# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=846

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 847

---

## [Reporting from dashboards](https://discuss.elastic.co/t/reporting-from-dashboards/125001)

<div class="topic-metadata">

**Author:** [@sanek640](https://discuss.elastic.co/u/sanek640)\
**Replies:** 2\
**Last updated:** [March 30, 2018, 6:49am UTC](https://discuss.elastic.co/t/reporting-from-dashboards/125001 "2018-03-30T06:49:59Z")

</div>

Hi, My dashboard in Kibana is composed of few visualizations and a discover. My case is to export csv from the discover of this dashboard while adding some filters using vusializations. I installed xpack (v. 6.2.1, as …

---

## [X-Pack on hosted kibana](https://discuss.elastic.co/t/x-pack-on-hosted-kibana/126192)

<div class="topic-metadata">

**Author:** [@hgsigner](https://discuss.elastic.co/u/hgsigner)\
**Replies:** 1\
**Last updated:** [March 30, 2018, 6:44am UTC](https://discuss.elastic.co/t/x-pack-on-hosted-kibana/126192 "2018-03-30T06:44:23Z")

</div>

Hi, I'm hosting a version of kibana on ec2 and installed x-pack. When I try to create report, I receive the message "Reporting: Error 403 Forbidden: Sorry, you don't have access to Reporting". What am I doing wrong? Our …

---

## [Kibana TIcker](https://discuss.elastic.co/t/kibana-ticker/126027)

<div class="topic-metadata">

**Author:** [@balaZ](https://discuss.elastic.co/u/balaZ)\
**Replies:** 2\
**Last updated:** [March 30, 2018, 5:17am UTC](https://discuss.elastic.co/t/kibana-ticker/126027 "2018-03-30T05:17:15Z")

</div>

I need the ticker looks like the below-circled screen? When a change happens the background changes to light-green for a fraction of a second. You can see that if you go to yahoo finance and enter any stock symbol.\[image…

---

## [Visual Builder, graph per second, with only per minute data](https://discuss.elastic.co/t/visual-builder-graph-per-second-with-only-per-minute-data/125992)

<div class="topic-metadata">

**Author:** [@sile16](https://discuss.elastic.co/u/sile16)\
**Replies:** 2\
**Last updated:** [March 30, 2018, 1:28am UTC](https://discuss.elastic.co/t/visual-builder-graph-per-second-with-only-per-minute-data/125992 "2018-03-30T01:28:20Z")

</div>

This question has ben answered for timelion & Visual Builder Line & Bar, but I can't figure out how to do it with Visual Builder. This is because I want to use the Annotation feature. So basically this, same question a…

---

## [Backup of Watcher Alerts](https://discuss.elastic.co/t/backup-of-watcher-alerts/126118)

<div class="topic-metadata">

**Author:** [@dmdm](https://discuss.elastic.co/u/dmdm)\
**Replies:** 1\
**Last updated:** [March 29, 2018, 9:23pm UTC](https://discuss.elastic.co/t/backup-of-watcher-alerts/126118 "2018-03-29T21:23:59Z")

</div>

Just wanted to double check on this one. If we want to just backup the watcher alerts on a cluster the only way to do this to restore to a new cluster is to backup the .watches index correct? I've added this into our c…

---

## [Kibana 6.x can support es 5.6.8?](https://discuss.elastic.co/t/kibana-6-x-can-support-es-5-6-8/126050)

<div class="topic-metadata">

**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Replies:** 3\
**Last updated:** [March 29, 2018, 9:19pm UTC](https://discuss.elastic.co/t/kibana-6-x-can-support-es-5-6-8/126050 "2018-03-29T21:19:20Z")

</div>

kibana 6.x can support es 5.6.8 ? thanks.

---

## [Rendering Twitter Media in Discover](https://discuss.elastic.co/t/rendering-twitter-media-in-discover/126110)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 1\
**Last updated:** [March 29, 2018, 9:17pm UTC](https://discuss.elastic.co/t/rendering-twitter-media-in-discover/126110 "2018-03-29T21:17:27Z")

</div>

Working with the Twitter input and was wondering if there is a way to display images and/or videos that are part of a tweet?

---

## [JMX Metrics dashboard](https://discuss.elastic.co/t/jmx-metrics-dashboard/126080)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 1\
**Last updated:** [March 29, 2018, 9:07pm UTC](https://discuss.elastic.co/t/jmx-metrics-dashboard/126080 "2018-03-29T21:07:42Z")

</div>

Do we have the generic JMX metrics dashboard? Currently I am using the Logstash with JMX input to get the JMX metrics and is being indexed into elasticsearch.

