# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=913

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 914

---

## [Filter field](https://discuss.elastic.co/t/filter-field/103872)

<div class="topic-metadata">

**Author:** [@Akaren](https://discuss.elastic.co/u/Akaren)\
**Replies:** 5\
**Last updated:** [October 13, 2017, 11:29am UTC](https://discuss.elastic.co/t/filter-field/103872 "2017-10-13T11:29:55Z")

</div>

Hi, I am having Kibana 5.4.0. I am filtering in top bar: a) attrs.from:iptel.org -\> this works, returns attrs.from where substring is "iptel.org" b) iptel.org -\> works, return any field that contains substring "iptel.…

---

## [.keyword conversion fails](https://discuss.elastic.co/t/keyword-conversion-fails/102508)

<div class="topic-metadata">

**Author:** [@shshnk28](https://discuss.elastic.co/u/shshnk28)\
**Replies:** 6\
**Last updated:** [October 13, 2017, 11:02am UTC](https://discuss.elastic.co/t/keyword-conversion-fails/102508 "2017-10-13T11:02:05Z")

</div>

I am monitoring a bunch of servers using the ELK stack. I want to monitor custom Java processes that are being run from jars on those servers. I am trying to split the line graph using the system.process.cmdline.keywor…

---

## [Plot raw data](https://discuss.elastic.co/t/plot-raw-data/103698)

<div class="topic-metadata">

**Author:** [@stevedearl](https://discuss.elastic.co/u/stevedearl)\
**Replies:** 6\
**Last updated:** [October 13, 2017, 10:59am UTC](https://discuss.elastic.co/t/plot-raw-data/103698 "2017-10-13T10:59:23Z")

</div>

Hi All, I am using the elapsed-filter plugin to obtain processing time for transactions crossing a bunch of services. I've been able to create a time-based histogram of this data in which the Y-axis shows the average pr…

---

## [Scripting field combining 2 fields](https://discuss.elastic.co/t/scripting-field-combining-2-fields/103630)

<div class="topic-metadata">

**Author:** [@Rajinia](https://discuss.elastic.co/u/Rajinia)\
**Replies:** 3\
**Last updated:** [October 13, 2017, 8:31am UTC](https://discuss.elastic.co/t/scripting-field-combining-2-fields/103630 "2017-10-13T08:31:06Z")

</div>

HI I want to create a scripting field with the combination of two fields and use in a Visualise graph. so that I can use two fields in one bucket. columns (A & B) are togeather unique trying to achive Logic like :- s…

---

## [2 'musts' in 1 bool illegal?](https://discuss.elastic.co/t/2-musts-in-1-bool-illegal/103846)

<div class="topic-metadata">

**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\
**Replies:** 2\
**Last updated:** [October 13, 2017, 7:43am UTC](https://discuss.elastic.co/t/2-musts-in-1-bool-illegal/103846 "2017-10-13T07:43:51Z")

</div>

Version : Kibana 5.4.0 Kibana acknowledges 2 musts in 1 bool as an error. It says, Duplicate key "must" . Syntax error. Is this illegal? \[kibana-error\] When I exectue the query , the result is returned properly. \[…

---

## [Access to $http inside DocView?](https://discuss.elastic.co/t/access-to-http-inside-docview/103715)

<div class="topic-metadata">

**Author:** [@CarlKnutsen](https://discuss.elastic.co/u/CarlKnutsen)\
**Replies:** 2\
**Last updated:** [October 13, 2017, 7:24am UTC](https://discuss.elastic.co/t/access-to-http-inside-docview/103715 "2017-10-13T07:24:12Z")

</div>

Hi there, I'm trying to connect to a REST API out of a DocumentView in Kibana, cause I try to implement the functionality that developers are able to open tickets in our ticket system, when they are looking into the app…

