# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=920

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 921

---

## [Run as a service](https://discuss.elastic.co/t/run-as-a-service/100460)

<div class="topic-metadata">

**Author:** [@shrikantgulia](https://discuss.elastic.co/u/shrikantgulia)\
**Replies:** 6\
**Last updated:** [September 22, 2017, 2:50pm UTC](https://discuss.elastic.co/t/run-as-a-service/100460 "2017-09-22T14:50:28Z")

</div>

I installed the kibana 5.5 tar. file. to make it run as a service i copied the kibana folder in (opt/kibana) and copied the kibana file (bin/kibana) to (etc/init.d) folder and ran the command sudo update-rc.d kibana def…

---

## [Kibana embed (only) global nav](https://discuss.elastic.co/t/kibana-embed-only-global-nav/101202)

<div class="topic-metadata">

**Author:** [@ENG618](https://discuss.elastic.co/u/ENG618)\
**Replies:** 3\
**Last updated:** [September 22, 2017, 1:49pm UTC](https://discuss.elastic.co/t/kibana-embed-only-global-nav/101202 "2017-09-22T13:49:55Z")

</div>

I set the embed query parameter and that hides both the global nav and the top nav. I'm trying to only apply this filter to the global (side) nav. Is there a simple way to achieve this?

---

## [Try to build a Visualization and Dashboard for displaying LOG](https://discuss.elastic.co/t/try-to-build-a-visualization-and-dashboard-for-displaying-log/101347)

<div class="topic-metadata">

**Author:** [@Pierre31](https://discuss.elastic.co/u/Pierre31)\
**Replies:** 5\
**Last updated:** [September 22, 2017, 7:14am UTC](https://discuss.elastic.co/t/try-to-build-a-visualization-and-dashboard-for-displaying-log/101347 "2017-09-22T07:14:01Z")

</div>

Hello; I have installed Elasticsearch and kibana 5.2 (on a RH 7.3). Then I use the rsyslog plugin OMELASTICSEARCH to display log files. In the first window "DISCOVER" of KIBANA, content of log files are correctly disp…

---

## [Discover not showing all details](https://discuss.elastic.co/t/discover-not-showing-all-details/101334)

<div class="topic-metadata">

**Author:** [@geek876](https://discuss.elastic.co/u/geek876)\
**Replies:** 9\
**Last updated:** [September 21, 2017, 9:10pm UTC](https://discuss.elastic.co/t/discover-not-showing-all-details/101334 "2017-09-21T21:10:59Z")

</div>

I have a script (python) that fetches AWS Instance state and pushes the data into ES. I am using ElasticSearch Python module and doing bulk upload Data that pushed to elasticsearch (we use bulk upload): {'\_type': 'cust…

---

## [Visualization exploads space use after 5.4.3](https://discuss.elastic.co/t/visualization-exploads-space-use-after-5-4-3/101313)

<div class="topic-metadata">

**Author:** [@okvittem](https://discuss.elastic.co/u/okvittem)\
**Replies:** 2\
**Last updated:** [September 21, 2017, 8:29pm UTC](https://discuss.elastic.co/t/visualization-exploads-space-use-after-5-4-3/101313 "2017-09-21T20:29:26Z")

</div>

Hi, It seems that sometime after 5.4.3, the space that surrounds a metric visualization increased very much. We went to 5.5.2 that saw this issue of a default interval (0,0) always there and that the visualization di…

---

## [How modify url name at dashboard](https://discuss.elastic.co/t/how-modify-url-name-at-dashboard/101239)

<div class="topic-metadata">

**Author:** [@paulo\_bruck](https://discuss.elastic.co/u/paulo_bruck)\
**Replies:** 9\
**Last updated:** [September 21, 2017, 8:12pm UTC](https://discuss.elastic.co/t/how-modify-url-name-at-dashboard/101239 "2017-09-21T20:12:16Z")

</div>

Hi Guys I would like to enable a dashboard like below: http://xxx:5601/app/kibana#/dashboard/firewall?\_g=() instead http://xxx:5601/app/kibana#/dashboard/07006327du4v?\_g=() How can I modify it? Looking at metricbea…

