# Kibana **URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=869 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 870 --- ## [CLI for creating index-pattens in .kibana in 6.2.x](https://discuss.elastic.co/t/cli-for-creating-index-pattens-in-kibana-in-6-2-x/119361)
**Author:** [@parky118](https://discuss.elastic.co/u/parky118)\ **Replies:** 3\ **Last updated:** [February 12, 2018, 4:42pm UTC](https://discuss.elastic.co/t/cli-for-creating-index-pattens-in-kibana-in-6-2-x/119361 "2018-02-12T16:42:10Z")
Previously in 5.1.2 we used to use the following cURL commands to programmatically create the default index and other indexes within Kibana: curl -XPUT http://localhost:9200/.kibana/index-pattern/\* -d '{"title":"", "tim… --- ## [Kibana unable to see stored field "\_size"?](https://discuss.elastic.co/t/kibana-unable-to-see-stored-field-size/119294)
**Author:** [@AJinkya](https://discuss.elastic.co/u/AJinkya)\ **Replies:** 2\ **Last updated:** [February 12, 2018, 4:30pm UTC](https://discuss.elastic.co/t/kibana-unable-to-see-stored-field-size/119294 "2018-02-12T16:30:03Z")
Hi All, I have an elasticsearch cluster with around 4Bn docs. I am trying to do some analysis to get insights in our document sizes. For this I am using the mapper-size plugin to enable the "\_size" field. Now after i bu… --- ## [Unable to view https://demo.elastic.co/ dashboards](https://discuss.elastic.co/t/unable-to-view-https-demo-elastic-co-dashboards/119229)
**Author:** [@annk](https://discuss.elastic.co/u/annk)\ **Replies:** 3\ **Last updated:** [February 12, 2018, 4:29pm UTC](https://discuss.elastic.co/t/unable-to-view-https-demo-elastic-co-dashboards/119229 "2018-02-12T16:29:54Z")
I was able to checkout all demo dashboards few days ago , its not working at the moment. I am getting this info line : Index Patterns: In order to visualize and explore data in Kibana, you'll need to create an index pa… --- ## [How to create time range conditions on Timelion?](https://discuss.elastic.co/t/how-to-create-time-range-conditions-on-timelion/119404)
**Author:** [@keeshqs](https://discuss.elastic.co/u/keeshqs)\ **Replies:** 1\ **Last updated:** [February 12, 2018, 4:28pm UTC](https://discuss.elastic.co/t/how-to-create-time-range-conditions-on-timelion/119404 "2018-02-12T16:28:51Z")
Hi all, I'm not sure if it's possible on timelion, but on elasticsearch we are receiving document every 1 minute. These documents contain SQL database related metric (such as Object Locks and Database Locks), and each h… --- ## [How to save wildcard query as filter to pin in Kibana?](https://discuss.elastic.co/t/how-to-save-wildcard-query-as-filter-to-pin-in-kibana/119184)
**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\ **Replies:** 1\ **Last updated:** [February 12, 2018, 3:18pm UTC](https://discuss.elastic.co/t/how-to-save-wildcard-query-as-filter-to-pin-in-kibana/119184 "2018-02-12T15:18:59Z")
Hi, I am using ELK GA5.0.0. I have a field field\_a in my index. I run the following query; field\_a:qwe\* My intention is to display entries having field\_a entries qwe001, qwe002, qwe003 etc. Also, I would like to displ… --- ## [Most recent event for devices](https://discuss.elastic.co/t/most-recent-event-for-devices/119298)
**Author:** [@twojays](https://discuss.elastic.co/u/twojays)\ **Replies:** 1\ **Last updated:** [February 12, 2018, 1:05pm UTC](https://discuss.elastic.co/t/most-recent-event-for-devices/119298 "2018-02-12T13:05:58Z")
Hi, I have a fleet of IoT devices that post every couple of minutes their status which could be online or offline. My goal is to have a metric that will show a count of all devices that are currently online, and a count… --- ## [Disabling check for non existing indices](https://discuss.elastic.co/t/disabling-check-for-non-existing-indices/119082)
