# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=881

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 882

---

## [Build Kibana 5.6.4 release packages on Windows 7/Windows Server 2012](https://discuss.elastic.co/t/build-kibana-5-6-4-release-packages-on-windows-7-windows-server-2012/115048)

<div class="topic-metadata">

**Author:** [@SKumarMN](https://discuss.elastic.co/u/SKumarMN)\
**Replies:** 5\
**Last updated:** [January 12, 2018, 2:24pm UTC](https://discuss.elastic.co/t/build-kibana-5-6-4-release-packages-on-windows-7-windows-server-2012/115048 "2018-01-12T14:24:27Z")

</div>

Hi All, I am following the instructions found at https://github.com/elastic/kibana/blob/master/CONTRIBUTING.md running Kibana locally and building release packages on Windows. I am able to run kibana locally on window…

---

## [WMS layer issue in Kibana](https://discuss.elastic.co/t/wms-layer-issue-in-kibana/115239)

<div class="topic-metadata">

**Author:** [@emil.mirzayev](https://discuss.elastic.co/u/emil.mirzayev)\
**Replies:** 2\
**Last updated:** [January 12, 2018, 2:06pm UTC](https://discuss.elastic.co/t/wms-layer-issue-in-kibana/115239 "2018-01-12T14:06:09Z")

</div>

Hi there. I encounter a problem when trying to add WMS layers to my visualization. When I use native Kibana viz, it works perfectly. When adding a WMS layer, the original map which Kibana has in background (Openstreet) d…

---

## [How to filter ipv6 address from message](https://discuss.elastic.co/t/how-to-filter-ipv6-address-from-message/115233)

<div class="topic-metadata">

**Author:** [@Champion\_Xie](https://discuss.elastic.co/u/Champion_Xie)\
**Replies:** 1\
**Last updated:** [January 12, 2018, 1:09pm UTC](https://discuss.elastic.co/t/how-to-filter-ipv6-address-from-message/115233 "2018-01-12T13:09:04Z")

</div>

bellows my logfile message format 2018-01-12 15:35:05 INFO - 173.211.17.104 2051 0 0 2018-01-12 15:35:06 INFO - 2001:db7:1000:2000::3000:1 2051 0 0 i want filter client format ipv6 address how can i do it ?

---

## [Cannot retrieve .Id from 'docker inspect docker.elastic.co/kibana/kibana:6.1.1'](https://discuss.elastic.co/t/cannot-retrieve-id-from-docker-inspect-docker-elastic-co-kibana-kibana-6-1-1/114622)

<div class="topic-metadata">

**Author:** [@Fryder](https://discuss.elastic.co/u/Fryder)\
**Replies:** 1\
**Last updated:** [January 12, 2018, 12:58pm UTC](https://discuss.elastic.co/t/cannot-retrieve-id-from-docker-inspect-docker-elastic-co-kibana-kibana-6-1-1/114622 "2018-01-12T12:58:27Z")

</div>

I am trying to build kibana docker with jenkins pipeline. and am receiving the below error Cannot retrieve .Id from 'docker inspect docker.elastic.co/kibana/kibana:6.1.1' The same is getting downloaded and processed g…

---

## [Vega plugin error](https://discuss.elastic.co/t/vega-plugin-error/115032)

<div class="topic-metadata">

**Author:** [@anji](https://discuss.elastic.co/u/anji)\
**Replies:** 2\
**Last updated:** [January 12, 2018, 10:28am UTC](https://discuss.elastic.co/t/vega-plugin-error/115032 "2018-01-12T10:28:14Z")

</div>

Hello, while installing Vega plugin on windows with ELK-Stack-6.1.1, i am getting following error can any one help?? \[error\]

---

## [Nested querying like SQL](https://discuss.elastic.co/t/nested-querying-like-sql/114870)

<div class="topic-metadata">

**Author:** [@Tomas\_Law](https://discuss.elastic.co/u/Tomas_Law)\
**Replies:** 2\
**Last updated:** [January 12, 2018, 10:20am UTC](https://discuss.elastic.co/t/nested-querying-like-sql/114870 "2018-01-12T10:20:02Z")