---

## [Iframe Embed Cross Origin Security Exception](https://discuss.elastic.co/t/iframe-embed-cross-origin-security-exception/101035)

<div class="topic-metadata">

**Author:** [@dixyantar](https://discuss.elastic.co/u/dixyantar)\
**Replies:** 6\
**Last updated:** [September 21, 2017, 6:59pm UTC](https://discuss.elastic.co/t/iframe-embed-cross-origin-security-exception/101035 "2017-09-21T18:59:45Z")

</div>

I have kibana hosted at xx.prod.mydomain.com. I am trying to use the embed share link in yy.stg.mydomain.com and localhost:8080 like this: \<iframe src="THE-KIBANA-SHARE-EMBED-URL" height="600" width="800"\>\</iframe\> …

---

## [HK and SG country codes not in region map](https://discuss.elastic.co/t/hk-and-sg-country-codes-not-in-region-map/101363)

<div class="topic-metadata">

**Author:** [@Badger](https://discuss.elastic.co/u/Badger)\
**Replies:** 1\
**Last updated:** [September 21, 2017, 4:07pm UTC](https://discuss.elastic.co/t/hk-and-sg-country-codes-not-in-region-map/101363 "2017-09-21T16:07:59Z")

</div>

I use a geoip filter in logstash to add location data to my documents. That filter uses the HK and SG country codes. Unfortunately the region map is unable to display these. Is there a simple way around this? I can live …

---

## [Debugging Kibana plugin server-side](https://discuss.elastic.co/t/debugging-kibana-plugin-server-side/100895)

<div class="topic-metadata">

**Author:** [@sivasamyk](https://discuss.elastic.co/u/sivasamyk)\
**Replies:** 3\
**Last updated:** [September 21, 2017, 4:01pm UTC](https://discuss.elastic.co/t/debugging-kibana-plugin-server-side/100895 "2017-09-21T16:01:48Z")

</div>

Added NODE\_OPTIONS="--debug-brk --inspect' and started kibana using npm start from my plugin source dir. After launching chrome://inspect, I can see Kibana server code listed in sources but not my plugin source code. Ho…

---

## [Kibana not creating index automatically](https://discuss.elastic.co/t/kibana-not-creating-index-automatically/101318)

<div class="topic-metadata">

**Author:** [@DILIP\_SHARMA](https://discuss.elastic.co/u/DILIP_SHARMA)\
**Replies:** 1\
**Last updated:** [September 21, 2017, 1:03pm UTC](https://discuss.elastic.co/t/kibana-not-creating-index-automatically/101318 "2017-09-21T13:03:00Z")

</div>

Hi i am using logstash to upload data , once data is upload i can see my index name in dev tool using this command - GET /\_cat/indices?v but i cant find that index in kiabana index list , there is anyway its creat…

---

## [How to design Drill Down chart and Dashboard using Kibana](https://discuss.elastic.co/t/how-to-design-drill-down-chart-and-dashboard-using-kibana/101124)

<div class="topic-metadata">

**Author:** [@Arun\_Raj](https://discuss.elastic.co/u/Arun_Raj)\
**Replies:** 6\
**Last updated:** [September 21, 2017, 11:24am UTC](https://discuss.elastic.co/t/how-to-design-drill-down-chart-and-dashboard-using-kibana/101124 "2017-09-21T11:24:55Z")

</div>

Hello how we can design drill down Charts using kibana ? Is there any plugin available for the same ? any kind of pointers would be appreciated Thanks in Advance Arun

---

## [Getting Error : ( Unable to fetch mapping.Do you have indices matching the pattern?)](https://discuss.elastic.co/t/getting-error-unable-to-fetch-mapping-do-you-have-indices-matching-the-pattern/101273)

<div class="topic-metadata">

**Author:** [@abhisek](https://discuss.elastic.co/u/abhisek)\
**Replies:** 4\
**Last updated:** [September 21, 2017, 10:09am UTC](https://discuss.elastic.co/t/getting-error-unable-to-fetch-mapping-do-you-have-indices-matching-the-pattern/101273 "2017-09-21T10:09:40Z")

