# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=868

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 869

---

## [Dynamic labels](https://discuss.elastic.co/t/dynamic-labels/119448)

<div class="topic-metadata">

**Author:** [@DannyM](https://discuss.elastic.co/u/DannyM)\
**Replies:** 3\
**Last updated:** [February 14, 2018, 3:44pm UTC](https://discuss.elastic.co/t/dynamic-labels/119448 "2018-02-14T15:44:36Z")

</div>

How can I dynamical edit the labels from a pie chart? I have a pie chart with web response codes. it would be nice to script something to edit the shown labels from the pie chart so I can add some comments like: if (st…

---

## [Unable to draw lines on timelion visualization](https://discuss.elastic.co/t/unable-to-draw-lines-on-timelion-visualization/119748)

<div class="topic-metadata">

**Author:** [@Zedd](https://discuss.elastic.co/u/Zedd)\
**Replies:** 1\
**Last updated:** [February 14, 2018, 2:16pm UTC](https://discuss.elastic.co/t/unable-to-draw-lines-on-timelion-visualization/119748 "2018-02-14T14:16:05Z")

</div>

Hi, I am currently running kibana 5.6.2 and I can't draw data as line in timelion. Though, I'm able to draw my data with points and bars. For instance, .points(radius=3,weight=1,symbol=cross) would work but .lines(width…

---

## [Unable to get issuer certificate](https://discuss.elastic.co/t/unable-to-get-issuer-certificate/119345)

<div class="topic-metadata">

**Author:** [@slaypl](https://discuss.elastic.co/u/slaypl)\
**Replies:** 4\
**Last updated:** [February 14, 2018, 12:54pm UTC](https://discuss.elastic.co/t/unable-to-get-issuer-certificate/119345 "2018-02-14T12:54:29Z")

</div>

Hello, I have a weird problem with trying to establish a SSL communication between kibana and an elasticsearch cluster. Kibana and ES are both 6.2.1. Es: p18054.srv.pl.test.net Kibana: p18053.srv.pl.test.net Es clus…

---

## [Machine Learning solution with ELK](https://discuss.elastic.co/t/machine-learning-solution-with-elk/119661)

<div class="topic-metadata">

**Author:** [@NOUR](https://discuss.elastic.co/u/NOUR)\
**Replies:** 3\
**Last updated:** [February 14, 2018, 10:50am UTC](https://discuss.elastic.co/t/machine-learning-solution-with-elk/119661 "2018-02-14T10:50:09Z")

</div>

Hello everyone, I started my final academic project and i have to propose a solution for the machine learning in KIBANA. Did the ML plugin in kibana is recomended? Or can I connect the elk patform with R ? Any propos…

---

## [What is "bundled\_plugin\_ids" setting in Kibana config?](https://discuss.elastic.co/t/what-is-bundled-plugin-ids-setting-in-kibana-config/119589)

<div class="topic-metadata">

**Author:** [@Vitaly\_il](https://discuss.elastic.co/u/Vitaly_il)\
**Replies:** 2\
**Last updated:** [February 14, 2018, 9:40am UTC](https://discuss.elastic.co/t/what-is-bundled-plugin-ids-setting-in-kibana-config/119589 "2018-02-14T09:40:12Z")

</div>

During preparations to Kibana upgrade from 5.6 to 6.2 I noticed "bundled\_plugin\_ids" setting into its config. I couldn't find this setting in "Configuring Kibana" section of Kibana User Guide. Any ideas what is this se…

---

## [Displaying an "id" only if it appears N times in the period](https://discuss.elastic.co/t/displaying-an-id-only-if-it-appears-n-times-in-the-period/119679)

<div class="topic-metadata">

**Author:** [@DidierB](https://discuss.elastic.co/u/DidierB)\
**Replies:** 2\
**Last updated:** [February 14, 2018, 9:12am UTC](https://discuss.elastic.co/t/displaying-an-id-only-if-it-appears-n-times-in-the-period/119679 "2018-02-14T09:12:33Z")

</div>

Hello, I have a log of events containing API access data like \[ timestamp, id, other\_informations \]. We would like to find some information about it. We know that we can understand things by watching the amount of requ…

