# Kibana **URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=919 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 920 --- ## [Filter contain string in Kibana 5.6](https://discuss.elastic.co/t/filter-contain-string-in-kibana-5-6/101722)
**Author:** [@tatdat](https://discuss.elastic.co/u/tatdat)\ **Replies:** 1\ **Last updated:** [September 25, 2017, 8:23pm UTC](https://discuss.elastic.co/t/filter-contain-string-in-kibana-5-6/101722 "2017-09-25T20:23:18Z")
Hi, I saw new filter ui in kibana 5.6 is very useful but i dont see option "contain" and "not contain" string in field value. It look like this: Filter all docs/event have field "Username" contain "admin". "administr… --- ## [Operation on "total" value of Data Table](https://discuss.elastic.co/t/operation-on-total-value-of-data-table/101679)
**Author:** [@sLuvpreet33](https://discuss.elastic.co/u/sLuvpreet33)\ **Replies:** 1\ **Last updated:** [September 25, 2017, 7:39pm UTC](https://discuss.elastic.co/t/operation-on-total-value-of-data-table/101679 "2017-09-25T19:39:45Z")
I have a duration field in my index. The duration is the time in seconds for which the booking was made. \[Screenshot from 2017-09-25 16-17-35\] The total shown at the end is in seconds. I want to convert it into minute… --- ## [How to export all data to csv?](https://discuss.elastic.co/t/how-to-export-all-data-to-csv/101660)
**Author:** [@MatthD](https://discuss.elastic.co/u/MatthD)\ **Replies:** 1\ **Last updated:** [September 25, 2017, 6:57pm UTC](https://discuss.elastic.co/t/how-to-export-all-data-to-csv/101660 "2017-09-25T18:57:19Z")
I everyone, I just want to export result from a vizualisation but when I export from "raw" of "csv" I could only get the first page of the export (for eg, if my visualisation is pagined into 500 pages how can I do ?) I… --- ## [Automatically preprocessing data for a plugin](https://discuss.elastic.co/t/automatically-preprocessing-data-for-a-plugin/101628)
**Author:** [@mykael](https://discuss.elastic.co/u/mykael)\ **Replies:** 1\ **Last updated:** [September 25, 2017, 6:34pm UTC](https://discuss.elastic.co/t/automatically-preprocessing-data-for-a-plugin/101628 "2017-09-25T18:34:51Z")
Working on a plugin here. I've got some records that come into elastic - and I'd like to preprocess and update them before the plugin gets ahold of them. Easy enough to add a field to track if they have been processed,… --- ## [How to visualize difference between two fields](https://discuss.elastic.co/t/how-to-visualize-difference-between-two-fields/101362)
**Author:** [@Pola](https://discuss.elastic.co/u/Pola)\ **Replies:** 2\ **Last updated:** [September 25, 2017, 3:46pm UTC](https://discuss.elastic.co/t/how-to-visualize-difference-between-two-fields/101362 "2017-09-25T15:46:19Z")
Hi, I have 'setcount' and 'clearedcount' number fields which i added in logstash when it finds "set" in message field setcount is set to 1 and if it finds "clear" in message filed it sets clearedcount to 1. each event… --- ## [Upgrade issue with Elastic Stack 5.6.0, workaround option until fix is available](https://discuss.elastic.co/t/upgrade-issue-with-elastic-stack-5-6-0-workaround-option-until-fix-is-available/100595)
**Author:** [@marty](https://discuss.elastic.co/u/marty)\ **Replies:** 9\ **Last updated:** [September 25, 2017, 2:33pm UTC](https://discuss.elastic.co/t/upgrade-issue-with-elastic-stack-5-6-0-workaround-option-until-fix-is-available/100595 "2017-09-25T14:33:05Z")
Since the release of Elastic Stack 5.6.0, we’ve discovered an issue during the upgrade process to this version. Who is affected Anyone upgrading a cluster that has indexes created with Elasticsearch 2.x or prior. This d… --- ## [Kibana Refresh Fields fails with Error: socket hang up](https://discuss.elastic.co/t/kibana-refresh-fields-fails-with-error-socket-hang-up/97846)
