# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=885

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 886

---

## [How to create a markdown from a saved search or a metric](https://discuss.elastic.co/t/how-to-create-a-markdown-from-a-saved-search-or-a-metric/113223)

<div class="topic-metadata">

**Author:** [@davidv](https://discuss.elastic.co/u/davidv)\
**Replies:** 5\
**Last updated:** [January 2, 2018, 3:07pm UTC](https://discuss.elastic.co/t/how-to-create-a-markdown-from-a-saved-search-or-a-metric/113223 "2018-01-02T15:07:21Z")

</div>

Hello, How can I visualize a specific field (in this example the text field) My data: { "\_index": "in\_memory\_db\_size", "\_type": "doc", "\_id": "ZozakmAB9EBpl5JA3w3b", "\_version": 1, "\_score": 1, "\_source": { "no…

---

## [How to see the data in order of insertion in Data Table Visualization?](https://discuss.elastic.co/t/how-to-see-the-data-in-order-of-insertion-in-data-table-visualization/112658)

<div class="topic-metadata">

**Author:** [@mIsabelcc](https://discuss.elastic.co/u/mIsabelcc)\
**Replies:** 3\
**Last updated:** [January 2, 2018, 2:28pm UTC](https://discuss.elastic.co/t/how-to-see-the-data-in-order-of-insertion-in-data-table-visualization/112658 "2018-01-02T14:28:52Z")

</div>

I have an array that I need to see in order of insertion. I charge with logstash: .... aggregate { task\_id =\> "%{taskid}" code =\>" map\['fecha\_trx'\] = event.get('@fecha\_trx') map\['numerohc'\] = event.get('numerohc') …

---

## [Can we restrict an user to access particular tabs in kibana?](https://discuss.elastic.co/t/can-we-restrict-an-user-to-access-particular-tabs-in-kibana/113762)

<div class="topic-metadata">

**Author:** [@sreenu](https://discuss.elastic.co/u/sreenu)\
**Replies:** 1\
**Last updated:** [January 2, 2018, 11:44am UTC](https://discuss.elastic.co/t/can-we-restrict-an-user-to-access-particular-tabs-in-kibana/113762 "2018-01-02T11:44:02Z")

</div>

So, my requirement is I want to restrict access to a person to specific tabs(Discover, Visualize, Timelion, Devtools etc) of kibana dashboard i.e. if a person is a normal user, he/she should be shown two tabs(Visualize,T…

---

## [Difficulty in Vega with Kibana while generating a tree graph](https://discuss.elastic.co/t/difficulty-in-vega-with-kibana-while-generating-a-tree-graph/112825)

<div class="topic-metadata">

**Author:** [@Dimitry\_Khan](https://discuss.elastic.co/u/Dimitry_Khan)\
**Replies:** 4\
**Last updated:** [January 2, 2018, 10:30am UTC](https://discuss.elastic.co/t/difficulty-in-vega-with-kibana-while-generating-a-tree-graph/112825 "2018-01-02T10:30:35Z")

</div>

I am not sure if this is the right forum to discuss problem on plugins behavior. I am using vega plugin for Kibana to generate tree type of visualization. I have data in ES like below - Let me provide you my example in …

---

## [Visual Builder: In Stacked Area Charts, field with value 0 stacked on top of Other fields](https://discuss.elastic.co/t/visual-builder-in-stacked-area-charts-field-with-value-0-stacked-on-top-of-other-fields/113574)

<div class="topic-metadata">

**Author:** [@ayadirh](https://discuss.elastic.co/u/ayadirh)\
**Replies:** 2\
**Last updated:** [January 2, 2018, 10:18am UTC](https://discuss.elastic.co/t/visual-builder-in-stacked-area-charts-field-with-value-0-stacked-on-top-of-other-fields/113574 "2018-01-02T10:18:02Z")

</div>

When stacked area chart is built, the field with value 0 is being stacked on top of Other fields. Issue: When we hover over the chart, it is showing the only field with 0. Figure \[image\]

---

## [Dev Build: Visualization Editor: blocked by: \[FORBIDDEN/12/index read-only / allow delete (api)\];:](https://discuss.elastic.co/t/dev-build-visualization-editor-blocked-by-forbidden-12-index-read-only-allow-delete-api/110197)

