# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=895

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 896

---

## [Filter on specific index on a Dashboard with multiple indices and Visualisations](https://discuss.elastic.co/t/filter-on-specific-index-on-a-dashboard-with-multiple-indices-and-visualisations/109915)

<div class="topic-metadata">

**Author:** [@Sudarsun\_Peru](https://discuss.elastic.co/u/Sudarsun_Peru)\
**Replies:** 1\
**Last updated:** [December 1, 2017, 10:15pm UTC](https://discuss.elastic.co/t/filter-on-specific-index-on-a-dashboard-with-multiple-indices-and-visualisations/109915 "2017-12-01T22:15:52Z")

</div>

Hi, I have a Dashboard with mutiple visualisations ( Line, Table, Timelion) with each querying on different indices which do not have the same fields in them. If i filter by a specific field of an index, the remaining…

---

## [In Kibana how to do a text search with multiple contains](https://discuss.elastic.co/t/in-kibana-how-to-do-a-text-search-with-multiple-contains/109867)

<div class="topic-metadata">

**Author:** [@Vivek\_Menon](https://discuss.elastic.co/u/Vivek_Menon)\
**Replies:** 1\
**Last updated:** [December 1, 2017, 8:53pm UTC](https://discuss.elastic.co/t/in-kibana-how-to-do-a-text-search-with-multiple-contains/109867 "2017-12-01T20:53:36Z")

</div>

On the kibana UI if I want to search the term car in text on a field named message I would do message: "%car%" that works. If I want to find text that contains both car and bike, I would try message:"%car%bike%" but…

---

## [This simple Kibana query has me flummoxed](https://discuss.elastic.co/t/this-simple-kibana-query-has-me-flummoxed/109853)

<div class="topic-metadata">

**Author:** [@brandondash](https://discuss.elastic.co/u/brandondash)\
**Replies:** 2\
**Last updated:** [December 1, 2017, 8:47pm UTC](https://discuss.elastic.co/t/this-simple-kibana-query-has-me-flummoxed/109853 "2017-12-01T20:47:09Z")

</div>

I'm trying to narrow down a search based on something that should be a very easy thing to ask. I have a substring that will only sometimes show up in my messages with the following format: 12345@foo Initially I thought…

---

## [Aggregate fields in a single field](https://discuss.elastic.co/t/aggregate-fields-in-a-single-field/109542)

<div class="topic-metadata">

**Author:** [@gius78](https://discuss.elastic.co/u/gius78)\
**Replies:** 4\
**Last updated:** [December 1, 2017, 4:17pm UTC](https://discuss.elastic.co/t/aggregate-fields-in-a-single-field/109542 "2017-12-01T16:17:28Z")

</div>

Hi all the forum from an elastic newbie. I have different applications sending logs to logstash-kibana, each application has different fields in logs obviously, I'd like to aggregate fields containing same informations …

---

## [Kibana 6.0 Default index](https://discuss.elastic.co/t/kibana-6-0-default-index/109561)

<div class="topic-metadata">

**Author:** [@moriol](https://discuss.elastic.co/u/moriol)\
**Replies:** 2\
**Last updated:** [December 1, 2017, 2:35pm UTC](https://discuss.elastic.co/t/kibana-6-0-default-index/109561 "2017-12-01T14:35:58Z")

</div>

I have upgraded Kibana from 5.6 to 6.0. When I go to Kibana, it says I need to create a default Index. Error as below: Error: Please specify a default index pattern I added a new Index, with going to Management -\> Inde…

---

## [Customized mouse over](https://discuss.elastic.co/t/customized-mouse-over/109171)

<div class="topic-metadata">

**Author:** [@svn1991](https://discuss.elastic.co/u/svn1991)\
**Replies:** 2\
**Last updated:** [December 1, 2017, 9:19am UTC](https://discuss.elastic.co/t/customized-mouse-over/109171 "2017-12-01T09:19:53Z")

</div>

\[Screenshot\_1\] Hi Is it possible to display the subcategories of the count without doing split series when hovering on the chart? I would like the mouse over to display: Count: 48 id 1: 4 id 2: 30 id 3: 10 id 4: …