**Author:** [@Ailurus](https://discuss.elastic.co/u/Ailurus)\ **Replies:** 4\ **Last updated:** [February 12, 2018, 12:53pm UTC](https://discuss.elastic.co/t/disabling-check-for-non-existing-indices/119082 "2018-02-12T12:53:02Z")
Hi, I have already used ELK 5.2 and i'm now testing ELK 5.6.7 (currently, the latest 5+ version). When i'm automatically setting up my Elastic node, i configure the Kibana index-pattern. Basically, I send some HTTP re… --- ## [Create a visualization with a metric expressing the ratio between two other aggregations](https://discuss.elastic.co/t/create-a-visualization-with-a-metric-expressing-the-ratio-between-two-other-aggregations/118686)
**Author:** [@Carlo\_Arnaboldi](https://discuss.elastic.co/u/Carlo_Arnaboldi)\ **Replies:** 2\ **Last updated:** [February 12, 2018, 7:56am UTC](https://discuss.elastic.co/t/create-a-visualization-with-a-metric-expressing-the-ratio-between-two-other-aggregations/118686 "2018-02-12T07:56:30Z")
Greetings. Let's say that I have this very simple index, where each document is made by 3 columns: Col.A -\> can be 1,2 or 3 Col.B -\> contains a number between 1 and 1000 Col.C -\> like Col.B, it contains a number betw… --- ## [Insert dashboard from Kibana 4.1.3 to Kibana 6.1](https://discuss.elastic.co/t/insert-dashboard-from-kibana-4-1-3-to-kibana-6-1/118858)
**Author:** [@dorinand](https://discuss.elastic.co/u/dorinand)\ **Replies:** 2\ **Last updated:** [February 12, 2018, 9:33am UTC](https://discuss.elastic.co/t/insert-dashboard-from-kibana-4-1-3-to-kibana-6-1/118858 "2018-02-12T09:33:34Z")
I am using Kibana 4.1.3. I built ELK 6.1.1. and I would like to import dashboard and visualization from old Kibana. I download dashboard in json format but when I tried to import it, it does not work (Saved Objects: Save… --- ## [Old kibana saved objects still showing after changing “kibana.index” config setting](https://discuss.elastic.co/t/old-kibana-saved-objects-still-showing-after-changing-kibana-index-config-setting/119070)
**Author:** [@apbleonard](https://discuss.elastic.co/u/apbleonard)\ **Replies:** 2\ **Last updated:** [February 12, 2018, 8:56am UTC](https://discuss.elastic.co/t/old-kibana-saved-objects-still-showing-after-changing-kibana-index-config-setting/119070 "2018-02-12T08:56:52Z")
Steps to recreate: default install and start of kibana (5.2.0) save a saved search, visualization or dashboard shutdown, change kibana.index in config/kibana.yml: from ".kibana" (default) to: ".kibananew" restart ki… --- ## [Problems with date fields](https://discuss.elastic.co/t/problems-with-date-fields/119193)
**Author:** [@dyabolik00](https://discuss.elastic.co/u/dyabolik00)\ **Replies:** 5\ **Last updated:** [February 12, 2018, 6:50am UTC](https://discuss.elastic.co/t/problems-with-date-fields/119193 "2018-02-12T06:50:12Z")
Hello, i have set up logstash to get logs from syslog palo alto. in kibana under discover i see thetimestamp like February 9th 2018, 10:00:54.000 and the datefileds like TimeLogged:February 9th 2018, 11:00:53.000 The… --- ## [Custom key/value mapping](https://discuss.elastic.co/t/custom-key-value-mapping/119316)
