# Kibana **URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=777 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 778 --- ## [Run 2 kibana instances with different dashboards](https://discuss.elastic.co/t/run-2-kibana-instances-with-different-dashboards/148619)
**Author:** [@Guy\_Barnea](https://discuss.elastic.co/u/Guy_Barnea)\ **Replies:** 10\ **Last updated:** [September 16, 2018, 10:40am UTC](https://discuss.elastic.co/t/run-2-kibana-instances-with-different-dashboards/148619 "2018-09-16T10:40:42Z")
hello, i want to run 2 instances of kibana, such that each one will point to different es cluster. I want that each kibana will have different dashboards. it is possible to do such a thing? Thanks. --- ## [Painless converts float to integer](https://discuss.elastic.co/t/painless-converts-float-to-integer/148414)
**Author:** [@Jerzy\_Stopa](https://discuss.elastic.co/u/Jerzy_Stopa)\ **Replies:** 2\ **Last updated:** [September 15, 2018, 9:16am UTC](https://discuss.elastic.co/t/painless-converts-float-to-integer/148414 "2018-09-15T09:16:35Z")
I have field 'payload.temperature\[c\]' in one of the indexes. I cannot use it in Timelion due to \[\] therefore I created simple scripted field Temp defined as follows:return doc\['payload.temperature\[c\]'\].value But instea… --- ## [Unable to write index pattern](https://discuss.elastic.co/t/unable-to-write-index-pattern/146167)
**Author:** [@KBuev](https://discuss.elastic.co/u/KBuev)\ **Replies:** 6\ **Last updated:** [September 14, 2018, 4:43pm UTC](https://discuss.elastic.co/t/unable-to-write-index-pattern/146167 "2018-09-14T16:43:45Z")
Hi, all. We've updated our stack to version 6.4.0 and we're now seeing a weird new issue with Kibana's Discover app. Steps to reproduce: Open Discover app, open any index (the document count doesn't seem to matter). S… --- ## [Sum all first documents](https://discuss.elastic.co/t/sum-all-first-documents/148451)
**Author:** [@JPelastic](https://discuss.elastic.co/u/JPelastic)\ **Replies:** 2\ **Last updated:** [September 14, 2018, 4:39pm UTC](https://discuss.elastic.co/t/sum-all-first-documents/148451 "2018-09-14T16:39:50Z")
My documents are like this: { "InvoiceNumber" : "12545587", "ArticleNumber" : "45521212", "LineTotal" : 145.00, "InvoiceTotal" : 3200.00 } Each document used to be an invoice line (article is unique pe… --- ## [Using search output to drive a new search](https://discuss.elastic.co/t/using-search-output-to-drive-a-new-search/148441)
**Author:** [@DunkB](https://discuss.elastic.co/u/DunkB)\ **Replies:** 2\ **Last updated:** [September 14, 2018, 2:29pm UTC](https://discuss.elastic.co/t/using-search-output-to-drive-a-new-search/148441 "2018-09-14T14:29:05Z")
Hi All, Not sure if this belongs in Kibana or Elastic but here goes. I've got some log data (openldap) in elasticsearch but as single lines, so the connect IP is on a different line from the bind command is on a differ… --- ## [Vega & response filtering (filter\_path)](https://discuss.elastic.co/t/vega-response-filtering-filter-path/148101)
**Author:** [@Daire\_Byrne](https://discuss.elastic.co/u/Daire_Byrne)\ **Replies:** 5\ **Last updated:** [September 14, 2018, 1:46pm UTC](https://discuss.elastic.co/t/vega-response-filtering-filter-path/148101 "2018-09-14T13:46:37Z")
Hi, I've been playing with Vega (love it!) and I have a use case that is generating a lot of unnecessary data that is slowing kibana/vega to a crawl. It's because I am doing a pipeline aggregation of an aggregation... I… --- ## [Vega timeline visualisation](https://discuss.elastic.co/t/vega-timeline-visualisation/148087)
**Author:** [@kumpelblase](https://discuss.elastic.co/u/kumpelblase)\ **Replies:** 5\ **Last updated:** [September 14, 2018, 12:44pm UTC](https://discuss.elastic.co/t/vega-timeline-visualisation/148087 "2018-09-14T12:44:52Z")
Hey there I'm trying to create a time-visualsation with Vega-Lite. I have an index called 460 with the field "CreationDate" as timestamp and a field "AssignedWorker" as a number. Now I want a simple chart with the "Crea… --- ## [Change the kibana loading logo under circle for kibana 6.3.2](https://discuss.elastic.co/t/change-the-kibana-loading-logo-under-circle-for-kibana-6-3-2/146804)