</div>

Hello I have logs with the fields client\_ip, URI and timestamp. I want to be able to group these logs by sessions. That is, a session corresponds to a group of logs with the same IP and with consecutive and similar ti…

---

## [I can't access to my kibana remotely](https://discuss.elastic.co/t/i-cant-access-to-my-kibana-remotely/114251)

<div class="topic-metadata">

**Author:** [@Kaouther\_Mechri](https://discuss.elastic.co/u/Kaouther_Mechri)\
**Replies:** 2\
**Last updated:** [January 12, 2018, 8:45am UTC](https://discuss.elastic.co/t/i-cant-access-to-my-kibana-remotely/114251 "2018-01-12T08:45:44Z")

</div>

Hello; I've installed the latest version of EKL stack on my linux server. I 'can access locally to my kibana but not remotely curl http://192.168.9.160:5601 var hashRoute = '/app/kibana'; var defaultRoute = '/app/kib…

---

## [How could be able to write excel formula in visualization tab](https://discuss.elastic.co/t/how-could-be-able-to-write-excel-formula-in-visualization-tab/114852)

<div class="topic-metadata">

**Author:** [@kanchan](https://discuss.elastic.co/u/kanchan)\
**Replies:** 2\
**Last updated:** [January 12, 2018, 7:34am UTC](https://discuss.elastic.co/t/how-could-be-able-to-write-excel-formula-in-visualization-tab/114852 "2018-01-12T07:34:22Z")

</div>

Hi Team, I created one index with excel file.I want to make my custom filter in visualization tan in which I want to use some excel formulas. Is there any way to do it.

---

## [Matching a number starting with 22 regex for that](https://discuss.elastic.co/t/matching-a-number-starting-with-22-regex-for-that/115204)

<div class="topic-metadata">

**Author:** [@Jothini](https://discuss.elastic.co/u/Jothini)\
**Replies:** 1\
**Last updated:** [January 12, 2018, 4:25am UTC](https://discuss.elastic.co/t/matching-a-number-starting-with-22-regex-for-that/115204 "2018-01-12T04:25:44Z")

</div>

HI So I want to match numbers that begin with 22 in a field But don't know what the regex pattern is can anyone help me to solve this please Thanks Jothini

---

## [How to install multiple instances of Kibana](https://discuss.elastic.co/t/how-to-install-multiple-instances-of-kibana/115188)

<div class="topic-metadata">

**Author:** [@dr\_dob](https://discuss.elastic.co/u/dr_dob)\
**Replies:** 3\
**Last updated:** [January 12, 2018, 3:42am UTC](https://discuss.elastic.co/t/how-to-install-multiple-instances-of-kibana/115188 "2018-01-12T03:42:09Z")

</div>

Hi there, How can I install multiple instances of Kibana on one AWS ec2 instance running ubuntu 14.04? My goal is to have a kibana instances for each client with its own index-pattern. I'm assuming that each kibana inst…

---

## [Restrict access to dev tools on kibana on basic license?](https://discuss.elastic.co/t/restrict-access-to-dev-tools-on-kibana-on-basic-license/115195)

<div class="topic-metadata">

**Author:** [@GSCully](https://discuss.elastic.co/u/GSCully)\
**Replies:** 1\
**Last updated:** [January 12, 2018, 1:17am UTC](https://discuss.elastic.co/t/restrict-access-to-dev-tools-on-kibana-on-basic-license/115195 "2018-01-12T01:17:06Z")

</div>

Is it possible to configure the kibana web instance so no one can use the dev tools except an admin on localhost with a basic license? or something similar. Thanks

---

## [Connecting to Existing Index that has Username/Password Authentication](https://discuss.elastic.co/t/connecting-to-existing-index-that-has-username-password-authentication/115178)

<div class="topic-metadata">

**Author:** [@jpsphar1](https://discuss.elastic.co/u/jpsphar1)\
**Replies:** 1\
**Last updated:** [January 12, 2018, 1:11am UTC](https://discuss.elastic.co/t/connecting-to-existing-index-that-has-username-password-authentication/115178 "2018-01-12T01:11:19Z")

