices, following a standard n…

---

## [Config: Request failed with status code: 403](https://discuss.elastic.co/t/config-request-failed-with-status-code-403/151673)

<div class="topic-metadata">

**Author:** [@leprovokateur](https://discuss.elastic.co/u/leprovokateur)\
**Replies:** 2\
**Last updated:** [October 11, 2018, 10:39am UTC](https://discuss.elastic.co/t/config-request-failed-with-status-code-403/151673 "2018-10-11T10:39:25Z")

</div>

Hi, While trying to define the default index I get the following error in kibana: Config: Request failed with status code: 403 Error: Request failed with status code: 403 at \_callee$ (http://192.168.96.178/bundles/co…

---

## [Vega Debug / log](https://discuss.elastic.co/t/vega-debug-log/150817)

<div class="topic-metadata">

**Author:** [@thekm1](https://discuss.elastic.co/u/thekm1)\
**Replies:** 1\
**Last updated:** [October 11, 2018, 10:32am UTC](https://discuss.elastic.co/t/vega-debug-log/150817 "2018-10-11T10:32:23Z")

</div>

Hi folks, a question to the logging with vega. If i declare a fieldname as value for an option (example : transform.groupby) and this field does not exist, will vega throw a log ? And how is it possible to see those log…

---

## [Vega-Lite](https://discuss.elastic.co/t/vega-lite/150885)

<div class="topic-metadata">

**Author:** [@Atulya\_Sharma](https://discuss.elastic.co/u/Atulya_Sharma)\
**Replies:** 1\
**Last updated:** [October 11, 2018, 10:30am UTC](https://discuss.elastic.co/t/vega-lite/150885 "2018-10-11T10:30:30Z")

</div>

Hi All, Can somebody please help me in customizing visualization in Kibana, through Vega if possible? I want to create a report (Line Graph and Pie-Chart) as below : Line Graph - If my current value went above 5secs…

---

## [Is there a way to get all visualizations of ".kibana-6" index using curl](https://discuss.elastic.co/t/is-there-a-way-to-get-all-visualizations-of-kibana-6-index-using-curl/151998)

<div class="topic-metadata">

**Author:** [@sahil\_sawhney](https://discuss.elastic.co/u/sahil_sawhney)\
**Replies:** 1\
**Last updated:** [October 11, 2018, 10:30am UTC](https://discuss.elastic.co/t/is-there-a-way-to-get-all-visualizations-of-kibana-6-index-using-curl/151998 "2018-10-11T10:30:28Z")

</div>

Our kibana index was reindexed and it had a name ".kibana-6" Initially we used to get all visualizations via command localhost:9200/.kibana/visualization/\_search?pretty But now the index is changed and the following c…

---

## [How to use “wildcard” with a multistring query in kibana Discover tab?](https://discuss.elastic.co/t/how-to-use-wildcard-with-a-multistring-query-in-kibana-discover-tab/152022)

<div class="topic-metadata">

**Author:** [@Shaheed\_Sarwar](https://discuss.elastic.co/u/Shaheed_Sarwar)\
**Replies:** 1\
**Last updated:** [October 11, 2018, 10:26am UTC](https://discuss.elastic.co/t/how-to-use-wildcard-with-a-multistring-query-in-kibana-discover-tab/152022 "2018-10-11T10:26:59Z")

</div>

I am trying to run the following query for an index along with wildcard: {"wildcard:"{"terminalId":70}} AND tranSactionResponseCode:1 The above query throws and error: Failed to parse query....... but when I run only …

---

## [Controls Visualization: empty values](https://discuss.elastic.co/t/controls-visualization-empty-values/151169)

<div class="topic-metadata">

**Author:** [@Alufolie](https://discuss.elastic.co/u/Alufolie)\
**Replies:** 2\
**Last updated:** [October 11, 2018, 10:07am UTC](https://discuss.elastic.co/t/controls-visualization-empty-values/151169 "2018-10-11T10:07:52Z")

</div>

Hello, I'am using Kibana in v6.3.2 and I'am trying to visualize IP Networks by there names and devices. So I've created a visualization to filter networknames. Some of these Networknames are just empty Strings and this …

---

## [Geo Location based on User Text File Location](https://discuss.elastic.co/t/geo-location-based-on-user-text-file-location/151849)