**Author:** [@khalidakhter91](https://discuss.elastic.co/u/khalidakhter91)\ **Replies:** 2\ **Last updated:** [September 14, 2018, 12:28pm UTC](https://discuss.elastic.co/t/change-the-kibana-loading-logo-under-circle-for-kibana-6-3-2/146804 "2018-09-14T12:28:46Z")
It would be great if i can change the kibana loading logo inside circle... and text too 'kibana loading' --- ## [How to delete multiple documents from your index](https://discuss.elastic.co/t/how-to-delete-multiple-documents-from-your-index/148444)
**Author:** [@martb](https://discuss.elastic.co/u/martb)\ **Replies:** 2\ **Last updated:** [September 14, 2018, 9:48am UTC](https://discuss.elastic.co/t/how-to-delete-multiple-documents-from-your-index/148444 "2018-09-14T09:48:49Z")
Hi, Using the example below how do I delete all documents within an index that match the actype field i.e all REF-3? { "\_index": "index-names-2018.08.27", "\_type": "doc", "\_id": "XOod0mUBf6rT7tCrMDeP", "\_version": … --- ## [Scripted field with count value](https://discuss.elastic.co/t/scripted-field-with-count-value/148578)
**Author:** [@Miguel\_Angel\_Chuecos](https://discuss.elastic.co/u/Miguel_Angel_Chuecos)\ **Replies:** 2\ **Last updated:** [September 14, 2018, 8:20am UTC](https://discuss.elastic.co/t/scripted-field-with-count-value/148578 "2018-09-14T08:20:54Z")
I need to do a list visualization in Kibana that use a count metric. It allows me to know if any record has a value that is repeated. The problem is that I can not use that metric because it is not a field but I want t… --- ## [How to Join 2 fields?](https://discuss.elastic.co/t/how-to-join-2-fields/147802)
**Author:** [@Rahmat\_Agung\_W](https://discuss.elastic.co/u/Rahmat_Agung_W)\ **Replies:** 3\ **Last updated:** [September 14, 2018, 4:24am UTC](https://discuss.elastic.co/t/how-to-join-2-fields/147802 "2018-09-14T04:24:19Z")
So..lets say i want to see how many IP xxx.xxx.xxx.xxx attacks my server. And in that table also included the reputation of the IP. How i could do that in one table? So.. the table will look like this: | IP Address | … --- ## [Filter in kibana](https://discuss.elastic.co/t/filter-in-kibana/148282)
**Author:** [@Goz](https://discuss.elastic.co/u/Goz)\ **Replies:** 1\ **Last updated:** [September 14, 2018, 2:45am UTC](https://discuss.elastic.co/t/filter-in-kibana/148282 "2018-09-14T02:45:29Z")
hello, I want to get the selected filter based on a single element in kibana to create pie visualized Browser. Example : I want make this: select state : 0, state : 1, state : 2 from myTable were host\_name = "SID"; S… --- ## [Kibana Vega Lite Tooltips](https://discuss.elastic.co/t/kibana-vega-lite-tooltips/148266)
**Author:** [@pgianf](https://discuss.elastic.co/u/pgianf)\ **Replies:** 1\ **Last updated:** [September 14, 2018, 2:43am UTC](https://discuss.elastic.co/t/kibana-vega-lite-tooltips/148266 "2018-09-14T02:43:10Z")
Hi someone knows why tooltips, that appear using Vega-editor (see picture) , dont appear using Kibana editor for Vega? is there any mistake in my graph specification or is it a known limitation and there are plans to … --- ## [Multiple kibana instances](https://discuss.elastic.co/t/multiple-kibana-instances/148332)
**Author:** [@rkparkar](https://discuss.elastic.co/u/rkparkar)\ **Replies:** 2\ **Last updated:** [September 13, 2018, 7:43pm UTC](https://discuss.elastic.co/t/multiple-kibana-instances/148332 "2018-09-13T19:43:45Z")
Hi, I will be having 4 nodes for ES and 2 for Kibana (version 6.x). kibana will be installed on the same nodes as that of ES (any 2 out of 4). I understand that we cannot provide a list of ES urls in kibana . So, shou… --- ## [Remove duplications in Kibana dashboard](https://discuss.elastic.co/t/remove-duplications-in-kibana-dashboard/148491)
**Author:** [@elkNewbie1](https://discuss.elastic.co/u/elkNewbie1)\ **Replies:** 2\ **Last updated:** [September 13, 2018, 6:51pm UTC](https://discuss.elastic.co/t/remove-duplications-in-kibana-dashboard/148491 "2018-09-13T18:51:14Z")
Currently using two separate index patterns (logstash-\* and filebeat-\*), with separate dashboards. The live logs go to a local machine that is then read through filebeat and sent to elasticsearch which sends to kibana. E… --- ## [Lucene to Kuery](https://discuss.elastic.co/t/lucene-to-kuery/148457)
