# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=918

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 919

---

## [Comparing timeseries with average week](https://discuss.elastic.co/t/comparing-timeseries-with-average-week/102091)

<div class="topic-metadata">

**Author:** [@1915](https://discuss.elastic.co/u/1915)\
**Replies:** 1\
**Last updated:** [September 28, 2017, 3:10pm UTC](https://discuss.elastic.co/t/comparing-timeseries-with-average-week/102091 "2017-09-28T15:10:37Z")

</div>

I'm comparing logs in Timelion with the current week and the week before, using the offset=-1w syntax. However I would also like to compare these values with the average week over a period of one year. Can I somehow ch…

---

## [Data for rtflow bytes from server not showing](https://discuss.elastic.co/t/data-for-rtflow-bytes-from-server-not-showing/101712)

<div class="topic-metadata">

**Author:** [@Slewko](https://discuss.elastic.co/u/Slewko)\
**Replies:** 2\
**Last updated:** [September 28, 2017, 2:44pm UTC](https://discuss.elastic.co/t/data-for-rtflow-bytes-from-server-not-showing/101712 "2017-09-28T14:44:04Z")

</div>

Hello I am new to this Forum and to Kibana. I have got the following problem: I am collecting the Logs of the firewalls and I want to create a Graph that sums up the top 5 source addresses that are creating the most t…

---

## [How to create a dashboard with action button?](https://discuss.elastic.co/t/how-to-create-a-dashboard-with-action-button/101673)

<div class="topic-metadata">

**Author:** [@pascaldergane](https://discuss.elastic.co/u/pascaldergane)\
**Replies:** 2\
**Last updated:** [September 28, 2017, 11:39am UTC](https://discuss.elastic.co/t/how-to-create-a-dashboard-with-action-button/101673 "2017-09-28T11:39:14Z")

</div>

Hi all, I'm new with Kibana. I would like to migrate my old system using NagVIS to Kibana. Do you know how to create a dashboard representing as map your monitored system and display in the dashboard some action button…

---

## [Adding custom functionality to a table](https://discuss.elastic.co/t/adding-custom-functionality-to-a-table/102079)

<div class="topic-metadata">

**Author:** [@Samreen\_Zeeshan](https://discuss.elastic.co/u/Samreen_Zeeshan)\
**Replies:** 1\
**Last updated:** [September 28, 2017, 8:56am UTC](https://discuss.elastic.co/t/adding-custom-functionality-to-a-table/102079 "2017-09-28T08:56:50Z")

</div>

I want to add some functionalities in kibana data table like by clicking on a row some details should pop up etc. do i need to change kibana source code ? if so then how can i understand its code flow?

---

## [Sense](https://discuss.elastic.co/t/sense/102081)

<div class="topic-metadata">

**Author:** [@sharif\_aiub](https://discuss.elastic.co/u/sharif_aiub)\
**Replies:** 2\
**Last updated:** [September 28, 2017, 8:54am UTC](https://discuss.elastic.co/t/sense/102081 "2017-09-28T08:54:42Z")

</div>

I am trying to install sense by this command ( ./kibana-plugin install elasticseach/sense ) . But it is not installed. Following output given. (Attempting to transfer from elasticseach/sense Attempting to transfer…

---

## [Timelion and splines](https://discuss.elastic.co/t/timelion-and-splines/101789)

<div class="topic-metadata">

**Author:** [@massim0](https://discuss.elastic.co/u/massim0)\
**Replies:** 2\
**Last updated:** [September 28, 2017, 7:24am UTC](https://discuss.elastic.co/t/timelion-and-splines/101789 "2017-09-28T07:24:29Z")

</div>

Hello, I would need to use math function splines in timelion. How can I do? Is it supported? There is an alternative way to smooth the angles of line chart in timelion? thank you very much for help me!!

