# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=832

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 833

---

## [Kibana chat always get gap](https://discuss.elastic.co/t/kibana-chat-always-get-gap/130770)

<div class="topic-metadata">

**Author:** [@jerrychen](https://discuss.elastic.co/u/jerrychen)\
**Replies:** 2\
**Last updated:** [May 8, 2018, 11:05am UTC](https://discuss.elastic.co/t/kibana-chat-always-get-gap/130770 "2018-05-08T11:05:26Z")

</div>

The chat always get gap about per 20 minutes. But i can discover the doc on the gap point. why did this happen? \[2018-05-04%2013\_07\_19-Kafka%20Performance%20Dashboard%20-%20Kibana\] \[2018-05-04%2013\_06\_36-Discover%20-%…

---

## [Export to CSV fails with 'index\_closed\_exception'](https://discuss.elastic.co/t/export-to-csv-fails-with-index-closed-exception/130840)

<div class="topic-metadata">

**Author:** [@rgr78](https://discuss.elastic.co/u/rgr78)\
**Replies:** 2\
**Last updated:** [May 8, 2018, 10:56am UTC](https://discuss.elastic.co/t/export-to-csv-fails-with-index-closed-exception/130840 "2018-05-08T10:56:59Z")

</div>

Hello. I am unable to export a CSV from an index pattern, Kibana reports the exception 'index\_closed\_exception'. Some of the indices are indeed closed. Everything else in Kibana works fine with this index pattern. I be…

---

## [PAcketbeat Flow wih CIDR search on Kibana](https://discuss.elastic.co/t/packetbeat-flow-wih-cidr-search-on-kibana/130760)

<div class="topic-metadata">

**Author:** [@Tzathenah\_Peaneah\_Ha](https://discuss.elastic.co/u/Tzathenah_Peaneah_Ha)\
**Replies:** 18\
**Last updated:** [May 8, 2018, 10:11am UTC](https://discuss.elastic.co/t/packetbeat-flow-wih-cidr-search-on-kibana/130760 "2018-05-08T10:11:12Z")

</div>

Hi i have a packetbeat flow index with dest.ip :x.x.x.x which is working fine. What i need to do now is if it is possible to search based on CIDR notation instead of individual ips . Like if i want to find how much byte…

---

## [/elasticsearch-6.4.0-SNAPSHOT.tar.gz failed, reason: connect ECONNREFUSED](https://discuss.elastic.co/t/elasticsearch-6-4-0-snapshot-tar-gz-failed-reason-connect-econnrefused/130815)

<div class="topic-metadata">

**Author:** [@TheAnonymousModeIT](https://discuss.elastic.co/u/TheAnonymousModeIT)\
**Replies:** 2\
**Last updated:** [May 8, 2018, 7:17am UTC](https://discuss.elastic.co/t/elasticsearch-6-4-0-snapshot-tar-gz-failed-reason-connect-econnrefused/130815 "2018-05-08T07:17:52Z")

</div>

Hi, if I start yarn es snapshot I get an error message: /elasticsearch-6.4.0-SNAPSHOT.tar.gz failed, reason: connect ECONNREFUSED I checkted the proxy settings and did everything like described in the manual. But I can…

---

## [Specify timezone](https://discuss.elastic.co/t/specify-timezone/130579)

<div class="topic-metadata">

**Author:** [@krsna](https://discuss.elastic.co/u/krsna)\
**Replies:** 2\
**Last updated:** [May 8, 2018, 8:42am UTC](https://discuss.elastic.co/t/specify-timezone/130579 "2018-05-08T08:42:41Z")

</div>

Hi, I'm using Kibana Dev tools console to enter some data into an index. When I enter a time it stores in elasticsearch as UTC but Kibana displays it in the local time zone (which in my case is Amsterdam time). Is there…

---

## [Is it possible to setup the same Color for aggregated log files?](https://discuss.elastic.co/t/is-it-possible-to-setup-the-same-color-for-aggregated-log-files/130591)

<div class="topic-metadata">

**Author:** [@dmccuk](https://discuss.elastic.co/u/dmccuk)\
**Replies:** 2\
**Last updated:** [May 8, 2018, 7:35am UTC](https://discuss.elastic.co/t/is-it-possible-to-setup-the-same-color-for-aggregated-log-files/130591 "2018-05-08T07:35:15Z")