</div>

I have logstash (V - 5.4.0) installed on a local server and elasticsearch and kibana on another server (both of V - 5.4.3). I have installed X-pack (V - 5.4.3) on elasticsearch and kibana. but when i'm trying to load …

---

## [Does Kibana support Chinese?](https://discuss.elastic.co/t/does-kibana-support-chinese/101278)

<div class="topic-metadata">

**Author:** [@xsfang](https://discuss.elastic.co/u/xsfang)\
**Replies:** 1\
**Last updated:** [September 21, 2017, 8:52am UTC](https://discuss.elastic.co/t/does-kibana-support-chinese/101278 "2017-09-21T08:52:58Z")

</div>

Does the content and style (color, button., etc) of the Kibana UI can be changed?

---

## [Unable to extract all records in kibana reporting with XPack 5.5.2](https://discuss.elastic.co/t/unable-to-extract-all-records-in-kibana-reporting-with-xpack-5-5-2/101154)

<div class="topic-metadata">

**Author:** [@ramesh205](https://discuss.elastic.co/u/ramesh205)\
**Replies:** 0\
**Last updated:** [September 20, 2017, 11:11am UTC](https://discuss.elastic.co/t/unable-to-extract-all-records-in-kibana-reporting-with-xpack-5-5-2/101154 "2017-09-20T11:11:37Z")

</div>

Hi, In Kibana i am able to search for 250 records but while create report and generate PDF, it consists of 5 records only. Please let me know how to export my search results in PDF, any default settings need to change…

---

## [Not able to add new indices](https://discuss.elastic.co/t/not-able-to-add-new-indices/101114)

<div class="topic-metadata">

**Author:** [@abhisek](https://discuss.elastic.co/u/abhisek)\
**Replies:** 8\
**Last updated:** [September 21, 2017, 4:43am UTC](https://discuss.elastic.co/t/not-able-to-add-new-indices/101114 "2017-09-21T04:43:20Z")

</div>

Hi, I have installed X-pack and now when i am trying to add new indices, it is not happening. when i'm checking for all the indices using the command curl '10.1.1.150:9200/\_cat/indices?v' then i'm getting following …

---

## [How to subtract between two fields?](https://discuss.elastic.co/t/how-to-subtract-between-two-fields/101250)

<div class="topic-metadata">

**Author:** [@adnil](https://discuss.elastic.co/u/adnil)\
**Replies:** 1\
**Last updated:** [September 21, 2017, 4:02am UTC](https://discuss.elastic.co/t/how-to-subtract-between-two-fields/101250 "2017-09-21T04:02:25Z")

</div>

New to this but tried to follow the Elastic docs and it didn't work for me. Trying to create a Visualizer where I want to subtract field1 from field2 using the Advanced JSON scripting. Keeps saying I have an error bu…

---

## [Kibana 5.6 complaints](https://discuss.elastic.co/t/kibana-5-6-complaints/101168)

<div class="topic-metadata">

**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Replies:** 1\
**Last updated:** [September 21, 2017, 1:28am UTC](https://discuss.elastic.co/t/kibana-5-6-complaints/101168 "2017-09-21T01:28:33Z")

</div>

Hi, I just upgraded the 5.6 and I'm not so happy with it. Some issues I noticed: Metric boxes now need to be ridiculously big. I had three values displayed at 15pt and could tuck that away nicely. Same font size the…

---

## [Connection Refused Docker Kibana](https://discuss.elastic.co/t/connection-refused-docker-kibana/100945)

<div class="topic-metadata">

**Author:** [@scottf](https://discuss.elastic.co/u/scottf)\
**Replies:** 6\
**Last updated:** [September 20, 2017, 11:30pm UTC](https://discuss.elastic.co/t/connection-refused-docker-kibana/100945 "2017-09-20T23:30:07Z")

</div>

Kibana connection refused, (1) Plain vanilla linux ubuntu 17. Docker 1.12.6 (I've got similar behavior on centos 7 / docker 17) (2.1) using docker elasticsearch 5.6.1. This command to start es sudo docker run -d -p 92…