---

## [Want to plot the actual values of Response Time into Y-Axis on Line chart](https://discuss.elastic.co/t/want-to-plot-the-actual-values-of-response-time-into-y-axis-on-line-chart/101801)

<div class="topic-metadata">

**Author:** [@aditya\_soni](https://discuss.elastic.co/u/aditya_soni)\
**Replies:** 2\
**Last updated:** [September 28, 2017, 6:43am UTC](https://discuss.elastic.co/t/want-to-plot-the-actual-values-of-response-time-into-y-axis-on-line-chart/101801 "2017-09-28T06:43:40Z")

</div>

I have a field named as Response Time coming from my logs and its data type is "number" in mapping. My problem is when i create a Line Chart of this Response Time with respect to timestamp. ResponseTime:-Y-Axis with wh…

---

## [Kibana user count based on start and end date](https://discuss.elastic.co/t/kibana-user-count-based-on-start-and-end-date/101700)

<div class="topic-metadata">

**Author:** [@DILIP\_SHARMA](https://discuss.elastic.co/u/DILIP_SHARMA)\
**Replies:** 5\
**Last updated:** [September 28, 2017, 6:20am UTC](https://discuss.elastic.co/t/kibana-user-count-based-on-start-and-end-date/101700 "2017-09-28T06:20:18Z")

</div>

hi all , i want to create visual which show number of user login based on start or end time in say 30 minute bucket for example if one user login 10 and logout 10.30 so graph whould show 10-10.30 1 10.30 - 10.45 …

---

## [Unable to do case insensetive exact match search using scripted field](https://discuss.elastic.co/t/unable-to-do-case-insensetive-exact-match-search-using-scripted-field/101983)

<div class="topic-metadata">

**Author:** [@ajit](https://discuss.elastic.co/u/ajit)\
**Replies:** 1\
**Last updated:** [September 27, 2017, 6:27pm UTC](https://discuss.elastic.co/t/unable-to-do-case-insensetive-exact-match-search-using-scripted-field/101983 "2017-09-27T18:27:47Z")

</div>

Hi, There is script I used to create scripted field: language: painless type: string doc\['bank\_client\_entity\_name.keyword'\].value.toLowerCase() I wanna to do exact match using scripted field because keyword field is…

---

## [Visual Builder - "count" field definition](https://discuss.elastic.co/t/visual-builder-count-field-definition/101831)

<div class="topic-metadata">

**Author:** [@Akaren](https://discuss.elastic.co/u/Akaren)\
**Replies:** 3\
**Last updated:** [September 27, 2017, 6:07pm UTC](https://discuss.elastic.co/t/visual-builder-count-field-definition/101831 "2017-09-27T18:07:19Z")

</div>

Hi, I have created in Visual Builder chart. I am using "count" agg. "Count" should show "the last value in that case". What is definition of last value in that case? Is it the value from last event? What if in the same…

---

## [How to make the labels to be appeared at the bottom in Kibana 5.5.1](https://discuss.elastic.co/t/how-to-make-the-labels-to-be-appeared-at-the-bottom-in-kibana-5-5-1/101775)

<div class="topic-metadata">

**Author:** [@mounika](https://discuss.elastic.co/u/mounika)\
**Replies:** 3\
**Last updated:** [September 27, 2017, 5:55pm UTC](https://discuss.elastic.co/t/how-to-make-the-labels-to-be-appeared-at-the-bottom-in-kibana-5-5-1/101775 "2017-09-27T17:55:39Z")

</div>

How to make the labels to be appeared at the bottom in Kibana 5.5.0. pls see the sample dashboard I want to keep the label at the bottom like in the screenshot1 - \[Screenshot1\] (I did this in kiba…

---

## [Getting following error when starting kibana 5.6](https://discuss.elastic.co/t/getting-following-error-when-starting-kibana-5-6/101912)

<div class="topic-metadata">

**Author:** [@ctayal1211](https://discuss.elastic.co/u/ctayal1211)\
**Replies:** 7\
**Last updated:** [September 27, 2017, 3:51pm UTC](https://discuss.elastic.co/t/getting-following-error-when-starting-kibana-5-6/101912 "2017-09-27T15:51:50Z")

</div>

log \[00:06:09.483\] \[info\]\[status\]\[ui settings\] Status changed from uninitialized to yellow - Elasticsearch plugin is yellow log \[00:06:09.496\] \[info\]\[elasticsearch\] Adding mappings to kibana index for SavedObject ty…