<div class="topic-metadata">

**Author:** [@cormac](https://discuss.elastic.co/u/cormac)\
**Replies:** 1\
**Last updated:** [October 11, 2018, 10:06am UTC](https://discuss.elastic.co/t/geo-location-based-on-user-text-file-location/151849 "2018-10-11T10:06:57Z")

</div>

Is it possible to create a visual or dashboard based on a Location text field but translate this to a Geo location. User Location : California Using the Geohash aggregation

---

## [Drop down for selecting fields](https://discuss.elastic.co/t/drop-down-for-selecting-fields/151752)

<div class="topic-metadata">

**Author:** [@rohini\_basu](https://discuss.elastic.co/u/rohini_basu)\
**Replies:** 1\
**Last updated:** [October 11, 2018, 9:57am UTC](https://discuss.elastic.co/t/drop-down-for-selecting-fields/151752 "2018-10-11T09:57:41Z")

</div>

Hi, I am currently working with an IoT related dataset which has a datefield, machine types, status of those machines and voltage taken at various part in the machine (VID\_xx). These VID\_xx columns are around 100 in nu…

---

## [How to only show result data after filter has been set](https://discuss.elastic.co/t/how-to-only-show-result-data-after-filter-has-been-set/151647)

<div class="topic-metadata">

**Author:** [@jtebbens](https://discuss.elastic.co/u/jtebbens)\
**Replies:** 1\
**Last updated:** [October 11, 2018, 9:22am UTC](https://discuss.elastic.co/t/how-to-only-show-result-data-after-filter-has-been-set/151647 "2018-10-11T09:22:08Z")

</div>

Hi, I have a question about Visualize. I created a dashboard with some visual boxes and a control box with a dropdown results I can set. At start the visual reports show all combined data for all devices we have in our …

---

## [Delete a pipeline id from monitoring in kibana](https://discuss.elastic.co/t/delete-a-pipeline-id-from-monitoring-in-kibana/151618)

<div class="topic-metadata">

**Author:** [@kaushik.vankayala](https://discuss.elastic.co/u/kaushik.vankayala)\
**Replies:** 5\
**Last updated:** [October 11, 2018, 9:10am UTC](https://discuss.elastic.co/t/delete-a-pipeline-id-from-monitoring-in-kibana/151618 "2018-10-11T09:10:51Z")

</div>

Hi There, I have logstash running a pipeline and i have enabled xpack monitoring so i can see the pipeline statistics in monitoring section of Kibana. However, over time i have changed the pipelineid and few settings s…

---

## [How to divide value by 1024 in scripted field](https://discuss.elastic.co/t/how-to-divide-value-by-1024-in-scripted-field/151568)

<div class="topic-metadata">

**Author:** [@mark.quilates](https://discuss.elastic.co/u/mark.quilates)\
**Replies:** 7\
**Last updated:** [October 11, 2018, 9:04am UTC](https://discuss.elastic.co/t/how-to-divide-value-by-1024-in-scripted-field/151568 "2018-10-11T09:04:19Z")

</div>

Hi Guys, Can you help me, I'm trying to divide the field value to 1024 but it showed script invalid. Below are my codes, I'm using the scripted field. if(doc\['webpage\_size'\].value !=null) { return doc\['webpage\_size'…

---

## [Getting logs on Kibana 6.4 Docker](https://discuss.elastic.co/t/getting-logs-on-kibana-6-4-docker/151915)

<div class="topic-metadata">

**Author:** [@ERER](https://discuss.elastic.co/u/ERER)\
**Replies:** 2\
**Last updated:** [October 11, 2018, 8:27am UTC](https://discuss.elastic.co/t/getting-logs-on-kibana-6-4-docker/151915 "2018-10-11T08:27:44Z")

</div>

I'm executing this docker container: https://www.elastic.co/guide/en/kibana/current/docker.html Changing the elasticsearch.url to an existing elastic search (if put that url in the web application it returns OK). The …

---

## [ADS authentication and authorisation](https://discuss.elastic.co/t/ads-authentication-and-authorisation/151630)

<div class="topic-metadata">

**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Replies:** 1\
**Last updated:** [October 11, 2018, 8:26am UTC](https://discuss.elastic.co/t/ads-authentication-and-authorisation/151630 "2018-10-11T08:26:36Z")

</div>

Hi, Im using kibana 6.2.4 version, i want to implement ADS authentication and authorisation while using kibana URL. How can i attain that and anyone can help me on this.

