# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=876

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 877

---

## [Register my custom doc view only in some custom plugins](https://discuss.elastic.co/t/register-my-custom-doc-view-only-in-some-custom-plugins/116891)

<div class="topic-metadata">

**Author:** [@Hamza\_BENNANI](https://discuss.elastic.co/u/Hamza_BENNANI)\
**Replies:** 1\
**Last updated:** [January 24, 2018, 5:29pm UTC](https://discuss.elastic.co/t/register-my-custom-doc-view-only-in-some-custom-plugins/116891 "2018-01-24T17:29:25Z")

</div>

Hi, I've developed some custom Kibana applications and I would like to register a custom doc view that I created only in some apps and not all of them. Is there a way to do that in Kibana? Actually my doc view is shown…

---

## [Extract string from message field kibana](https://discuss.elastic.co/t/extract-string-from-message-field-kibana/116549)

<div class="topic-metadata">

**Author:** [@saikrishnagaddipati](https://discuss.elastic.co/u/saikrishnagaddipati)\
**Replies:** 4\
**Last updated:** [January 24, 2018, 5:20pm UTC](https://discuss.elastic.co/t/extract-string-from-message-field-kibana/116549 "2018-01-24T17:20:13Z")

</div>

I am using kibana-5.6.3 I have messages populating in kibana. I have the message in kibana as bleow 1330207 Backup host-44 Done \*\*0\*\* 2 fit-dev host-44 01/11/2018 18:00:02 01/11/2018 18:03:28 000:03:26 I want to extr…

---

## [Why does the mapping of Kibana index change after 6.0](https://discuss.elastic.co/t/why-does-the-mapping-of-kibana-index-change-after-6-0/116782)

<div class="topic-metadata">

**Author:** [@supergunme](https://discuss.elastic.co/u/supergunme)\
**Replies:** 1\
**Last updated:** [January 24, 2018, 4:39pm UTC](https://discuss.elastic.co/t/why-does-the-mapping-of-kibana-index-change-after-6-0/116782 "2018-01-24T16:39:47Z")

</div>

previously I got a problem. and I posted it in Elastic forum. "I used python to import/export index-pattern and other saved objects automatically. Even there were some changes in each version, but mostly the script work…

---

## [Split Kibana dashboard into two group](https://discuss.elastic.co/t/split-kibana-dashboard-into-two-group/116784)

<div class="topic-metadata">

**Author:** [@albeniz71](https://discuss.elastic.co/u/albeniz71)\
**Replies:** 1\
**Last updated:** [January 24, 2018, 4:39pm UTC](https://discuss.elastic.co/t/split-kibana-dashboard-into-two-group/116784 "2018-01-24T16:39:13Z")

</div>

In a single Kibana dashboard screen, I want to split my charts into vertically splitted two groups which has filter conditions it's own. Purpose of this thing is to compare different two timeseries in a single screen.Lik…

---

## [Scripted fields regex](https://discuss.elastic.co/t/scripted-fields-regex/116252)

<div class="topic-metadata">

**Author:** [@htechno](https://discuss.elastic.co/u/htechno)\
**Replies:** 11\
**Last updated:** [January 24, 2018, 4:21pm UTC](https://discuss.elastic.co/t/scripted-fields-regex/116252 "2018-01-24T16:21:41Z")

</div>

Hi there, I collect data from ntopng in Elasticsearch I have a "HTTP\_HOST.keyword" field that contains the FQDN I need to create a field containing only the domain name of the first and second level Regex: \[^.\] + . \[…

---

## [How to display Panels in Kibana from different Indices?](https://discuss.elastic.co/t/how-to-display-panels-in-kibana-from-different-indices/116695)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 7\
**Last updated:** [January 24, 2018, 4:21pm UTC](https://discuss.elastic.co/t/how-to-display-panels-in-kibana-from-different-indices/116695 "2018-01-24T16:21:22Z")

</div>

I have 2 indices av1 and av2 , in Kibana I am merging both the indices into one like av\*. With this approach I got 100 fields (50 each index). Now I want to create dashboard which will have multiple panels , some of the …