---

## [Trend Indicator and sparkline in single metric panel](https://discuss.elastic.co/t/trend-indicator-and-sparkline-in-single-metric-panel/126031)

<div class="topic-metadata">

**Author:** [@meetdave2611997](https://discuss.elastic.co/u/meetdave2611997)\
**Replies:** 1\
**Last updated:** [March 29, 2018, 9:04pm UTC](https://discuss.elastic.co/t/trend-indicator-and-sparkline-in-single-metric-panel/126031 "2018-03-29T21:04:17Z")

</div>

Is there any way to insert trend lndicator and sparkline in single metric panel in kibana?? Thanks, Meet Dave

---

## [Timelion syntax](https://discuss.elastic.co/t/timelion-syntax/126016)

<div class="topic-metadata">

**Author:** [@Pororo](https://discuss.elastic.co/u/Pororo)\
**Replies:** 1\
**Last updated:** [March 29, 2018, 9:01pm UTC](https://discuss.elastic.co/t/timelion-syntax/126016 "2018-03-29T21:01:55Z")

</div>

Hi, I was trying to query the data by double conditions. Like setting two "q=" inside the .es(q=..., q=....). The second condition is based on the first condition. Is it possible for timelion to make this happen?

---

## [Get the timestamp when the max value is reached](https://discuss.elastic.co/t/get-the-timestamp-when-the-max-value-is-reached/125999)

<div class="topic-metadata">

**Author:** [@exorcista](https://discuss.elastic.co/u/exorcista)\
**Replies:** 1\
**Last updated:** [March 29, 2018, 8:33pm UTC](https://discuss.elastic.co/t/get-the-timestamp-when-the-max-value-is-reached/125999 "2018-03-29T20:33:18Z")

</div>

I do collect data about usage from some logs, I was able to build a timelion visualization with this command: .es(index=xxx,metric='max:peak\_qty',timefield='ts',q='xxx') where xxx is a value that I provide. No issues …

---

## [Scripted Field "String, in between two strings"](https://discuss.elastic.co/t/scripted-field-string-in-between-two-strings/125989)

<div class="topic-metadata">

**Author:** [@kohlerdr](https://discuss.elastic.co/u/kohlerdr)\
**Replies:** 1\
**Last updated:** [March 29, 2018, 7:34pm UTC](https://discuss.elastic.co/t/scripted-field-string-in-between-two-strings/125989 "2018-03-29T19:34:58Z")

</div>

I have a field I need to query to get a value. the text in the field, is a string a couple of hundred characters long, and I need 4 characters, which are smack in the middle. I have tried get substring, but I can only …

---

## [ELK installation Kibana web page doesn't show up](https://discuss.elastic.co/t/elk-installation-kibana-web-page-doesnt-show-up/125944)

<div class="topic-metadata">

**Author:** [@heskez](https://discuss.elastic.co/u/heskez)\
**Replies:** 2\
**Last updated:** [March 29, 2018, 7:11pm UTC](https://discuss.elastic.co/t/elk-installation-kibana-web-page-doesnt-show-up/125944 "2018-03-29T19:11:32Z")

</div>

Hello, I've done a really basic install of ELK on a Centos 7 minimal iso install Java install elasticsearch (confimed and is running) install kibana (confirmed and running) install logstash (confirmed and running) net…

---

## [How to load historical data to kibana](https://discuss.elastic.co/t/how-to-load-historical-data-to-kibana/125743)

<div class="topic-metadata">

**Author:** [@suripaleru](https://discuss.elastic.co/u/suripaleru)\
**Replies:** 3\
**Last updated:** [March 29, 2018, 5:06pm UTC](https://discuss.elastic.co/t/how-to-load-historical-data-to-kibana/125743 "2018-03-29T17:06:05Z")

</div>

We started generating reports with kibana but kibana is showing reports starting from today using newly generated logs. I would like to see reports for older data also. How can I import previous weeks data manually to el…

---

## [Kibana markdown show json data](https://discuss.elastic.co/t/kibana-markdown-show-json-data/124326)

<div class="topic-metadata">

**Author:** [@philv](https://discuss.elastic.co/u/philv)\
**Replies:** 4\
**Last updated:** [March 29, 2018, 2:27pm UTC](https://discuss.elastic.co/t/kibana-markdown-show-json-data/124326 "2018-03-29T14:27:43Z")

</div>

Can the kibana markdown widget be used to show data from json objects retrived from Elasticsearch ? I have seen references to Mustache, but in kibana 6.0.0 I cannot get the syntax to work such that my data shows up in a…

---

## [Export search results](https://discuss.elastic.co/t/export-search-results/125886)

<div class="topic-metadata">

**Author:** [@M.alsioufi](https://discuss.elastic.co/u/M.alsioufi)\
**Replies:** 3\
**Last updated:** [March 29, 2018, 11:35am UTC](https://discuss.elastic.co/t/export-search-results/125886 "2018-03-29T11:35:37Z")

