# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=928

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 929

---

## [How to pretty print json of a string field](https://discuss.elastic.co/t/how-to-pretty-print-json-of-a-string-field/98653)

<div class="topic-metadata">

**Author:** [@ea1987](https://discuss.elastic.co/u/ea1987)\
**Replies:** 5\
**Last updated:** [August 30, 2017, 4:02pm UTC](https://discuss.elastic.co/t/how-to-pretty-print-json-of-a-string-field/98653 "2017-08-30T16:02:32Z")

</div>

Hi all, is there a way to pretty print a json which is stored inside a string field? Right now Kibana visualize it in a 1 row, like this: payload: { “name”:“John”, “age”:30, “car”:null } This is what I would like to h…

---

## [\[Windows Issue\] Custom Kibana App Plugin Crashes](https://discuss.elastic.co/t/windows-issue-custom-kibana-app-plugin-crashes/98780)

<div class="topic-metadata">

**Author:** [@varundbest](https://discuss.elastic.co/u/varundbest)\
**Replies:** 1\
**Last updated:** [August 30, 2017, 3:26pm UTC](https://discuss.elastic.co/t/windows-issue-custom-kibana-app-plugin-crashes/98780 "2017-08-30T15:26:37Z")

</div>

Kibana Version :- 5.4.1 & 5.4.3 Windows 7 So I've created a repo to demo this issue :- https://github.com/varundbest/kibanaPlugins/tree/master/test\_app I built a kibana app plugin and it works fine on Linux but on win…

---

## [Rate in Kibana](https://discuss.elastic.co/t/rate-in-kibana/98830)

<div class="topic-metadata">

**Author:** [@vincentmarian](https://discuss.elastic.co/u/vincentmarian)\
**Replies:** 1\
**Last updated:** [August 30, 2017, 2:21pm UTC](https://discuss.elastic.co/t/rate-in-kibana/98830 "2017-08-30T14:21:23Z")

</div>

Currently in Kibana, we are able to get the No. of Orders in a specific time range using Metrics visualization. Our current requirement is to calculate Rate in Kibana. For example, Total Number of Orders received per …

---

## [Kibana vulnerability?](https://discuss.elastic.co/t/kibana-vulnerability/98854)

<div class="topic-metadata">

**Author:** [@nh45](https://discuss.elastic.co/u/nh45)\
**Replies:** 5\
**Last updated:** [August 30, 2017, 2:05pm UTC](https://discuss.elastic.co/t/kibana-vulnerability/98854 "2017-08-30T14:05:08Z")

</div>

Hi, just a quick question regarding potential Kibana vulnerability. Does anyone think that because requests such as get \_node/… are executable by any user with access to Kibana return so much detailed data about the enti…

---

## [Need to replace default @timestamp with userdefined timestamp](https://discuss.elastic.co/t/need-to-replace-default-timestamp-with-userdefined-timestamp/98637)

<div class="topic-metadata">

**Author:** [@fazi347](https://discuss.elastic.co/u/fazi347)\
**Replies:** 13\
**Last updated:** [August 30, 2017, 1:45pm UTC](https://discuss.elastic.co/t/need-to-replace-default-timestamp-with-userdefined-timestamp/98637 "2017-08-30T13:45:11Z")

</div>

Hi, I want to remove the default @timestamp entry from log messages and need to change the default log search timestamp a different one. Kibana Version 5.5.2

---

## [Visualize only the successfully triggered Watches](https://discuss.elastic.co/t/visualize-only-the-successfully-triggered-watches/98692)

<div class="topic-metadata">

**Author:** [@mjm](https://discuss.elastic.co/u/mjm)\
**Replies:** 2\
**Last updated:** [August 30, 2017, 1:33pm UTC](https://discuss.elastic.co/t/visualize-only-the-successfully-triggered-watches/98692 "2017-08-30T13:33:55Z")

</div>

I want to create a dashboard showing only the successfully triggered watches and the respective details. Currently i have created a dashboard using the saved search based on “watcher-history”. The dashboard is showing …

---

## [How to use one scripted field to inside another scripted field](https://discuss.elastic.co/t/how-to-use-one-scripted-field-to-inside-another-scripted-field/98776)

<div class="topic-metadata">

**Author:** [@vinay\_garg](https://discuss.elastic.co/u/vinay_garg)\
**Replies:** 1\
**Last updated:** [August 30, 2017, 1:18pm UTC](https://discuss.elastic.co/t/how-to-use-one-scripted-field-to-inside-another-scripted-field/98776 "2017-08-30T13:18:41Z")

</div>

I have created two scripted field 'oldDate’ oldDate = doc\[‘Date’\].value. and 'newDate’ newDate = doc\[‘oldDate’\]. How can i use oldDate scripted field in second scripted field?