</div>

We have an index already running on a separate machine and want to connect to from our local machine or possibly another server. We have tested connecting to the index via Postman and after being prompted to type in the…

---

## [Timelion : spit with insensitive term](https://discuss.elastic.co/t/timelion-spit-with-insensitive-term/115036)

<div class="topic-metadata">

**Author:** [@BokC](https://discuss.elastic.co/u/BokC)\
**Replies:** 1\
**Last updated:** [January 12, 2018, 12:17am UTC](https://discuss.elastic.co/t/timelion-spit-with-insensitive-term/115036 "2018-01-12T00:17:55Z")

</div>

On Kibana 6.1.1 I would like to split my timelion graph with the insensitive value of a term. How can I do this? Thanks

---

## [Changing Kibana logo on the top left hand side](https://discuss.elastic.co/t/changing-kibana-logo-on-the-top-left-hand-side/115128)

<div class="topic-metadata">

**Author:** [@Reena\_Deberry](https://discuss.elastic.co/u/Reena_Deberry)\
**Replies:** 7\
**Last updated:** [January 12, 2018, 12:14am UTC](https://discuss.elastic.co/t/changing-kibana-logo-on-the-top-left-hand-side/115128 "2018-01-12T00:14:11Z")

</div>

I am currently on Kibana 6.0 and I used these steps below suggested by tatdatTat Dat Pham and still not able to see my company logo, please advise. Reena For change logo, find file "global\_nav.less" (kibana directory…

---

## [Protecting endpoints in Kibana with fragment identifier](https://discuss.elastic.co/t/protecting-endpoints-in-kibana-with-fragment-identifier/115155)

<div class="topic-metadata">

**Author:** [@dr\_dob](https://discuss.elastic.co/u/dr_dob)\
**Replies:** 6\
**Last updated:** [January 11, 2018, 8:21pm UTC](https://discuss.elastic.co/t/protecting-endpoints-in-kibana-with-fragment-identifier/115155 "2018-01-11T20:21:35Z")

</div>

Hi, I am trying to protect certain endpoints in Kibana, specifically dashboards, with Nginx. The problem is that the fragment identifier does not get sent in the request, so everything after /app/kibana is ignored, only…

---

## [Re: Following sample data example fails to show points on map](https://discuss.elastic.co/t/re-following-sample-data-example-fails-to-show-points-on-map/115153)

<div class="topic-metadata">

**Author:** [@Jason\_Brooks](https://discuss.elastic.co/u/Jason_Brooks)\
**Replies:** 1\
**Last updated:** [January 11, 2018, 8:00pm UTC](https://discuss.elastic.co/t/re-following-sample-data-example-fails-to-show-points-on-map/115153 "2018-01-11T20:00:43Z")

</div>

Hello, The referenced forum topic was closed because there was so much downtime in December I didn't reply in time before it was automatically closed. In short, my fault. But I didn't want to be the guy that let thing…

---

## [Final=true filter vs. traffic data discrepancy](https://discuss.elastic.co/t/final-true-filter-vs-traffic-data-discrepancy/114767)

<div class="topic-metadata">

**Author:** [@learner](https://discuss.elastic.co/u/learner)\
**Replies:** 3\
**Last updated:** [January 11, 2018, 1:07pm UTC](https://discuss.elastic.co/t/final-true-filter-vs-traffic-data-discrepancy/114767 "2018-01-11T13:07:55Z")

</div>

Hi, I'm using Packetbeat to capture traffic between hosts, as below, with the filter "final=true". Just downloaded a 2.4 GB file and it indeed appeared in my query for the last 15m, which is good. But, if I query for …

---

## [\[Kibana 5.5.2\] condition in aggregated field with top\_hits](https://discuss.elastic.co/t/kibana-5-5-2-condition-in-aggregated-field-with-top-hits/114920)

<div class="topic-metadata">

**Author:** [@salim\_ts86](https://discuss.elastic.co/u/salim_ts86)\
**Replies:** 2\
**Last updated:** [January 11, 2018, 10:26am UTC](https://discuss.elastic.co/t/kibana-5-5-2-condition-in-aggregated-field-with-top-hits/114920 "2018-01-11T10:26:24Z")