---

## [Multiple instance of Kibana displayed in monitoring dashboard on same port](https://discuss.elastic.co/t/multiple-instance-of-kibana-displayed-in-monitoring-dashboard-on-same-port/151203)

<div class="topic-metadata">

**Author:** [@Hari\_Prasad](https://discuss.elastic.co/u/Hari_Prasad)\
**Replies:** 2\
**Last updated:** [October 11, 2018, 8:04am UTC](https://discuss.elastic.co/t/multiple-instance-of-kibana-displayed-in-monitoring-dashboard-on-same-port/151203 "2018-10-11T08:04:58Z")

</div>

Currently I have deployed the ELK stack with Docker. After making a small change in config I restarted all the docker containers. The Kibana monitoring dashboard is showing 2 instance of Kibana running and that too on s…

---

## [Disabled auto refresh when switch between menu visualization and discover](https://discuss.elastic.co/t/disabled-auto-refresh-when-switch-between-menu-visualization-and-discover/150401)

<div class="topic-metadata">

**Author:** [@whoami](https://discuss.elastic.co/u/whoami)\
**Replies:** 2\
**Last updated:** [October 11, 2018, 6:53am UTC](https://discuss.elastic.co/t/disabled-auto-refresh-when-switch-between-menu-visualization-and-discover/150401 "2018-10-11T06:53:13Z")

</div>

kibana: 6.4.0 can we disable auto refetch when switch between menu visualization and discover? when the data is huge, refech is a time cost action

---

## [When aggregated by terms the value is incorrect](https://discuss.elastic.co/t/when-aggregated-by-terms-the-value-is-incorrect/150379)

<div class="topic-metadata">

**Author:** [@jasmine.liang](https://discuss.elastic.co/u/jasmine.liang)\
**Replies:** 4\
**Last updated:** [October 10, 2018, 6:29pm UTC](https://discuss.elastic.co/t/when-aggregated-by-terms-the-value-is-incorrect/150379 "2018-10-10T18:29:08Z")

</div>

I am trying to create a visualization and found the aggregated value is different when split by terms. The query is like this. { "size": 0, "query": { "query\_string": { "query": "\*" } },…

---

## [Is it possible to use a single kibana for monitoring and production server](https://discuss.elastic.co/t/is-it-possible-to-use-a-single-kibana-for-monitoring-and-production-server/151483)

<div class="topic-metadata">

**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\
**Replies:** 2\
**Last updated:** [October 10, 2018, 3:09pm UTC](https://discuss.elastic.co/t/is-it-possible-to-use-a-single-kibana-for-monitoring-and-production-server/151483 "2018-10-10T15:09:32Z")

</div>

Hi , I have a 5 node elasticsearch cluster (Production). 3 master node and 2 data node . Kibana(Production) is connected to one of the data node. Xpack is enabled in all machines. This setup is working well . Now I am …

---

## [Kibana Visualization Deleted Index](https://discuss.elastic.co/t/kibana-visualization-deleted-index/149513)

<div class="topic-metadata">

**Author:** [@adwaitjoshi](https://discuss.elastic.co/u/adwaitjoshi)\
**Replies:** 3\
**Last updated:** [October 10, 2018, 2:11pm UTC](https://discuss.elastic.co/t/kibana-visualization-deleted-index/149513 "2018-10-10T14:11:55Z")

</div>

I had to delete the elasticsearch index on our system and then recreate it, I thought as long as the index was called the same etc, Kibana Visualizations will keep running. I recreated the index in Kibana and the visuali…

---

## [Free mimikatz defence framework](https://discuss.elastic.co/t/free-mimikatz-defence-framework/151841)

<div class="topic-metadata">

**Author:** [@Andrew\_Vdovin](https://discuss.elastic.co/u/Andrew_Vdovin)\
**Replies:** 0\
**Last updated:** [October 10, 2018, 12:01pm UTC](https://discuss.elastic.co/t/free-mimikatz-defence-framework/151841 "2018-10-10T12:01:29Z")

</div>

Mimikatz Defence Framework is a specialized module to visualize usage of Honey Credentials within enterprise systems. It allows monitoring and detection of attempts of using such dedicated fake credentials in real time -…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=767)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=769)