**Author:** [@herve](https://discuss.elastic.co/u/herve)\ **Replies:** 6\ **Last updated:** [September 13, 2018, 6:42pm UTC](https://discuss.elastic.co/t/lucene-to-kuery/148457 "2018-09-13T18:42:25Z")
Hi, I'm trying the Kuery language in Kibana 6.3.1 but there's a few things I wasn't able to achieve. I can't find a way to query data with a space and a wildcard, like this lucene query: nginx.access.user\_agent.os:Mac… --- ## [Building Graph Relationships Between Documents](https://discuss.elastic.co/t/building-graph-relationships-between-documents/148452)
**Author:** [@Andrew\_Stroz](https://discuss.elastic.co/u/Andrew_Stroz)\ **Replies:** 9\ **Last updated:** [September 13, 2018, 4:33pm UTC](https://discuss.elastic.co/t/building-graph-relationships-between-documents/148452 "2018-09-13T16:33:48Z")
I have a index that contains a field with the text contents of .docx, .pptx and .pdf documents. I have another index that holds documents that have a field with a string of characters representing a piece of equipment. … --- ## [Cannot connect to the Elasticsearch cluster currently configured for Kibana after the upgrade to 6.4](https://discuss.elastic.co/t/cannot-connect-to-the-elasticsearch-cluster-currently-configured-for-kibana-after-the-upgrade-to-6-4/148459)
**Author:** [@RFeidi](https://discuss.elastic.co/u/RFeidi)\ **Replies:** 2\ **Last updated:** [September 13, 2018, 4:15pm UTC](https://discuss.elastic.co/t/cannot-connect-to-the-elasticsearch-cluster-currently-configured-for-kibana-after-the-upgrade-to-6-4/148459 "2018-09-13T16:15:50Z")
Hi Elastic Team, I did an upgrade of the Elastic cluster from the 6.3.2 to the 6.4, and then I cannot connect to the Elasticsearch cluster currently configured for Kibana. When I check the kibana logs , message error i… --- ## [Send html email using watcher](https://discuss.elastic.co/t/send-html-email-using-watcher/148296)
**Author:** [@mdavi](https://discuss.elastic.co/u/mdavi)\ **Replies:** 2\ **Last updated:** [September 13, 2018, 4:08pm UTC](https://discuss.elastic.co/t/send-html-email-using-watcher/148296 "2018-09-13T16:08:56Z")
Dears all, I'm using logstash + elasticsearch + kibana to monitor my logfiles. I'm trying to send html- email using a watcher but I receive always the plain text. Here below the configuration of my action: "actions":… --- ## [Default Kibana User and uberAgent](https://discuss.elastic.co/t/default-kibana-user-and-uberagent/147417)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 10\ **Last updated:** [September 13, 2018, 3:59pm UTC](https://discuss.elastic.co/t/default-kibana-user-and-uberagent/147417 "2018-09-13T15:59:32Z")
Running 6.3.2 Just installed uberAgent on all Elasticsearch nodes xpack is OFF (xpack.security.enabled: false) so we are currently using the default Kibana user role Just trying to double check our understanding of a … --- ## [Use kibana connected to elasticsearch through a proxy](https://discuss.elastic.co/t/use-kibana-connected-to-elasticsearch-through-a-proxy/148429)
**Author:** [@Remi\_ROSENTHAL](https://discuss.elastic.co/u/Remi_ROSENTHAL)\ **Replies:** 1\ **Last updated:** [September 13, 2018, 3:57pm UTC](https://discuss.elastic.co/t/use-kibana-connected-to-elasticsearch-through-a-proxy/148429 "2018-09-13T15:57:02Z")
Hi, I'm new to elasticsearch and kibana. I connect to elasticsearch using a socket proxy: curl --proxy socks5h://localhost:8001 \ I tried to set HTTP\_PROXY environment variable to socks5h://localhost:8… --- ## [Scripted Field matching two values with AND statement](https://discuss.elastic.co/t/scripted-field-matching-two-values-with-and-statement/148215)
**Author:** [@bkelley](https://discuss.elastic.co/u/bkelley)\ **Replies:** 3\ **Last updated:** [September 13, 2018, 1:24pm UTC](https://discuss.elastic.co/t/scripted-field-matching-two-values-with-and-statement/148215 "2018-09-13T13:24:20Z")
Hi - I'm trying to create a scripted field in Kibana that checks the value of two fields then returns 0 or 1 depending on whether they match the values shown below. My script is: if (doc\['counter.name'\].value == '% it… --- ## [Too many lines in Line Chart](https://discuss.elastic.co/t/too-many-lines-in-line-chart/147726)
**Author:** [@atom](https://discuss.elastic.co/u/atom)\ **Replies:** 2\ **Last updated:** [September 13, 2018, 9:31am UTC](https://discuss.elastic.co/t/too-many-lines-in-line-chart/147726 "2018-09-13T09:31:13Z")
Hi There, i have crated a line chart visualization. In this visualization i use date histogram for x axis and count of a value for y axis. The visualization is ok but i have too many different counts. Kibana is showing… --- ## [Kibana-5.6.10 username and password](https://discuss.elastic.co/t/kibana-5-6-10-username-and-password/147900)