</div>

hello everyone, I'm using a visualisation to contrôle the received documents in ES (with top\_hits on meta.localtime field). the generated request: { "query": { "bool": { "must": \[ { "match\_all": {} }…

---

## [Execute script after dashboard loads](https://discuss.elastic.co/t/execute-script-after-dashboard-loads/114801)

<div class="topic-metadata">

**Author:** [@Karan\_Sharma](https://discuss.elastic.co/u/Karan_Sharma)\
**Replies:** 2\
**Last updated:** [January 11, 2018, 10:09am UTC](https://discuss.elastic.co/t/execute-script-after-dashboard-loads/114801 "2018-01-11T10:09:20Z")

</div>

I have some code in hack.js which needs to be executed ONLY AFTER the dashboard had loaded, is there any event emitted when a dashboard finishes loading? Some more detail: I need to access dashboard name using $route.c…

---

## [Strings query](https://discuss.elastic.co/t/strings-query/114814)

<div class="topic-metadata">

**Author:** [@jerrychen](https://discuss.elastic.co/u/jerrychen)\
**Replies:** 2\
**Last updated:** [January 11, 2018, 7:33am UTC](https://discuss.elastic.co/t/strings-query/114814 "2018-01-11T07:33:53Z")

</div>

kibana 5.4 + es 5.4 I want to terms the suffix of the url.keyword,such as docs or doc or zip...etc. url.keyword field content like 'abcde.html','abcde11.zip','abcde\*\*222.doc'... How to do that. Thanks for your help. …

---

## [How I can add 3d graph or charts visualization in kibana on windows machine](https://discuss.elastic.co/t/how-i-can-add-3d-graph-or-charts-visualization-in-kibana-on-windows-machine/114792)

<div class="topic-metadata">

**Author:** [@Krunal\_kalaria](https://discuss.elastic.co/u/Krunal_kalaria)\
**Replies:** 3\
**Last updated:** [January 11, 2018, 4:56am UTC](https://discuss.elastic.co/t/how-i-can-add-3d-graph-or-charts-visualization-in-kibana-on-windows-machine/114792 "2018-01-11T04:56:47Z")

</div>

Hello Everyone, I need some help for visualization in kibana. i want to install kibana 3D visualization plugin in kibana version 5.6.4 and 6.1.1 in windows machine i saw one link: https://www.elastic.co/guide/en/kiban…

---

## [How to use Geo-Server with Kibana](https://discuss.elastic.co/t/how-to-use-geo-server-with-kibana/114971)

<div class="topic-metadata">

**Author:** [@rpendela](https://discuss.elastic.co/u/rpendela)\
**Replies:** 1\
**Last updated:** [January 11, 2018, 1:02am UTC](https://discuss.elastic.co/t/how-to-use-geo-server-with-kibana/114971 "2018-01-11T01:02:48Z")

</div>

Hello community, I am following the article (https://www.elastic.co/blog/custom-region-maps-in-kibana-6-0), I would like to add the US\_counties in vector map with join field as county-name in kibana with the help of geo…

---

## [Display latest value in a „Metric“](https://discuss.elastic.co/t/display-latest-value-in-a-metric/114930)

<div class="topic-metadata">

**Author:** [@Hannah](https://discuss.elastic.co/u/Hannah)\
**Replies:** 2\
**Last updated:** [January 10, 2018, 7:41pm UTC](https://discuss.elastic.co/t/display-latest-value-in-a-metric/114930 "2018-01-10T19:41:44Z")

</div>

Hi there, I would like to display the latest value of a given index in a dashboard with a „Metric“. This should happen in a aws instance of Kibana. Is it possible to do this? The aggregation of the metric inside „Metri…

---

## [Region Maps - Split colors by criterias and not only amount](https://discuss.elastic.co/t/region-maps-split-colors-by-criterias-and-not-only-amount/114898)

<div class="topic-metadata">

**Author:** [@Ludo1](https://discuss.elastic.co/u/Ludo1)\
**Replies:** 4\
**Last updated:** [January 10, 2018, 4:30pm UTC](https://discuss.elastic.co/t/region-maps-split-colors-by-criterias-and-not-only-amount/114898 "2018-01-10T16:30:28Z")