**Author:** [@davidmorabito](https://discuss.elastic.co/u/davidmorabito)\ **Replies:** 2\ **Last updated:** [February 10, 2018, 5:20am UTC](https://discuss.elastic.co/t/custom-key-value-mapping/119316 "2018-02-10T05:20:00Z")
Hi there, I have a requirement that I'm not sure if Kibana would be able to address: I'm ingesting two logs with Elasticsearch: log1: contains responses from an API, and they have an unique status code. E.g. ABC123 l… --- ## [Upgrade to kibana 6.1.3 from 6.0.0 removed default index selection](https://discuss.elastic.co/t/upgrade-to-kibana-6-1-3-from-6-0-0-removed-default-index-selection/119300)
**Author:** [@aaronloesattv](https://discuss.elastic.co/u/aaronloesattv)\ **Replies:** 1\ **Last updated:** [February 9, 2018, 11:22pm UTC](https://discuss.elastic.co/t/upgrade-to-kibana-6-1-3-from-6-0-0-removed-default-index-selection/119300 "2018-02-09T23:22:49Z")
just upgraded to Kibana 6.1.3 from 6.0.0 and after logging into kibana, every tab (discover, visualize, etc) kept redirecting me back to the manage index page. I had to reselect one of our indexes to be the default index… --- ## [Which Visualization works best for computing averages?](https://discuss.elastic.co/t/which-visualization-works-best-for-computing-averages/119140)
**Author:** [@tstapenhorst](https://discuss.elastic.co/u/tstapenhorst)\ **Replies:** 7\ **Last updated:** [February 9, 2018, 10:43pm UTC](https://discuss.elastic.co/t/which-visualization-works-best-for-computing-averages/119140 "2018-02-09T22:43:04Z")
Hello, I'm bring into Logstash student attendance data (Days Enrolled - EN, and Days Present - PR). I want to sum up all the EN days for every student at each school, sum up all PR days for every student at each school… --- ## [How do I query for a tag in Kibana?](https://discuss.elastic.co/t/how-do-i-query-for-a-tag-in-kibana/119144)
**Author:** [@daved](https://discuss.elastic.co/u/daved)\ **Replies:** 11\ **Last updated:** [February 9, 2018, 9:29pm UTC](https://discuss.elastic.co/t/how-do-i-query-for-a-tag-in-kibana/119144 "2018-02-09T21:29:53Z")
Hi, I'm trying to understand the syntax to query for the existence of a tag in Kibana? I understand I could use filters but I want to be able to use OR to combine results from multiple tags (from what I see this isn't p… --- ## [Performing a regex search in Kibana dev tools](https://discuss.elastic.co/t/performing-a-regex-search-in-kibana-dev-tools/119273)
**Author:** [@ghouston10](https://discuss.elastic.co/u/ghouston10)\ **Replies:** 1\ **Last updated:** [February 9, 2018, 7:38pm UTC](https://discuss.elastic.co/t/performing-a-regex-search-in-kibana-dev-tools/119273 "2018-02-09T19:38:40Z")
Hi, I am trying to perform a regex search in dev tools within kibana. Current query: GET test/\_search { "query": { "regexp":{ "BATAPSN": ".BDT\[0-9\]{4}." } } } I want the query to identify BDT, followed by 4 nu… --- ## [Multiline logs are not displaying in kibana](https://discuss.elastic.co/t/multiline-logs-are-not-displaying-in-kibana/119217)
**Author:** [@vaidehi9039](https://discuss.elastic.co/u/vaidehi9039)\ **Replies:** 2\ **Last updated:** [February 9, 2018, 7:24pm UTC](https://discuss.elastic.co/t/multiline-logs-are-not-displaying-in-kibana/119217 "2018-02-09T19:24:55Z")
Hi, I am using multiline option in filebeat, the issue is its creating new index with the same name for each hits. And also if i use @timestamp as "time filter field name" it will not show any logs, if i use "I dont wa… --- ## [Painless Sum aggregation with scripted field](https://discuss.elastic.co/t/painless-sum-aggregation-with-scripted-field/119210)