---

## [Mao Projection](https://discuss.elastic.co/t/mao-projection/101877)

<div class="topic-metadata">

**Author:** [@daneitz](https://discuss.elastic.co/u/daneitz)\
**Replies:** 1\
**Last updated:** [September 27, 2017, 2:43pm UTC](https://discuss.elastic.co/t/mao-projection/101877 "2017-09-27T14:43:58Z")

</div>

I need to change the map projection from Mercator to LatLon (EPSG:4326). Since upgrading to Kibana 5.5.2, I can not find where in the code I can change this. It used to be in src/ui/public/vislib/visualizations/\_map.js…

---

## [Issue with bytes format in Kibana](https://discuss.elastic.co/t/issue-with-bytes-format-in-kibana/101832)

<div class="topic-metadata">

**Author:** [@aboullaite](https://discuss.elastic.co/u/aboullaite)\
**Replies:** 2\
**Last updated:** [September 27, 2017, 2:07pm UTC](https://discuss.elastic.co/t/issue-with-bytes-format-in-kibana/101832 "2017-09-27T14:07:59Z")

</div>

Hi, Actually I'm facing a weird issue here! When I'm only using one value it actually shows correctly with the correct formatting (Mb, Gb ....), but when I split it to multiple values, it shows only the number of bytes …

---

## [Kibana decode base64 of heberw string into gibberish](https://discuss.elastic.co/t/kibana-decode-base64-of-heberw-string-into-gibberish/101846)

<div class="topic-metadata">

**Author:** [@napoxx1](https://discuss.elastic.co/u/napoxx1)\
**Replies:** 2\
**Last updated:** [September 27, 2017, 11:05am UTC](https://discuss.elastic.co/t/kibana-decode-base64-of-heberw-string-into-gibberish/101846 "2017-09-27T11:05:11Z")

</div>

Hey all, I'm using Kibana 5.2.2 and ES 5.2.0 In one of our projects we need to insert XMLs into the Elastic search. We are using JSON rest requests to insert the XML into the Elastic search. Since the XML sometime ha…

---

## [Search event X that happend after event Y](https://discuss.elastic.co/t/search-event-x-that-happend-after-event-y/101856)

<div class="topic-metadata">

**Author:** [@maor\_levi](https://discuss.elastic.co/u/maor_levi)\
**Replies:** 2\
**Last updated:** [September 27, 2017, 10:09am UTC](https://discuss.elastic.co/t/search-event-x-that-happend-after-event-y/101856 "2017-09-27T10:09:08Z")

</div>

I have an index that contain security evevts from endpoints. In the index there is event 4688 (process creation) and 4689 (process termination). There are the fields : event\_id, process\_name. I want to find all of the…

---

## [Kibana crashes with default installation with FreeBSD](https://discuss.elastic.co/t/kibana-crashes-with-default-installation-with-freebsd/98909)

<div class="topic-metadata">

**Author:** [@GregTheHun](https://discuss.elastic.co/u/GregTheHun)\
**Replies:** 14\
**Last updated:** [September 27, 2017, 12:07am UTC](https://discuss.elastic.co/t/kibana-crashes-with-default-installation-with-freebsd/98909 "2017-09-27T00:07:58Z")

</div>

Hello all, There appears to be an issue and I didn’t know if anybody had any experience with Kibana on FreeBSD. Elasticsearch seems to install just fine after using the instructions with the package installer, but appa…

---

## [How to create a Pareto chart](https://discuss.elastic.co/t/how-to-create-a-pareto-chart/101899)

<div class="topic-metadata">

**Author:** [@komyg](https://discuss.elastic.co/u/komyg)\
**Replies:** 1\
**Last updated:** [September 26, 2017, 10:16pm UTC](https://discuss.elastic.co/t/how-to-create-a-pareto-chart/101899 "2017-09-26T22:16:59Z")

</div>

Hi, I am new to Kibana and I am trying to create a pareto chart. However I wasn't able to tell Kibana to use the absolute value of my filter on the left axis and its percent on the right axis. Is there a way to do this,…

