# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=86

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 87

---

## [Fleet-server installation error](https://discuss.elastic.co/t/fleet-server-installation-error/346179)

<div class="topic-metadata">

**Author:** [@sudhir\_singh](https://discuss.elastic.co/u/sudhir_singh)\
**Replies:** 0\
**Last updated:** [November 1, 2023, 8:06am UTC](https://discuss.elastic.co/t/fleet-server-installation-error/346179 "2023-11-01T08:06:19Z")

</div>

Hi I'm trying to run fleet I tried with self generated fleet-server certificate and with basic one without generating certificate but ended up having an error.

---

## [Maximum document for rollup job](https://discuss.elastic.co/t/maximum-document-for-rollup-job/346169)

<div class="topic-metadata">

**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\
**Replies:** 0\
**Last updated:** [November 1, 2023, 4:05am UTC](https://discuss.elastic.co/t/maximum-document-for-rollup-job/346169 "2023-11-01T04:05:45Z")

</div>

Hello there, I want to ask about rollup job. Currently, i've been created a rollup job with 1s interval and 5 fields on terms and 2 fields for metrics and 60.000 page size. And the total document for the production inde…

---

## [Offline maps in kibana 8.8](https://discuss.elastic.co/t/offline-maps-in-kibana-8-8/346137)

<div class="topic-metadata">

**Author:** [@Manal\_A](https://discuss.elastic.co/u/Manal_A)\
**Replies:** 5\
**Last updated:** [October 31, 2023, 3:49pm UTC](https://discuss.elastic.co/t/offline-maps-in-kibana-8-8/346137 "2023-10-31T15:49:20Z")

</div>

Hello, I want to create a map in Kibana 8.8, but I am in an environment that does not have internet access. Is there a method to create maps offline in Kibana? Thank you

---

## [Define second pattern for the remaining logs](https://discuss.elastic.co/t/define-second-pattern-for-the-remaining-logs/346010)

<div class="topic-metadata">

**Author:** [@hta](https://discuss.elastic.co/u/hta)\
**Replies:** 1\
**Last updated:** [October 31, 2023, 3:27pm UTC](https://discuss.elastic.co/t/define-second-pattern-for-the-remaining-logs/346010 "2023-10-31T15:27:00Z")

</div>

Hello, I have now set up a pipeline and defined a GROK pattern. It is working. However, the logs that do not match the pattern are not displayed. How could I define a simple second pattern to catch the remaining logs?

---

## [KIbana CSP error](https://discuss.elastic.co/t/kibana-csp-error/344888)

<div class="topic-metadata">

**Author:** [@Priyaansh\_Dwivedi](https://discuss.elastic.co/u/Priyaansh_Dwivedi)\
**Replies:** 1\
**Last updated:** [October 12, 2023, 4:14pm UTC](https://discuss.elastic.co/t/kibana-csp-error/344888 "2023-10-12T16:14:04Z")

</div>

"Hello Community, I'm facing an issue with my Elasticsearch cluster. It's up and running smoothly, but when I try to access Kibana on my browser, I see a message saying 'Kibana server not ready yet' in the console. I've…

---

## [How to create index pattern(data view) for all indices](https://discuss.elastic.co/t/how-to-create-index-pattern-data-view-for-all-indices/346134)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 2\
**Last updated:** [October 31, 2023, 1:11pm UTC](https://discuss.elastic.co/t/how-to-create-index-pattern-data-view-for-all-indices/346134 "2023-10-31T13:11:39Z")

</div>

Hi all, I'm using Kibana 8.6.2. I had added indices some time back and don't want to delete or modify them. I have about 70 indices with different names: eg: locations roles tasks stats tickets stats These were cre…

---

## [Kibana is extremely slow (Loading graphs)](https://discuss.elastic.co/t/kibana-is-extremely-slow-loading-graphs/345694)

<div class="topic-metadata">

**Author:** [@Saili\_Bakalkar](https://discuss.elastic.co/u/Saili_Bakalkar)\
**Replies:** 3\
**Last updated:** [October 31, 2023, 11:18am UTC](https://discuss.elastic.co/t/kibana-is-extremely-slow-loading-graphs/345694 "2023-10-31T11:18:57Z")