---

## [Kibana dashboards Could not locate that index-pattern (id: packetbeat-\*),](https://discuss.elastic.co/t/kibana-dashboards-could-not-locate-that-index-pattern-id-packetbeat/116301)

<div class="topic-metadata">

**Author:** [@kencrozier](https://discuss.elastic.co/u/kencrozier)\
**Replies:** 9\
**Last updated:** [February 14, 2018, 2:43am UTC](https://discuss.elastic.co/t/kibana-dashboards-could-not-locate-that-index-pattern-id-packetbeat/116301 "2018-02-14T02:43:41Z")

</div>

HI, I'm new to ELK so sorry if this is posted in the wrong place. I have a new installation, there are two VM's #1 is running the full stack ELK version 6.1.2 and the indices are created \[root@elkhost bin\]# curl -XGET …

---

## [ES/Kibana/XPack 6.2.1: issue assigning unassigned indexes](https://discuss.elastic.co/t/es-kibana-xpack-6-2-1-issue-assigning-unassigned-indexes/119543)

<div class="topic-metadata">

**Author:** [@jeroen1](https://discuss.elastic.co/u/jeroen1)\
**Replies:** 3\
**Last updated:** [February 13, 2018, 10:05pm UTC](https://discuss.elastic.co/t/es-kibana-xpack-6-2-1-issue-assigning-unassigned-indexes/119543 "2018-02-13T22:05:46Z")

</div>

root@test1:/opt/estest# curl -XGET localhost:9200/\_cat/shards?h=index,shard,prirep,state,unassigned.reason| grep UNASSIGNED % Total % Received % Xferd Average Speed Time Time Time Current …

---

## [Where to install Kibana?](https://discuss.elastic.co/t/where-to-install-kibana/119696)

<div class="topic-metadata">

**Author:** [@Turbo\_Fredriksson](https://discuss.elastic.co/u/Turbo_Fredriksson)\
**Replies:** 3\
**Last updated:** [February 13, 2018, 9:44pm UTC](https://discuss.elastic.co/t/where-to-install-kibana/119696 "2018-02-13T21:44:49Z")

</div>

I'm trying to setup my own ES service in AWS because the native AWS service isn't any where near enough suitable for what we need. It was nice and simple for us to get up and running, but we've now outgrown it.. At the …

---

## [Displaying difference of sum of two values](https://discuss.elastic.co/t/displaying-difference-of-sum-of-two-values/119097)

<div class="topic-metadata">

**Author:** [@divyaharshan](https://discuss.elastic.co/u/divyaharshan)\
**Replies:** 4\
**Last updated:** [February 13, 2018, 9:38pm UTC](https://discuss.elastic.co/t/displaying-difference-of-sum-of-two-values/119097 "2018-02-13T21:38:43Z")

</div>

I have a dataset loaded in the below csv format time, totalnumber, correctnumber, location I need to do a query similar to below sql select sum(totalnumber)- sum(correctnumber) group by time, location Is this possibl…

---

## [How to display time in kibana timelion](https://discuss.elastic.co/t/how-to-display-time-in-kibana-timelion/118321)

<div class="topic-metadata">

**Author:** [@Shailesh\_Vaidya](https://discuss.elastic.co/u/Shailesh_Vaidya)\
**Replies:** 4\
**Last updated:** [February 13, 2018, 9:10pm UTC](https://discuss.elastic.co/t/how-to-display-time-in-kibana-timelion/118321 "2018-02-13T21:10:16Z")

</div>

Hello, How can we show Time in Kibana timelion visualization in Kibana 6.0. I can show values in legends for metrics used. However could not see time.

