# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=894

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 895

---

## [Edit filter - "is one of" search limitation to 10 hits](https://discuss.elastic.co/t/edit-filter-is-one-of-search-limitation-to-10-hits/110331)

<div class="topic-metadata">

**Author:** [@nesretep](https://discuss.elastic.co/u/nesretep)\
**Replies:** 1\
**Last updated:** [December 5, 2017, 6:39pm UTC](https://discuss.elastic.co/t/edit-filter-is-one-of-search-limitation-to-10-hits/110331 "2017-12-05T18:39:43Z")

</div>

Hi there When searching for a given value, you never get more than 10 hits for this given value. This limitation makes the ability to multi select values unusable for us. Is there any way of altering this behaviour? We…

---

## [How can limit access to dashboards?](https://discuss.elastic.co/t/how-can-limit-access-to-dashboards/110398)

<div class="topic-metadata">

**Author:** [@1862347ba9566e72a47d](https://discuss.elastic.co/u/1862347ba9566e72a47d)\
**Replies:** 1\
**Last updated:** [December 5, 2017, 6:32pm UTC](https://discuss.elastic.co/t/how-can-limit-access-to-dashboards/110398 "2017-12-05T18:32:19Z")

</div>

Kibana version 6.0 I created a new user1 in kibana. Then assign role to use a user for Dashboard Only mode. User1 has by default accessed dashboard1, dashboard2, dashboard3. I want him to get access only to the dashb…

---

## [Override OnClick on Visualizations](https://discuss.elastic.co/t/override-onclick-on-visualizations/110317)

<div class="topic-metadata">

**Author:** [@jlafuenteribera](https://discuss.elastic.co/u/jlafuenteribera)\
**Replies:** 2\
**Last updated:** [December 5, 2017, 5:59pm UTC](https://discuss.elastic.co/t/override-onclick-on-visualizations/110317 "2017-12-05T17:59:46Z")

</div>

Hi is there a way to override or disable the default mouse click event for all visualizations?? Where are this kind of events added to the visualization? Im using Kibana 6.0.0

---

## [Kibana - Dashboard - pdf download](https://discuss.elastic.co/t/kibana-dashboard-pdf-download/110309)

<div class="topic-metadata">

**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\
**Replies:** 1\
**Last updated:** [December 5, 2017, 4:40pm UTC](https://discuss.elastic.co/t/kibana-dashboard-pdf-download/110309 "2017-12-05T16:40:00Z")

</div>

Hi All, Iam using Elastic stack and kibana , for different purposes, so we use to feed the csv files from vulnerability scans. So we need to create a datatable of host ,ip , issue and solution. Problem is in the soluti…

---

## [Puppet-kibana module failing on installation](https://discuss.elastic.co/t/puppet-kibana-module-failing-on-installation/110170)

<div class="topic-metadata">

**Author:** [@mrunkel](https://discuss.elastic.co/u/mrunkel)\
**Replies:** 1\
**Last updated:** [December 5, 2017, 4:38pm UTC](https://discuss.elastic.co/t/puppet-kibana-module-failing-on-installation/110170 "2017-12-05T16:38:19Z")

</div>

Hey there. I'm trying to install kibana using the puppet module from elastic and I'm getting the following error: Error: Found 1 dependency cycle: (Exec\[apt\_update\] =\> Class\[Apt::Update\] =\> Package\[apt-transport-https\]…

---

## [Rsyslog -\> logstash -\> elastic search -\> kibana](https://discuss.elastic.co/t/rsyslog-logstash-elastic-search-kibana/110299)

<div class="topic-metadata">

**Author:** [@Seat](https://discuss.elastic.co/u/Seat)\
**Replies:** 1\
**Last updated:** [December 5, 2017, 4:36pm UTC](https://discuss.elastic.co/t/rsyslog-logstash-elastic-search-kibana/110299 "2017-12-05T16:36:22Z")

</div>

Hello, I´m a newbie in elk. On the ubuntu server I have rsyslog, logstash, elastic search and kibana. I need sending log files from routerboard mikrotik to kibana. All components are runing and configured too, but in…