---

## [Xpack 5.3.0 is installed . But Machine learning is not showing in Kibana](https://discuss.elastic.co/t/xpack-5-3-0-is-installed-but-machine-learning-is-not-showing-in-kibana/109016)

<div class="topic-metadata">

**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\
**Replies:** 4\
**Last updated:** [November 24, 2017, 12:32pm UTC](https://discuss.elastic.co/t/xpack-5-3-0-is-installed-but-machine-learning-is-not-showing-in-kibana/109016 "2017-11-24T12:32:40Z")

</div>

Hi All, I have ELK 5.3.0 Server and Xpack 5.3.0 is installed in it. All are working well. But in Kibana Machine learning option is not available. Graph and Monitoring are available. Xpack Cofiguration in elasticse…

---

## [Machine Learning create new single metric job is done but result not coming](https://discuss.elastic.co/t/machine-learning-create-new-single-metric-job-is-done-but-result-not-coming/109568)

<div class="topic-metadata">

**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\
**Replies:** 3\
**Last updated:** [December 1, 2017, 8:40am UTC](https://discuss.elastic.co/t/machine-learning-create-new-single-metric-job-is-done-but-result-not-coming/109568 "2017-12-01T08:40:50Z")

</div>

\*\* Using ELK And Xpack 5.4.1 . Apache accesslog indexed successfully.\*\* When creating new single metric job : Aggregation : SUM Field : Offset Bucket span : 5 Running |\> Graph loaded . creating job : Entered Nam…

---

## [Adding tab to discover (core plugin)](https://discuss.elastic.co/t/adding-tab-to-discover-core-plugin/107924)

<div class="topic-metadata">

**Author:** [@CarlKnutsen](https://discuss.elastic.co/u/CarlKnutsen)\
**Replies:** 2\
**Last updated:** [December 1, 2017, 5:17am UTC](https://discuss.elastic.co/t/adding-tab-to-discover-core-plugin/107924 "2017-12-01T05:17:52Z")

</div>

Hi there, I'd like to add some functionality to one of the core plugins, namely "discover". I changed the controller a little bit with an additional tab to open a ticket in our ticket system. And I was wondering if it's…

---

## [Kibana 5.6.2 Dashboard - Access Denied in IE11](https://discuss.elastic.co/t/kibana-5-6-2-dashboard-access-denied-in-ie11/109153)

<div class="topic-metadata">

**Author:** [@shashwat](https://discuss.elastic.co/u/shashwat)\
**Replies:** 3\
**Last updated:** [December 1, 2017, 12:34am UTC](https://discuss.elastic.co/t/kibana-5-6-2-dashboard-access-denied-in-ie11/109153 "2017-12-01T00:34:59Z")

</div>

Hi, I am using Kibana dashboard in my application. I have added the iframe in my web page and it works fine with Firefox , Chrome browser. But when I open this with IE11 it gives me Access denied error. Please see below…

---

## [X-Pack PDF Report Generation fails - Kibana 5.5.2](https://discuss.elastic.co/t/x-pack-pdf-report-generation-fails-kibana-5-5-2/106940)

<div class="topic-metadata">

**Author:** [@tamisalex](https://discuss.elastic.co/u/tamisalex)\
**Replies:** 12\
**Last updated:** [December 1, 2017, 12:17am UTC](https://discuss.elastic.co/t/x-pack-pdf-report-generation-fails-kibana-5-5-2/106940 "2017-12-01T00:17:43Z")

</div>

After I click the generate printable pdf, I get this error: There was an error generating your report for the "Report Dashboard" dashboard: Max attempts reached (3) If I add xpack.reporting.queue.timeout to 90000 to th…

---

## [SPL to Lucene](https://discuss.elastic.co/t/spl-to-lucene/109851)

<div class="topic-metadata">

**Author:** [@thelonestargeek](https://discuss.elastic.co/u/thelonestargeek)\
**Replies:** 1\
**Last updated:** [November 30, 2017, 11:55pm UTC](https://discuss.elastic.co/t/spl-to-lucene/109851 "2017-11-30T23:55:01Z")

</div>

Is there a guide or reference in how to convert SPL (Splunk processing language) to Kibana. For example what is the equivalent "stats count by" or "table" command in Kibana (lucene)?