---

## [Using scripted fields in kibana to create a new field by parsing an existing message field](https://discuss.elastic.co/t/using-scripted-fields-in-kibana-to-create-a-new-field-by-parsing-an-existing-message-field/116595)

<div class="topic-metadata">

**Author:** [@saikrishnagaddipati](https://discuss.elastic.co/u/saikrishnagaddipati)\
**Replies:** 1\
**Last updated:** [January 24, 2018, 3:52pm UTC](https://discuss.elastic.co/t/using-scripted-fields-in-kibana-to-create-a-new-field-by-parsing-an-existing-message-field/116595 "2018-01-24T15:52:30Z")

</div>

Hi I am using Kibana 5.6.4, I have two fields in the documents as below message: The WMI Performance hostWiley 0 down beat.hostname: hostWiley I want to create scripted field in kibana which can parse the message fi…

---

## [Questions on Graph](https://discuss.elastic.co/t/questions-on-graph/116270)

<div class="topic-metadata">

**Author:** [@David\_Tomasheski](https://discuss.elastic.co/u/David_Tomasheski)\
**Replies:** 3\
**Last updated:** [January 24, 2018, 3:33pm UTC](https://discuss.elastic.co/t/questions-on-graph/116270 "2018-01-24T15:33:12Z")

</div>

So i have three questions: I know I can share either a snapshot or a saved version of visualizations. Is there something similar for Graph so I can display it on a page outside Kibana? I saw something saying New Works…

---

## [Creating Dashboard with different time range Charts](https://discuss.elastic.co/t/creating-dashboard-with-different-time-range-charts/116532)

<div class="topic-metadata">

**Author:** [@saad](https://discuss.elastic.co/u/saad)\
**Replies:** 1\
**Last updated:** [January 24, 2018, 3:32pm UTC](https://discuss.elastic.co/t/creating-dashboard-with-different-time-range-charts/116532 "2018-01-24T15:32:49Z")

</div>

Hi I want to create dashboard with three charts. These charts should visualize data in different time ranges. the first chart should display the last 24hours, the second chart should display data for the last week (7da…

---

## [How to index scripted field with curl](https://discuss.elastic.co/t/how-to-index-scripted-field-with-curl/116534)

<div class="topic-metadata">

**Author:** [@dr\_dob](https://discuss.elastic.co/u/dr_dob)\
**Replies:** 1\
**Last updated:** [January 24, 2018, 3:31pm UTC](https://discuss.elastic.co/t/how-to-index-scripted-field-with-curl/116534 "2018-01-24T15:31:23Z")

</div>

How can I index a scripted field to the .kibana index? Something like curl -XPOST 'http://localhost:9200/.kibana/scriptedfield/Test' -d 'code'

---

## [Are scripted fields saved as objects anywhere](https://discuss.elastic.co/t/are-scripted-fields-saved-as-objects-anywhere/116537)

<div class="topic-metadata">

**Author:** [@dr\_dob](https://discuss.elastic.co/u/dr_dob)\
**Replies:** 1\
**Last updated:** [January 24, 2018, 3:24pm UTC](https://discuss.elastic.co/t/are-scripted-fields-saved-as-objects-anywhere/116537 "2018-01-24T15:24:48Z")

</div>

Are scripted fields saved as objects anywhere? I only see visualizations, dashboards, and searches under saved objects in kibana.

---

## [Not able to send notifications to mattermost from x-pack watcher with Elastic search and Kibana version 5.6.0](https://discuss.elastic.co/t/not-able-to-send-notifications-to-mattermost-from-x-pack-watcher-with-elastic-search-and-kibana-version-5-6-0/116607)

<div class="topic-metadata">

**Author:** [@amruta.mohite](https://discuss.elastic.co/u/amruta.mohite)\
**Replies:** 3\
**Last updated:** [January 24, 2018, 12:32pm UTC](https://discuss.elastic.co/t/not-able-to-send-notifications-to-mattermost-from-x-pack-watcher-with-elastic-search-and-kibana-version-5-6-0/116607 "2018-01-24T12:32:15Z")