**Author:** [@Wills1](https://discuss.elastic.co/u/Wills1)\ **Replies:** 1\ **Last updated:** [February 9, 2018, 6:42pm UTC](https://discuss.elastic.co/t/painless-sum-aggregation-with-scripted-field/119210 "2018-02-09T18:42:07Z")
Hi ! I have a question relative to scripted field in Kibana. It is possible to summe all the values of a field in painless with scripted field ? Something like: SUM(doc.\['somefield'\].value) ? --- ## [Kibana - do I need to install XPack?](https://discuss.elastic.co/t/kibana-do-i-need-to-install-xpack/119238)
**Author:** [@titan1978](https://discuss.elastic.co/u/titan1978)\ **Replies:** 1\ **Last updated:** [February 9, 2018, 5:08pm UTC](https://discuss.elastic.co/t/kibana-do-i-need-to-install-xpack/119238 "2018-02-09T17:08:13Z")
More specifically, I have installled XPACK on ElasticSearch. Looking at a few posts, I guess I got muddled since some people have claimed that Kibana will use ElasticSearch's XPACK for security(for example, user names) a… --- ## [Kibana Index pattern dynamic](https://discuss.elastic.co/t/kibana-index-pattern-dynamic/119084)
**Author:** [@Jathin](https://discuss.elastic.co/u/Jathin)\ **Replies:** 4\ **Last updated:** [February 9, 2018, 4:45pm UTC](https://discuss.elastic.co/t/kibana-index-pattern-dynamic/119084 "2018-02-09T16:45:05Z")
I have a Log stream to ES indices that roll daily and i need to store 90 days of data. How can i setup a dashboard that searches data from last two days. And then when needed extrapolate to old dates when needed. Cur… --- ## [Beats monitoring in X-Pack Kibana](https://discuss.elastic.co/t/beats-monitoring-in-x-pack-kibana/118730)
**Author:** [@paulkeogh](https://discuss.elastic.co/u/paulkeogh)\ **Replies:** 1\ **Last updated:** [February 9, 2018, 4:25pm UTC](https://discuss.elastic.co/t/beats-monitoring-in-x-pack-kibana/118730 "2018-02-09T16:25:03Z")
I read this new feature with interest. Is there a guide to how a custom Beat must be modified to take advantage of this feature ? Is it something that comes for free with libbeat ? Thanks, --- ## [Creating Watcher from Request Data in Kibana](https://discuss.elastic.co/t/creating-watcher-from-request-data-in-kibana/118743)
**Author:** [@thelonestargeek](https://discuss.elastic.co/u/thelonestargeek)\ **Replies:** 1\ **Last updated:** [February 9, 2018, 3:10pm UTC](https://discuss.elastic.co/t/creating-watcher-from-request-data-in-kibana/118743 "2018-02-09T15:10:30Z")
Is there a way to use the "Request" JSON from the "Discover" section of kibana and turn it into a watcher? I'm having an issue figuring how to do an "OR" in a watcher, but I have the JSON. --- ## [KIbana 6 visualisations](https://discuss.elastic.co/t/kibana-6-visualisations/119055)
**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\ **Replies:** 3\ **Last updated:** [February 9, 2018, 12:34pm UTC](https://discuss.elastic.co/t/kibana-6-visualisations/119055 "2018-02-09T12:34:24Z")
Hi All, Iam trying to upload the sample metric dashboard using kibana console, i got the metricbeat dashboard json in github,when am trying to import it am getting this message \[image\] Please let me know , how to get… --- ## [6.2.0 - Some "Quick time ranges" have been removed](https://discuss.elastic.co/t/6-2-0-some-quick-time-ranges-have-been-removed/119076)
**Author:** [@quentin.legraverend](https://discuss.elastic.co/u/quentin.legraverend)\ **Replies:** 3\ **Last updated:** [February 9, 2018, 12:32pm UTC](https://discuss.elastic.co/t/6-2-0-some-quick-time-ranges-have-been-removed/119076 "2018-02-09T12:32:48Z")
Hi there, I upgraded my dev environnement in version 6.2.0 this morning and observed that some time ranges I used to select in "Quick" section are no longer available. Including "Yesterday" and "Day before yesterday" am… --- ## [X-pack plugin for kibana](https://discuss.elastic.co/t/x-pack-plugin-for-kibana/119208)