**Author:** [@Bleyc](https://discuss.elastic.co/u/Bleyc)\ **Replies:** 2\ **Last updated:** [September 13, 2018, 8:38am UTC](https://discuss.elastic.co/t/kibana-5-6-10-username-and-password/147900 "2018-09-13T08:38:15Z")
good afternooon folks, i have a running installation of Kibana-5.6.10, i want to protect the UI with username and password access. however i can't find the configuration in the kibana.yml file. another question...is it… --- ## [Creating index pattern loading does not finish in kibana](https://discuss.elastic.co/t/creating-index-pattern-loading-does-not-finish-in-kibana/148070)
**Author:** [@wonki](https://discuss.elastic.co/u/wonki)\ **Replies:** 2\ **Last updated:** [September 13, 2018, 5:02am UTC](https://discuss.elastic.co/t/creating-index-pattern-loading-does-not-finish-in-kibana/148070 "2018-09-13T05:02:47Z")
Hi ! I succeed in create index using filebeat, logstash, elasticsearch and i can see this index in kibana well. But when i create index pattern in kibana, the loading is not finished. Why is this happened? Can you help… --- ## [Track Kibana Dashboard Usage](https://discuss.elastic.co/t/track-kibana-dashboard-usage/148380)
**Author:** [@dyse101](https://discuss.elastic.co/u/dyse101)\ **Replies:** 0\ **Last updated:** [September 12, 2018, 8:41pm UTC](https://discuss.elastic.co/t/track-kibana-dashboard-usage/148380 "2018-09-12T20:41:12Z")
Is there a way to track Kibana dashboard usage (i.e. number of times a particular user opens a dashboard)? We have a subscription including X-Pack and we recently integrated SSO authentication to our cluster. As I am r… --- ## [Kibana SAML implementation issues](https://discuss.elastic.co/t/kibana-saml-implementation-issues/147256)
**Author:** [@Constantine\_Abayeu](https://discuss.elastic.co/u/Constantine_Abayeu)\ **Replies:** 9\ **Last updated:** [September 12, 2018, 3:57pm UTC](https://discuss.elastic.co/t/kibana-saml-implementation-issues/147256 "2018-09-12T15:57:29Z")
Hello, We are having some issues configuring SAML on our elastic 6.4 cluster I am getting the following error, when trying to get to kibana at a given port: \[2018-09-04T13:41:42,003\]\[WARN \]\[r.suppressed \] … --- ## [Indices older than 4 weeks are missing](https://discuss.elastic.co/t/indices-older-than-4-weeks-are-missing/147979)
**Author:** [@johnjhoy](https://discuss.elastic.co/u/johnjhoy)\ **Replies:** 2\ **Last updated:** [September 12, 2018, 2:44pm UTC](https://discuss.elastic.co/t/indices-older-than-4-weeks-are-missing/147979 "2018-09-12T14:44:27Z")
I have a VM running ELK 5.5.2. The VM was deployed based off ELK Certified by Bitnami image in Azure with mostly default settings and no pluggins. It is configured with 1 cluster and 1 node. Recently I noticed that all i… --- ## [Documentation for Kibana REST API](https://discuss.elastic.co/t/documentation-for-kibana-rest-api/147740)
**Author:** [@Ken\_Leoni](https://discuss.elastic.co/u/Ken_Leoni)\ **Replies:** 5\ **Last updated:** [September 12, 2018, 12:48pm UTC](https://discuss.elastic.co/t/documentation-for-kibana-rest-api/147740 "2018-09-12T12:48:59Z")
I attended ElasticOn Boston and was told that there is documentation online for the REST API to export / import Kibana visualizations and dashboards. I can't for the life of me find it. Any assistance would be greatly a… --- ## [Removing the "$" sign from event\_data.TargetUserName](https://discuss.elastic.co/t/removing-the-sign-from-event-data-targetusername/147430)
**Author:** [@Tarek\_Bensoltane](https://discuss.elastic.co/u/Tarek_Bensoltane)\ **Replies:** 7\ **Last updated:** [September 12, 2018, 10:04am UTC](https://discuss.elastic.co/t/removing-the-sign-from-event-data-targetusername/147430 "2018-09-12T10:04:59Z")
Dear All, I am trying to remove the dollar sign "$" from the event\_data.TargetUserName found in the windows event viewer using Winlogbeat. I have found an answer this article in this forum: Which shows: { "query": {… [Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=776) [Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=778)