</div>

I am using x-pack for monitoring and sending alerts on elastic search logs. I am able to send email alerts using x-pack but not able to send notifications to mattermost, I am using webhook configurations. "actions" : { …

---

## [Get Index ID](https://discuss.elastic.co/t/get-index-id/116529)

<div class="topic-metadata">

**Author:** [@vanian](https://discuss.elastic.co/u/vanian)\
**Replies:** 1\
**Last updated:** [January 24, 2018, 11:25am UTC](https://discuss.elastic.co/t/get-index-id/116529 "2018-01-24T11:25:27Z")

</div>

I've recreated an index and would like to fix my searches to point to the new version; however, I have no idea how to find the ID of this new index. Can anyone help? Thank you. \[Capture\]

---

## [DataTable Visualization Error in Kibana](https://discuss.elastic.co/t/datatable-visualization-error-in-kibana/116821)

<div class="topic-metadata">

**Author:** [@Shalvin\_Kumar](https://discuss.elastic.co/u/Shalvin_Kumar)\
**Replies:** 1\
**Last updated:** [January 24, 2018, 9:44am UTC](https://discuss.elastic.co/t/datatable-visualization-error-in-kibana/116821 "2018-01-24T09:44:32Z")

</div>

Hi Community, I am working on generating a report through visualization in Kibana. Here is how my visualization looks like : \[discuss\_conf1\] Let's see the buckets I have: Based on TradeDate - Working as expected. B…

---

## [Cookie based auth x-pack](https://discuss.elastic.co/t/cookie-based-auth-x-pack/116620)

<div class="topic-metadata">

**Author:** [@anton-putau](https://discuss.elastic.co/u/anton-putau)\
**Replies:** 4\
**Last updated:** [January 23, 2018, 10:27am UTC](https://discuss.elastic.co/t/cookie-based-auth-x-pack/116620 "2018-01-23T10:27:01Z")

</div>

I would like to allow site visitors to view kibana charts. I need something like custom realm to read site cookies and determine which permissions user have. Is it possible to achieve? Are there any existing solutions ? …

---

## [Why does the cookie "sid" changes by every request after i'm logged in?](https://discuss.elastic.co/t/why-does-the-cookie-sid-changes-by-every-request-after-im-logged-in/116790)

<div class="topic-metadata">

**Author:** [@zjsun](https://discuss.elastic.co/u/zjsun)\
**Replies:** 1\
**Last updated:** [January 24, 2018, 5:31am UTC](https://discuss.elastic.co/t/why-does-the-cookie-sid-changes-by-every-request-after-im-logged-in/116790 "2018-01-24T05:31:10Z")

</div>

Hi, Why does the cookie "sid" changes by every request after i'm logged in ? versions: x-pack:6.1.1 kibana: 6.1.1 elasticsearch:6.1.1 Thanks.

---

## [How to run kibana in IIS](https://discuss.elastic.co/t/how-to-run-kibana-in-iis/116604)

<div class="topic-metadata">

**Author:** [@peterch](https://discuss.elastic.co/u/peterch)\
**Replies:** 2\
**Last updated:** [January 24, 2018, 3:09am UTC](https://discuss.elastic.co/t/how-to-run-kibana-in-iis/116604 "2018-01-24T03:09:48Z")

</div>

Dear all, I would like to run kibana in IIS, may I know how to do that? The physical path should point to which folder? Thanks Best Regards, Peter Chow

---

## [Kibnan visualize datatable calculate the average value](https://discuss.elastic.co/t/kibnan-visualize-datatable-calculate-the-average-value/116413)

<div class="topic-metadata">

**Author:** [@hsiuming](https://discuss.elastic.co/u/hsiuming)\
**Replies:** 2\
**Last updated:** [January 24, 2018, 12:02am UTC](https://discuss.elastic.co/t/kibnan-visualize-datatable-calculate-the-average-value/116413 "2018-01-24T00:02:13Z")

</div>

Hello We now have a data table in kibana: \[未命名\] We want to add one column to calculate the average value of the column2 within a specific time frame. For example ,we want to calculate the average value between every …