**Author:** [@JeffParsons](https://discuss.elastic.co/u/JeffParsons)\ **Replies:** 9\ **Last updated:** [September 25, 2017, 2:27pm UTC](https://discuss.elastic.co/t/kibana-refresh-fields-fails-with-error-socket-hang-up/97846 "2017-09-25T14:27:00Z")
Hello All, We need to run refresh fields on an index pattern in Kibana 5.4.1 (running with ES 5.4.1) and are running into issues getting the command to complete. Not really sure when the problem started, but has become … --- ## [Geopoint failed to setup after upgrading to 5.6](https://discuss.elastic.co/t/geopoint-failed-to-setup-after-upgrading-to-5-6/101541)
**Author:** [@imortalsolitude](https://discuss.elastic.co/u/imortalsolitude)\ **Replies:** 2\ **Last updated:** [September 25, 2017, 2:04pm UTC](https://discuss.elastic.co/t/geopoint-failed-to-setup-after-upgrading-to-5-6/101541 "2017-09-25T14:04:18Z")
After upgrading ELK to 5.6 and upgrading the plugins geo-ip fails to add geo\_point and hence location cannot be visualized. Uninstalled and reinstalled geo-ip the geoip is being rendered on Kibana dashboard and is being … --- ## [How to make search using keyword field with ignorecase](https://discuss.elastic.co/t/how-to-make-search-using-keyword-field-with-ignorecase/101419)
**Author:** [@kanchan](https://discuss.elastic.co/u/kanchan)\ **Replies:** 2\ **Last updated:** [September 25, 2017, 11:38am UTC](https://discuss.elastic.co/t/how-to-make-search-using-keyword-field-with-ignorecase/101419 "2017-09-25T11:38:26Z")
Hi, I am using keyword field for exact match.but it is case sensetive.how could i make it case insensetive. code which I use for searching is: GET /ciq/\_search { "query": { "bool": { "must": \[ { "match": { "com… --- ## [Kibana and unknown JSON](https://discuss.elastic.co/t/kibana-and-unknown-json/101364)
**Author:** [@dataminer](https://discuss.elastic.co/u/dataminer)\ **Replies:** 2\ **Last updated:** [September 25, 2017, 8:35am UTC](https://discuss.elastic.co/t/kibana-and-unknown-json/101364 "2017-09-25T08:35:34Z")
Okay - first time trying to play with kibana after weeks of trying to perfect mappings etc in ES and I am banging my head on the wall already :slight\_smile: I have data in two fields, "meta" (contains known data eg meta… --- ## [Why value table and json is different in kibana?](https://discuss.elastic.co/t/why-value-table-and-json-is-different-in-kibana/101647)
**Author:** [@ibnuali](https://discuss.elastic.co/u/ibnuali)\ **Replies:** 3\ **Last updated:** [September 25, 2017, 7:48am UTC](https://discuss.elastic.co/t/why-value-table-and-json-is-different-in-kibana/101647 "2017-09-25T07:48:12Z")
when i post a datetime value, kibana table not same with json format it is format table \[Screenshot from 2017-09-25 14-00-49\] it is format json \[Screenshot from 2017-09-25 14-00-59\] --- ## [How can we hide managementSections](https://discuss.elastic.co/t/how-can-we-hide-managementsections/101638)
**Author:** [@whoami](https://discuss.elastic.co/u/whoami)\ **Replies:** 1\ **Last updated:** [September 25, 2017, 7:28am UTC](https://discuss.elastic.co/t/how-can-we-hide-managementsections/101638 "2017-09-25T07:28:35Z")
how can we hide managementSections --- ## [Mapping Error in Kibana 5.6.x](https://discuss.elastic.co/t/mapping-error-in-kibana-5-6-x/101356)
