# Kibana **URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=830 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 831 --- ## [Nested query in Kibana](https://discuss.elastic.co/t/nested-query-in-kibana/131125)
**Author:** [@Invictus](https://discuss.elastic.co/u/Invictus)\ **Replies:** 3\ **Last updated:** [May 14, 2018, 12:15pm UTC](https://discuss.elastic.co/t/nested-query-in-kibana/131125 "2018-05-14T12:15:14Z")
Hi members, I have a problem concerning an visualization. dockerelk\_elasticsearch-master\_2 dockerelk\_kibana\_1 dockerelk\_elasticsearch-master\_1 elasticsearch-coordinating dockerelk\_metricbeat\_1 dockerelk\_elasticsea… --- ## [How to find kibana's full id?](https://discuss.elastic.co/t/how-to-find-kibanas-full-id/131610)
**Author:** [@yishain11](https://discuss.elastic.co/u/yishain11)\ **Replies:** 4\ **Last updated:** [May 14, 2018, 11:41am UTC](https://discuss.elastic.co/t/how-to-find-kibanas-full-id/131610 "2018-05-14T11:41:25Z")
When I do \_cat/indices I see index id like this: QWsT5b6YR92v-1UIxJHJrw. When I open a saved object in the same kibana index, I see different id: e5234d00-123b-11e8-ac70-55d54df89f62 Why the id's aren't the same? If … --- ## [Importing visualizations from different machine](https://discuss.elastic.co/t/importing-visualizations-from-different-machine/131617)
**Author:** [@yishain11](https://discuss.elastic.co/u/yishain11)\ **Replies:** 3\ **Last updated:** [May 14, 2018, 11:16am UTC](https://discuss.elastic.co/t/importing-visualizations-from-different-machine/131617 "2018-05-14T11:16:54Z")
Hi, I use kibana and elastic (6) like so: I have remote centos 7 machine that hosts kibana and elastic, and I access kibana via my broser on another machine. The thing is I Imported some searches, visualizations and a… --- ## [Mark and Import Selected Logs](https://discuss.elastic.co/t/mark-and-import-selected-logs/131725)
**Author:** [@saramali](https://discuss.elastic.co/u/saramali)\ **Replies:** 3\ **Last updated:** [May 14, 2018, 11:16am UTC](https://discuss.elastic.co/t/mark-and-import-selected-logs/131725 "2018-05-14T11:16:02Z")
Is there any plugin in Kibana which will help me to mark/selected the logs and import them. This feature will be helpful in troubleshooting and sending logs to service desk. --- ## [Kibana & web server](https://discuss.elastic.co/t/kibana-web-server/131716)
**Author:** [@Florent\_Fauvin](https://discuss.elastic.co/u/Florent_Fauvin)\ **Replies:** 2\ **Last updated:** [May 14, 2018, 10:30am UTC](https://discuss.elastic.co/t/kibana-web-server/131716 "2018-05-14T10:30:23Z")
Hello ! I would like to understand which technology implements the kibana web server. Does Kibana lie on an apache or nginx layer ? Or an other technology ? Thank you to help me to understand that, Have a good day, F… --- ## [CSV Export not available](https://discuss.elastic.co/t/csv-export-not-available/131693)
**Author:** [@8c94400b6593539aa485](https://discuss.elastic.co/u/8c94400b6593539aa485)\ **Replies:** 3\ **Last updated:** [May 14, 2018, 10:27am UTC](https://discuss.elastic.co/t/csv-export-not-available/131693 "2018-05-14T10:27:56Z")
Hi , On Kibana's Discover page I can only get Generate Printable PDF , I wish to get only CSV , How can I achieve that ? Thank you Avi. \[image\] --- ## [Can't split series on visualization](https://discuss.elastic.co/t/cant-split-series-on-visualization/130725)