---

## [How to filter with a few value?](https://discuss.elastic.co/t/how-to-filter-with-a-few-value/116204)

<div class="topic-metadata">

**Author:** [@Loczeski](https://discuss.elastic.co/u/Loczeski)\
**Replies:** 7\
**Last updated:** [January 23, 2018, 4:41pm UTC](https://discuss.elastic.co/t/how-to-filter-with-a-few-value/116204 "2018-01-23T16:41:02Z")

</div>

I have this filter, but it searchs just a one IP. How to and another IP to search e.g "bb.bb.bbb.bb"? It is possible? { "query": { "match": { "ip": { "query":"xx.xxx.xxx.xxx", "type": "phrase" } } } }

---

## [Add pluguin with existing visualization to add modification kibana 5.4.x](https://discuss.elastic.co/t/add-pluguin-with-existing-visualization-to-add-modification-kibana-5-4-x/116458)

<div class="topic-metadata">

**Author:** [@radi](https://discuss.elastic.co/u/radi)\
**Replies:** 12\
**Last updated:** [January 23, 2018, 4:39pm UTC](https://discuss.elastic.co/t/add-pluguin-with-existing-visualization-to-add-modification-kibana-5-4-x/116458 "2018-01-23T16:39:20Z")

</div>

Hi, I am using kibana 5.4.0 I find that's its possible to add pluguin using existing visualization and add modification in kibana 6.x. what i need it's for kibana 5.4.x, change to add in basic chart ( pie and vert…

---

## [Can we hide a certain visualization based on a certain condition?](https://discuss.elastic.co/t/can-we-hide-a-certain-visualization-based-on-a-certain-condition/116701)

<div class="topic-metadata">

**Author:** [@sri\_harsha](https://discuss.elastic.co/u/sri_harsha)\
**Replies:** 2\
**Last updated:** [January 23, 2018, 3:50pm UTC](https://discuss.elastic.co/t/can-we-hide-a-certain-visualization-based-on-a-certain-condition/116701 "2018-01-23T15:50:31Z")

</div>

I would like to have a single dashboard with mutiple visualizations how do I selectively display only a certain set of visualization while hiding the other. Example : Lets assume A,B,C,D are my 4 visualizations on this …

---

## [Is it possible to auth kibana with kibana-plugin?](https://discuss.elastic.co/t/is-it-possible-to-auth-kibana-with-kibana-plugin/116678)

<div class="topic-metadata">

**Author:** [@596375269](https://discuss.elastic.co/u/596375269)\
**Replies:** 9\
**Last updated:** [January 23, 2018, 3:47pm UTC](https://discuss.elastic.co/t/is-it-possible-to-auth-kibana-with-kibana-plugin/116678 "2018-01-23T15:47:26Z")

</div>

is it possible to auth kibana with coding a kibana plugin? or another way is kibana plugin system support authentication? thanks for your answer.

---

## [Calculating OTHER terms?](https://discuss.elastic.co/t/calculating-other-terms/116684)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 2\
**Last updated:** [January 23, 2018, 2:54pm UTC](https://discuss.elastic.co/t/calculating-other-terms/116684 "2018-01-23T14:54:47Z")

</div>

Hi, When I did a term aggregation in old times (kibana 3) and displayed it as bar or pie chart, I was able to show "other". Meaning if I do a term aggregation of the top 10 the other value shows the aggregation for rank…

---

## [Reloading the Index Field list automatically](https://discuss.elastic.co/t/reloading-the-index-field-list-automatically/116687)

<div class="topic-metadata">

**Author:** [@sanek64](https://discuss.elastic.co/u/sanek64)\
**Replies:** 2\
**Last updated:** [January 23, 2018, 2:50pm UTC](https://discuss.elastic.co/t/reloading-the-index-field-list-automatically/116687 "2018-01-23T14:50:14Z")

</div>

Hi, i have got another question: Is it a way to reload (refresh) Index field list that is in Management-\>Index Patterns-\>Refresh Fields list using API or smthg else automatic? Hope about api. Thanks

