# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=893

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 894

---

## [Export Timelion Sheets for future use](https://discuss.elastic.co/t/export-timelion-sheets-for-future-use/110503)

<div class="topic-metadata">

**Author:** [@stevedearl](https://discuss.elastic.co/u/stevedearl)\
**Replies:** 5\
**Last updated:** [December 7, 2017, 3:00pm UTC](https://discuss.elastic.co/t/export-timelion-sheets-for-future-use/110503 "2017-12-07T15:00:19Z")

</div>

Hi All, I was trying to figure out how to do this and the following post from Lou on May 2016 seemed to provide a solution: However, like pavithrakc who posted a reply, this solution doesn't seem to work for me. Can …

---

## [Kibana BAD Request on index pattern creation and use](https://discuss.elastic.co/t/kibana-bad-request-on-index-pattern-creation-and-use/110127)

<div class="topic-metadata">

**Author:** [@Noam](https://discuss.elastic.co/u/Noam)\
**Replies:** 2\
**Last updated:** [December 7, 2017, 1:51pm UTC](https://discuss.elastic.co/t/kibana-bad-request-on-index-pattern-creation-and-use/110127 "2017-12-07T13:51:14Z")

</div>

Hello, after upgrading ELK from 4.5 to 5.4.3 we encountered the following error, while trying to use or create some of the index patterns: Request to Elasticsearch failed: Bad Request. I found this related similar to…

---

## [Scripted fields issue](https://discuss.elastic.co/t/scripted-fields-issue/110593)

<div class="topic-metadata">

**Author:** [@hsiuming](https://discuss.elastic.co/u/hsiuming)\
**Replies:** 1\
**Last updated:** [December 7, 2017, 12:57pm UTC](https://discuss.elastic.co/t/scripted-fields-issue/110593 "2017-12-07T12:57:50Z")

</div>

Hello We now set a Scripted fields to get some information from log data. The Scripted fields language is painless and format is string. The content of Scripted fields is : if (doc.containsKey('Binary.keyword')&& doc…

---

## [Automating graphs and visual](https://discuss.elastic.co/t/automating-graphs-and-visual/110652)

<div class="topic-metadata">

**Author:** [@0NE](https://discuss.elastic.co/u/0NE)\
**Replies:** 1\
**Last updated:** [December 7, 2017, 12:02pm UTC](https://discuss.elastic.co/t/automating-graphs-and-visual/110652 "2017-12-07T12:02:14Z")

</div>

I have automated the installtion of kibana. I would like to automate the process of setting up tabels, graphs and etc? Is that possible. My automation script grabs the latest version of the elastic stack and installs it…

---

## [Kibana is not showing Tomcat logs since some days back](https://discuss.elastic.co/t/kibana-is-not-showing-tomcat-logs-since-some-days-back/110269)

<div class="topic-metadata">

**Author:** [@madurad](https://discuss.elastic.co/u/madurad)\
**Replies:** 2\
**Last updated:** [December 7, 2017, 4:02am UTC](https://discuss.elastic.co/t/kibana-is-not-showing-tomcat-logs-since-some-days-back/110269 "2017-12-07T04:02:44Z")

</div>

Hi I have alredy configured in filebeat to send tomcat logs to Kibana. And it was working perfectly until last 14th of November, but after that logs are not showing in Kibana dashboard. You can see that in below image. …

---

## [Question about Coordinate Map](https://discuss.elastic.co/t/question-about-coordinate-map/110475)

<div class="topic-metadata">

**Author:** [@peterch](https://discuss.elastic.co/u/peterch)\
**Replies:** 2\
**Last updated:** [December 7, 2017, 3:31am UTC](https://discuss.elastic.co/t/question-about-coordinate-map/110475 "2017-12-07T03:31:24Z")

</div>

Dear all, I am trying to create a map using Coordinate Map , May I know is it possible to show country names instead of latitude and longitude values. Thanks \[image\]