**Author:** [@RdrgPorto](https://discuss.elastic.co/u/RdrgPorto)\ **Replies:** 7\ **Last updated:** [September 25, 2017, 6:18am UTC](https://discuss.elastic.co/t/mapping-error-in-kibana-5-6-x/101356 "2017-09-25T06:18:16Z")
Hi everyone, We have a problem after an upgrade from Elasticsearch and Kibana 5.4.2 to 5.6.0. We updated kibana index in order to have compatibility with Elastic 6.x by the new utility in Kibana. After that, we got the… --- ## [Getting access denied in Kibana with x-pack monitoring only enabled](https://discuss.elastic.co/t/getting-access-denied-in-kibana-with-x-pack-monitoring-only-enabled/101625)
**Author:** [@askids](https://discuss.elastic.co/u/askids)\ **Replies:** 2\ **Last updated:** [September 25, 2017, 5:53am UTC](https://discuss.elastic.co/t/getting-access-denied-in-kibana-with-x-pack-monitoring-only-enabled/101625 "2017-09-25T05:53:48Z")
hi, I am running ES 5.5.1 on windows 2008 R2, with Readonlyrest free version, X-pack monitoring only enabled (rest all features disabled). I am able to get into Kibana Dev console using the id/pwd that I have setup in R… --- ## [Newline in tooltip used in visual builder](https://discuss.elastic.co/t/newline-in-tooltip-used-in-visual-builder/101479)
**Author:** [@BlueSpirit](https://discuss.elastic.co/u/BlueSpirit)\ **Replies:** 2\ **Last updated:** [September 25, 2017, 5:06am UTC](https://discuss.elastic.co/t/newline-in-tooltip-used-in-visual-builder/101479 "2017-09-25T05:06:22Z")
\[tooltip-issue\] How to add new line in tooltip message. Currently its overflowing beyond the page. --- ## [Visualize complicated elastic query](https://discuss.elastic.co/t/visualize-complicated-elastic-query/101522)
**Author:** [@Martin\_Lipovsky](https://discuss.elastic.co/u/Martin_Lipovsky)\ **Replies:** 2\ **Last updated:** [September 25, 2017, 4:22am UTC](https://discuss.elastic.co/t/visualize-complicated-elastic-query/101522 "2017-09-25T04:22:39Z")
Hi, i'm new in kibana/elastic. Can you help me visualize this elastic query? I want use visualize-data-metric to show 'total\_sum' thanks GET /era-mdm/\_search { "size": 0, "aggs": { "hws": { "terms": { … --- ## [Visualize line chart with top hit aggregation and sum](https://discuss.elastic.co/t/visualize-line-chart-with-top-hit-aggregation-and-sum/101523)
**Author:** [@Martin\_Lipovsky](https://discuss.elastic.co/u/Martin_Lipovsky)\ **Replies:** 1\ **Last updated:** [September 25, 2017, 3:46am UTC](https://discuss.elastic.co/t/visualize-line-chart-with-top-hit-aggregation-and-sum/101523 "2017-09-25T03:46:53Z")
Hi, i have this kind of data... \[image\] finger is unique per hw(computer) and put doc for example every hour... There is also total\_devices available in put time I want to make line graph with daily date histogram on … --- ## [Receiving ERR\_CONNECTION\_REFUSED after installing and starting kibana on AWS EC2 instance](https://discuss.elastic.co/t/receiving-err-connection-refused-after-installing-and-starting-kibana-on-aws-ec2-instance/101583)
**Author:** [@manoj\_faria](https://discuss.elastic.co/u/manoj_faria)\ **Replies:** 1\ **Last updated:** [September 25, 2017, 12:57am UTC](https://discuss.elastic.co/t/receiving-err-connection-refused-after-installing-and-starting-kibana-on-aws-ec2-instance/101583 "2017-09-25T00:57:49Z")
When connecting to kibana hosted on aws ec2 ami instance via chrome browser i run into the below stated error: This site can’t be reached ec2-.us-west-1.compute.amazonaws.com refused to connect. Search Google for ec2… --- ## [Kibana Dashboard performance](https://discuss.elastic.co/t/kibana-dashboard-performance/99688)