---

## [Search in HTTP request field](https://discuss.elastic.co/t/search-in-http-request-field/103594)

<div class="topic-metadata">

**Author:** [@Mohsen\_Ibrahim](https://discuss.elastic.co/u/Mohsen_Ibrahim)\
**Replies:** 2\
**Last updated:** [October 13, 2017, 6:07am UTC](https://discuss.elastic.co/t/search-in-http-request-field/103594 "2017-10-13T06:07:28Z")

</div>

Hi, I am using ELK stack to index my apache access logs and everything is just fine but I have small problem here it is I need to find all documents which their request field starts with '/page1' so I can graph the res…

---

## [X-pack not recognized by kibana](https://discuss.elastic.co/t/x-pack-not-recognized-by-kibana/103820)

<div class="topic-metadata">

**Author:** [@daianmartinho](https://discuss.elastic.co/u/daianmartinho)\
**Replies:** 4\
**Last updated:** [October 13, 2017, 5:37am UTC](https://discuss.elastic.co/t/x-pack-not-recognized-by-kibana/103820 "2017-10-13T05:37:23Z")

</div>

I have installed kibana 5.6.3, then x-pack, but i can't see monitoring menu at kibana. xpack.security.enabled: false xpack.monitoring.enabled: true xpack.watcher.enabled: false xpack.ml.enabled: false xpack.graph.e…

---

## [Issues connecting kibana to elasticsearch cluster in kubernetes](https://discuss.elastic.co/t/issues-connecting-kibana-to-elasticsearch-cluster-in-kubernetes/103785)

<div class="topic-metadata">

**Author:** [@akpt](https://discuss.elastic.co/u/akpt)\
**Replies:** 2\
**Last updated:** [October 12, 2017, 8:23pm UTC](https://discuss.elastic.co/t/issues-connecting-kibana-to-elasticsearch-cluster-in-kubernetes/103785 "2017-10-12T20:23:16Z")

</div>

I have an elasticsearch cluster on kubernetes and I'm trying to connect kibana to it. Currently this is the kibana.yml file that I mount into the config directory for my kibana pod server.name: kibana-logging se…

---

## [How to transfer query string to next dashboard?](https://discuss.elastic.co/t/how-to-transfer-query-string-to-next-dashboard/103733)

<div class="topic-metadata">

**Author:** [@RomainXie](https://discuss.elastic.co/u/RomainXie)\
**Replies:** 3\
**Last updated:** [October 12, 2017, 3:11pm UTC](https://discuss.elastic.co/t/how-to-transfer-query-string-to-next-dashboard/103733 "2017-10-12T15:11:51Z")

</div>

We create three dashboard to show something: Overview - show overview for our system, include many machines; OneMachine - show the detail for only one machine; OneAdapter - show the detail for only one adapter, etc; I…

---

## [Get Kibana link after Dashboard interaction](https://discuss.elastic.co/t/get-kibana-link-after-dashboard-interaction/103737)

<div class="topic-metadata">

**Author:** [@Koder](https://discuss.elastic.co/u/Koder)\
**Replies:** 1\
**Last updated:** [October 12, 2017, 3:03pm UTC](https://discuss.elastic.co/t/get-kibana-link-after-dashboard-interaction/103737 "2017-10-12T15:03:01Z")

</div>

Hey, currently i embedded the Kibana Dashboard with an iFrame. Now i want to get the Link which i set at the src attribute (the link you can also copy when pressing the share button on the original dashboard). The probl…

---

## [Kibana split based on date](https://discuss.elastic.co/t/kibana-split-based-on-date/103727)

<div class="topic-metadata">

**Author:** [@g4lvanix](https://discuss.elastic.co/u/g4lvanix)\
**Replies:** 2\
**Last updated:** [October 12, 2017, 2:49pm UTC](https://discuss.elastic.co/t/kibana-split-based-on-date/103727 "2017-10-12T14:49:38Z")