---

## [Cannot save Searches or visulation in kibana](https://discuss.elastic.co/t/cannot-save-searches-or-visulation-in-kibana/109821)

<div class="topic-metadata">

**Author:** [@pgervais](https://discuss.elastic.co/u/pgervais)\
**Replies:** 2\
**Last updated:** [November 30, 2017, 10:08pm UTC](https://discuss.elastic.co/t/cannot-save-searches-or-visulation-in-kibana/109821 "2017-11-30T22:08:01Z")

</div>

When i try to save either a new search/visualization from discover/Visualize i get the follwoing error: Blocked by:\[FORBIDDEN/12/index read only / allow delete (api):: \[cluster\_block\_exception\] blocked by : \[FORBIDDEN/1…

---

## [Search on kibana discover dashboard](https://discuss.elastic.co/t/search-on-kibana-discover-dashboard/109610)

<div class="topic-metadata">

**Author:** [@artec](https://discuss.elastic.co/u/artec)\
**Replies:** 3\
**Last updated:** [November 30, 2017, 7:57pm UTC](https://discuss.elastic.co/t/search-on-kibana-discover-dashboard/109610 "2017-11-30T19:57:57Z")

</div>

Hi all, this is my first topic so I would say an "Hello!" at everyone ! I set up an environment with filebeat -\> logstash -\> es -\> kibana to collect our application logs. The events are like (stored in message field) …

---

## [I couldn't run Kibana 6.0.0 in Windows 32bit](https://discuss.elastic.co/t/i-couldnt-run-kibana-6-0-0-in-windows-32bit/109074)

<div class="topic-metadata">

**Author:** [@AhmyOhlin](https://discuss.elastic.co/u/AhmyOhlin)\
**Replies:** 11\
**Last updated:** [November 30, 2017, 3:11pm UTC](https://discuss.elastic.co/t/i-couldnt-run-kibana-6-0-0-in-windows-32bit/109074 "2017-11-30T15:11:46Z")

</div>

Hi, i installed Kibana 6.0 on Windows7 32bit. everytime when i run it, i get an error that my windows 7 32bit is not not compatible!! i installed the Kibana version 5.6.4 iand it was working fine without problem!!!? …

---

## [Calculate time delta between log entries with matching ID and matching Command](https://discuss.elastic.co/t/calculate-time-delta-between-log-entries-with-matching-id-and-matching-command/109435)

<div class="topic-metadata">

**Author:** [@Toon\_Van\_Eyck](https://discuss.elastic.co/u/Toon_Van_Eyck)\
**Replies:** 2\
**Last updated:** [November 30, 2017, 3:01pm UTC](https://discuss.elastic.co/t/calculate-time-delta-between-log-entries-with-matching-id-and-matching-command/109435 "2017-11-30T15:01:11Z")

</div>

I have some logs in my elasticsearch database formated like this: Timestamp | ID | Command ------------------------------------+-------+--------------------------- November 24th 2017, 14:49…

---

## [Kibana error Content-type header \[application/x-ndjson; charset=UTF-8\] is not supported](https://discuss.elastic.co/t/kibana-error-content-type-header-application-x-ndjson-charset-utf-8-is-not-supported/109598)

<div class="topic-metadata">

**Author:** [@ricamz](https://discuss.elastic.co/u/ricamz)\
**Replies:** 2\
**Last updated:** [November 30, 2017, 2:21pm UTC](https://discuss.elastic.co/t/kibana-error-content-type-header-application-x-ndjson-charset-utf-8-is-not-supported/109598 "2017-11-30T14:21:05Z")

</div>

Hi. I am sending a log (from a kannel instance) through filebeat to logstash and then to elastic search cluster. All components are in the latest version (6.0.0) and I am getting the error "Content-type header \[applic…

---

## [Data correlation kibana](https://discuss.elastic.co/t/data-correlation-kibana/109398)

<div class="topic-metadata">

**Author:** [@cilzzz](https://discuss.elastic.co/u/cilzzz)\
**Replies:** 2\
**Last updated:** [November 29, 2017, 9:57am UTC](https://discuss.elastic.co/t/data-correlation-kibana/109398 "2017-11-29T09:57:21Z")