---

## [Kibana Index is out of date](https://discuss.elastic.co/t/kibana-index-is-out-of-date/119694)

<div class="topic-metadata">

**Author:** [@Jim\_Campbell](https://discuss.elastic.co/u/Jim_Campbell)\
**Replies:** 2\
**Last updated:** [February 13, 2018, 8:54pm UTC](https://discuss.elastic.co/t/kibana-index-is-out-of-date/119694 "2018-02-13T20:54:24Z")

</div>

I have done a clean install of Suricata and the ELK stack version 6.2.1 on a Ubuntu 2016-04 machine. Everything went well until I pointed my browser at localhost:5601. After logging in the browser took me to the Kibana S…

---

## [Kibana is getting crashed after few request](https://discuss.elastic.co/t/kibana-is-getting-crashed-after-few-request/119638)

<div class="topic-metadata">

**Author:** [@ajit](https://discuss.elastic.co/u/ajit)\
**Replies:** 1\
**Last updated:** [February 13, 2018, 7:46pm UTC](https://discuss.elastic.co/t/kibana-is-getting-crashed-after-few-request/119638 "2018-02-13T19:46:24Z")

</div>

Hi, I have installed searchguard plugin in elasticsearch and kibana. But my elasticsearch is working fine and kibana is getting crashed. Getting below information in log file. \[2018-02-13T18:16:25,759\]\[INFO \]\[o.e.m.j.…

---

## [How to manage logstash within Kibana](https://discuss.elastic.co/t/how-to-manage-logstash-within-kibana/119624)

<div class="topic-metadata">

**Author:** [@jdavey-enable](https://discuss.elastic.co/u/jdavey-enable)\
**Replies:** 2\
**Last updated:** [February 13, 2018, 7:27pm UTC](https://discuss.elastic.co/t/how-to-manage-logstash-within-kibana/119624 "2018-02-13T19:27:12Z")

</div>

Hi, I'm new to Kibana, logstash and elasticsearch. I have just been give a system that was built by someone else and I'm trying to get to grips with how it all connects together. I've read through a lot of the documentat…

---

## [Exclude pattern in data table visualization](https://discuss.elastic.co/t/exclude-pattern-in-data-table-visualization/119595)

<div class="topic-metadata">

**Author:** [@krsna](https://discuss.elastic.co/u/krsna)\
**Replies:** 1\
**Last updated:** [February 13, 2018, 7:25pm UTC](https://discuss.elastic.co/t/exclude-pattern-in-data-table-visualization/119595 "2018-02-13T19:25:14Z")

</div>

I created a data table visualization and now want to exclude some values from the table. There is a field "Exclude" in the "Advanced" section. If something is entered there, that value is excluded from the table. But I w…

---

## [Trying to apply filter on scripted field](https://discuss.elastic.co/t/trying-to-apply-filter-on-scripted-field/117743)

<div class="topic-metadata">

**Author:** [@Shubham\_Mahajan](https://discuss.elastic.co/u/Shubham_Mahajan)\
**Replies:** 6\
**Last updated:** [February 13, 2018, 6:07pm UTC](https://discuss.elastic.co/t/trying-to-apply-filter-on-scripted-field/117743 "2018-02-13T18:07:15Z")

</div>

Hi team, previously I made a scripted field regarding folr calculcation time difference. Link to previous post: Elasticsearch giving warning for painless script time-diff: new Date().getTime() - doc\['@timestamp'\].val…

---

## [The timestamp is wrong](https://discuss.elastic.co/t/the-timestamp-is-wrong/117830)

<div class="topic-metadata">

**Author:** [@f26227279](https://discuss.elastic.co/u/f26227279)\
**Replies:** 5\
**Last updated:** [February 13, 2018, 5:34pm UTC](https://discuss.elastic.co/t/the-timestamp-is-wrong/117830 "2018-02-13T17:34:03Z")

</div>

I found that the data write into ES doesn't match my real time . it's later about 10 minutes. this is my logsatsh config: input{ udp{ host =\> "120.127.160.91" port =\> 5556 codec =\> netflow } } filter{ } …

---

## [Unable to sort kibana UI based on time fields in few environments](https://discuss.elastic.co/t/unable-to-sort-kibana-ui-based-on-time-fields-in-few-environments/119517)

<div class="topic-metadata">

**Author:** [@Gangadhar\_Mahadevan](https://discuss.elastic.co/u/Gangadhar_Mahadevan)\
**Replies:** 7\
**Last updated:** [February 13, 2018, 4:30pm UTC](https://discuss.elastic.co/t/unable-to-sort-kibana-ui-based-on-time-fields-in-few-environments/119517 "2018-02-13T16:30:17Z")