</div>

Hello! I have a question regarding visualizing data by splitting it by a date field. I have a handful of files that look like this: { "Name": "myName", "RunID": 123, "Value": 0.456, "Time": "2017-10-12T08:00:00Z" } T…

---

## [Importing Dashboards Issue](https://discuss.elastic.co/t/importing-dashboards-issue/101509)

<div class="topic-metadata">

**Author:** [@CDR](https://discuss.elastic.co/u/CDR)\
**Replies:** 2\
**Last updated:** [October 12, 2017, 2:35pm UTC](https://discuss.elastic.co/t/importing-dashboards-issue/101509 "2017-10-12T14:35:57Z")

</div>

I am having an error importing dashboards. I was running old versions of the ELK Stack (5.5.2) and upgraded to 5.6.1. I had dashboards and visualizations that I wanted to carry over to the new version of ELK. When I expo…

---

## [Formatting output in a metric visualization](https://discuss.elastic.co/t/formatting-output-in-a-metric-visualization/103193)

<div class="topic-metadata">

**Author:** [@eebee](https://discuss.elastic.co/u/eebee)\
**Replies:** 5\
**Last updated:** [October 12, 2017, 2:33pm UTC](https://discuss.elastic.co/t/formatting-output-in-a-metric-visualization/103193 "2017-10-12T14:33:27Z")

</div>

I'm having a couple of metric outputs to show average processing times, but I get alot of decimals in my answers. Visualization edit view I've tried to set the number formatting for the field I'm calculating the averag…

---

## [Limit the max zoom in precision in coordinate](https://discuss.elastic.co/t/limit-the-max-zoom-in-precision-in-coordinate/103671)

<div class="topic-metadata">

**Author:** [@RomainXie](https://discuss.elastic.co/u/RomainXie)\
**Replies:** 1\
**Last updated:** [October 12, 2017, 1:54pm UTC](https://discuss.elastic.co/t/limit-the-max-zoom-in-precision-in-coordinate/103671 "2017-10-12T13:54:08Z")

</div>

I want to show a location in one coordinate map. I only want to know which city it is in. But after click the "Fit Data Bounds", it zoomed the map with too many detail. Can I limit the max precision after click the but…

---

## [How to build a chart based on an advanced query?](https://discuss.elastic.co/t/how-to-build-a-chart-based-on-an-advanced-query/103116)

<div class="topic-metadata">

**Author:** [@webrod](https://discuss.elastic.co/u/webrod)\
**Replies:** 5\
**Last updated:** [October 12, 2017, 1:02pm UTC](https://discuss.elastic.co/t/how-to-build-a-chart-based-on-an-advanced-query/103116 "2017-10-12T13:02:24Z")

</div>

Hi, is it possible to build a chart based on any query assuming it is valid and provides an output when you test it with the Kibana DevTool tab? I'm not talking about basic query (filter), I'm talking about a complex q…

---

## [Visualization - field not available for selection](https://discuss.elastic.co/t/visualization-field-not-available-for-selection/103703)

<div class="topic-metadata">

**Author:** [@rvarttinen](https://discuss.elastic.co/u/rvarttinen)\
**Replies:** 5\
**Last updated:** [October 12, 2017, 12:36pm UTC](https://discuss.elastic.co/t/visualization-field-not-available-for-selection/103703 "2017-10-12T12:36:48Z")

</div>

Being a newbie with Kibana I might be asking about something that is already answered. So, my apologies on beforehand. Anyhow, I cannot find any appropriate entries, so any pointer will be appreciated. My problem is cen…

---

## [Hide component title in dashboard](https://discuss.elastic.co/t/hide-component-title-in-dashboard/103714)

<div class="topic-metadata">

**Author:** [@RomainXie](https://discuss.elastic.co/u/RomainXie)\
**Replies:** 2\
**Last updated:** [October 12, 2017, 12:30pm UTC](https://discuss.elastic.co/t/hide-component-title-in-dashboard/103714 "2017-10-12T12:30:54Z")