<div class="topic-metadata">

**Author:** [@eugenefedoto](https://discuss.elastic.co/u/eugenefedoto)\
**Replies:** 9\
**Last updated:** [January 2, 2018, 9:33am UTC](https://discuss.elastic.co/t/dev-build-visualization-editor-blocked-by-forbidden-12-index-read-only-allow-delete-api/110197 "2018-01-02T09:33:28Z")

</div>

I started using the dev build from GitHub. When I try to save a visualization, I get "Visualization Editor: blocked by: \[FORBIDDEN/12/index read-only / allow delete (api)\];: \[cluster\_block\_exception\] blocked by: \[FORBID…

---

## [Doing visualization from multiple documents](https://discuss.elastic.co/t/doing-visualization-from-multiple-documents/113712)

<div class="topic-metadata">

**Author:** [@Harsh\_Verma](https://discuss.elastic.co/u/Harsh_Verma)\
**Replies:** 1\
**Last updated:** [January 2, 2018, 3:02am UTC](https://discuss.elastic.co/t/doing-visualization-from-multiple-documents/113712 "2018-01-02T03:02:13Z")

</div>

I have an index with documents having structure like { department:department\_value, employee\_id:id\_value } and some more documents with structure like { age:42, tags:\[ …

---

## [\[6.1\] Submitting index-pattern and visualizations to ".kibana" index](https://discuss.elastic.co/t/6-1-submitting-index-pattern-and-visualizations-to-kibana-index/113680)

<div class="topic-metadata">

**Author:** [@hazim](https://discuss.elastic.co/u/hazim)\
**Replies:** 3\
**Last updated:** [January 1, 2018, 11:50am UTC](https://discuss.elastic.co/t/6-1-submitting-index-pattern-and-visualizations-to-kibana-index/113680 "2018-01-01T11:50:15Z")

</div>

I'm upgrading from ES and Kibana 2.3 to 6.1, and can't seem to submit index-pattern, visualizations, dashboard etc to the ".kibana" index. This is how i was submitting them in ES 2.3 curl -vvv -H "Content-Type: applic…

---

## [Timelion- aggreation on aggregation (max (avg) )](https://discuss.elastic.co/t/timelion-aggreation-on-aggregation-max-avg/113657)

<div class="topic-metadata">

**Author:** [@yoavsradware](https://discuss.elastic.co/u/yoavsradware)\
**Replies:** 0\
**Last updated:** [December 31, 2017, 1:09pm UTC](https://discuss.elastic.co/t/timelion-aggreation-on-aggregation-max-avg/113657 "2017-12-31T13:09:38Z")

</div>

I am using kibana 5.6.3 I am getting x events every minute I would like to take an interval (according to my bucket size ) and do : max((event1.value+event2.value ...+eventN.value)/N) =x one thing I ca do is max …

---

## [Timelion visualizer dynamic split based on cardinality](https://discuss.elastic.co/t/timelion-visualizer-dynamic-split-based-on-cardinality/113459)

<div class="topic-metadata">

**Author:** [@yoavsradware](https://discuss.elastic.co/u/yoavsradware)\
**Replies:** 2\
**Last updated:** [December 31, 2017, 8:56am UTC](https://discuss.elastic.co/t/timelion-visualizer-dynamic-split-based-on-cardinality/113459 "2017-12-31T08:56:50Z")

</div>

hi , I have number of devices which I healthcheck every x minutes I would like to use timelion and to show data based on the device and in the same chart show date of two devices this one works prefectly for one devi…

---

## [No sample dashboard or Visualize in new installed Kibana](https://discuss.elastic.co/t/no-sample-dashboard-or-visualize-in-new-installed-kibana/113634)

<div class="topic-metadata">

**Author:** [@andychen1234](https://discuss.elastic.co/u/andychen1234)\
**Replies:** 2\
**Last updated:** [December 31, 2017, 5:35am UTC](https://discuss.elastic.co/t/no-sample-dashboard-or-visualize-in-new-installed-kibana/113634 "2017-12-31T05:35:42Z")

</div>

Hi All, I am new for this, please forgive me if my question is too stupid. my setup: client server ship apache/nginx log via filebeat to logstash server. logstash is on the same machine with elasticsearch as well…

---

## [I want to create a gauge that displays number of documents in a certain timeslice vs total documents](https://discuss.elastic.co/t/i-want-to-create-a-gauge-that-displays-number-of-documents-in-a-certain-timeslice-vs-total-documents/113601)