---

## [How to hide filter from showing in the filter bar?](https://discuss.elastic.co/t/how-to-hide-filter-from-showing-in-the-filter-bar/110246)

<div class="topic-metadata">

**Author:** [@saafianihan](https://discuss.elastic.co/u/saafianihan)\
**Replies:** 1\
**Last updated:** [December 5, 2017, 4:31pm UTC](https://discuss.elastic.co/t/how-to-hide-filter-from-showing-in-the-filter-bar/110246 "2017-12-05T16:31:43Z")

</div>

We have created multiple dashboards with one index and multiple document types which belongs to that index. Each document type have two common columns namely org\_id (organization id) and workflow\_id. We have to filter da…

---

## [Role to use grok debugger, and console granular access control](https://discuss.elastic.co/t/role-to-use-grok-debugger-and-console-granular-access-control/109619)

<div class="topic-metadata">

**Author:** [@Suny](https://discuss.elastic.co/u/Suny)\
**Replies:** 2\
**Last updated:** [December 5, 2017, 4:30pm UTC](https://discuss.elastic.co/t/role-to-use-grok-debugger-and-console-granular-access-control/109619 "2017-12-05T16:30:58Z")

</div>

We are using Shield (Security) and created some power user accounts. They have the following roles assigned: kibana\_user monitoring\_user reporting\_user logstash\_admin read\_all Those are all built in roles from http…

---

## [Kibana Discovery tab - distinct / unique the results](https://discuss.elastic.co/t/kibana-discovery-tab-distinct-unique-the-results/110045)

<div class="topic-metadata">

**Author:** [@elad888](https://discuss.elastic.co/u/elad888)\
**Replies:** 2\
**Last updated:** [December 5, 2017, 1:55pm UTC](https://discuss.elastic.co/t/kibana-discovery-tab-distinct-unique-the-results/110045 "2017-12-05T13:55:26Z")

</div>

Hi I would need to distinct my discovery results by customer ID, and get all details of each customer latest action/document. I am aware that i can get the unique count by using a visualization , BUT it is not enough …

---

## [Aggregate by keyword in kibana 5.6](https://discuss.elastic.co/t/aggregate-by-keyword-in-kibana-5-6/109193)

<div class="topic-metadata">

**Author:** [@yishain11](https://discuss.elastic.co/u/yishain11)\
**Replies:** 3\
**Last updated:** [December 5, 2017, 1:15pm UTC](https://discuss.elastic.co/t/aggregate-by-keyword-in-kibana-5-6/109193 "2017-12-05T13:15:02Z")

</div>

Hi everyone! I have the following setup: filebeat (collects log file) \> logdash (filters JSON) \> elasticsearch \> kibana. In kibana, I mapped the data as follows: get filebeat-2017\*/\_mapping/log results in: . . . "com…

---

## [How to Use range in Y axis in kibana](https://discuss.elastic.co/t/how-to-use-range-in-y-axis-in-kibana/110020)

<div class="topic-metadata">

**Author:** [@scch](https://discuss.elastic.co/u/scch)\
**Replies:** 4\
**Last updated:** [December 5, 2017, 1:14pm UTC](https://discuss.elastic.co/t/how-to-use-range-in-y-axis-in-kibana/110020 "2017-12-05T13:14:39Z")

</div>

Can this be achieved through Json input . if yes, let me know how.? basically i want to specify count between 100 to 500... if i code {"min\_doc\_count": 100 } in jason input, it shows all the count above 100. how to p…

---

## [Hide FilterBar Embed DashBoard](https://discuss.elastic.co/t/hide-filterbar-embed-dashboard/110332)

<div class="topic-metadata">

**Author:** [@jlafuenteribera](https://discuss.elastic.co/u/jlafuenteribera)\
**Replies:** 1\
**Last updated:** [December 5, 2017, 12:48pm UTC](https://discuss.elastic.co/t/hide-filterbar-embed-dashboard/110332 "2017-12-05T12:48:17Z")

</div>

Is there a way to hide the filterBar on non-full-screen embed dashboard? I modify the embed url to add filters but i dont want to show that filter bar I use Kibana 6.0.0