</div>

Hi, I'm attempting to setup some visualizations in Kibana based on some data I'm collecting. I have a working Visualization showing me the right information but in order to make the visualization work in a more continuo…

---

## [Comparing date/time from two different documents](https://discuss.elastic.co/t/comparing-date-time-from-two-different-documents/130933)

<div class="topic-metadata">

**Author:** [@uhaslund](https://discuss.elastic.co/u/uhaslund)\
**Replies:** 8\
**Last updated:** [May 8, 2018, 7:02am UTC](https://discuss.elastic.co/t/comparing-date-time-from-two-different-documents/130933 "2018-05-08T07:02:52Z")

</div>

Hi, The scenario is this: Same index Two different documents A and B Document A contains a log entry for event "Client Requests X" Document B contains a log entry for event "Client Request Accepted" How do I calculat…

---

## [How ot show percentage scale on Y-Axis](https://discuss.elastic.co/t/how-ot-show-percentage-scale-on-y-axis/130917)

<div class="topic-metadata">

**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Replies:** 1\
**Last updated:** [May 8, 2018, 1:33am UTC](https://discuss.elastic.co/t/how-ot-show-percentage-scale-on-y-axis/130917 "2018-05-08T01:33:30Z")

</div>

Hi, I am trying to create time-series graphs in Kibana 6.2. I am not able to make Y-axis showing percentage. It always give a option for number. There is on field percentCpu utiliziation which is nothing but the integ…

---

## [Kibana regex](https://discuss.elastic.co/t/kibana-regex/130174)

<div class="topic-metadata">

**Author:** [@tarosuzuki](https://discuss.elastic.co/u/tarosuzuki)\
**Replies:** 2\
**Last updated:** [May 8, 2018, 12:03am UTC](https://discuss.elastic.co/t/kibana-regex/130174 "2018-05-08T00:03:44Z")

</div>

Hello, I would like to get the data with Android version. ua: shows like this Mozilla/5.0 (Linux; Android 7.0; HUAWEI CAN-L12 Build/HUAWEICAN-L12; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/65.0.332…

---

## [Https://discuss.elastic.co/t/config-error-403-forbidden-blocked-by-forbidden-12-index-read-only-allow-delete-api-cluster-block-exception-blocked-by-forbidden-12-index-read-only-allow-delete-api/113361](https://discuss.elastic.co/t/https-discuss-elastic-co-t-config-error-403-forbidden-blocked-by-forbidden-12-index-read-only-allow-delete-api-cluster-block-exception-blocked-by-forbidden-12-index-read-only-allow-delete-api-113361/130296)

<div class="topic-metadata">

**Author:** [@rouchad\_rouchad](https://discuss.elastic.co/u/rouchad_rouchad)\
**Replies:** 7\
**Last updated:** [May 7, 2018, 7:17pm UTC](https://discuss.elastic.co/t/https-discuss-elastic-co-t-config-error-403-forbidden-blocked-by-forbidden-12-index-read-only-allow-delete-api-cluster-block-exception-blocked-by-forbidden-12-index-read-only-allow-delete-api-113361/130296 "2018-05-07T19:17:03Z")

</div>

hello everybody ! please i need your help !! the index got put into a read only state for some other reason, i reverse this by : curl -XPUT -H "Content-Type: application/json" http://localhost:9200/.monitoring-\*/\_setti…

---

## [Sum Aggrgation Column Change](https://discuss.elastic.co/t/sum-aggrgation-column-change/130887)

<div class="topic-metadata">

**Author:** [@sandeeps](https://discuss.elastic.co/u/sandeeps)\
**Replies:** 2\
**Last updated:** [May 7, 2018, 6:28pm UTC](https://discuss.elastic.co/t/sum-aggrgation-column-change/130887 "2018-05-07T18:28:05Z")

</div>

I have a kibana data table visualization where i have metrics sum aggregation for each Buckets as shown in the screenshot. I would like to change the column names "cost" and add custom column name like "Domain Cost", "Mo…

---

## [Kibana not able to filter beat.hostname after certain day](https://discuss.elastic.co/t/kibana-not-able-to-filter-beat-hostname-after-certain-day/129325)