</div>

Hello! I am using Kibana6.2.2, I have a dashboard with some visualizations (Tag cloud) that are used like filters that changes a saved search block on the same dashboard. I want to export the search results to a csv, tx…

---

## [Offset does not work in Timelion](https://discuss.elastic.co/t/offset-does-not-work-in-timelion/126020)

<div class="topic-metadata">

**Author:** [@Pororo](https://discuss.elastic.co/u/Pororo)\
**Replies:** 1\
**Last updated:** [March 29, 2018, 7:25am UTC](https://discuss.elastic.co/t/offset-does-not-work-in-timelion/126020 "2018-03-29T07:25:05Z")

</div>

I was trying to compare the data one day before to the current one. I used the command that I used before, but it seems that it could not be recognized as the valid one. \[31\]

---

## [Exporting the discover data (Saved Search) in CSV](https://discuss.elastic.co/t/exporting-the-discover-data-saved-search-in-csv/125864)

<div class="topic-metadata">

**Author:** [@kishore\_narni](https://discuss.elastic.co/u/kishore_narni)\
**Replies:** 6\
**Last updated:** [March 28, 2018, 7:02pm UTC](https://discuss.elastic.co/t/exporting-the-discover-data-saved-search-in-csv/125864 "2018-03-28T19:02:22Z")

</div>

Hi all, I am very new to kibana and started learning the basics. Currently I am working in kibana 6. My requirement i have to create a search in which we can sort or filter on any column we and export the search data …

---

## [Set bar color depends on field value](https://discuss.elastic.co/t/set-bar-color-depends-on-field-value/125818)

<div class="topic-metadata">

**Author:** [@Tomasz\_Szandala](https://discuss.elastic.co/u/Tomasz_Szandala)\
**Replies:** 3\
**Last updated:** [March 28, 2018, 5:20pm UTC](https://discuss.elastic.co/t/set-bar-color-depends-on-field-value/125818 "2018-03-28T17:20:24Z")

</div>

Greetings, I have vertical bars visualisation, that show duration of software compilation steps (X-axis are steps, Y-axis is duration). I would like to set GREEN color, when field "success" is true and RED on opposite. …

---

## [Warning Courier Fetch](https://discuss.elastic.co/t/warning-courier-fetch/125736)

<div class="topic-metadata">

**Author:** [@Hanen](https://discuss.elastic.co/u/Hanen)\
**Replies:** 4\
**Last updated:** [March 28, 2018, 5:07pm UTC](https://discuss.elastic.co/t/warning-courier-fetch/125736 "2018-03-28T17:07:53Z")

</div>

Hi, recently I got the warning: Courier Fetch: 17 of 100 shards failed. what cause it and what can I do to fix it? ( I added a field geo\_location) to create the cordinate map) when tapping new visualize==\> cordinate …

---

## [Can't select timestamp field in Kibana](https://discuss.elastic.co/t/cant-select-timestamp-field-in-kibana/125803)

<div class="topic-metadata">

**Author:** [@arisbanach](https://discuss.elastic.co/u/arisbanach)\
**Replies:** 5\
**Last updated:** [March 28, 2018, 4:17pm UTC](https://discuss.elastic.co/t/cant-select-timestamp-field-in-kibana/125803 "2018-03-28T16:17:32Z")

</div>

I noticed that Kibana only shows the first 45-ish date fields in an index pattern in the dropdown box when you're adding a new index pattern. However, my ES index has more than 45 date fields, and the one I need to set a…

---

## [Tracking any specific forecast outside of the Single Metric Viewer](https://discuss.elastic.co/t/tracking-any-specific-forecast-outside-of-the-single-metric-viewer/124874)

<div class="topic-metadata">

**Author:** [@Oscarlf](https://discuss.elastic.co/u/Oscarlf)\
**Replies:** 2\
**Last updated:** [March 28, 2018, 4:16pm UTC](https://discuss.elastic.co/t/tracking-any-specific-forecast-outside-of-the-single-metric-viewer/124874 "2018-03-28T16:16:55Z")

</div>

Hi all! We are just moving to the 6.2 version in Kibana and generating some forecast exercises, and we knew can only see the last five scenarios by openning the Sinlge Metric Viewer, however it's my understanding there …

---

## [Kibana missing arrow to close Data / Options panel on Map](https://discuss.elastic.co/t/kibana-missing-arrow-to-close-data-options-panel-on-map/125964)

<div class="topic-metadata">

**Author:** [@Badger](https://discuss.elastic.co/u/Badger)\
**Replies:** 1\
**Last updated:** [March 28, 2018, 4:03pm UTC](https://discuss.elastic.co/t/kibana-missing-arrow-to-close-data-options-panel-on-map/125964 "2018-03-28T16:03:01Z")