</div>

Hello everyone, I'm encountering significant performance issues with my Kibana setup, and I'm seeking guidance to improve its responsiveness. I've attached images to provide insights into the current state of our cluste…

---

## [Kibana Join two dasets into one visualization](https://discuss.elastic.co/t/kibana-join-two-dasets-into-one-visualization/346124)

<div class="topic-metadata">

**Author:** [@Mhag](https://discuss.elastic.co/u/Mhag)\
**Replies:** 0\
**Last updated:** [October 31, 2023, 11:15am UTC](https://discuss.elastic.co/t/kibana-join-two-dasets-into-one-visualization/346124 "2023-10-31T11:15:43Z")

</div>

Hi all, I have an index wit fields like this : Myindex: url: "/some/url1", service: "someservice1", uuid: "ccc-xxx-yyy-zzz1" url: "/some/url2", service: "someservice1", uuid: "ccc-xxx-yyy-zzz2" url: "…

---

## [How do i change the hyper reference of header logo in production mode?](https://discuss.elastic.co/t/how-do-i-change-the-hyper-reference-of-header-logo-in-production-mode/346094)

<div class="topic-metadata">

**Author:** [@didar2016](https://discuss.elastic.co/u/didar2016)\
**Replies:** 0\
**Last updated:** [October 31, 2023, 7:28am UTC](https://discuss.elastic.co/t/how-do-i-change-the-hyper-reference-of-header-logo-in-production-mode/346094 "2023-10-31T07:28:43Z")

</div>

In dev mode it is possible to change the link but not in production mode. I don't find the header\_logo.tsx file in production mode.

---

## [Kibana cookies contain "--" characters in the SID which causes the user requests to get blocked in the azure WAF](https://discuss.elastic.co/t/kibana-cookies-contain-characters-in-the-sid-which-causes-the-user-requests-to-get-blocked-in-the-azure-waf/346087)

<div class="topic-metadata">

**Author:** [@sahadev\_d](https://discuss.elastic.co/u/sahadev_d)\
**Replies:** 0\
**Last updated:** [October 31, 2023, 5:45am UTC](https://discuss.elastic.co/t/kibana-cookies-contain-characters-in-the-sid-which-causes-the-user-requests-to-get-blocked-in-the-azure-waf/346087 "2023-10-31T05:45:08Z")

</div>

Hi Community, We are facing issue while using kibana using with URL, Whenever the user log-in to kibana with the RBAs user creds the user gets 403 error from the kibana servers. As we debugged the issue we came to know…

---

## [Reference custom field in another custom field](https://discuss.elastic.co/t/reference-custom-field-in-another-custom-field/346066)

<div class="topic-metadata">

**Author:** [@patricio.devilla](https://discuss.elastic.co/u/patricio.devilla)\
**Replies:** 0\
**Last updated:** [October 30, 2023, 7:13pm UTC](https://discuss.elastic.co/t/reference-custom-field-in-another-custom-field/346066 "2023-10-30T19:13:27Z")

</div>

Is it possible to reference a custom field in another field? Creating custom field custom\_1 Creating custom field custom\_2 emit(doc\['custom\_1'\].value) I get the following error No field found for \[custom\_1\] in ma…

---

## [How to handle unmapped fields](https://discuss.elastic.co/t/how-to-handle-unmapped-fields/345991)

<div class="topic-metadata">

**Author:** [@hta](https://discuss.elastic.co/u/hta)\
**Replies:** 4\
**Last updated:** [October 30, 2023, 2:35pm UTC](https://discuss.elastic.co/t/how-to-handle-unmapped-fields/345991 "2023-10-30T14:35:14Z")

</div>

filter { grok { id =\> "name school grok filter" match =\> { 'message' =\> '^.\*name=\\'%{WORD:student.name}\\'.\*school=\\'%{WORD:student.school}\\''} } } For example, with WORD:student.name I would like to create a…

---

## [How to activate sysmon event ID 3](https://discuss.elastic.co/t/how-to-activate-sysmon-event-id-3/345977)

<div class="topic-metadata">

**Author:** [@yassinebad](https://discuss.elastic.co/u/yassinebad)\
**Replies:** 1\
**Last updated:** [October 29, 2023, 3:51pm UTC](https://discuss.elastic.co/t/how-to-activate-sysmon-event-id-3/345977 "2023-10-29T15:51:26Z")