<div class="topic-metadata">

**Author:** [@anchasis](https://discuss.elastic.co/u/anchasis)\
**Replies:** 5\
**Last updated:** [December 30, 2017, 10:43am UTC](https://discuss.elastic.co/t/i-want-to-create-a-gauge-that-displays-number-of-documents-in-a-certain-timeslice-vs-total-documents/113601 "2017-12-30T10:43:00Z")

</div>

I am using Kibana 6.0 and fail to create a gauge that visualizes the number of documents that fall withing a timeslice timestampfield:\[now-1y TO now\] compared to the total number of documents without slicing. How to best…

---

## [Kibana - Filter data where sum of field 1 \> sum of field 2](https://discuss.elastic.co/t/kibana-filter-data-where-sum-of-field-1-sum-of-field-2/113592)

<div class="topic-metadata">

**Author:** [@PedroMarques](https://discuss.elastic.co/u/PedroMarques)\
**Replies:** 2\
**Last updated:** [December 30, 2017, 9:35am UTC](https://discuss.elastic.co/t/kibana-filter-data-where-sum-of-field-1-sum-of-field-2/113592 "2017-12-30T09:35:40Z")

</div>

Hello. I'm trying to visualize terms of my data in a bar graph, showing two bars: one for the sum of src\_bytes and one for the sum of dst\_bytes. It is also important to order the terms based on the total number of bytes…

---

## [Lower/Upper case search](https://discuss.elastic.co/t/lower-upper-case-search/113322)

<div class="topic-metadata">

**Author:** [@mathurin68](https://discuss.elastic.co/u/mathurin68)\
**Replies:** 5\
**Last updated:** [December 29, 2017, 10:52pm UTC](https://discuss.elastic.co/t/lower-upper-case-search/113322 "2017-12-29T22:52:14Z")

</div>

In a kibana dashboard I need to query a field for upper or lowercase. The field is a scriptblock from powershell so it has to be a string(text), I need to be able to search for different words inside it. After reading …

---

## [Dictionary in Kibana for translation](https://discuss.elastic.co/t/dictionary-in-kibana-for-translation/112029)

<div class="topic-metadata">

**Author:** [@scch](https://discuss.elastic.co/u/scch)\
**Replies:** 3\
**Last updated:** [December 29, 2017, 5:58pm UTC](https://discuss.elastic.co/t/dictionary-in-kibana-for-translation/112029 "2017-12-29T17:58:11Z")

</div>

How to create a dictionary or refer an external csv file to translate and generate scripted fields using painless. i am aware of similar function in Logstash, grok filter, but need to create scripted field using painle…

---

## [Chart line without aggregation in Kibana](https://discuss.elastic.co/t/chart-line-without-aggregation-in-kibana/113503)

<div class="topic-metadata">

**Author:** [@darox](https://discuss.elastic.co/u/darox)\
**Replies:** 2\
**Last updated:** [December 29, 2017, 11:14am UTC](https://discuss.elastic.co/t/chart-line-without-aggregation-in-kibana/113503 "2017-12-29T11:14:49Z")

</div>

I would like to create a chart line out of the following values: \[chartline\] But somehow I'm not able to get it working, Kibana is always aggregating the values, but I would like to have just one value for one time poi…

---

## [Pie Chart showing unfilled circle with a line](https://discuss.elastic.co/t/pie-chart-showing-unfilled-circle-with-a-line/113309)

<div class="topic-metadata">

**Author:** [@ayadirh](https://discuss.elastic.co/u/ayadirh)\
**Replies:** 4\
**Last updated:** [December 29, 2017, 10:21am UTC](https://discuss.elastic.co/t/pie-chart-showing-unfilled-circle-with-a-line/113309 "2017-12-29T10:21:54Z")

</div>

I am using Pie chart visualization on my dashboard. I sometimes get this empty circle with a line as output as shown in Fig 1. This does not make sense to users. When I open that visualization in edit-mode. It says No…

---

## [Kibana draw line between geo points](https://discuss.elastic.co/t/kibana-draw-line-between-geo-points/113445)

<div class="topic-metadata">

**Author:** [@1623664](https://discuss.elastic.co/u/1623664)\
**Replies:** 4\
**Last updated:** [December 29, 2017, 8:47am UTC](https://discuss.elastic.co/t/kibana-draw-line-between-geo-points/113445 "2017-12-29T08:47:54Z")

</div>

There is a need to connect the geopoint. If there are ways to do this? \[image\]