---

## [Simple painless date different calculated field](https://discuss.elastic.co/t/simple-painless-date-different-calculated-field/109999)

<div class="topic-metadata">

**Author:** [@BrianBeaulieu](https://discuss.elastic.co/u/BrianBeaulieu)\
**Replies:** 1\
**Last updated:** [December 5, 2017, 12:36pm UTC](https://discuss.elastic.co/t/simple-painless-date-different-calculated-field/109999 "2017-12-05T12:36:48Z")

</div>

Should something like this work? doc\['timestamp'\].value - doc\['data.LOGON\_TIME'\].value; I've tried numerous variations. Setting variables. using a return statement. I basically just need to know how many milliseconds …

---

## [Struggling with Tag Cloud Visualization](https://discuss.elastic.co/t/struggling-with-tag-cloud-visualization/107511)

<div class="topic-metadata">

**Author:** [@psypher246](https://discuss.elastic.co/u/psypher246)\
**Replies:** 3\
**Last updated:** [December 5, 2017, 12:09pm UTC](https://discuss.elastic.co/t/struggling-with-tag-cloud-visualization/107511 "2017-12-05T12:09:09Z")

</div>

Hello, I'm very new to the Elastic stack and trying to use the tag cloud visualization feature in the following way. My data is telemetry from IoT devices in the following form: {"Item1": 99, "Item2": 55.30, "Item3": …

---

## [Coordinate map - zoom in further](https://discuss.elastic.co/t/coordinate-map-zoom-in-further/106879)

<div class="topic-metadata">

**Author:** [@magerRV](https://discuss.elastic.co/u/magerRV)\
**Replies:** 2\
**Last updated:** [December 5, 2017, 8:35am UTC](https://discuss.elastic.co/t/coordinate-map-zoom-in-further/106879 "2017-12-05T08:35:17Z")

</div>

Is there any possebility to zoom in further in the visualisation type coordinate map ? I have some data with geo\_points and would like to see seperation in the city. Unfortunately they are so close to each other that I …

---

## [Kibana log in is currently disabled. administrators should consult the kibana logs for more details](https://discuss.elastic.co/t/kibana-log-in-is-currently-disabled-administrators-should-consult-the-kibana-logs-for-more-details/110234)

<div class="topic-metadata">

**Author:** [@hoangkhac](https://discuss.elastic.co/u/hoangkhac)\
**Replies:** 1\
**Last updated:** [December 5, 2017, 7:14am UTC](https://discuss.elastic.co/t/kibana-log-in-is-currently-disabled-administrators-should-consult-the-kibana-logs-for-more-details/110234 "2017-12-05T07:14:26Z")

</div>

I have installed x-pack on kibana and elasticsearch. Elasticsearch works fine but on the kibana i can not log in. This picture shows the condition: \[Screenshot from 2017-12-05 01-34-46\] I have changed my password and …

---

## [Kibana.yml does not contain any x-pack](https://discuss.elastic.co/t/kibana-yml-does-not-contain-any-x-pack/110232)

<div class="topic-metadata">

**Author:** [@hoangkhac](https://discuss.elastic.co/u/hoangkhac)\
**Replies:** 2\
**Last updated:** [December 5, 2017, 5:15am UTC](https://discuss.elastic.co/t/kibana-yml-does-not-contain-any-x-pack/110232 "2017-12-05T05:15:09Z")

</div>

Hi i am currently new to the elastic stack. i have x-pack successfully installed on elasticsearch and also kibana. I want to disable the security of x-pack but i can not find the xpack.security.enabled in my kibana.yml f…

---

## [Image Display Issues](https://discuss.elastic.co/t/image-display-issues/110074)

<div class="topic-metadata">

**Author:** [@EricWS](https://discuss.elastic.co/u/EricWS)\
**Replies:** 9\
**Last updated:** [December 4, 2017, 10:34pm UTC](https://discuss.elastic.co/t/image-display-issues/110074 "2017-12-04T22:34:13Z")

</div>

Hi all, We are in the process of upgrading to ElasticSearch 6.0 and Kibana 6.0, however the removal of the use of string as a field type has create issues with being able to display URL's as images using the below setti…