</div>

I am having an issue where am unable to sort logs in kibana based on timestamp in our production environment but works fine in pre-production. Our index pattern is same(logstash-cos-\*) and time field is set to orig\_times…

---

## [Help for writing a query](https://discuss.elastic.co/t/help-for-writing-a-query/119658)

<div class="topic-metadata">

**Author:** [@Adren](https://discuss.elastic.co/u/Adren)\
**Replies:** 4\
**Last updated:** [February 13, 2018, 3:39pm UTC](https://discuss.elastic.co/t/help-for-writing-a-query/119658 "2018-02-13T15:39:04Z")

</div>

Hello, I have this message for example: \<189\>date=2018-02-13 time=15:05:47 devname=FG-ORDITECH-1 devid=FG100D3G16817009 logid="0000000013" type="traffic" subtype="forward" level="notice" vd="root" logtime=1518530747 sr…

---

## [Check storage usage](https://discuss.elastic.co/t/check-storage-usage/119452)

<div class="topic-metadata">

**Author:** [@Jasonespo](https://discuss.elastic.co/u/Jasonespo)\
**Replies:** 4\
**Last updated:** [February 13, 2018, 2:25pm UTC](https://discuss.elastic.co/t/check-storage-usage/119452 "2018-02-13T14:25:17Z")

</div>

Hi guys, Is it possible to query for the total disk spaced used for one index over a 24 hour period in the past? E.g Thursday 8th Feb 12:00 to 9th Feb 12:00. J

---

## [Geo\_point error in visualization](https://discuss.elastic.co/t/geo-point-error-in-visualization/119352)

<div class="topic-metadata">

**Author:** [@ggajanan](https://discuss.elastic.co/u/ggajanan)\
**Replies:** 7\
**Last updated:** [February 13, 2018, 1:32pm UTC](https://discuss.elastic.co/t/geo-point-error-in-visualization/119352 "2018-02-13T13:32:18Z")

</div>

Hi, Using ELK stack 6.2.0 For weblogs getting - Index pattern does not contain any of the following field types: geo\_point error in Kibana while creating the Visualize -\> Map -\> Coordinate Map \[image\] This is how l…

---

## [Login is current disabled under Kibana UI](https://discuss.elastic.co/t/login-is-current-disabled-under-kibana-ui/119569)

<div class="topic-metadata">

**Author:** [@babacoders](https://discuss.elastic.co/u/babacoders)\
**Replies:** 17\
**Last updated:** [February 13, 2018, 9:46am UTC](https://discuss.elastic.co/t/login-is-current-disabled-under-kibana-ui/119569 "2018-02-13T09:46:32Z")

</div>

Hello, I am using https://github.com/elastic/stack-docker repository. While following doc under README.md, I cloned the Repository, used docker-compose up and services looks good. While I checked the logs: root@ubuntu…

---

## [\[Kibana\] Current System Date](https://discuss.elastic.co/t/kibana-current-system-date/118345)

<div class="topic-metadata">

**Author:** [@peter.alfafara](https://discuss.elastic.co/u/peter.alfafara)\
**Replies:** 3\
**Last updated:** [February 13, 2018, 3:38am UTC](https://discuss.elastic.co/t/kibana-current-system-date/118345 "2018-02-13T03:38:05Z")

</div>

Hi Experts, I'd like to ask if the following requirement is possible: Basically I monitor the state of my database every 30 mins and sends details of database locks to ELK and stores it in a database-lock index. So eve…

---

## [Metrics and Map Overlays in Kibana](https://discuss.elastic.co/t/metrics-and-map-overlays-in-kibana/119519)

<div class="topic-metadata">

**Author:** [@georgezoto](https://discuss.elastic.co/u/georgezoto)\
**Replies:** 2\
**Last updated:** [February 12, 2018, 10:03pm UTC](https://discuss.elastic.co/t/metrics-and-map-overlays-in-kibana/119519 "2018-02-12T22:03:04Z")