<div class="topic-metadata">

**Author:** [@kko](https://discuss.elastic.co/u/kko)\
**Replies:** 7\
**Last updated:** [May 7, 2018, 6:07pm UTC](https://discuss.elastic.co/t/kibana-not-able-to-filter-beat-hostname-after-certain-day/129325 "2018-05-07T18:07:56Z")

</div>

Hi, I encountered a problem with Kibana. I have a series of indices in Elasticsearch created from metricbeat. In Kibana I created an index pattern for the series of indices. I am able to create a Timelion with .es(metri…

---

## [Vega Error](https://discuss.elastic.co/t/vega-error/130538)

<div class="topic-metadata">

**Author:** [@jspeer](https://discuss.elastic.co/u/jspeer)\
**Replies:** 4\
**Last updated:** [May 7, 2018, 5:58pm UTC](https://discuss.elastic.co/t/vega-error/130538 "2018-05-07T17:58:36Z")

</div>

I'm trying to create a vega visual, but receiving 'invalid field type "undefined"' The 2 fields are strings, and the @timestamp a a date field. I've also tried it without converting the @timestamp to a date, and passing…

---

## [How to do a case\_sensitive search in Kibana](https://discuss.elastic.co/t/how-to-do-a-case-sensitive-search-in-kibana/130876)

<div class="topic-metadata">

**Author:** [@cchooks2](https://discuss.elastic.co/u/cchooks2)\
**Replies:** 1\
**Last updated:** [May 7, 2018, 5:07pm UTC](https://discuss.elastic.co/t/how-to-do-a-case-sensitive-search-in-kibana/130876 "2018-05-07T17:07:25Z")

</div>

Hello, I have the following fields trytime2018 & TRYTIME2018 that show up in one of my access logs. I want to search ONLY for TRYTIME2018 ... I have tried to use the query "TRYTIME2018" as well as message:"TRYTIME2018",…

---

## [Export field format](https://discuss.elastic.co/t/export-field-format/130866)

<div class="topic-metadata">

**Author:** [@kora](https://discuss.elastic.co/u/kora)\
**Replies:** 3\
**Last updated:** [May 7, 2018, 4:25pm UTC](https://discuss.elastic.co/t/export-field-format/130866 "2018-05-07T16:25:14Z")

</div>

Hi all. So I can see similar ticket 80178 without solution. I have a field that is a number and I format that using Kibana to show it as a Duration. But I'm unable to find where exactly is Kibana storing that informat…

---

## [Ansible role for Kibana](https://discuss.elastic.co/t/ansible-role-for-kibana/130537)

<div class="topic-metadata">

**Author:** [@Fedele\_Mantuano](https://discuss.elastic.co/u/Fedele_Mantuano)\
**Replies:** 1\
**Last updated:** [May 7, 2018, 3:52pm UTC](https://discuss.elastic.co/t/ansible-role-for-kibana/130537 "2018-05-07T15:52:54Z")

</div>

Hi Kibana team, I develop an Ansible role for Kibana, with the same patterns used for official Elasticsearch role. I'd like to contribute with my ansible-kibana. Is it possible for you fork my repository to make an offi…

---

## [Packetbeat "spider visualisation"](https://discuss.elastic.co/t/packetbeat-spider-visualisation/130650)

<div class="topic-metadata">

**Author:** [@nsheridan](https://discuss.elastic.co/u/nsheridan)\
**Replies:** 2\
**Last updated:** [May 7, 2018, 2:46pm UTC](https://discuss.elastic.co/t/packetbeat-spider-visualisation/130650 "2018-05-07T14:46:17Z")

</div>

Hi Guys, I am using the opensource elastic (elastic rules :slight\_smile: ) . i got packetbeat running, but I really I was looking for a kind of dependancy mapping "spider" kind of diagram I can run on a bunch of pack…

---

## [Mapping - error illegal\_argument\_exception when defining new date format](https://discuss.elastic.co/t/mapping-error-illegal-argument-exception-when-defining-new-date-format/130734)

<div class="topic-metadata">

**Author:** [@Aviyoosh](https://discuss.elastic.co/u/Aviyoosh)\
**Replies:** 1\
**Last updated:** [May 7, 2018, 2:27pm UTC](https://discuss.elastic.co/t/mapping-error-illegal-argument-exception-when-defining-new-date-format/130734 "2018-05-07T14:27:26Z")