</div>

In 6.2.2, if I make the browser window narrow, then the Data / Options panel switches from the side to the top. When it does that I cannot see a way to close the panel, since the little arrow is not there. This is true f…

---

## [CPU utilization by process name and cmdline](https://discuss.elastic.co/t/cpu-utilization-by-process-name-and-cmdline/125828)

<div class="topic-metadata">

**Author:** [@Wanderer](https://discuss.elastic.co/u/Wanderer)\
**Replies:** 3\
**Last updated:** [March 28, 2018, 2:18pm UTC](https://discuss.elastic.co/t/cpu-utilization-by-process-name-and-cmdline/125828 "2018-03-28T14:18:11Z")

</div>

Is there a way to chart CPU utilization by process name and cmdline? Example: QEMU-KVM runs per VM so if you are running multiple VM's there is a QEMU-KVM process for each. Is there a way to chart the CPU usage for eac…

---

## [Default dashboards for AWS and GCP](https://discuss.elastic.co/t/default-dashboards-for-aws-and-gcp/125795)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 1\
**Last updated:** [March 28, 2018, 1:53pm UTC](https://discuss.elastic.co/t/default-dashboards-for-aws-and-gcp/125795 "2018-03-28T13:53:47Z")

</div>

As logstash has the plugins for AWS cloudwatch and GCP, would like to know whether the default dashboards are available for monitoring these sources.

---

## [Not able to open Kibana](https://discuss.elastic.co/t/not-able-to-open-kibana/125893)

<div class="topic-metadata">

**Author:** [@Rahulkumar](https://discuss.elastic.co/u/Rahulkumar)\
**Replies:** 3\
**Last updated:** [March 28, 2018, 11:11am UTC](https://discuss.elastic.co/t/not-able-to-open-kibana/125893 "2018-03-28T11:11:34Z")

</div>

Hi, I am trying to open kibana but it is showing: "Login is currently disabled. Administrators should consult the Kibana logs for more details." Below are the logs I found. I am running my ES on clustered env. \[2018…

---

## [My 15m time filter searches hundreds of shards - why?](https://discuss.elastic.co/t/my-15m-time-filter-searches-hundreds-of-shards-why/125897)

<div class="topic-metadata">

**Author:** [@jmkgreen](https://discuss.elastic.co/u/jmkgreen)\
**Replies:** 3\
**Last updated:** [March 28, 2018, 10:57am UTC](https://discuss.elastic.co/t/my-15m-time-filter-searches-hundreds-of-shards-why/125897 "2018-03-28T10:57:30Z")

</div>

I have a lot of daily indices, each with two shards. Yet a dashboard that predominantly searches two named indices (both of which are daily) tells me I'm search 350 shards (and some are failing to respond) with the last …

---

## [Convert Date to String using Painless](https://discuss.elastic.co/t/convert-date-to-string-using-painless/125703)

<div class="topic-metadata">

**Author:** [@sahadevgd](https://discuss.elastic.co/u/sahadevgd)\
**Replies:** 2\
**Last updated:** [March 28, 2018, 10:11am UTC](https://discuss.elastic.co/t/convert-date-to-string-using-painless/125703 "2018-03-28T10:11:59Z")

</div>

HI Team, We are on ELK 6.2.3. We have a field "ETime" which is in UTC format (2018-03-27 06:38:08.496Z). We would like to convert this time to HH:mm:ss and convert that to string using Painless language to use it in so…

---

## [Newbie question: Timelion metric/split](https://discuss.elastic.co/t/newbie-question-timelion-metric-split/125769)

<div class="topic-metadata">

**Author:** [@Julzor](https://discuss.elastic.co/u/Julzor)\
**Replies:** 2\
**Last updated:** [March 28, 2018, 6:30am UTC](https://discuss.elastic.co/t/newbie-question-timelion-metric-split/125769 "2018-03-28T06:30:03Z")

</div>

Hi, I'm new to Kibana and i'am struggling on a -maybe- simple thing. I have this Timelion graph' : .\*\*es(index="netflow-\*", metric="sum:netflow.bytes", split="netflow.src\_port\_name:10", kibana=true)\*\*.scale\_interval(1…

---

## [Problem in kibana\_dashboard\_only\_user](https://discuss.elastic.co/t/problem-in-kibana-dashboard-only-user/125776)

<div class="topic-metadata">

**Author:** [@M.alsioufi](https://discuss.elastic.co/u/M.alsioufi)\
**Replies:** 2\
**Last updated:** [March 28, 2018, 7:23am UTC](https://discuss.elastic.co/t/problem-in-kibana-dashboard-only-user/125776 "2018-03-28T07:23:55Z")

</div>

I have created a user with role "kibana-dashboard\_only\_user" however I am getting this error when I open Kibana with this user "Visualize: Cannot read property '2' of undefined" I am using Kibana 6.2.2

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=845)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=847)