---

## [Data table :hide column Count](https://discuss.elastic.co/t/data-table-hide-column-count/53037)

<div class="topic-metadata">

**Author:** [@pittoch](https://discuss.elastic.co/u/pittoch)\
**Replies:** 10\
**Last updated:** [September 26, 2017, 9:25pm UTC](https://discuss.elastic.co/t/data-table-hide-column-count/53037 "2017-09-26T21:25:10Z")

</div>

In a data table, is it possible to hide column Count ? I split line with other information. Thanks

---

## [Is there a REST API for Kibana?](https://discuss.elastic.co/t/is-there-a-rest-api-for-kibana/101834)

<div class="topic-metadata">

**Author:** [@Ryan\_Grannell](https://discuss.elastic.co/u/Ryan_Grannell)\
**Replies:** 1\
**Last updated:** [September 26, 2017, 9:22pm UTC](https://discuss.elastic.co/t/is-there-a-rest-api-for-kibana/101834 "2017-09-26T21:22:19Z")

</div>

Hi, Is there any plan to implement a REST API for configuring Kibana? Or does a REST API currently exist? We find Kibana useful, but we don't use it that much due to the upkeep effort of click-based configuration. Idea…

---

## [How to convert one field in uppercase in kibana](https://discuss.elastic.co/t/how-to-convert-one-field-in-uppercase-in-kibana/101794)

<div class="topic-metadata">

**Author:** [@kanchan](https://discuss.elastic.co/u/kanchan)\
**Replies:** 1\
**Last updated:** [September 26, 2017, 8:53pm UTC](https://discuss.elastic.co/t/how-to-convert-one-field-in-uppercase-in-kibana/101794 "2017-09-26T20:53:36Z")

</div>

Hi, I know there is uppercase processor which i can use to convert field in uppercase, but i dont know how to use it in kibana.please let me know with proper example.

---

## [Can I make string field as aggregatable?](https://discuss.elastic.co/t/can-i-make-string-field-as-aggregatable/101881)

<div class="topic-metadata">

**Author:** [@ctayal1211](https://discuss.elastic.co/u/ctayal1211)\
**Replies:** 4\
**Last updated:** [September 26, 2017, 6:41pm UTC](https://discuss.elastic.co/t/can-i-make-string-field-as-aggregatable/101881 "2017-09-26T18:41:40Z")

</div>

Hi, I want to make string field as aggregatable. \[20 AM\] I have visualization json as follows: { "\_id": "Top-Switches-by-Endpoint-Count", "\_type": "visualization", "\_source": { "description": "", "uiStateJSON": …

---

## [Docker-compose ELK](https://discuss.elastic.co/t/docker-compose-elk/101858)

<div class="topic-metadata">

**Author:** [@Fei\_Yao](https://discuss.elastic.co/u/Fei_Yao)\
**Replies:** 2\
**Last updated:** [September 26, 2017, 6:17pm UTC](https://discuss.elastic.co/t/docker-compose-elk/101858 "2017-09-26T18:17:44Z")

</div>

Hi, When running ELK in docker-compose environment I'm curious why Kibana url refers to "http://elasticsearch:9200"? instead of just "http://localhost:9200"? For example: https://github.com/d3rwan/docker\_elk\_stack/blob…

---

## [Can I create Folders to save seraches in Kibana?](https://discuss.elastic.co/t/can-i-create-folders-to-save-seraches-in-kibana/101749)

<div class="topic-metadata">

**Author:** [@vijay.sangha](https://discuss.elastic.co/u/vijay.sangha)\
**Replies:** 4\
**Last updated:** [September 26, 2017, 5:04pm UTC](https://discuss.elastic.co/t/can-i-create-folders-to-save-seraches-in-kibana/101749 "2017-09-26T17:04:10Z")

</div>

I need to save searches for different components in Kibana. Is there a way to create folders/sub-folders in Kibana console to better segregate my search? I am using Filebeat\[5.3\]--\>logstahs\[5.3\]--\>ElasticSearch\[5.3\]--\>K…