---

## [Kibana Timestamp Format](https://discuss.elastic.co/t/kibana-timestamp-format/110369)

<div class="topic-metadata">

**Author:** [@jakelaws](https://discuss.elastic.co/u/jakelaws)\
**Replies:** 3\
**Last updated:** [December 7, 2017, 12:22am UTC](https://discuss.elastic.co/t/kibana-timestamp-format/110369 "2017-12-07T00:22:58Z")

</div>

Hi, I am currently have NiFi ingesting data into our elastic search environment. We are trying to get elastic to recognize the timestamp format '2017-12-04 18:25:30.114000+00:00' but no matter what we have tried it fail…

---

## [Max value for elasticsearch.requestTimeout in kibana.yml configuration](https://discuss.elastic.co/t/max-value-for-elasticsearch-requesttimeout-in-kibana-yml-configuration/110439)

<div class="topic-metadata">

**Author:** [@learner](https://discuss.elastic.co/u/learner)\
**Replies:** 18\
**Last updated:** [December 6, 2017, 11:42pm UTC](https://discuss.elastic.co/t/max-value-for-elasticsearch-requesttimeout-in-kibana-yml-configuration/110439 "2017-12-06T23:42:25Z")

</div>

Hi, I'm getting the following error if I increase the lookup duration to longer than the last 12 hours. \[image\] Searching the forum postings here, I found that it's related to the value of elasticsearch.requestTimeout…

---

## [Kibana query string length limitation?](https://discuss.elastic.co/t/kibana-query-string-length-limitation/110562)

<div class="topic-metadata">

**Author:** [@brandondash](https://discuss.elastic.co/u/brandondash)\
**Replies:** 3\
**Last updated:** [December 6, 2017, 9:15pm UTC](https://discuss.elastic.co/t/kibana-query-string-length-limitation/110562 "2017-12-06T21:15:38Z")

</div>

I have a search that returns several tens of thousands of entries. I have one of the fields separated out as userID. In the userID string there exists a user's organization. There are a LOT of these organizations. For pu…

---

## [Default size of the notifications banner](https://discuss.elastic.co/t/default-size-of-the-notifications-banner/110539)

<div class="topic-metadata">

**Author:** [@Erik\_Gast](https://discuss.elastic.co/u/Erik_Gast)\
**Replies:** 1\
**Last updated:** [December 6, 2017, 7:24pm UTC](https://discuss.elastic.co/t/default-size-of-the-notifications-banner/110539 "2017-12-06T19:24:34Z")

</div>

I am trying to keep the notifications:banner from truncating. I would like to show the entire banner without having to click "more"

---

## [How to overlay years in timelion](https://discuss.elastic.co/t/how-to-overlay-years-in-timelion/110531)

<div class="topic-metadata">

**Author:** [@I\_like\_dogs](https://discuss.elastic.co/u/I_like_dogs)\
**Replies:** 2\
**Last updated:** [December 6, 2017, 7:23pm UTC](https://discuss.elastic.co/t/how-to-overlay-years-in-timelion/110531 "2017-12-06T19:23:55Z")

</div>

.es(2017),.es(2016),.es(2015),.es(2014),.es(2013) I have the above filter in timelion but i want to overlay them instead of being next to each other

---

## [Kibana query string help please :(](https://discuss.elastic.co/t/kibana-query-string-help-please/109981)

<div class="topic-metadata">

**Author:** [@brandondash](https://discuss.elastic.co/u/brandondash)\
**Replies:** 2\
**Last updated:** [December 6, 2017, 6:42pm UTC](https://discuss.elastic.co/t/kibana-query-string-help-please/109981 "2017-12-06T18:42:51Z")

</div>

I posted a thread last night lamenting my lack of knowledge on how to use the @ symbol in the Kibana query string. Since that time I have come to learn that I really don't understand the documentation for queries in gene…

---

## [Aligning images with MArkDown](https://discuss.elastic.co/t/aligning-images-with-markdown/110486)

<div class="topic-metadata">

**Author:** [@eebee](https://discuss.elastic.co/u/eebee)\
**Replies:** 1\
**Last updated:** [December 6, 2017, 5:36pm UTC](https://discuss.elastic.co/t/aligning-images-with-markdown/110486 "2017-12-06T17:36:24Z")