---

## [Get count of fields in Kibana](https://discuss.elastic.co/t/get-count-of-fields-in-kibana/98784)

<div class="topic-metadata">

**Author:** [@kottapar](https://discuss.elastic.co/u/kottapar)\
**Replies:** 2\
**Last updated:** [August 30, 2017, 11:10am UTC](https://discuss.elastic.co/t/get-count-of-fields-in-kibana/98784 "2017-08-30T11:10:10Z")

</div>

Hello, we’re gathering an inventory of virtual machines from vcenters. I was just wondering if there’s a way we can create a new field with a count of total VMs or with a count of the total number of ESX servers or some…

---

## [Custom Kibana plugin - use previously set user connection](https://discuss.elastic.co/t/custom-kibana-plugin-use-previously-set-user-connection/98357)

<div class="topic-metadata">

**Author:** [@peter.ridzi](https://discuss.elastic.co/u/peter.ridzi)\
**Replies:** 6\
**Last updated:** [August 30, 2017, 11:04am UTC](https://discuss.elastic.co/t/custom-kibana-plugin-use-previously-set-user-connection/98357 "2017-08-30T11:04:32Z")

</div>

Hi all! I started to work on a custom Kibana plugin, which manipulates data stored in ES indices. To access the ES I build a connection manually like this: ... this.client = new elasticsearch.Client({ hosts: \[ '…

---

## [Kibana Status: Red](https://discuss.elastic.co/t/kibana-status-red/98820)

<div class="topic-metadata">

**Author:** [@gpganeshgp](https://discuss.elastic.co/u/gpganeshgp)\
**Replies:** 5\
**Last updated:** [August 30, 2017, 9:11am UTC](https://discuss.elastic.co/t/kibana-status-red/98820 "2017-08-30T09:11:21Z")

</div>

Hi… Now I installed ELK but it showing 1. Elasticsearch plugin is red 2. This version of Kibana requires Elasticsearch v5.5.2 on all nodes. I found the following incompatible nodes in your cluster: v2.4.6 @ 127.0.0.1:920…

---

## [Is it possible to create subcolumns in kibana?](https://discuss.elastic.co/t/is-it-possible-to-create-subcolumns-in-kibana/98540)

<div class="topic-metadata">

**Author:** [@sudhanva](https://discuss.elastic.co/u/sudhanva)\
**Replies:** 1\
**Last updated:** [August 30, 2017, 10:08am UTC](https://discuss.elastic.co/t/is-it-possible-to-create-subcolumns-in-kibana/98540 "2017-08-30T10:08:30Z")

</div>

I have the following json objects in my elasticsearch index: { "model": "toyota", "color": "red", "transmission":"auto" } { "model": "toyota", "color": "green", "transmission":"auto" } { "m…

---

## [How do I set Kibana to display the time using the 24 hour clock?](https://discuss.elastic.co/t/how-do-i-set-kibana-to-display-the-time-using-the-24-hour-clock/98393)

<div class="topic-metadata">

**Author:** [@TimWard](https://discuss.elastic.co/u/TimWard)\
**Replies:** 4\
**Last updated:** [August 30, 2017, 8:31am UTC](https://discuss.elastic.co/t/how-do-i-set-kibana-to-display-the-time-using-the-24-hour-clock/98393 "2017-08-30T08:31:04Z")

</div>

Specifically the tooltip in the time series Visual Builder?

---

## [Visual Time Builder filter limitation](https://discuss.elastic.co/t/visual-time-builder-filter-limitation/98673)

<div class="topic-metadata">

**Author:** [@Alexandre\_Juma](https://discuss.elastic.co/u/Alexandre_Juma)\
**Replies:** 2\
**Last updated:** [August 29, 2017, 7:03pm UTC](https://discuss.elastic.co/t/visual-time-builder-filter-limitation/98673 "2017-08-29T19:03:03Z")

</div>

Hi all, I'm having a hard time achieving some simple stuff I normally do with Timelion. The use case is quite simple (i.e: % of distinct clients with specific condition): cardinality(field) metric (with applied filte…

---

## [Mathematic Calculation](https://discuss.elastic.co/t/mathematic-calculation/98406)

<div class="topic-metadata">

**Author:** [@Amit2015](https://discuss.elastic.co/u/Amit2015)\
**Replies:** 2\
**Last updated:** [August 29, 2017, 6:55pm UTC](https://discuss.elastic.co/t/mathematic-calculation/98406 "2017-08-29T18:55:16Z")

</div>

Hi, I am trying to create timelion, have 4 fields lets say a,b,c,d. It should perform mathematics calculation like a+b/c+d and it should have one line output. Any idea how to do it? Thanks…