</div>

In a dashboard, the Guage component can be hide the visualize name. Could I hide the Markdown component title as the same? \[WechatIMG2809\]

---

## [req.RequestURI filter](https://discuss.elastic.co/t/req-requesturi-filter/103712)

<div class="topic-metadata">

**Author:** [@nandhini](https://discuss.elastic.co/u/nandhini)\
**Replies:** 1\
**Last updated:** [October 12, 2017, 12:15pm UTC](https://discuss.elastic.co/t/req-requesturi-filter/103712 "2017-10-12T12:15:43Z")

</div>

Hi, In KIBANA, i am trying to monitor execution time and count of occurrence for my requests. I have set up a visualization for that. I have a request like req.requestURI 'https://aaa/bbb/ccc' and another request like…

---

## [Want to Count the Total Occurence of Field values](https://discuss.elastic.co/t/want-to-count-the-total-occurence-of-field-values/103648)

<div class="topic-metadata">

**Author:** [@aditya\_soni](https://discuss.elastic.co/u/aditya_soni)\
**Replies:** 2\
**Last updated:** [October 12, 2017, 10:16am UTC](https://discuss.elastic.co/t/want-to-count-the-total-occurence-of-field-values/103648 "2017-10-12T10:16:36Z")

</div>

Hi all, I need to make a visualization in which i have to get a total count of a field occurence. For Ex.i had applied a metric count on terms Response Code field but i get individual Response Code counts i.e. 91=5 t…

---

## [How to export search results to csv / excel?](https://discuss.elastic.co/t/how-to-export-search-results-to-csv-excel/103590)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 4\
**Last updated:** [October 12, 2017, 9:58am UTC](https://discuss.elastic.co/t/how-to-export-search-results-to-csv-excel/103590 "2017-10-12T09:58:19Z")

</div>

Hi, I know, that there is the possibility to export the data of a visualization to csv / excel. But is there also the possibility to export the data of a search? I don't find the export buttons there. I am currently o…

---

## [Use TimeStamp return by Logstash in DateRange Aggregate Bucket Metric](https://discuss.elastic.co/t/use-timestamp-return-by-logstash-in-daterange-aggregate-bucket-metric/103646)

<div class="topic-metadata">

**Author:** [@Ajinkya\_Sabale](https://discuss.elastic.co/u/Ajinkya_Sabale)\
**Replies:** 2\
**Last updated:** [October 12, 2017, 9:43am UTC](https://discuss.elastic.co/t/use-timestamp-return-by-logstash-in-daterange-aggregate-bucket-metric/103646 "2017-10-12T09:43:52Z")

</div>

How to use TimeStamp return by Logstash in DateRange Aggregate Bucket Metric? I want to compare logstash results on different timestamps.

---

## [Visualization not showing lines correctly](https://discuss.elastic.co/t/visualization-not-showing-lines-correctly/103369)

<div class="topic-metadata">

**Author:** [@dulman](https://discuss.elastic.co/u/dulman)\
**Replies:** 4\
**Last updated:** [October 12, 2017, 8:47am UTC](https://discuss.elastic.co/t/visualization-not-showing-lines-correctly/103369 "2017-10-12T08:47:47Z")

</div>

Hello, according to closed ticket Dashboard not showing lines correctly. We have imported a lot of visualizations (created under kibana version 5.0.0) into kibana version 5.5.0. After that we have a strange behavior: …

---

## [ELK integation](https://discuss.elastic.co/t/elk-integation/103658)

<div class="topic-metadata">

**Author:** [@abhisek](https://discuss.elastic.co/u/abhisek)\
**Replies:** 3\
**Last updated:** [October 12, 2017, 8:43am UTC](https://discuss.elastic.co/t/elk-integation/103658 "2017-10-12T08:43:59Z")

</div>

Is there any integration of ELK with AB-INITIO ?