</div>

Kibana + Elastic version: 6.2.4 JDK version: 10.0.1 OS version: Win10 Hi, I'm new to this world so please be gentle :slight\_smile: when trying to add a date format, I generated both queries: this one worked: put /…

---

## [Chart Line with Vertical Bar at the end](https://discuss.elastic.co/t/chart-line-with-vertical-bar-at-the-end/130831)

<div class="topic-metadata">

**Author:** [@Oruam](https://discuss.elastic.co/u/Oruam)\
**Replies:** 2\
**Last updated:** [May 7, 2018, 2:26pm UTC](https://discuss.elastic.co/t/chart-line-with-vertical-bar-at-the-end/130831 "2018-05-07T14:26:15Z")

</div>

Hi guys, greatings from Portugal!!! Weel, I've just discover Elasticserach and Kibana very recently, so be patient please :grin:.. My boss asked me to create a chart like this \[chart\]. I've been searching for a soluti…

---

## [Aggregate docs to present a single constructed visualization](https://discuss.elastic.co/t/aggregate-docs-to-present-a-single-constructed-visualization/130683)

<div class="topic-metadata">

**Author:** [@brandondash](https://discuss.elastic.co/u/brandondash)\
**Replies:** 1\
**Last updated:** [May 7, 2018, 2:24pm UTC](https://discuss.elastic.co/t/aggregate-docs-to-present-a-single-constructed-visualization/130683 "2018-05-07T14:24:52Z")

</div>

I'm reading in a log that records meeting metadata. It has all sorts of stuff, but I only care about two things. Something like this: 2018-05-04 14:50:01 eventType=MeetingStartedEvent meetingID=1234 eventTime=14:48:00 …

---

## [Coordinate maps - Draw tools: Show the selected area](https://discuss.elastic.co/t/coordinate-maps-draw-tools-show-the-selected-area/130790)

<div class="topic-metadata">

**Author:** [@pdethare](https://discuss.elastic.co/u/pdethare)\
**Replies:** 1\
**Last updated:** [May 7, 2018, 1:57pm UTC](https://discuss.elastic.co/t/coordinate-maps-draw-tools-show-the-selected-area/130790 "2018-05-07T13:57:39Z")

</div>

Hi, I am new to Kibana/ESK... I am using Kibana 6.1.\* I was wondering if there is a way to see the selected area with "Draw a polygon" and "Draw a Rectangle" tools on the map? The aim being to have an easier comprehen…

---

## [Unable to extract Kibana 6.0.0 zip format for Windows](https://discuss.elastic.co/t/unable-to-extract-kibana-6-0-0-zip-format-for-windows/130524)

<div class="topic-metadata">

**Author:** [@amits\_h](https://discuss.elastic.co/u/amits_h)\
**Replies:** 4\
**Last updated:** [May 7, 2018, 1:44pm UTC](https://discuss.elastic.co/t/unable-to-extract-kibana-6-0-0-zip-format-for-windows/130524 "2018-05-07T13:44:28Z")

</div>

Hi all, I am trying to download the Kibana 6.0.0 zip setup for Windows but every time I download it, there is some error while extracting the archive. I have tried multiple times, from different Wifi and open internet n…

---

## [JSON Input - unique\_count](https://discuss.elastic.co/t/json-input-unique-count/130422)

<div class="topic-metadata">

**Author:** [@mIsabelcc](https://discuss.elastic.co/u/mIsabelcc)\
**Replies:** 7\
**Last updated:** [May 7, 2018, 1:17pm UTC](https://discuss.elastic.co/t/json-input-unique-count/130422 "2018-05-07T13:17:24Z")

</div>

In a visualization I want to calculate in a Json Input: unique\_count \*5, with groovy { "script": { "inline": "(unique\_count.(doc\['f\_agenda'\].value)\*5", "lang": "groovy" } } But groovy is deprecated and I can't d…

---

## [Gauge with dynamic maximum value](https://discuss.elastic.co/t/gauge-with-dynamic-maximum-value/130634)

<div class="topic-metadata">

**Author:** [@MichaelDz](https://discuss.elastic.co/u/MichaelDz)\
**Replies:** 2\
**Last updated:** [May 7, 2018, 7:37am UTC](https://discuss.elastic.co/t/gauge-with-dynamic-maximum-value/130634 "2018-05-07T07:37:20Z")