**Author:** [@amichaim](https://discuss.elastic.co/u/amichaim)\ **Replies:** 11\ **Last updated:** [September 24, 2017, 11:02pm UTC](https://discuss.elastic.co/t/kibana-dashboard-performance/99688 "2017-09-24T23:02:18Z")
Hi We have Kibana Dashboard with ~35 visualizations. ~10 of them are using pipeline aggregation. Kibana & Elasticsearch are installed on machine with 16 CPU cores, 64 MB memory (we set 32 for ES). We have about 5 mill… --- ## [Can not make aggregations to work on string field (ES 5.5.1)](https://discuss.elastic.co/t/can-not-make-aggregations-to-work-on-string-field-es-5-5-1/101551)
**Author:** [@zzvara](https://discuss.elastic.co/u/zzvara)\ **Replies:** 2\ **Last updated:** [September 23, 2017, 1:38pm UTC](https://discuss.elastic.co/t/can-not-make-aggregations-to-work-on-string-field-es-5-5-1/101551 "2017-09-23T13:38:38Z")
Dear Community, I have made a small fun PoC last year, 2016. December 18th, on which I inserted tweets (Twitter4J) into ES, and visualized with Kibana. \[image\] The above visualization shows significant terms that appe… --- ## [How do I simply add a Kibana user with Read access to all indices?](https://discuss.elastic.co/t/how-do-i-simply-add-a-kibana-user-with-read-access-to-all-indices/101469)
**Author:** [@ponten](https://discuss.elastic.co/u/ponten)\ **Replies:** 2\ **Last updated:** [September 23, 2017, 7:08am UTC](https://discuss.elastic.co/t/how-do-i-simply-add-a-kibana-user-with-read-access-to-all-indices/101469 "2017-09-23T07:08:37Z")
Have issue with Kibana Security UI. (ver. 5.5.0) Want to create a user that basically can do everything but NOT creation/deletion of indices writing data to indicies Should be able to read all indicies do get comma… --- ## [Add 2 fields to Terms on Data Table visualization](https://discuss.elastic.co/t/add-2-fields-to-terms-on-data-table-visualization/101524)
**Author:** [@sridhark](https://discuss.elastic.co/u/sridhark)\ **Replies:** 1\ **Last updated:** [September 23, 2017, 12:05am UTC](https://discuss.elastic.co/t/add-2-fields-to-terms-on-data-table-visualization/101524 "2017-09-23T00:05:45Z")
Below screenshot, we have added environment field to term and displayed those values on right side upon running. How can we add 2 fields (multiple) to terms so that the values would be displayed from both fields in the … --- ## [Gauge and goal visualization in the Visual Builder and Data](https://discuss.elastic.co/t/gauge-and-goal-visualization-in-the-visual-builder-and-data/101537)
**Author:** [@narschang](https://discuss.elastic.co/u/narschang)\ **Replies:** 1\ **Last updated:** [September 23, 2017, 12:04am UTC](https://discuss.elastic.co/t/gauge-and-goal-visualization-in-the-visual-builder-and-data/101537 "2017-09-23T00:04:03Z")
Users can create gauge or goal visualization through the Visual Builder or Data visualization, but the results user will get are different. Here is the picture of the visualization on the dashboard, the gauge on the lef… --- ## [Kibana 5.6.1 - how to disable the horizontal scrollable bar in metric visualization](https://discuss.elastic.co/t/kibana-5-6-1-how-to-disable-the-horizontal-scrollable-bar-in-metric-visualization/101516)
**Author:** [@narschang](https://discuss.elastic.co/u/narschang)\ **Replies:** 1\ **Last updated:** [September 22, 2017, 11:14pm UTC](https://discuss.elastic.co/t/kibana-5-6-1-how-to-disable-the-horizontal-scrollable-bar-in-metric-visualization/101516 "2017-09-22T23:14:16Z")
Appreciate the team's great work. Thank you for putting an awesome product together. After upgrading from Kibana 5.5. to 5.6.1, on each metric visualization the vertical and horizontal scrollable bars showing up at the … --- ## [How to seperate the visualisations](https://discuss.elastic.co/t/how-to-seperate-the-visualisations/101505)