**Author:** [@hio77](https://discuss.elastic.co/u/hio77)\ **Replies:** 3\ **Last updated:** [May 14, 2018, 9:44am UTC](https://discuss.elastic.co/t/cant-split-series-on-visualization/130725 "2018-05-14T09:44:26Z")
Hey, bit of a weird one here. all my visualizations that do a split series aggregation seem to have stopped working. this happened about the same time that i had to rebuild my main node, so i suspected it was corrupted… --- ## [Kibana filter regex 'string starts with' doesn't work](https://discuss.elastic.co/t/kibana-filter-regex-string-starts-with-doesnt-work/131131)
**Author:** [@MichaelDz](https://discuss.elastic.co/u/MichaelDz)\ **Replies:** 13\ **Last updated:** [May 14, 2018, 8:53am UTC](https://discuss.elastic.co/t/kibana-filter-regex-string-starts-with-doesnt-work/131131 "2018-05-14T08:53:39Z")
In Kibana chart I want to filter 'url' field that starts with string CANCELLED so I wrote a regex: ^CANCELLED.\* but when I use filter in Discover tab then I notice that filter doesn't work properly because it also accept… --- ## [First time installing Kibana facing issue](https://discuss.elastic.co/t/first-time-installing-kibana-facing-issue/131252)
**Author:** [@Poodle](https://discuss.elastic.co/u/Poodle)\ **Replies:** 10\ **Last updated:** [May 14, 2018, 7:28am UTC](https://discuss.elastic.co/t/first-time-installing-kibana-facing-issue/131252 "2018-05-14T07:28:10Z")
This is my first time installing Kibana on Ubuntu server OS using apt-get and I am facing a problem, can anyone provide guidance? I am not able to see Kibana from another device browser using http://IP:5601 When I try … --- ## [Create a new metric aggregation in Kibana](https://discuss.elastic.co/t/create-a-new-metric-aggregation-in-kibana/131667)
**Author:** [@devika\_sudheer](https://discuss.elastic.co/u/devika_sudheer)\ **Replies:** 1\ **Last updated:** [May 14, 2018, 7:15am UTC](https://discuss.elastic.co/t/create-a-new-metric-aggregation-in-kibana/131667 "2018-05-14T07:15:34Z")
Hi, I have a data consisting of timestamps and value at each timestamp. The values are both negative and positive. I want to create a line visualization in Kibana with x-axis timestamps and y-axis value with maximum dev… --- ## [Permission denied while running Kibana 6.2.4 on UBUNTU (SOLVED)](https://discuss.elastic.co/t/permission-denied-while-running-kibana-6-2-4-on-ubuntu-solved/130950)
**Author:** [@saramali](https://discuss.elastic.co/u/saramali)\ **Replies:** 2\ **Last updated:** [May 14, 2018, 5:34am UTC](https://discuss.elastic.co/t/permission-denied-while-running-kibana-6-2-4-on-ubuntu-solved/130950 "2018-05-14T05:34:52Z")
I downloaded Kibana for linux 65-BIT and extract in the desired directory, when running kibana it gives me "Permission denied" I also have tried running it from the root but still no use. --- ## [Create URL scripted field to view surrounding documents (SOLVED)](https://discuss.elastic.co/t/create-url-scripted-field-to-view-surrounding-documents-solved/131396)
**Author:** [@saramali](https://discuss.elastic.co/u/saramali)\ **Replies:** 2\ **Last updated:** [May 14, 2018, 5:22am UTC](https://discuss.elastic.co/t/create-url-scripted-field-to-view-surrounding-documents-solved/131396 "2018-05-14T05:22:37Z")
I'm trying to create a scripted field which is will be a URL to view the surrounding documents of the log. I've found that if I give the document id of the log. In the view surrounding logs link it brings the surroundin… --- ## [How to get visualization response data](https://discuss.elastic.co/t/how-to-get-visualization-response-data/131401)