</div>

Hey everyone, I am sending my logs from a windows node using winlogbeat and sysmon64 to my ELK stack. While in discover panel in kibana I can see my logs with different events ID of sysmon, but I have noticed that the …

---

## [Error: Switching kibana port failed The current kibana port configured in kibana.yml is 80, changing it to 5601 gives an error](https://discuss.elastic.co/t/error-switching-kibana-port-failed-the-current-kibana-port-configured-in-kibana-yml-is-80-changing-it-to-5601-gives-an-error/344516)

<div class="topic-metadata">

**Author:** [@Nghia\_D\_ng](https://discuss.elastic.co/u/Nghia_D_ng)\
**Replies:** 2\
**Last updated:** [October 27, 2023, 9:30pm UTC](https://discuss.elastic.co/t/error-switching-kibana-port-failed-the-current-kibana-port-configured-in-kibana-yml-is-80-changing-it-to-5601-gives-an-error/344516 "2023-10-27T21:30:26Z")

</div>

Sep 27 10:42:13 Kibana kibana\[1250331\]: {"type":"log","@timestamp":"2023-09-27T03:42:13Z","tags":\["error","plugins","reporting","validations"\],"pid":1250331,"message":"The Reporting plugin encountered issues launching Ch…

---

## [Forbidden error when simulating an email report from watcher](https://discuss.elastic.co/t/forbidden-error-when-simulating-an-email-report-from-watcher/345755)

<div class="topic-metadata">

**Author:** [@nonassis](https://discuss.elastic.co/u/nonassis)\
**Replies:** 5\
**Last updated:** [October 27, 2023, 4:18pm UTC](https://discuss.elastic.co/t/forbidden-error-when-simulating-an-email-report-from-watcher/345755 "2023-10-27T16:18:30Z")

</div>

I'm following the documentation here to create a watcher to automate some weekly reports. When I try to simulate the watcher I get the following error: { "watch\_id": "\_inlined\_", "node": "gdVCszd8SaO5-xSmFM2Gsw", …

---

## [Kibana visualization output format](https://discuss.elastic.co/t/kibana-visualization-output-format/345856)

<div class="topic-metadata">

**Author:** [@Chris\_Banchs](https://discuss.elastic.co/u/Chris_Banchs)\
**Replies:** 2\
**Last updated:** [October 27, 2023, 3:09pm UTC](https://discuss.elastic.co/t/kibana-visualization-output-format/345856 "2023-10-27T15:09:21Z")

</div>

Hi everyone! Im new to Kibana... I have a scripted field that calculates a total time of a task. The format is in seconds (EPOCH) and I would like to make a visualization (Metric type) that calculates the average time …

---

## [Visualize Elastic Query](https://discuss.elastic.co/t/visualize-elastic-query/345778)

<div class="topic-metadata">

**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\
**Replies:** 1\
**Last updated:** [October 27, 2023, 1:49pm UTC](https://discuss.elastic.co/t/visualize-elastic-query/345778 "2023-10-27T13:49:54Z")

</div>

Hello there, i want to know, how if would like to change this query into a visualization. is it possible? GET my-index/\_search?filter\_path=aggregations.percentiles\_of\_latencies { "size": 0, "aggs": { "latencie…

---

## [Embed Kibana's visualization editor in web application](https://discuss.elastic.co/t/embed-kibanas-visualization-editor-in-web-application/345759)

<div class="topic-metadata">

**Author:** [@wido](https://discuss.elastic.co/u/wido)\
**Replies:** 2\
**Last updated:** [October 27, 2023, 12:59pm UTC](https://discuss.elastic.co/t/embed-kibanas-visualization-editor-in-web-application/345759 "2023-10-27T12:59:56Z")

</div>

Looking for a way to embed the Kibana visualization editor into my web page so that my users can create their custom dashboards and visualizations within our website.