---

## [Filebeat + logstash IIS+kibana](https://discuss.elastic.co/t/filebeat-logstash-iis-kibana/109232)

<div class="topic-metadata">

**Author:** [@Silver](https://discuss.elastic.co/u/Silver)\
**Replies:** 14\
**Last updated:** [December 4, 2017, 12:41pm UTC](https://discuss.elastic.co/t/filebeat-logstash-iis-kibana/109232 "2017-12-04T12:41:30Z")

</div>

This is my logstash config 20-iis-input.config filter { if \[type\] == "iis" { if \[message\] =~ "^#" { drop {} } grok { break\_on\_match…

---

## [Does Kibana Need LogStash](https://discuss.elastic.co/t/does-kibana-need-logstash/110140)

<div class="topic-metadata">

**Author:** [@0NE](https://discuss.elastic.co/u/0NE)\
**Replies:** 1\
**Last updated:** [December 4, 2017, 12:32pm UTC](https://discuss.elastic.co/t/does-kibana-need-logstash/110140 "2017-12-04T12:32:05Z")

</div>

I am currently working at a enterprise company who has a large amount of infrastucure. We are using windows (I prefer linux). As I am trying to find answers to my questions, I thought I would be get it faster by asking …

---

## [Default X-Pack on FreeBSD 11.1 breaks Kibana](https://discuss.elastic.co/t/default-x-pack-on-freebsd-11-1-breaks-kibana/110117)

<div class="topic-metadata">

**Author:** [@nrauhauser](https://discuss.elastic.co/u/nrauhauser)\
**Replies:** 2\
**Last updated:** [December 4, 2017, 11:17am UTC](https://discuss.elastic.co/t/default-x-pack-on-freebsd-11-1-breaks-kibana/110117 "2017-12-04T11:17:42Z")

</div>

Here is a simple exercise leading to a reproducible bug. Install FreeBSD 11.1 pkg install elasticsearch5 pkg install kibana5 Place startup files in /etc/rc.conf.d/ Test Kibana, it'll work fine. service kibana stop …

---

## [Compare two periods in Kibana](https://discuss.elastic.co/t/compare-two-periods-in-kibana/109937)

<div class="topic-metadata">

**Author:** [@Hannah](https://discuss.elastic.co/u/Hannah)\
**Replies:** 2\
**Last updated:** [December 4, 2017, 11:12am UTC](https://discuss.elastic.co/t/compare-two-periods-in-kibana/109937 "2017-12-04T11:12:21Z")

</div>

Hi there, I'm new to Kibana and would like to compare two periods in a line. Role model for this chart is the Audience Overview in Google Analytics where you can compare two periods (see screenshot) on a time axis. On x-…

---

## [Failed to parse mapping for index](https://discuss.elastic.co/t/failed-to-parse-mapping-for-index/110102)

<div class="topic-metadata">

**Author:** [@Jasonespo](https://discuss.elastic.co/u/Jasonespo)\
**Replies:** 4\
**Last updated:** [December 4, 2017, 10:08am UTC](https://discuss.elastic.co/t/failed-to-parse-mapping-for-index/110102 "2017-12-04T10:08:23Z")

</div>

I have just updated my stack to 6.0.0 and I am getting the following error: 017-12-01 10:47:45.653 INFO 3211 --- \[/O dispatcher 2\] p.c.ElasticSearchRestClientConfiguration : Error for compass/null for INDEX operation: …

---

## [Kibana 6 URL Shortener extremely slow](https://discuss.elastic.co/t/kibana-6-url-shortener-extremely-slow/109962)

<div class="topic-metadata">

**Author:** [@jong99](https://discuss.elastic.co/u/jong99)\
**Replies:** 4\
**Last updated:** [December 4, 2017, 9:30am UTC](https://discuss.elastic.co/t/kibana-6-url-shortener-extremely-slow/109962 "2017-12-04T09:30:04Z")

</div>

When I go to share a visualisation in Kibana 6.0.0 and I click the "Short URL" button, it always takes around 20-30s to generate the short URL. In Kibana 5 it was fast and snappy, but now takes ages. The rest of Kibana…