</div>

I have a visualization where I only display an image using the code below. But is there any way to make MarkDown align the image to the right? All examples I've found on Google uses normal html to align a div, but that …

---

## [How to round the sum of metric value on Scripted Field in Visualization?](https://discuss.elastic.co/t/how-to-round-the-sum-of-metric-value-on-scripted-field-in-visualization/110465)

<div class="topic-metadata">

**Author:** [@Shalvin\_Kumar](https://discuss.elastic.co/u/Shalvin_Kumar)\
**Replies:** 1\
**Last updated:** [December 6, 2017, 5:08pm UTC](https://discuss.elastic.co/t/how-to-round-the-sum-of-metric-value-on-scripted-field-in-visualization/110465 "2017-12-06T17:08:01Z")

</div>

Hello community, I have written a Scripted field where I am getting P&L of successful trades in a field that I'll later use in a visualization (sum of P&L of successful trades). Code in painless: if(doc\['Type.keyword'…

---

## [Problem with terms -- they are ALL raw](https://discuss.elastic.co/t/problem-with-terms-they-are-all-raw/110407)

<div class="topic-metadata">

**Author:** [@brandondash](https://discuss.elastic.co/u/brandondash)\
**Replies:** 1\
**Last updated:** [December 6, 2017, 3:43pm UTC](https://discuss.elastic.co/t/problem-with-terms-they-are-all-raw/110407 "2017-12-06T15:43:08Z")

</div>

I am trying desperately to understand how the ELK stack works. I spent several weeks setting up a rather complicated set of regex filters so that logstash could pass along useful data to elasticsearch. Now I am in Kibana…

---

## [TypeError: Cannot read property 'message' of null](https://discuss.elastic.co/t/typeerror-cannot-read-property-message-of-null/110196)

<div class="topic-metadata">

**Author:** [@g-vamp](https://discuss.elastic.co/u/g-vamp)\
**Replies:** 4\
**Last updated:** [December 6, 2017, 2:10pm UTC](https://discuss.elastic.co/t/typeerror-cannot-read-property-message-of-null/110196 "2017-12-06T14:10:12Z")

</div>

I have recently upgraded the ELK stack from 5.4.2 to 6.0.0 and I have an issue in kibana where in the Discover tab or Management \> Index Patterns tab I have an ajax error saying: "Cannot read property 'message' of null"…

---

## [Cannot generate report in Kibana](https://discuss.elastic.co/t/cannot-generate-report-in-kibana/107255)

<div class="topic-metadata">

**Author:** [@imortalsolitude](https://discuss.elastic.co/u/imortalsolitude)\
**Replies:** 9\
**Last updated:** [December 6, 2017, 1:55pm UTC](https://discuss.elastic.co/t/cannot-generate-report-in-kibana/107255 "2017-12-06T13:55:32Z")

</div>

Hi I have Xpack installed on ELK 5.6 but unable to generate report . When i try to generate report i get the following error "There was an error generating your report for the "1" dashboard: HeadlessError: Request() …

---

## [Authenticate on Kibana 6.0.0 with a post](https://discuss.elastic.co/t/authenticate-on-kibana-6-0-0-with-a-post/109725)

<div class="topic-metadata">

**Author:** [@JulienC](https://discuss.elastic.co/u/JulienC)\
**Replies:** 6\
**Last updated:** [December 6, 2017, 12:48pm UTC](https://discuss.elastic.co/t/authenticate-on-kibana-6-0-0-with-a-post/109725 "2017-12-06T12:48:31Z")

</div>

Hello, I would like to add an iframe targeting Kibana with authentication. With the help of this thread (Authenticating to iframe-embedded Kibana dashboard ), I added a POST to handle authentication before loading the …