---

## [Merging Kibana Results](https://discuss.elastic.co/t/merging-kibana-results/345770)

<div class="topic-metadata">

**Author:** [@vamc](https://discuss.elastic.co/u/vamc)\
**Replies:** 1\
**Last updated:** [October 27, 2023, 12:41pm UTC](https://discuss.elastic.co/t/merging-kibana-results/345770 "2023-10-27T12:41:35Z")

</div>

I have two logs from two different applications writing to the same index. Log1: \[ "Processed Payload - UID: c9c9502f-f398-434f-3d2efc7853a3, AlertId : 000130114"\] Log2: \["Processed Payload - UID: c9c9502f-f398-434f-…

---

## [Interact with Kibana in IFrame and Host application](https://discuss.elastic.co/t/interact-with-kibana-in-iframe-and-host-application/345893)

<div class="topic-metadata">

**Author:** [@StefanC](https://discuss.elastic.co/u/StefanC)\
**Replies:** 1\
**Last updated:** [October 27, 2023, 12:22pm UTC](https://discuss.elastic.co/t/interact-with-kibana-in-iframe-and-host-application/345893 "2023-10-27T12:22:47Z")

</div>

Currently we have been able to host a KIBANA dashboard in an IFRAME. What we're trying to do is interact with that dashboard. When setting the filter and timestamp values, that dashboard should change its contents accord…

---

## [Manage Kibana artefacts with Ansible](https://discuss.elastic.co/t/manage-kibana-artefacts-with-ansible/345099)

<div class="topic-metadata">

**Author:** [@litsegaard](https://discuss.elastic.co/u/litsegaard)\
**Replies:** 2\
**Last updated:** [October 27, 2023, 10:23am UTC](https://discuss.elastic.co/t/manage-kibana-artefacts-with-ansible/345099 "2023-10-27T10:23:07Z")

</div>

We want to be able to automate Elastic/Kibana provisioning as much as possible which includes Kibana roles and spaces. We use Ansible for provisioning and provisioning Elasticsearch is straightforward, however, we're str…

---

## [Multiple Metric in canvas](https://discuss.elastic.co/t/multiple-metric-in-canvas/345256)

<div class="topic-metadata">

**Author:** [@fay](https://discuss.elastic.co/u/fay)\
**Replies:** 1\
**Last updated:** [October 27, 2023, 10:15am UTC](https://discuss.elastic.co/t/multiple-metric-in-canvas/345256 "2023-10-27T10:15:45Z")

</div>

Hi everyone , I am using Canvas and I want to represent top 5 of field and break it down with another field I can simply do that in Visualization by Metric type and select Maximum of Field1 and break it down with top 5…

---

## [Kibana is not starting 8.10.2](https://discuss.elastic.co/t/kibana-is-not-starting-8-10-2/345860)

<div class="topic-metadata">

**Author:** [@layalhasan](https://discuss.elastic.co/u/layalhasan)\
**Replies:** 1\
**Last updated:** [October 27, 2023, 9:36am UTC](https://discuss.elastic.co/t/kibana-is-not-starting-8-10-2/345860 "2023-10-27T09:36:19Z")

</div>

I am having this error while kibana pod is starting ValidationError: \[config validation of \[elastic\]\]: could not parse object value from json input at ObjectType.validate (/usr/share/kibana/node\_modules/@kbn/config-…

---

## [Can Kibana group events around a common id and perform statistics on the group, then plot it?](https://discuss.elastic.co/t/can-kibana-group-events-around-a-common-id-and-perform-statistics-on-the-group-then-plot-it/345613)

<div class="topic-metadata">

**Author:** [@Wpq](https://discuss.elastic.co/u/Wpq)\
**Replies:** 1\
**Last updated:** [October 27, 2023, 9:23am UTC](https://discuss.elastic.co/t/can-kibana-group-events-around-a-common-id-and-perform-statistics-on-the-group-then-plot-it/345613 "2023-10-27T09:23:43Z")

</div>

I usually use Kibana (as a basic user) with a flow of independent timed events. I then make some graphs on the evolution or statistics of a population in a specific timeframe. I now face a problem I do not know how to a…

---

## [Alerting in zabbix based on elasticsearch data](https://discuss.elastic.co/t/alerting-in-zabbix-based-on-elasticsearch-data/345636)