---

## [Dashboard background doesn't change](https://discuss.elastic.co/t/dashboard-background-doesnt-change/109946)

<div class="topic-metadata">

**Author:** [@emil.mirzayev](https://discuss.elastic.co/u/emil.mirzayev)\
**Replies:** 2\
**Last updated:** [December 4, 2017, 8:39am UTC](https://discuss.elastic.co/t/dashboard-background-doesnt-change/109946 "2017-12-04T08:39:13Z")

</div>

Hi. I recently changed the default dashboard background to black, but then I didin't like it and switched back. However, background still appears to be black after several created dashboard. How can I change it back with…

---

## [Add/Remove source in kibana dashboard](https://discuss.elastic.co/t/add-remove-source-in-kibana-dashboard/109700)

<div class="topic-metadata">

**Author:** [@Makra](https://discuss.elastic.co/u/Makra)\
**Replies:** 2\
**Last updated:** [December 4, 2017, 5:49am UTC](https://discuss.elastic.co/t/add-remove-source-in-kibana-dashboard/109700 "2017-12-04T05:49:05Z")

</div>

Hi I have created kibana dashboard from elasticsearch index and the dashboard consists of fields like source IP, destination IP etc. (router events). Now i want to have a controlling features in the dashboard like add/d…

---

## [Data Table multiple event IDs](https://discuss.elastic.co/t/data-table-multiple-event-ids/109971)

<div class="topic-metadata">

**Author:** [@mathurin68](https://discuss.elastic.co/u/mathurin68)\
**Replies:** 3\
**Last updated:** [December 4, 2017, 3:30am UTC](https://discuss.elastic.co/t/data-table-multiple-event-ids/109971 "2017-12-04T03:30:37Z")

</div>

Trying to build a data table with split rows from multiple windows event ID's. Event ID 4648 - Network Logon with exp credentials Grabbing the following- Computer\_Name TargetUsername SubjectUsername TargetServer wor…

---

## [How to change y-axis to show field value which is already an aggregate](https://discuss.elastic.co/t/how-to-change-y-axis-to-show-field-value-which-is-already-an-aggregate/105504)

<div class="topic-metadata">

**Author:** [@lemongrab](https://discuss.elastic.co/u/lemongrab)\
**Replies:** 6\
**Last updated:** [December 2, 2017, 1:10am UTC](https://discuss.elastic.co/t/how-to-change-y-axis-to-show-field-value-which-is-already-an-aggregate/105504 "2017-12-02T01:10:59Z")

</div>

I have an array of data points objects that follow this format: {pizzasBought: 50, time:13:10} I want the x-axis to be set to time and pizzasBought which is already an aggregate to the y-axis and was wondering how to d…

---

## [Open source software for basic and role-managed access / authentication to Kibana and ElasticSearch?](https://discuss.elastic.co/t/open-source-software-for-basic-and-role-managed-access-authentication-to-kibana-and-elasticsearch/109466)

<div class="topic-metadata">

**Author:** [@parora236](https://discuss.elastic.co/u/parora236)\
**Replies:** 1\
**Last updated:** [December 2, 2017, 12:32am UTC](https://discuss.elastic.co/t/open-source-software-for-basic-and-role-managed-access-authentication-to-kibana-and-elasticsearch/109466 "2017-12-02T00:32:37Z")

</div>

Could someone recommend an open source software for basic and role-managed access / authentication to Kibana and ElasticSearch? Since X-pack is paid after 30-days trial version is used, so we are looking to find an alte…

---

## [Histogram from Terms count](https://discuss.elastic.co/t/histogram-from-terms-count/109908)

<div class="topic-metadata">

**Author:** [@strizr](https://discuss.elastic.co/u/strizr)\
**Replies:** 3\
**Last updated:** [December 2, 2017, 12:17am UTC](https://discuss.elastic.co/t/histogram-from-terms-count/109908 "2017-12-02T00:17:33Z")

</div>

Hi, I am trying to create a simple histogram which would display count based on a count of terms - e.g., count(apples) = 5, count(pears)=5, count(bananas) = 4, so i'd like to have a histogram containing 5-bucket with v…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=893)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=895)