**Author:** [@cherubic](https://discuss.elastic.co/u/cherubic)\ **Replies:** 2\ **Last updated:** [May 14, 2018, 1:52am UTC](https://discuss.elastic.co/t/how-to-get-visualization-response-data/131401 "2018-05-14T01:52:42Z")
Hi, Have some API can get the visualization response json? Or how to get the json of Kibana UI Visualization' Response Tab by code? Thanks. --- ## [Visualizing data from ESA's Gaia mission in Kibana](https://discuss.elastic.co/t/visualizing-data-from-esas-gaia-mission-in-kibana/131616)
**Author:** [@Marcel-Jan](https://discuss.elastic.co/u/Marcel-Jan)\ **Replies:** 1\ **Last updated:** [May 13, 2018, 12:57pm UTC](https://discuss.elastic.co/t/visualizing-data-from-esas-gaia-mission-in-kibana/131616 "2018-05-13T12:57:29Z")
So recently I've been trying to get astronomical data in Elasticsearch with Logstash to visualize it with Kibnana. I've asked some questions here before to get it done. And I'm happy to say I got it working. I promissed … --- ## [Filebeast working, Elastic Working, but data not in Kibana](https://discuss.elastic.co/t/filebeast-working-elastic-working-but-data-not-in-kibana/131465)
**Author:** [@necrolingus](https://discuss.elastic.co/u/necrolingus)\ **Replies:** 4\ **Last updated:** [May 13, 2018, 7:50am UTC](https://discuss.elastic.co/t/filebeast-working-elastic-working-but-data-not-in-kibana/131465 "2018-05-13T07:50:17Z")
Hi guys I hope you can help me out as I've been banging my head against this for the past few hours now. I installed the following: filebeat version 6.2.4 (amd64), libbeat 6.2.4 elasticsearch-6.2.4.msi kibana-6.2.4-… --- ## [Find what instance elasticsearch kibana is connected to](https://discuss.elastic.co/t/find-what-instance-elasticsearch-kibana-is-connected-to/131272)
**Author:** [@yishain11](https://discuss.elastic.co/u/yishain11)\ **Replies:** 2\ **Last updated:** [May 13, 2018, 7:46am UTC](https://discuss.elastic.co/t/find-what-instance-elasticsearch-kibana-is-connected-to/131272 "2018-05-13T07:46:40Z")
Just a quick question: Is there a way to find out to what instance of elasticsearch kibana is listening to? I mean other than checking the kibana.yml file. Is there a way, for example, to see this from kibana terminal? O… --- ## [Increase the zoom for coordinate map](https://discuss.elastic.co/t/increase-the-zoom-for-coordinate-map/131283)
**Author:** [@akml\_kk](https://discuss.elastic.co/u/akml_kk)\ **Replies:** 3\ **Last updated:** [May 11, 2018, 5:17am UTC](https://discuss.elastic.co/t/increase-the-zoom-for-coordinate-map/131283 "2018-05-11T05:17:15Z")
Hello, i found that the zoom is limited in coordinate map : \[kibana-zoom\] but i found here that in kibana 4 we can increase the maxzoom of the Tile by overriding the tilemap's maxzoom option in kibana.yml : tilemap.… --- ## [Create visualization of top-k relevant documents](https://discuss.elastic.co/t/create-visualization-of-top-k-relevant-documents/131443)
**Author:** [@phrida](https://discuss.elastic.co/u/phrida)\ **Replies:** 2\ **Last updated:** [May 12, 2018, 1:55pm UTC](https://discuss.elastic.co/t/create-visualization-of-top-k-relevant-documents/131443 "2018-05-12T13:55:03Z")
Hi, I would like to create a visualization in Kibana on the top-k relevant documents based on \_score. I am able to retrieve exactly what I want in Discover (See picture). However, I have tried to create something simila… --- ## [Kibana UI user level access for each clients](https://discuss.elastic.co/t/kibana-ui-user-level-access-for-each-clients/131437)