---

## [After inserting document\_id at logstash, elastic stops receiveing data](https://discuss.elastic.co/t/after-inserting-document-id-at-logstash-elastic-stops-receiveing-data/101191)

<div class="topic-metadata">

**Author:** [@paulo\_bruck](https://discuss.elastic.co/u/paulo_bruck)\
**Replies:** 2\
**Last updated:** [September 20, 2017, 8:00pm UTC](https://discuss.elastic.co/t/after-inserting-document-id-at-logstash-elastic-stops-receiveing-data/101191 "2017-09-20T20:00:17Z")

</div>

HI guys Using debian + logstash+kibana+logstash version 5.6.0 If I insert document\_id at output elastic , I do not receive any new input at lelasticsearch. Part of logstash file: input { file { path =\> "/var/log/fi…

---

## [Running Kibana on Docker Swarm: Settings for "elasticsearch" were not applied](https://discuss.elastic.co/t/running-kibana-on-docker-swarm-settings-for-elasticsearch-were-not-applied/101014)

<div class="topic-metadata">

**Author:** [@joe2](https://discuss.elastic.co/u/joe2)\
**Replies:** 2\
**Last updated:** [September 20, 2017, 6:54pm UTC](https://discuss.elastic.co/t/running-kibana-on-docker-swarm-settings-for-elasticsearch-were-not-applied/101014 "2017-09-20T18:54:39Z")

</div>

I'm trying to get Kibana running on Docker Swarm using a compose file. I have a running Elasticsearch instance without XPack. I'm trying to just get the most vanilla installation running with minimal options. My configu…

---

## [Date histogram Not working](https://discuss.elastic.co/t/date-histogram-not-working/101117)

<div class="topic-metadata">

**Author:** [@Tamizh](https://discuss.elastic.co/u/Tamizh)\
**Replies:** 1\
**Last updated:** [September 20, 2017, 5:41pm UTC](https://discuss.elastic.co/t/date-histogram-not-working/101117 "2017-09-20T17:41:19Z")

</div>

To migrate my all MySQL data to elasticsearch I used the bulk indexing. After I migrate all my older data. I started to sync my current data flow to the elasticsearch. when I use kibana to discover the new data, it show…

---

## [Strange Logstash index fields in visualization](https://discuss.elastic.co/t/strange-logstash-index-fields-in-visualization/101023)

<div class="topic-metadata">

**Author:** [@Diggy](https://discuss.elastic.co/u/Diggy)\
**Replies:** 4\
**Last updated:** [September 20, 2017, 5:01pm UTC](https://discuss.elastic.co/t/strange-logstash-index-fields-in-visualization/101023 "2017-09-20T17:01:02Z")

</div>

Hello, all. I previously posted this in the Logstash forum, but was advised that this may be a better location. I hope I present my issue understandably. I'm running Elastic Stack 5.6, and most things are working well…

---

## [Kibana 5 : Group by a field value and display average for each group](https://discuss.elastic.co/t/kibana-5-group-by-a-field-value-and-display-average-for-each-group/101057)

<div class="topic-metadata">

**Author:** [@Nakshathri](https://discuss.elastic.co/u/Nakshathri)\
**Replies:** 5\
**Last updated:** [September 20, 2017, 3:40pm UTC](https://discuss.elastic.co/t/kibana-5-group-by-a-field-value-and-display-average-for-each-group/101057 "2017-09-20T15:40:46Z")

</div>

Hello there, I am relatively new to es and kibana. We are using latest kibana 5 for our dashboards. Below is the sample format of our document : { "country": "IN", "places": \[ { "name": "restaurant-a", "cost" : 1…

---

## [Search the ScriptFields](https://discuss.elastic.co/t/search-the-scriptfields/101037)

<div class="topic-metadata">

**Author:** [@Kirtash](https://discuss.elastic.co/u/Kirtash)\
**Replies:** 3\
**Last updated:** [September 20, 2017, 3:05pm UTC](https://discuss.elastic.co/t/search-the-scriptfields/101037 "2017-09-20T15:05:45Z")