</div>

Hi, Is it possible to use different colors on the region maps, in order to illustrate different criterias additionnaly to the "global amount notion"? I am going to take a very clear use case, let's say i want to create…

---

## [Inject kibana topbar with timeFilter into custom plugin](https://discuss.elastic.co/t/inject-kibana-topbar-with-timefilter-into-custom-plugin/114895)

<div class="topic-metadata">

**Author:** [@karev](https://discuss.elastic.co/u/karev)\
**Replies:** 2\
**Last updated:** [January 10, 2018, 4:12pm UTC](https://discuss.elastic.co/t/inject-kibana-topbar-with-timefilter-into-custom-plugin/114895 "2018-01-10T16:12:11Z")

</div>

Hello commmunity it's possible to inject the kibana topbar with the timeFilter into my plugin ?? im using kibana 5.4.1 and i generated the plugin using the https://github.com/elastic/template-kibana-plugin/ Thank you i…

---

## [KIBANA error : meta\_fields](https://discuss.elastic.co/t/kibana-error-meta-fields/114901)

<div class="topic-metadata">

**Author:** [@misthars](https://discuss.elastic.co/u/misthars)\
**Replies:** 2\
**Last updated:** [January 10, 2018, 3:18pm UTC](https://discuss.elastic.co/t/kibana-error-meta-fields/114901 "2018-01-10T15:18:56Z")

</div>

I am getting an error " child "meta\_fields" fails because \["meta\_fields" must be an array\] " in kibana. How to solve this issue?

---

## [Kibana not showing logs](https://discuss.elastic.co/t/kibana-not-showing-logs/114843)

<div class="topic-metadata">

**Author:** [@alpha\_gamma](https://discuss.elastic.co/u/alpha_gamma)\
**Replies:** 1\
**Last updated:** [January 10, 2018, 2:14pm UTC](https://discuss.elastic.co/t/kibana-not-showing-logs/114843 "2018-01-10T14:14:35Z")

</div>

Hi All , Kibana not showing logs for remote IP in linux ,for local linux machine I am able to see,when I run below command sudo -u logstash /usr/share/logstash/bin/logstash --path.settings /etc/logstash -f /etc/logstash…

---

## [Authentication of \[kibana\] was terminated by realm](https://discuss.elastic.co/t/authentication-of-kibana-was-terminated-by-realm/114700)

<div class="topic-metadata">

**Author:** [@mayank\_pandey](https://discuss.elastic.co/u/mayank_pandey)\
**Replies:** 2\
**Last updated:** [January 10, 2018, 12:27pm UTC](https://discuss.elastic.co/t/authentication-of-kibana-was-terminated-by-realm/114700 "2018-01-10T12:27:42Z")

</div>

I am seeking any solution for this error . i have installed x-pack in elastic and kibana both with trail version.

---

## [Timelion if weekend](https://discuss.elastic.co/t/timelion-if-weekend/114221)

<div class="topic-metadata">

**Author:** [@kumpelblase](https://discuss.elastic.co/u/kumpelblase)\
**Replies:** 6\
**Last updated:** [January 10, 2018, 10:28am UTC](https://discuss.elastic.co/t/timelion-if-weekend/114221 "2018-01-10T10:28:00Z")

</div>

I have an ammount of tickets over two years. My goal is to calculate the average, which I do with the .movingaverage(). The problem is that I don't want the weekends included in the average. I managed to hide the dates w…

---

## [Metricbeat Data Missing Past Midnight](https://discuss.elastic.co/t/metricbeat-data-missing-past-midnight/114669)

<div class="topic-metadata">

**Author:** [@directRoot](https://discuss.elastic.co/u/directRoot)\
**Replies:** 2\
**Last updated:** [January 10, 2018, 9:22am UTC](https://discuss.elastic.co/t/metricbeat-data-missing-past-midnight/114669 "2018-01-10T09:22:41Z")

</div>

Hi all, I'm using Metricbeat for system metrics, but every now and then system.filesystem.used.pct returns 0% for 24hrs from midnight, but only when being visualised. This happens whether I use Kibana or 3rd party Grafa…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=880)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=882)