---

## [Visualization long title truncated?](https://discuss.elastic.co/t/visualization-long-title-truncated/101658)

<div class="topic-metadata">

**Author:** [@fxprunayre](https://discuss.elastic.co/u/fxprunayre)\
**Replies:** 3\
**Last updated:** [September 26, 2017, 3:57pm UTC](https://discuss.elastic.co/t/visualization-long-title-truncated/101658 "2017-09-26T15:57:43Z")

</div>

Visualization title have ellipsis() applied and when title is too long, users can't read the complete title: \[image\] It looks like past versions were displaying tooltips: Does it make sense to restore the tooltip ? …

---

## [Modifying Data Table field types](https://discuss.elastic.co/t/modifying-data-table-field-types/101682)

<div class="topic-metadata">

**Author:** [@cito.ets](https://discuss.elastic.co/u/cito.ets)\
**Replies:** 3\
**Last updated:** [September 26, 2017, 3:44pm UTC](https://discuss.elastic.co/t/modifying-data-table-field-types/101682 "2017-09-26T15:44:12Z")

</div>

Can anyone point me how to control field types in Data Table metrics and aggregations? (JSON Input?) e.g. I want percentile values to be displayed as integer and be stripped off of decimal values

---

## [\[BUG?\] Wrong aggregated values shown in visualization](https://discuss.elastic.co/t/bug-wrong-aggregated-values-shown-in-visualization/100888)

<div class="topic-metadata">

**Author:** [@pranav0091](https://discuss.elastic.co/u/pranav0091)\
**Replies:** 10\
**Last updated:** [September 26, 2017, 2:55pm UTC](https://discuss.elastic.co/t/bug-wrong-aggregated-values-shown-in-visualization/100888 "2017-09-26T14:55:50Z")

</div>

I seem to have run across what is essentially a deal-breaking bug for my use case: When Visualizing an Average of a numeric field on the Y-axis versus a name on the X-axis the data shown differs substantially depending …

---

## [Kibana unaccessible after using Migration UI](https://discuss.elastic.co/t/kibana-unaccessible-after-using-migration-ui/101763)

<div class="topic-metadata">

**Author:** [@tylersmalley](https://discuss.elastic.co/u/tylersmalley)\
**Replies:** 0\
**Last updated:** [September 25, 2017, 10:11pm UTC](https://discuss.elastic.co/t/kibana-unaccessible-after-using-migration-ui/101763 "2017-09-25T22:11:50Z")

</div>

Who is affected? Kibana installations originating prior to v5.5 and migrating the Kibana index using the Migration UI in v5.6.0 or v5.6.1 Details Elastic v5.6 is a compatibility release, assisting users with upgrading…

---

## [Kibana Time Series Data formatter converting numbers](https://discuss.elastic.co/t/kibana-time-series-data-formatter-converting-numbers/101726)

<div class="topic-metadata">

**Author:** [@tarp](https://discuss.elastic.co/u/tarp)\
**Replies:** 1\
**Last updated:** [September 25, 2017, 8:54pm UTC](https://discuss.elastic.co/t/kibana-time-series-data-formatter-converting-numbers/101726 "2017-09-25T20:54:46Z")

</div>

Hi, I'm using Kibana 5.6 , and I thought this would be simple enough, but I'm not sure how to accomplish it. In the Time Series builder I'm looking at data values of Megabytes in my graph. The Data formatter, I can se…

---

## [Is there a way to get all visualizations in kibana using curl](https://discuss.elastic.co/t/is-there-a-way-to-get-all-visualizations-in-kibana-using-curl/100723)

<div class="topic-metadata">

**Author:** [@rajisankar](https://discuss.elastic.co/u/rajisankar)\
**Replies:** 8\
**Last updated:** [September 25, 2017, 8:48pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-get-all-visualizations-in-kibana-using-curl/100723 "2017-09-25T20:48:50Z")

</div>

I need to get the list of all visualizations present in kibana. Is there a curl command to do that? For example, curl -v http://localhost:9200/.kibana/visualisation

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=917)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=919)