---

## [How to install Kibana Plugin in Ubuntu offline?](https://discuss.elastic.co/t/how-to-install-kibana-plugin-in-ubuntu-offline/102484)

<div class="topic-metadata">

**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\
**Replies:** 7\
**Last updated:** [December 29, 2017, 6:44am UTC](https://discuss.elastic.co/t/how-to-install-kibana-plugin-in-ubuntu-offline/102484 "2017-12-29T06:44:58Z")

</div>

Hi, I am trying to install Kibana Vega based visualizations plugin on ubuntu offline. When I downloaded, it's a Zip file. I am not sure how to install zip file on ubuntu and what commands to use. Can someone please help…

---

## [Unable to visualizing logs in Kibana](https://discuss.elastic.co/t/unable-to-visualizing-logs-in-kibana/113497)

<div class="topic-metadata">

**Author:** [@RJ407](https://discuss.elastic.co/u/RJ407)\
**Replies:** 1\
**Last updated:** [December 29, 2017, 4:59am UTC](https://discuss.elastic.co/t/unable-to-visualizing-logs-in-kibana/113497 "2017-12-29T04:59:45Z")

</div>

I'm new to ELK, I installed ELK in three different AWS-EC2 instances and configured all the files and also installed filebeat in other server to get the logs. I can hit all the 4 servers but the problem is I can see only…

---

## [Aggregations along with painless scripted field](https://discuss.elastic.co/t/aggregations-along-with-painless-scripted-field/113389)

<div class="topic-metadata">

**Author:** [@scch](https://discuss.elastic.co/u/scch)\
**Replies:** 2\
**Last updated:** [December 29, 2017, 4:33am UTC](https://discuss.elastic.co/t/aggregations-along-with-painless-scripted-field/113389 "2017-12-29T04:33:02Z")

</div>

Hi ... can we use aggregations and painless in a scripted field ? i want to achieve below. //Query }, "size": 0, "\_source": { "excludes": \[\] }, "aggs": { "3": { "terms": { "field": "alert.keyword", "size": 2…

---

## [I have data in my ealsticsearch,but i can not find it in my kibana](https://discuss.elastic.co/t/i-have-data-in-my-ealsticsearch-but-i-can-not-find-it-in-my-kibana/113261)

<div class="topic-metadata">

**Author:** [@antony.y](https://discuss.elastic.co/u/antony.y)\
**Replies:** 7\
**Last updated:** [December 29, 2017, 4:00am UTC](https://discuss.elastic.co/t/i-have-data-in-my-ealsticsearch-but-i-can-not-find-it-in-my-kibana/113261 "2017-12-29T04:00:38Z")

</div>

In my elasticsearch cluster, i have an index as following: \[image\] but now when i create the index in my kibana,i can see nothing,where is the problem?

---

## [How can I display multiple fields in a histogram?](https://discuss.elastic.co/t/how-can-i-display-multiple-fields-in-a-histogram/113006)

<div class="topic-metadata">

**Author:** [@pbData](https://discuss.elastic.co/u/pbData)\
**Replies:** 3\
**Last updated:** [December 28, 2017, 11:19pm UTC](https://discuss.elastic.co/t/how-can-i-display-multiple-fields-in-a-histogram/113006 "2017-12-28T23:19:31Z")

</div>

I am using kibana v3.x. I am able to successfully display timeseries data of a single field for a histogram. Now I would do this for multiple fields, being able to accumulate the result fields of the fields. I cant se…

---

## [Config: Error 403 Forbidden: blocked by: \[FORBIDDEN/12/index read-only / allow delete (api)\];: \[cluster\_block\_exception\] blocked by: \[FORBIDDEN/12/index read-only / allow delete (api)\];](https://discuss.elastic.co/t/config-error-403-forbidden-blocked-by-forbidden-12-index-read-only-allow-delete-api-cluster-block-exception-blocked-by-forbidden-12-index-read-only-allow-delete-api/113361)

<div class="topic-metadata">

**Author:** [@ramindia](https://discuss.elastic.co/u/ramindia)\
**Replies:** 9\
**Last updated:** [December 28, 2017, 7:31pm UTC](https://discuss.elastic.co/t/config-error-403-forbidden-blocked-by-forbidden-12-index-read-only-allow-delete-api-cluster-block-exception-blocked-by-forbidden-12-index-read-only-allow-delete-api/113361 "2017-12-28T19:31:42Z")