**Author:** [@Gaurav\_Agarwal](https://discuss.elastic.co/u/Gaurav_Agarwal)\ **Replies:** 3\ **Last updated:** [February 9, 2018, 11:32am UTC](https://discuss.elastic.co/t/x-pack-plugin-for-kibana/119208 "2018-02-09T11:32:46Z")
X pack plugin for kibana after installation is not allowing to open kibana Oops! Looks like something went wrong. Refreshing may do the trick. Go back Clear your session Fatal Error Uncaught Error: \[$injector:unpr… --- ## [Keeping only latest "Date Histogram" aggregation in a datatable](https://discuss.elastic.co/t/keeping-only-latest-date-histogram-aggregation-in-a-datatable/117842)
**Author:** [@anthony-o](https://discuss.elastic.co/u/anthony-o)\ **Replies:** 4\ **Last updated:** [February 9, 2018, 10:22am UTC](https://discuss.elastic.co/t/keeping-only-latest-date-histogram-aggregation-in-a-datatable/117842 "2018-02-09T10:22:29Z")
Here is my index structure: type, times. The type field can be either "error" or "valid". I would like to have the following datatable: +--------------------+--------------------------+--------------+ | @timestamp per… --- ## [How I can add 3d graph visualization in kibana(version is 5.6.2))](https://discuss.elastic.co/t/how-i-can-add-3d-graph-visualization-in-kibana-version-is-5-6-2/112747)
**Author:** [@venkat545](https://discuss.elastic.co/u/venkat545)\ **Replies:** 11\ **Last updated:** [January 19, 2018, 9:59am UTC](https://discuss.elastic.co/t/how-i-can-add-3d-graph-visualization-in-kibana-version-is-5-6-2/112747 "2018-01-19T09:59:09Z")
Hi i want to display 3d charts in kibana..i found some link in elastic search - https://github.com/virusu/3D\_kibana\_charts\_vis#installation-steps … --- ## [Filebeat Errors](https://discuss.elastic.co/t/filebeat-errors/119102)
**Author:** [@elJoeyJojo](https://discuss.elastic.co/u/elJoeyJojo)\ **Replies:** 6\ **Last updated:** [February 9, 2018, 8:35am UTC](https://discuss.elastic.co/t/filebeat-errors/119102 "2018-02-09T08:35:15Z")
Hello there, Trying in the Kibana section since the Filebeat is not much help and hardly anyone gets back to me. I am having this issue with Filebeat configuration in Kibana. This is my setup: Kibana Elasticsearch Vers… --- ## [Kibana error on import visualisation "Could not locate that index-pattern-field"](https://discuss.elastic.co/t/kibana-error-on-import-visualisation-could-not-locate-that-index-pattern-field/119168)
**Author:** [@Shantanu\_Deshmukh](https://discuss.elastic.co/u/Shantanu_Deshmukh)\ **Replies:** 1\ **Last updated:** [February 9, 2018, 7:07am UTC](https://discuss.elastic.co/t/kibana-error-on-import-visualisation-could-not-locate-that-index-pattern-field/119168 "2018-02-09T07:07:21Z")
I had created several visualisations. Today after refreshing index pattern in Management tab all of visualisations are giving me error Could not locate that index-pattern (id: audit-logs-new). This index pattern is alrea… --- ## [How to hide some menus in Kibana 6.x](https://discuss.elastic.co/t/how-to-hide-some-menus-in-kibana-6-x/118827)
**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\ **Replies:** 5\ **Last updated:** [February 9, 2018, 5:19am UTC](https://discuss.elastic.co/t/how-to-hide-some-menus-in-kibana-6-x/118827 "2018-02-09T05:19:09Z")
how to hide timelion devtools monitoring managment in kibana sidemenu ? i have tried console.enabled: false timelion.enabled: false but didn't get any changes what is the alternative way for this? [Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=868) [Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=870)