</div>

Hello! How can I get the value of a script field? Using kibana I can get the value: \[image\] But I don't know if is possible get this field using the "dev tools" of Kibana, like: GET prova/\_search Prova = index Th…

---

## [Reg kibana UI - unable to view default index](https://discuss.elastic.co/t/reg-kibana-ui-unable-to-view-default-index/100328)

<div class="topic-metadata">

**Author:** [@rajendar](https://discuss.elastic.co/u/rajendar)\
**Replies:** 2\
**Last updated:** [September 20, 2017, 6:38am UTC](https://discuss.elastic.co/t/reg-kibana-ui-unable-to-view-default-index/100328 "2017-09-20T06:38:17Z")

</div>

Hi, I am using kibana 5.5.2 n elasticsearch 5.5.2. Data being pushed by fluentd to ES. My aim is to deploy different kibana docker instances per ES index. I realized kibana as container, when i start my container aft…

---

## [Change Timelion Color](https://discuss.elastic.co/t/change-timelion-color/101069)

<div class="topic-metadata">

**Author:** [@Amit2015](https://discuss.elastic.co/u/Amit2015)\
**Replies:** 4\
**Last updated:** [September 19, 2017, 8:22pm UTC](https://discuss.elastic.co/t/change-timelion-color/101069 "2017-09-19T20:22:03Z")

</div>

Hi, I have developed dashboard using Timelion. I want to change color of timelion. Please suggest how can we change color. Thanks!

---

## [Discover - Limit events returned](https://discuss.elastic.co/t/discover-limit-events-returned/101048)

<div class="topic-metadata">

**Author:** [@KRasekhi](https://discuss.elastic.co/u/KRasekhi)\
**Replies:** 3\
**Last updated:** [September 19, 2017, 7:41pm UTC](https://discuss.elastic.co/t/discover-limit-events-returned/101048 "2017-09-19T19:41:22Z")

</div>

Is it possible to limit the number of results returned from a discover search? For example I just want the last event indexed for a particular field. I was able to do this in a visualization by taking the max @timestamp …

---

## [Kibana Offline Maps](https://discuss.elastic.co/t/kibana-offline-maps/101056)

<div class="topic-metadata">

**Author:** [@shashwat](https://discuss.elastic.co/u/shashwat)\
**Replies:** 1\
**Last updated:** [September 19, 2017, 6:53pm UTC](https://discuss.elastic.co/t/kibana-offline-maps/101056 "2017-09-19T18:53:47Z")

</div>

Hi, How can we use Kibana Offline map ? I am running ELK on an offline server (no internet connectivity). When try to create a coordinate map using the lat/long values in my logs , I encounter the following issue: "Coo…

---

## [Region Map - Vector map dropdown list empty - Version 5.5.2](https://discuss.elastic.co/t/region-map-vector-map-dropdown-list-empty-version-5-5-2/97806)

<div class="topic-metadata">

**Author:** [@Mierenneuker](https://discuss.elastic.co/u/Mierenneuker)\
**Replies:** 8\
**Last updated:** [September 18, 2017, 7:32pm UTC](https://discuss.elastic.co/t/region-map-vector-map-dropdown-list-empty-version-5-5-2/97806 "2017-09-18T19:32:54Z")

</div>

I am trying to create a Region Map to visualise ISO 3166 2 character country codes. When i look in the ‘options’ tab the Vector Map dropdown list is empty. If I run the visualisation it appears to treat the data as US …

---

## [Visualization update with new fields](https://discuss.elastic.co/t/visualization-update-with-new-fields/100881)

<div class="topic-metadata">

**Author:** [@mmonjas](https://discuss.elastic.co/u/mmonjas)\
**Replies:** 5\
**Last updated:** [September 19, 2017, 4:37pm UTC](https://discuss.elastic.co/t/visualization-update-with-new-fields/100881 "2017-09-19T16:37:43Z")

</div>

Hi all, I'm trying to update a visualization with new fields as they arrive to Elasticsearch. Let me explain: I have a complete ELK system with Elasticsearch, Kibana and Logstash. I'm sending information from a Spark …

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=919)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=921)