**Author:** [@shyamprakash](https://discuss.elastic.co/u/shyamprakash)\ **Replies:** 1\ **Last updated:** [May 11, 2018, 8:08pm UTC](https://discuss.elastic.co/t/kibana-ui-user-level-access-for-each-clients/131437 "2018-05-11T20:08:18Z")
Hi Team, I have configured ELK (6.0) and Xpack (6.2.4). I am able to view the latest logs in kibana. We have multiple clients and we are parsing all client specific logs to a common ELK. We need to provide kibana Cloud … --- ## [Highlight Template name on dashboard](https://discuss.elastic.co/t/highlight-template-name-on-dashboard/131519)
**Author:** [@Sam12](https://discuss.elastic.co/u/Sam12)\ **Replies:** 2\ **Last updated:** [May 11, 2018, 7:56pm UTC](https://discuss.elastic.co/t/highlight-template-name-on-dashboard/131519 "2018-05-11T19:56:08Z")
Hi Everyone How can we highlight names of visualization template on dashboard. I have designed a kibana dashboard which involves many visualization but the name of the visualization appears to be so small and light colo… --- ## [New user trialling Kibana for SIEM](https://discuss.elastic.co/t/new-user-trialling-kibana-for-siem/131502)
**Author:** [@FT\_Support](https://discuss.elastic.co/u/FT_Support)\ **Replies:** 1\ **Last updated:** [May 11, 2018, 7:31pm UTC](https://discuss.elastic.co/t/new-user-trialling-kibana-for-siem/131502 "2018-05-11T19:31:00Z")
Hi Community, I'm a newbie at all this with ELK and am easily confused by the technical terms used in the videos and the pages of really useful but baffling tutorials. What I have been unable to fathom is how, if at al… --- ## [Grok Debugger and Management Areas missing](https://discuss.elastic.co/t/grok-debugger-and-management-areas-missing/131494)
**Author:** [@t03r1cht](https://discuss.elastic.co/u/t03r1cht)\ **Replies:** 2\ **Last updated:** [May 11, 2018, 6:53pm UTC](https://discuss.elastic.co/t/grok-debugger-and-management-areas-missing/131494 "2018-05-11T18:53:53Z")
I've just installed by basic license, however, the grok debugger and some areas in the Management tab seem to be missing (see screenshot below). Is this a bug or am I missing something? \[Screenshot\_65\]\[Screenshot\_66\] --- ## [Have kibana get input from 2 elasticsearch clusters with same indexes](https://discuss.elastic.co/t/have-kibana-get-input-from-2-elasticsearch-clusters-with-same-indexes/130392)
**Author:** [@Tuckson](https://discuss.elastic.co/u/Tuckson)\ **Replies:** 4\ **Last updated:** [May 11, 2018, 4:00pm UTC](https://discuss.elastic.co/t/have-kibana-get-input-from-2-elasticsearch-clusters-with-same-indexes/130392 "2018-05-11T16:00:03Z")
Hi, After a successful poc, We want to clusterize our elasticsearch and make ik georedundant. The servers we are getting info from are divided over 2 locations. What I would like to achieve is that , just like now, all … --- ## [Added pipeline all fields disappear](https://discuss.elastic.co/t/added-pipeline-all-fields-disappear/131008)
**Author:** [@dalamar666](https://discuss.elastic.co/u/dalamar666)\ **Replies:** 13\ **Last updated:** [May 11, 2018, 2:34pm UTC](https://discuss.elastic.co/t/added-pipeline-all-fields-disappear/131008 "2018-05-11T14:34:59Z")
Hi, I had my kibana working great! I added an index to pull in data from another source and lost all visualizations. When I click on the tabs in the overview dashboard they all say "No results displayed because all va… --- ## [Number Of Occurrences Of A Particular Word in a field](https://discuss.elastic.co/t/number-of-occurrences-of-a-particular-word-in-a-field/129569)