</div>

Hello everyone, I needed some guidance/recommendations/thumbs up/support regarding a new enhancement request I created at: I feel it is something a lot of users would be interested in. Thank you, George Zoto

---

## [Looking for a better method to import dashboards](https://discuss.elastic.co/t/looking-for-a-better-method-to-import-dashboards/119506)

<div class="topic-metadata">

**Author:** [@dorj1234](https://discuss.elastic.co/u/dorj1234)\
**Replies:** 2\
**Last updated:** [February 12, 2018, 9:56pm UTC](https://discuss.elastic.co/t/looking-for-a-better-method-to-import-dashboards/119506 "2018-02-12T21:56:44Z")

</div>

Hello, looking for advice on a set of visualizations and their dashboards, that I need to duplicate. I am hoping there is a better way than what I do below. I have index1 with existing dashboards. Same data from differ…

---

## [6.2.1: Courier Fetch: 5 of 160 shards failed](https://discuss.elastic.co/t/6-2-1-courier-fetch-5-of-160-shards-failed/119539)

<div class="topic-metadata">

**Author:** [@davidkarlsen](https://discuss.elastic.co/u/davidkarlsen)\
**Replies:** 2\
**Last updated:** [February 12, 2018, 8:19pm UTC](https://discuss.elastic.co/t/6-2-1-courier-fetch-5-of-160-shards-failed/119539 "2018-02-12T20:19:37Z")

</div>

After upgrading (it can of course be a coincidence) from 5.6.x to 6.2.1 I get: "Courier Fetch: 5 of 160 shards failed." when doing attribute.raw:"value" searches. Bug? Any other problem? Nothing in the logs.

---

## [Unable to see all fields in Kibana](https://discuss.elastic.co/t/unable-to-see-all-fields-in-kibana/119428)

<div class="topic-metadata">

**Author:** [@MaximeP](https://discuss.elastic.co/u/MaximeP)\
**Replies:** 2\
**Last updated:** [February 12, 2018, 7:00pm UTC](https://discuss.elastic.co/t/unable-to-see-all-fields-in-kibana/119428 "2018-02-12T19:00:43Z")

</div>

Hi, I use logstash to receive syslog data from my network devices but I can not see all the fields I want in the discover menu. I receive syslogs from a reverse proxy and I would like to see fields like "http\_host" or …

---

## [Data table - kibana 6.0.1](https://discuss.elastic.co/t/data-table-kibana-6-0-1/119468)

<div class="topic-metadata">

**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\
**Replies:** 1\
**Last updated:** [February 12, 2018, 4:59pm UTC](https://discuss.elastic.co/t/data-table-kibana-6-0-1/119468 "2018-02-12T16:59:42Z")

</div>

Hi All, Iam trying to create data table , with 5 fields and I get total document of 100, which is perfect.When am trying to add 6 th field (fqdn) , the document count reduced to 90. I figured it out it could be that 10…

---

## [Можно ли убрать dev tools в кибане](https://discuss.elastic.co/t/dev-tools/119421)

<div class="topic-metadata">

**Author:** [@aziz](https://discuss.elastic.co/u/aziz)\
**Replies:** 1\
**Last updated:** [February 12, 2018, 4:51pm UTC](https://discuss.elastic.co/t/dev-tools/119421 "2018-02-12T16:51:52Z")

</div>

Здравствуйте! Можно ли в кибане установить разные доступы, чтобы для некоторых пользователей например, не выводился меню "Dev tools"?

---

## [Is it possible to remove the dev tools in the Kiban?](https://discuss.elastic.co/t/is-it-possible-to-remove-the-dev-tools-in-the-kiban/119430)

<div class="topic-metadata">

**Author:** [@aziz](https://discuss.elastic.co/u/aziz)\
**Replies:** 1\
**Last updated:** [February 12, 2018, 4:46pm UTC](https://discuss.elastic.co/t/is-it-possible-to-remove-the-dev-tools-in-the-kiban/119430 "2018-02-12T16:46:25Z")

</div>

Hello! Is it possible to set different accesses in kiban, so that for some users, for example, the "Dev tools" menu is not displayed?

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=867)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=869)