---

## [Drop down menu](https://discuss.elastic.co/t/drop-down-menu/110153)

<div class="topic-metadata">

**Author:** [@mad-max](https://discuss.elastic.co/u/mad-max)\
**Replies:** 3\
**Last updated:** [December 6, 2017, 11:00am UTC](https://discuss.elastic.co/t/drop-down-menu/110153 "2017-12-06T11:00:40Z")

</div>

Hello to all. I'd like to make a drop down menu. How can I do it in kibana? Thank you so much for the suggestions you can give me. M

---

## [Sorting rows in Kibana based on keyword field](https://discuss.elastic.co/t/sorting-rows-in-kibana-based-on-keyword-field/109968)

<div class="topic-metadata">

**Author:** [@rinmalavi](https://discuss.elastic.co/u/rinmalavi)\
**Replies:** 5\
**Last updated:** [December 6, 2017, 10:57am UTC](https://discuss.elastic.co/t/sorting-rows-in-kibana-based-on-keyword-field/109968 "2017-12-06T10:57:33Z")

</div>

Is there a way to get those up down arrows next to field name in Kibana so I could sort by small strings in that field. Seems pretty trivial but I can't find a way. Thought it was done adding "fielddata" but still no s…

---

## [Send filebeat 6.0 dashboard template to Kibana using logstash](https://discuss.elastic.co/t/send-filebeat-6-0-dashboard-template-to-kibana-using-logstash/108690)

<div class="topic-metadata">

**Author:** [@samiujan](https://discuss.elastic.co/u/samiujan)\
**Replies:** 2\
**Last updated:** [December 6, 2017, 9:43am UTC](https://discuss.elastic.co/t/send-filebeat-6-0-dashboard-template-to-kibana-using-logstash/108690 "2017-12-06T09:43:07Z")

</div>

Hi I am new to the ELK stack Previously I was using 5.6.3 and had connected fileBeat and metricBeat to Logstash where a geoip lookup was done in /etc/logstash/conf.d/beats.conf and this was then forwarded to Elasticsea…

---

## [How to run kibana docker container on port 80](https://discuss.elastic.co/t/how-to-run-kibana-docker-container-on-port-80/110355)

<div class="topic-metadata">

**Author:** [@marouane](https://discuss.elastic.co/u/marouane)\
**Replies:** 2\
**Last updated:** [December 6, 2017, 7:52am UTC](https://discuss.elastic.co/t/how-to-run-kibana-docker-container-on-port-80/110355 "2017-12-06T07:52:17Z")

</div>

Hi every one , I'm new in elk and now i'm using kibana with the port 5601 docker run -d --name=kibana --restart=unless-stopped --link elasticsearch:elasticsearch -p 5601:5601 kibana:5.2 What i need is to run the kiba…

---

## [Kibana dashboards migration to new ES cluster](https://discuss.elastic.co/t/kibana-dashboards-migration-to-new-es-cluster/110406)

<div class="topic-metadata">

**Author:** [@Oferkes](https://discuss.elastic.co/u/Oferkes)\
**Replies:** 1\
**Last updated:** [December 6, 2017, 3:02am UTC](https://discuss.elastic.co/t/kibana-dashboards-migration-to-new-es-cluster/110406 "2017-12-06T03:02:32Z")

</div>

Hi, i created 2 ES clusters (version 5.6), and i want to re-create the same dashboards i have on the first cluster, in the second as well, so i can query it with Kibana that is associated with this second cluster. i ex…

---

## [Calculating the sum of latest values - Timelion/Kibana](https://discuss.elastic.co/t/calculating-the-sum-of-latest-values-timelion-kibana/109894)

<div class="topic-metadata">

**Author:** [@emil.mirzayev](https://discuss.elastic.co/u/emil.mirzayev)\
**Replies:** 3\
**Last updated:** [December 5, 2017, 11:04pm UTC](https://discuss.elastic.co/t/calculating-the-sum-of-latest-values-timelion-kibana/109894 "2017-12-05T23:04:19Z")

</div>

Hey there! I am new to ELK stack. I have the data of measurements of different devices by time. Every 15 min, I get new values per each device (and value in t is always bigger or equal to value in t-1). What I want to d…