<div class="topic-metadata">

**Author:** [@Lakshay](https://discuss.elastic.co/u/Lakshay)\
**Replies:** 1\
**Last updated:** [October 27, 2023, 9:00am UTC](https://discuss.elastic.co/t/alerting-in-zabbix-based-on-elasticsearch-data/345636 "2023-10-27T09:00:27Z")

</div>

Hello everyone, I have some data in elasticsearch cluster which I am visualizing using kibana. The data is actually some figures (integers). Now, I need to have an alerting in Zabbix in case those figures(which are in…

---

## [Display Overall Max and Average of Sum in TSVB in Metric and Markdown Visualizations (v8.6.1)](https://discuss.elastic.co/t/display-overall-max-and-average-of-sum-in-tsvb-in-metric-and-markdown-visualizations-v8-6-1/345411)

<div class="topic-metadata">

**Author:** [@Behnam.R](https://discuss.elastic.co/u/Behnam.R)\
**Replies:** 3\
**Last updated:** [October 27, 2023, 8:57am UTC](https://discuss.elastic.co/t/display-overall-max-and-average-of-sum-in-tsvb-in-metric-and-markdown-visualizations-v8-6-1/345411 "2023-10-27T08:57:05Z")

</div>

Hi all, I'm using Elastic version 8.6.1. In Kibana's TSVB, I've set up a Time Series visualization where I've first aggregated using the Sum of a specific field. I then applied a secondary pipeline aggregation to comput…

---

## [Missing objects after update](https://discuss.elastic.co/t/missing-objects-after-update/345733)

<div class="topic-metadata">

**Author:** [@Ljapunov](https://discuss.elastic.co/u/Ljapunov)\
**Replies:** 1\
**Last updated:** [October 27, 2023, 7:19am UTC](https://discuss.elastic.co/t/missing-objects-after-update/345733 "2023-10-27T07:19:23Z")

</div>

Hey there, after updating kibana I am missing a few (that is not all, but some) of the dashboards and index-patters that have been there prior to the update. Some more background: We have a multinode elasticsearch-clus…

---

## [Ordering Gauge Visualisation](https://discuss.elastic.co/t/ordering-gauge-visualisation/345690)

<div class="topic-metadata">

**Author:** [@Ric\_UTS](https://discuss.elastic.co/u/Ric_UTS)\
**Replies:** 2\
**Last updated:** [October 27, 2023, 1:30am UTC](https://discuss.elastic.co/t/ordering-gauge-visualisation/345690 "2023-10-27T01:30:15Z")

</div>

Hello. I have been trying to create a gauge-based dashboard visualisation but it appears that I am unable to oder it, either by count or by the metric keyword. Please see attached image. I would have preferred it to b…

---

## [Kibana 8.6 TVSB Gauge chart does not show large numbers](https://discuss.elastic.co/t/kibana-8-6-tvsb-gauge-chart-does-not-show-large-numbers/345738)

<div class="topic-metadata">

**Author:** [@RobertC1](https://discuss.elastic.co/u/RobertC1)\
**Replies:** 5\
**Last updated:** [October 26, 2023, 3:52pm UTC](https://discuss.elastic.co/t/kibana-8-6-tvsb-gauge-chart-does-not-show-large-numbers/345738 "2023-10-26T15:52:19Z")

</div>

FInd out the nunber of a SUM in a lens visualization. But when I try to do the same visualization in TVSB gauge option, and this is the value that shows: Are there parameters to adjust? Thanks in advance

---

## [Download csv report is intermittently failing if documents are more](https://discuss.elastic.co/t/download-csv-report-is-intermittently-failing-if-documents-are-more/345775)

<div class="topic-metadata">

**Author:** [@rkidev](https://discuss.elastic.co/u/rkidev)\
**Replies:** 1\
**Last updated:** [October 26, 2023, 12:23pm UTC](https://discuss.elastic.co/t/download-csv-report-is-intermittently-failing-if-documents-are-more/345775 "2023-10-26T12:23:52Z")

</div>

Hi, download csv report is always failing if documents are more than 40k, and for around 30k documents it's getting success sometimes but sometimes it's failing. I am using Kibana 7.16.3 version single node cluster and…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=85)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=87)