</div>

I have a data coming from logstash that shows how much space is used on a table in a database and maximum allocated capacity for a table. I want to create in Kibana gauges for every table that show how much space is curr…

---

## [Xpack settings on ES, Logstash and Kibana](https://discuss.elastic.co/t/xpack-settings-on-es-logstash-and-kibana/130440)

<div class="topic-metadata">

**Author:** [@maheshm](https://discuss.elastic.co/u/maheshm)\
**Replies:** 6\
**Last updated:** [May 7, 2018, 11:28am UTC](https://discuss.elastic.co/t/xpack-settings-on-es-logstash-and-kibana/130440 "2018-05-07T11:28:19Z")

</div>

Hi, Does unpacking of X-Pack bundle overwrites the existing config files of installed ELK setup? Thanks!

---

## [Vega: Access to data](https://discuss.elastic.co/t/vega-access-to-data/128748)

<div class="topic-metadata">

**Author:** [@MimmiXYZ](https://discuss.elastic.co/u/MimmiXYZ)\
**Replies:** 2\
**Last updated:** [May 7, 2018, 9:53am UTC](https://discuss.elastic.co/t/vega-access-to-data/128748 "2018-05-07T09:53:27Z")

</div>

Hi everyone, I'm trying to create a Vega visualization. Here is a short extract of the code: ... "data": \[ { "name": "ttchanges", "url": { "%context%": true, "%tim…

---

## [RAG traffic light integration for disk used](https://discuss.elastic.co/t/rag-traffic-light-integration-for-disk-used/128854)

<div class="topic-metadata">

**Author:** [@maheshm](https://discuss.elastic.co/u/maheshm)\
**Replies:** 5\
**Last updated:** [May 7, 2018, 9:26am UTC](https://discuss.elastic.co/t/rag-traffic-light-integration-for-disk-used/128854 "2018-05-07T09:26:23Z")

</div>

Hi, We have been trying to integrate the health status of disk used in our dashboard views using metricbeat against filemounts on linux and windows machines. However, I see incorrect categorization using below plugin a…

---

## [Unable to display float value of a number scripted-field](https://discuss.elastic.co/t/unable-to-display-float-value-of-a-number-scripted-field/130629)

<div class="topic-metadata">

**Author:** [@dighan](https://discuss.elastic.co/u/dighan)\
**Replies:** 2\
**Last updated:** [May 7, 2018, 9:07am UTC](https://discuss.elastic.co/t/unable-to-display-float-value-of-a-number-scripted-field/130629 "2018-05-07T09:07:41Z")

</div>

Hey. I'm playing with scripted-field in Kibana 5.6.6. It's super powerful ! I'm just facing a little issue about formatting: I create a scripted-field returning a float from a ratio \[scripted-field\] I visualise the …

---

## [Elasticsearch Kibana ECONNRESET - SOLVED](https://discuss.elastic.co/t/elasticsearch-kibana-econnreset-solved/130097)

<div class="topic-metadata">

**Author:** [@hadi](https://discuss.elastic.co/u/hadi)\
**Replies:** 16\
**Last updated:** [May 6, 2018, 11:54am UTC](https://discuss.elastic.co/t/elasticsearch-kibana-econnreset-solved/130097 "2018-05-06T11:54:41Z")

</div>

Hi, I am seeing this page and I am not sure what causes it. Please let me know if you have any idea what can be the reason? \[11111111111111111a\] Kibana is pointing to the same machine that is hosted on. cat /etc/kiba…

---

## [Text search - field include text from kibana query line](https://discuss.elastic.co/t/text-search-field-include-text-from-kibana-query-line/130429)

<div class="topic-metadata">

**Author:** [@yishain11](https://discuss.elastic.co/u/yishain11)\
**Replies:** 2\
**Last updated:** [May 6, 2018, 7:50am UTC](https://discuss.elastic.co/t/text-search-field-include-text-from-kibana-query-line/130429 "2018-05-06T07:50:42Z")

</div>

Hi I have a table visualization, and I what it to show the results based on what the use searches for. I want the user to be able to search for documents where "someField" INCLUDES (not equals, necessarily) "some\_text"…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=831)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=833)