---

## [Deletion of logstash-\* index pattern and re-creation](https://discuss.elastic.co/t/deletion-of-logstash-index-pattern-and-re-creation/109780)

<div class="topic-metadata">

**Author:** [@Paul\_Cadd](https://discuss.elastic.co/u/Paul_Cadd)\
**Replies:** 5\
**Last updated:** [December 5, 2017, 10:56pm UTC](https://discuss.elastic.co/t/deletion-of-logstash-index-pattern-and-re-creation/109780 "2017-12-05T22:56:57Z")

</div>

Hi first post here and new to the ELK stack, so bear with me please... maybe long..... We have 2 environments that have a three node cluster (prod) and a 2 node cluster (test) which are normally build via ansible. I've…

---

## [Kibana 6 eating up chrome](https://discuss.elastic.co/t/kibana-6-eating-up-chrome/109283)

<div class="topic-metadata">

**Author:** [@nesretep](https://discuss.elastic.co/u/nesretep)\
**Replies:** 3\
**Last updated:** [December 5, 2017, 8:55pm UTC](https://discuss.elastic.co/t/kibana-6-eating-up-chrome/109283 "2017-12-05T20:55:08Z")

</div>

Hi there! We just upgraded to Kibana 6 (on ES6) and we experience severe performance problems in the Kibana frontend. When building just a little vis on 2 terms (top 500 on top 500), Kibana spends loads of processor ti…

---

## [Region Map Polygon Line Widths and Legend background Customization](https://discuss.elastic.co/t/region-map-polygon-line-widths-and-legend-background-customization/107088)

<div class="topic-metadata">

**Author:** [@drfuka](https://discuss.elastic.co/u/drfuka)\
**Replies:** 6\
**Last updated:** [December 5, 2017, 7:45pm UTC](https://discuss.elastic.co/t/region-map-polygon-line-widths-and-legend-background-customization/107088 "2017-12-05T19:45:41Z")

</div>

While having fun with RegionMaps with mapserver self hosted geojson requests, I have found a need to alter/remove the line width for the edges of the polygons. Is there any info on how to remove the polygon borders, or c…

---

## [Time serie visual builder](https://discuss.elastic.co/t/time-serie-visual-builder/110310)

<div class="topic-metadata">

**Author:** [@mad-max](https://discuss.elastic.co/u/mad-max)\
**Replies:** 1\
**Last updated:** [December 5, 2017, 7:15pm UTC](https://discuss.elastic.co/t/time-serie-visual-builder/110310 "2017-12-05T19:15:47Z")

</div>

Hello to ALL, I created two metrics one where of which has the task of representing the past year by setting the offset to 1M (the data are represented monthly) seems to work everything except that when you mouse over th…

---

## [Kibana Visualize chart issue](https://discuss.elastic.co/t/kibana-visualize-chart-issue/110104)

<div class="topic-metadata">

**Author:** [@hsiuming](https://discuss.elastic.co/u/hsiuming)\
**Replies:** 1\
**Last updated:** [December 5, 2017, 7:11pm UTC](https://discuss.elastic.co/t/kibana-visualize-chart-issue/110104 "2017-12-05T19:11:52Z")

</div>

Hello In the line chart,We want to use the dot to show the count data. But the dot size is too small in the chart. The chart: \[未命名\] I already set the dot size to max,but the dot size can't change. Is there any othe…

---

## [Deprecated "include\_in\_all"](https://discuss.elastic.co/t/deprecated-include-in-all/110350)

<div class="topic-metadata">

**Author:** [@Jasonespo](https://discuss.elastic.co/u/Jasonespo)\
**Replies:** 1\
**Last updated:** [December 5, 2017, 6:58pm UTC](https://discuss.elastic.co/t/deprecated-include-in-all/110350 "2017-12-05T18:58:06Z")

</div>

Hi all, how would I get the same functionality as this template by using the "copy\_to" on the mapping fields? { "index\_patterns": \[ "tid\*" \], "settings": { "index": { "number\_of\_shards": "5" } }, "mappings": { …

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=892)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=894)