---

## [Barchart and Table](https://discuss.elastic.co/t/barchart-and-table/103530)

<div class="topic-metadata">

**Author:** [@massim0](https://discuss.elastic.co/u/massim0)\
**Replies:** 2\
**Last updated:** [October 12, 2017, 8:31am UTC](https://discuss.elastic.co/t/barchart-and-table/103530 "2017-10-12T08:31:56Z")

</div>

Hi everyone, I wanted to ask you if you can link a table to a single bar chart so that the data in the barchart will also change in the table change page. in Effects I would like the data represented in the frace to be o…

---

## [Grok pattern from within kibana dev tools](https://discuss.elastic.co/t/grok-pattern-from-within-kibana-dev-tools/103509)

<div class="topic-metadata">

**Author:** [@barry.marshall73](https://discuss.elastic.co/u/barry.marshall73)\
**Replies:** 4\
**Last updated:** [October 12, 2017, 8:05am UTC](https://discuss.elastic.co/t/grok-pattern-from-within-kibana-dev-tools/103509 "2017-10-12T08:05:11Z")

</div>

I am configuring an ingest pipeline from within the Kibana Dev Tools and I am having issues with grok pattern, apparently some characters require to be preceeded by a double backslash such as "\\\\\[", and DATA pattern give…

---

## [Add a filter in Visualize with regexp](https://discuss.elastic.co/t/add-a-filter-in-visualize-with-regexp/103567)

<div class="topic-metadata">

**Author:** [@zeenon](https://discuss.elastic.co/u/zeenon)\
**Replies:** 2\
**Last updated:** [October 12, 2017, 7:49am UTC](https://discuss.elastic.co/t/add-a-filter-in-visualize-with-regexp/103567 "2017-10-12T07:49:22Z")

</div>

Hi, In metrics, I want to add a filter "myhost" like "^localhost.\*$" I have a scroll list with: is, is not, is one of, ... butno is like I try with Query DSL but it is not working, surely dur to a bad syntax Is it p…

---

## [Geohash key missing](https://discuss.elastic.co/t/geohash-key-missing/103623)

<div class="topic-metadata">

**Author:** [@Piyush\_Pattanayak](https://discuss.elastic.co/u/Piyush_Pattanayak)\
**Replies:** 1\
**Last updated:** [October 12, 2017, 7:38am UTC](https://discuss.elastic.co/t/geohash-key-missing/103623 "2017-10-12T07:38:44Z")

</div>

The Geohash key is missing in the data. This prevents me from plotting the map. I am using 5.\* version for ELK. I have all the other geo-location data populated except the geohash. Below is my geoip filter conf. filter…

---

## [Can not show table in Markdown](https://discuss.elastic.co/t/can-not-show-table-in-markdown/103591)

<div class="topic-metadata">

**Author:** [@RomainXie](https://discuss.elastic.co/u/RomainXie)\
**Replies:** 2\
**Last updated:** [October 12, 2017, 7:10am UTC](https://discuss.elastic.co/t/can-not-show-table-in-markdown/103591 "2017-10-12T07:10:03Z")

</div>

When I try to create a table in Markdown editor, I got the followed: \[15\] How to show the table in here?

---

## [Kibana 5601 connection refused](https://discuss.elastic.co/t/kibana-5601-connection-refused/103641)

<div class="topic-metadata">

**Author:** [@Jhondude](https://discuss.elastic.co/u/Jhondude)\
**Replies:** 3\
**Last updated:** [October 12, 2017, 5:02am UTC](https://discuss.elastic.co/t/kibana-5601-connection-refused/103641 "2017-10-12T05:02:02Z")

</div>

Hi, i have install ELK and all service is running. but, when i tried to accesss kibana, connection refused. root@picserver:/var/log/kibana# curl http://10.3.10.100:5601 curl: (7) Failed to connect to 10.3.10.100 port …

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=912)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=914)