</div>

Config: Error 403 Forbidden: blocked by: \[FORBIDDEN/12/index read-only / allow delete (api)\];: \[cluster\_block\_exception\] blocked by: \[FORBIDDEN/12/index read-only / allow delete (api)\]; Kibana not able to retrieve old d…

---

## [URL Template](https://discuss.elastic.co/t/url-template/113294)

<div class="topic-metadata">

**Author:** [@sanek64](https://discuss.elastic.co/u/sanek64)\
**Replies:** 3\
**Last updated:** [December 28, 2017, 6:48pm UTC](https://discuss.elastic.co/t/url-template/113294 "2017-12-28T18:48:31Z")

</div>

Hi all, I'd like to have reference from one filed in the first index discovery page to the second index in another discovery page (search). So a made new discovery page (search) for second index , selected appropriate f…

---

## [How to connect a kerberos ES?](https://discuss.elastic.co/t/how-to-connect-a-kerberos-es/113128)

<div class="topic-metadata">

**Author:** [@zhuo](https://discuss.elastic.co/u/zhuo)\
**Replies:** 1\
**Last updated:** [December 28, 2017, 6:26pm UTC](https://discuss.elastic.co/t/how-to-connect-a-kerberos-es/113128 "2017-12-28T18:26:29Z")

</div>

hi,all: I met a problem about how kibana connect a Kerberized ES. there is some infomation at this site: but it seemed that kibana has to change its code. anyone has a clear guide about that? thanks

---

## [Kibana startup issue](https://discuss.elastic.co/t/kibana-startup-issue/113457)

<div class="topic-metadata">

**Author:** [@SJN8](https://discuss.elastic.co/u/SJN8)\
**Replies:** 2\
**Last updated:** [December 28, 2017, 5:58pm UTC](https://discuss.elastic.co/t/kibana-startup-issue/113457 "2017-12-28T17:58:22Z")

</div>

I am getting this error while starting Kibana , {"type":"log","@timestamp":"2017-12-28T14:31:46Z","tags":\["status","plugin:elasticsearch@6.1.1","error"\],"pid":15969,"state":"red","message":"Status changed from yellow t…

---

## [How to perform user authentication, before going to kibana dashboad?](https://discuss.elastic.co/t/how-to-perform-user-authentication-before-going-to-kibana-dashboad/112991)

<div class="topic-metadata">

**Author:** [@sreenu](https://discuss.elastic.co/u/sreenu)\
**Replies:** 5\
**Last updated:** [December 28, 2017, 5:02pm UTC](https://discuss.elastic.co/t/how-to-perform-user-authentication-before-going-to-kibana-dashboad/112991 "2017-12-28T17:02:27Z")

</div>

Hi, I want to add user authentication using custom html page when someone hits the server on which kibana is running. So when a person hits the server the first page should be the login page, then it will authenticate …

---

## [Index and docs created in Elastic Search , not visible in Discover](https://discuss.elastic.co/t/index-and-docs-created-in-elastic-search-not-visible-in-discover/113320)

<div class="topic-metadata">

**Author:** [@Bruno\_Seznec](https://discuss.elastic.co/u/Bruno_Seznec)\
**Replies:** 7\
**Last updated:** [December 28, 2017, 3:11pm UTC](https://discuss.elastic.co/t/index-and-docs-created-in-elastic-search-not-visible-in-discover/113320 "2017-12-28T15:11:57Z")

</div>

Hi, What is the check list to have an ES index displayable in Kibana ? I've done created index pattern, refresh, nothing in Discover menu Config PC win10 ES V6 installed as a service. Kibana V6 RC2 Thanks Rgds Bru…

---

## [How to apply filter in kibana dashboard for linux servers?](https://discuss.elastic.co/t/how-to-apply-filter-in-kibana-dashboard-for-linux-servers/113235)

<div class="topic-metadata">

**Author:** [@Abdul\_Gaffar\_Shaikh](https://discuss.elastic.co/u/Abdul_Gaffar_Shaikh)\
**Replies:** 5\
**Last updated:** [December 28, 2017, 3:01pm UTC](https://discuss.elastic.co/t/how-to-apply-filter-in-kibana-dashboard-for-linux-servers/113235 "2017-12-28T15:01:18Z")

</div>

Hi All, I was working with ELK stack for windows version all this while for developing system monitoring graphs based on different host by applying filter in dashboards. The necessary prototype is working fine with 6.0 …

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=884)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=886)