**Author:** [@slogan](https://discuss.elastic.co/u/slogan)\ **Replies:** 1\ **Last updated:** [September 22, 2017, 11:05pm UTC](https://discuss.elastic.co/t/how-to-seperate-the-visualisations/101505 "2017-09-22T23:05:47Z")
it looks like in earlier versions of kibana you had a "3D" effect and could create borders between visualisations. currently visualisations work on a snap to. only when clicking "edit" do you get a border (dashed line) b… --- ## [Custom Gauge chart in kibana](https://discuss.elastic.co/t/custom-gauge-chart-in-kibana/101410)
**Author:** [@minhsu\_le](https://discuss.elastic.co/u/minhsu_le)\ **Replies:** 1\ **Last updated:** [September 22, 2017, 10:44pm UTC](https://discuss.elastic.co/t/custom-gauge-chart-in-kibana/101410 "2017-09-22T22:44:49Z")
Are there any ways to custom and design more detail for gauge chart. For example : Show multi parameters by many colors in Gauge chart. --- ## [How to cast type in Scripted Field](https://discuss.elastic.co/t/how-to-cast-type-in-scripted-field/101397)
**Author:** [@adnil](https://discuss.elastic.co/u/adnil)\ **Replies:** 1\ **Last updated:** [September 22, 2017, 10:40pm UTC](https://discuss.elastic.co/t/how-to-cast-type-in-scripted-field/101397 "2017-09-22T22:40:29Z")
I'm trying to create a scripted field so that I can perform some arithmetic. I have the following field, which is currently a string: 'UCD-SNMP-MIB::memTotalReal.0.keyword'. I want to convert that to an integer to do c… --- ## [Kibana 5.6.1 remote transport exception](https://discuss.elastic.co/t/kibana-5-6-1-remote-transport-exception/101408)
**Author:** [@benpolzin](https://discuss.elastic.co/u/benpolzin)\ **Replies:** 2\ **Last updated:** [September 22, 2017, 5:44pm UTC](https://discuss.elastic.co/t/kibana-5-6-1-remote-transport-exception/101408 "2017-09-22T17:44:11Z")
Hi @tsmalley, thanks for offering to give this a look. This is from my post in Upgrade Issue with Elastic Stack 5.6.0. Here's the process I went through. Started with Elastic Stack 5.2 (prior to that we started on one… --- ## [Kibana search nested array of json objects](https://discuss.elastic.co/t/kibana-search-nested-array-of-json-objects/101079)
**Author:** [@shrikant0013](https://discuss.elastic.co/u/shrikant0013)\ **Replies:** 3\ **Last updated:** [September 22, 2017, 5:04pm UTC](https://discuss.elastic.co/t/kibana-search-nested-array-of-json-objects/101079 "2017-09-22T17:04:26Z")
I have documents indexed in ElasticSearch like doc1 { "\_index":"logs\_2017-07-22", "\_type":"audit", "\_id":"K", "\_score":null, "\_source":{ "logName":"", "payload":{ "methodName":"polic… --- ## [Kibana xpack missing authentication token for REST request](https://discuss.elastic.co/t/kibana-xpack-missing-authentication-token-for-rest-request/101238)
**Author:** [@lask001](https://discuss.elastic.co/u/lask001)\ **Replies:** 10\ **Last updated:** [September 22, 2017, 5:00pm UTC](https://discuss.elastic.co/t/kibana-xpack-missing-authentication-token-for-rest-request/101238 "2017-09-22T17:00:39Z")
I'm getting peppered with this message pretty much non-stop and haven't been able to figure out what's causing my issue, could someone point me in the right direction? I believe this is causing my overall problem, which … [Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=918) [Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=920)