</div>

Hey i have imported many logfiles into kibana and they all have the same index pattern what i need to do is to create visualization by correlating these data like how a database table work (primary key...) that means …

---

## [Docker container exiting with code 0 & no logs](https://discuss.elastic.co/t/docker-container-exiting-with-code-0-no-logs/109390)

<div class="topic-metadata">

**Author:** [@hughmp](https://discuss.elastic.co/u/hughmp)\
**Replies:** 7\
**Last updated:** [November 30, 2017, 1:51pm UTC](https://discuss.elastic.co/t/docker-container-exiting-with-code-0-no-logs/109390 "2017-11-30T13:51:50Z")

</div>

I have elasticsearch up and running in a Docker container and accessible from other containers with http://elasticsearch. I'm trying to connect up Kibana and no matter what I try, the container simply exits with error co…

---

## [Kibana5 data table and message term](https://discuss.elastic.co/t/kibana5-data-table-and-message-term/109712)

<div class="topic-metadata">

**Author:** [@MonGMZ](https://discuss.elastic.co/u/MonGMZ)\
**Replies:** 10\
**Last updated:** [November 30, 2017, 11:02am UTC](https://discuss.elastic.co/t/kibana5-data-table-and-message-term/109712 "2017-11-30T11:02:21Z")

</div>

Hi all, I'm using kibana 5 and I want to use a data table visualization but it seems that I cannot add the message as a term to it. Anyone know why is that? Thanks.

---

## [Fixed -- "Elasticsearch plugin is red" after 6.0.0 upgrade](https://discuss.elastic.co/t/fixed-elasticsearch-plugin-is-red-after-6-0-0-upgrade/109604)

<div class="topic-metadata">

**Author:** [@xanadsonf](https://discuss.elastic.co/u/xanadsonf)\
**Replies:** 7\
**Last updated:** [November 30, 2017, 9:18am UTC](https://discuss.elastic.co/t/fixed-elasticsearch-plugin-is-red-after-6-0-0-upgrade/109604 "2017-11-30T09:18:13Z")

</div>

Hi, I upgraded succesfully my cluster from 5.6.4 to 6.0.0. I upgraded logstash & kibana to 6.0.0. Platform debian 8.9, installation from packages (https://artifacts.elastic.co/downloads/elasticsearch/\*) ES is ok (loc…

---

## [Kibana showing red message](https://discuss.elastic.co/t/kibana-showing-red-message/109587)

<div class="topic-metadata">

**Author:** [@M.alsioufi](https://discuss.elastic.co/u/M.alsioufi)\
**Replies:** 2\
**Last updated:** [November 30, 2017, 8:40am UTC](https://discuss.elastic.co/t/kibana-showing-red-message/109587 "2017-11-30T08:40:38Z")

</div>

Hi there, I have downloaded Elasticsearch 6 and Kibana 6 with x-pack,I also followed the instruction to set up X-pack mentioned here and finally inserted the example dataset mentioned here However, when I open Kibana …

---

## [Remove left navigation bar completely in kibana 5](https://discuss.elastic.co/t/remove-left-navigation-bar-completely-in-kibana-5/109031)

<div class="topic-metadata">

**Author:** [@Makra](https://discuss.elastic.co/u/Makra)\
**Replies:** 4\
**Last updated:** [November 30, 2017, 7:40am UTC](https://discuss.elastic.co/t/remove-left-navigation-bar-completely-in-kibana-5/109031 "2017-11-30T07:40:23Z")

</div>

Hi How can i remove left navigation bar completely in kibana 5 Regards

---

## [How to display a datefield in custom format in Kibana, without changing @timestamp display format?](https://discuss.elastic.co/t/how-to-display-a-datefield-in-custom-format-in-kibana-without-changing-timestamp-display-format/109600)

<div class="topic-metadata">

**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\
**Replies:** 3\
**Last updated:** [November 30, 2017, 4:51am UTC](https://discuss.elastic.co/t/how-to-display-a-datefield-in-custom-format-in-kibana-without-changing-timestamp-display-format/109600 "2017-11-30T04:51:12Z")