---

## [Kibana 6.1.2 - understanding serial diff aggregation](https://discuss.elastic.co/t/kibana-6-1-2-understanding-serial-diff-aggregation/116683)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 1\
**Last updated:** [January 23, 2018, 2:22pm UTC](https://discuss.elastic.co/t/kibana-6-1-2-understanding-serial-diff-aggregation/116683 "2018-01-23T14:22:43Z")

</div>

Hi, I upgraded from 5.1.2 to 6.1.2 and I am checking whats new in 6.1.2. Serial Diff aggregation sounds interesting: As I understand it is building the difference between current and previous buckets. As I understand …

---

## [Is there anyway to customize dashboard ui with plugin](https://discuss.elastic.co/t/is-there-anyway-to-customize-dashboard-ui-with-plugin/116677)

<div class="topic-metadata">

**Author:** [@596375269](https://discuss.elastic.co/u/596375269)\
**Replies:** 3\
**Last updated:** [January 23, 2018, 1:57pm UTC](https://discuss.elastic.co/t/is-there-anyway-to-customize-dashboard-ui-with-plugin/116677 "2018-01-23T13:57:14Z")

</div>

as mentioned in title, is it possible? or hard code the kibana source code is the only way? thanks

---

## [How to display unique values of a field of documents with geopoints contained in a geoshape](https://discuss.elastic.co/t/how-to-display-unique-values-of-a-field-of-documents-with-geopoints-contained-in-a-geoshape/116238)

<div class="topic-metadata">

**Author:** [@anon24174512](https://discuss.elastic.co/u/anon24174512)\
**Replies:** 2\
**Last updated:** [January 23, 2018, 1:31pm UTC](https://discuss.elastic.co/t/how-to-display-unique-values-of-a-field-of-documents-with-geopoints-contained-in-a-geoshape/116238 "2018-01-23T13:31:17Z")

</div>

Hello all, I have documents with a Geopoint and ID field. I can have several documents with same ID. I want to list in a data table the unique id with a geopoint contained in a geoshape. How can I do that ? I am consid…

---

## [Coordiante Map - Circle color function of the timestamp](https://discuss.elastic.co/t/coordiante-map-circle-color-function-of-the-timestamp/116222)

<div class="topic-metadata">

**Author:** [@anon24174512](https://discuss.elastic.co/u/anon24174512)\
**Replies:** 4\
**Last updated:** [January 23, 2018, 1:30pm UTC](https://discuss.elastic.co/t/coordiante-map-circle-color-function-of-the-timestamp/116222 "2018-01-23T13:30:01Z")

</div>

Dear all, How to correlate circle colour with time (or any other field) in the coordinate map? For example the older the timestamp of a geopoint is, the clearer is the colour. So you can retrace visually a path from its…

---

## [Saved objects api](https://discuss.elastic.co/t/saved-objects-api/116634)

<div class="topic-metadata">

**Author:** [@sanek64](https://discuss.elastic.co/u/sanek64)\
**Replies:** 9\
**Last updated:** [January 23, 2018, 1:22pm UTC](https://discuss.elastic.co/t/saved-objects-api/116634 "2018-01-23T13:22:55Z")

</div>

Hi, please help me with my problem: i am trying to import searches and index-patterns using api from https://github.com/elastic/kibana/pull/11632. I perform: curl -X POST 'http://localhost:5601/api/saved\_objects/searc…

---

## [Copy Visualizations in Kibana 6](https://discuss.elastic.co/t/copy-visualizations-in-kibana-6/116662)

<div class="topic-metadata">

**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\
**Replies:** 1\
**Last updated:** [January 23, 2018, 12:03pm UTC](https://discuss.elastic.co/t/copy-visualizations-in-kibana-6/116662 "2018-01-23T12:03:19Z")

</div>

Copying visualizations in Kibana 6 has become difficult if not impossible. Formerly (v5) you could simply export a Viz, change the id and re-import. This no longer works. It's reproducible on any visualization of ours: …

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=875)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=877)