**Author:** [@Michel\_Budimbu-Esuku](https://discuss.elastic.co/u/Michel_Budimbu-Esuku)\ **Replies:** 5\ **Last updated:** [May 11, 2018, 7:32am UTC](https://discuss.elastic.co/t/number-of-occurrences-of-a-particular-word-in-a-field/129569 "2018-05-11T07:32:18Z")
I index my emails in Kibana. And I would like to know the number of times that the word "timeout" appears in "Emailbody" field. { "From":"string", "To" : "string", "Date" "date" "Emailbody": "string" } Thank you i… --- ## [Automatically create visualizations from multiple unique field counts in descending order](https://discuss.elastic.co/t/automatically-create-visualizations-from-multiple-unique-field-counts-in-descending-order/131147)
**Author:** [@sbienert](https://discuss.elastic.co/u/sbienert)\ **Replies:** 2\ **Last updated:** [May 11, 2018, 6:33am UTC](https://discuss.elastic.co/t/automatically-create-visualizations-from-multiple-unique-field-counts-in-descending-order/131147 "2018-05-11T06:33:51Z")
I want to have multiple pie charts in one visualization looking like this: \[Kibana\_multiple\_pie\_charts\] I have logs with many EventIDs which all contain SubIDs. Now I want to create a pie chart for each eventId value … --- ## [Convert string results into failure rates](https://discuss.elastic.co/t/convert-string-results-into-failure-rates/131227)
**Author:** [@Robert\_Cronk](https://discuss.elastic.co/u/Robert_Cronk)\ **Replies:** 3\ **Last updated:** [May 10, 2018, 10:47pm UTC](https://discuss.elastic.co/t/convert-string-results-into-failure-rates/131227 "2018-05-10T22:47:15Z")
I have a string field (data.result) in my documents that can contain "SUCCESS" or "FAILURE". I'm running ~20 tests across ~50 servers and each test on a server has a "SUCCESS" or "FAILURE" result. I want to make a heat… --- ## [Monitor running processes and their current state using a heat map](https://discuss.elastic.co/t/monitor-running-processes-and-their-current-state-using-a-heat-map/131276)
**Author:** [@joakim\_berg](https://discuss.elastic.co/u/joakim_berg)\ **Replies:** 1\ **Last updated:** [May 10, 2018, 9:03pm UTC](https://discuss.elastic.co/t/monitor-running-processes-and-their-current-state-using-a-heat-map/131276 "2018-05-10T21:03:35Z")
Hi, Im using a heat map visualization to show if a a set of specific processes are running and their current state "sleep" or "running". This scales fairly well and I can see if these 4-5 processes are running on 10-20… --- ## [Scripted field containing timestamp less 1 hour](https://discuss.elastic.co/t/scripted-field-containing-timestamp-less-1-hour/131351)
**Author:** [@bkelley](https://discuss.elastic.co/u/bkelley)\ **Replies:** 2\ **Last updated:** [May 10, 2018, 8:22pm UTC](https://discuss.elastic.co/t/scripted-field-containing-timestamp-less-1-hour/131351 "2018-05-10T20:22:53Z")
Hello - I would like to create a scripted field that takes my existing timestamp field and subtracts 1 hour. What I have is: timestamp\_OMi Language: painless Type: date Format: Date Script: doc\['@timestamp'\].value… --- ## [Kibana Timelion: how to query a specific value expression with space](https://discuss.elastic.co/t/kibana-timelion-how-to-query-a-specific-value-expression-with-space/131327)
**Author:** [@narschang](https://discuss.elastic.co/u/narschang)\ **Replies:** 5\ **Last updated:** [May 10, 2018, 7:47pm UTC](https://discuss.elastic.co/t/kibana-timelion-how-to-query-a-specific-value-expression-with-space/131327 "2018-05-10T19:47:35Z")
Hello, I am on Kibana 6.2.4 and I couldn't get the following Timelion visualization working right. .es(index="bug\_elk\_prod", timefield="open\_date", q="(found\_in\_rv: 'AGM 9.0') AND (target\_rv:PARENT)").label("Found in A… [Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=829) [Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=831)