</div>

Hi, I am using ELK GA 6. I have a timestamp field in my log and I have mapped it in Elasticsearch like below; "timestamp": { "type": "date", "format": "MMM dd, YYYY h:mm:ss:SSS aa" } When I check the JSON tab …

---

## [Language Display in Kibana](https://discuss.elastic.co/t/language-display-in-kibana/109496)

<div class="topic-metadata">

**Author:** [@EricWS](https://discuss.elastic.co/u/EricWS)\
**Replies:** 2\
**Last updated:** [November 30, 2017, 12:19am UTC](https://discuss.elastic.co/t/language-display-in-kibana/109496 "2017-11-30T00:19:27Z")

</div>

Hi all, I am having an issue with languages other than English being displayed in Kibana, for example Arabic. It comes back as a bunch of odd characters. I have a field which is keyword, these display in English fine, …

---

## [Angular 2/4](https://discuss.elastic.co/t/angular-2-4/109482)

<div class="topic-metadata">

**Author:** [@bradley](https://discuss.elastic.co/u/bradley)\
**Replies:** 3\
**Last updated:** [November 29, 2017, 11:19pm UTC](https://discuss.elastic.co/t/angular-2-4/109482 "2017-11-29T23:19:08Z")

</div>

Are there any plans or is there discussion of future development of Kibana in Angular 2/4 or any other modern front-end framework? Angular (X) would be a pretty big deal to our company for integration and customization.

---

## [Kibana Serach](https://discuss.elastic.co/t/kibana-serach/109648)

<div class="topic-metadata">

**Author:** [@Pranav\_Mishra](https://discuss.elastic.co/u/Pranav_Mishra)\
**Replies:** 3\
**Last updated:** [November 29, 2017, 11:10pm UTC](https://discuss.elastic.co/t/kibana-serach/109648 "2017-11-29T23:10:35Z")

</div>

I am trying to list all the unique values for a particular field of a search. by default I am able to see only the top 5 values. Can anyone please guide me how to list all the values and not just top 5. I am sorry, I am…

---

## [Unable to fetch mapping on fresh installs of Kibana and Elasticsearch](https://discuss.elastic.co/t/unable-to-fetch-mapping-on-fresh-installs-of-kibana-and-elasticsearch/109653)

<div class="topic-metadata">

**Author:** [@bradley](https://discuss.elastic.co/u/bradley)\
**Replies:** 2\
**Last updated:** [November 29, 2017, 11:06pm UTC](https://discuss.elastic.co/t/unable-to-fetch-mapping-on-fresh-installs-of-kibana-and-elasticsearch/109653 "2017-11-29T23:06:14Z")

</div>

I have installed Elasticsearch and Kibana, and X-pack on both. I have set up a mapping for, and uploaded the Shakespeare dataset. When I use http://localhost:9200/\_cat/indices, I see the index: yellow open shakespeare Zb…

---

## [Optimizer: RangeError: Invalid string length](https://discuss.elastic.co/t/optimizer-rangeerror-invalid-string-length/109495)

<div class="topic-metadata">

**Author:** [@geujvari](https://discuss.elastic.co/u/geujvari)\
**Replies:** 1\
**Last updated:** [November 29, 2017, 9:00pm UTC](https://discuss.elastic.co/t/optimizer-rangeerror-invalid-string-length/109495 "2017-11-29T21:00:22Z")

</div>

Hello, I'm using Kibana 5.5 together with ES 5.5. I'm writing my custom plugin, based on the kibana-plugin generator. It was working for a long time, but recently I cannot start kibana, because I got the following erro…

---

## [How to change visualization background color](https://discuss.elastic.co/t/how-to-change-visualization-background-color/109517)

<div class="topic-metadata">

**Author:** [@AmyChou](https://discuss.elastic.co/u/AmyChou)\
**Replies:** 1\
**Last updated:** [November 29, 2017, 8:55pm UTC](https://discuss.elastic.co/t/how-to-change-visualization-background-color/109517 "2017-11-29T20:55:55Z")

</div>

Hi everyone, I am using the Kibana 5.3 and I want to change the background color of the chart, but I cannot find this option on UI. Is there any way to do this ? Thanks!

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=894)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=896)