---

## [Visual Builder Can't use overall aggregation as input to another aggregation](https://discuss.elastic.co/t/visual-builder-cant-use-overall-aggregation-as-input-to-another-aggregation/92152)

<div class="topic-metadata">

**Author:** [@clowder](https://discuss.elastic.co/u/clowder)\
**Replies:** 5\
**Last updated:** [August 29, 2017, 4:32pm UTC](https://discuss.elastic.co/t/visual-builder-cant-use-overall-aggregation-as-input-to-another-aggregation/92152 "2017-08-29T16:32:36Z")

</div>

I am dealing with data regarding user success rates for performing different tasks. What I'd like to do is use the experimental visualization builder to create a metric visualization. I use a calculation aggregation to s…

---

## [Inter record functions in Kibana?](https://discuss.elastic.co/t/inter-record-functions-in-kibana/95580)

<div class="topic-metadata">

**Author:** [@Cristian](https://discuss.elastic.co/u/Cristian)\
**Replies:** 5\
**Last updated:** [August 29, 2017, 2:24pm UTC](https://discuss.elastic.co/t/inter-record-functions-in-kibana/95580 "2017-08-29T14:24:31Z")

</div>

Hi All! I have forex information for each day. Close, Open, Low, High. Now, I would like to calculate the difference in % between a point in time, lets say today (t0), and the day before (-t1). That is: (|t0-t1|/((t0-…

---

## [Dynamic Range in Kibana 5.4](https://discuss.elastic.co/t/dynamic-range-in-kibana-5-4/98575)

<div class="topic-metadata">

**Author:** [@vincentmarian](https://discuss.elastic.co/u/vincentmarian)\
**Replies:** 3\
**Last updated:** [August 29, 2017, 12:07pm UTC](https://discuss.elastic.co/t/dynamic-range-in-kibana-5-4/98575 "2017-08-29T12:07:54Z")

</div>

Is it possible to make the range in pie chart as dynamic instead of having static values ? Example: From : 0 To : Average(Duration)

---

## [Courier Fetch: X of X shards failed](https://discuss.elastic.co/t/courier-fetch-x-of-x-shards-failed/98427)

<div class="topic-metadata">

**Author:** [@truongdqse03303](https://discuss.elastic.co/u/truongdqse03303)\
**Replies:** 12\
**Last updated:** [August 29, 2017, 8:59am UTC](https://discuss.elastic.co/t/courier-fetch-x-of-x-shards-failed/98427 "2017-08-29T08:59:48Z")

</div>

Hi experts. I use scripted field with my filebeat at field sometime have value sometime no so my scripted is: if (!doc\['Time'\].empty) { return doc\['Time'\].date.hourOfDay + 7; } after that my filebeat-\* index not w…

---

## [Kibana visualize problem](https://discuss.elastic.co/t/kibana-visualize-problem/97863)

<div class="topic-metadata">

**Author:** [@abu.sayeed](https://discuss.elastic.co/u/abu.sayeed)\
**Replies:** 4\
**Last updated:** [August 27, 2017, 6:44am UTC](https://discuss.elastic.co/t/kibana-visualize-problem/97863 "2017-08-27T06:44:20Z")

</div>

My log Type: log-level : \[INFO \], status : \[FAIL\], client : \[IPDC\], cell : \[1746710009\], message\_delivery\_time : \[2017-08-14 09:46:27,807\], operator: \[ROBI\] log-level : \[INFO \], status : \[SENT\], client : \[IPDC\], cell :…

---

## [Doing Math over count of events](https://discuss.elastic.co/t/doing-math-over-count-of-events/97278)

<div class="topic-metadata">

**Author:** [@shroh](https://discuss.elastic.co/u/shroh)\
**Replies:** 36\
**Last updated:** [August 29, 2017, 3:17am UTC](https://discuss.elastic.co/t/doing-math-over-count-of-events/97278 "2017-08-29T03:17:03Z")

</div>

Hi, I have some tomcat app logs in which i am parsing the TransactionName and TransactionStatus fields. My end goal is to create a single value visualisation which shows the percentage of successful transactions over to…

---

## [How can i Disply the result of division between two field?](https://discuss.elastic.co/t/how-can-i-disply-the-result-of-division-between-two-field/98502)

<div class="topic-metadata">

**Author:** [@minchina](https://discuss.elastic.co/u/minchina)\
**Replies:** 2\
**Last updated:** [August 29, 2017, 12:48am UTC](https://discuss.elastic.co/t/how-can-i-disply-the-result-of-division-between-two-field/98502 "2017-08-29T00:48:15Z")

</div>

Hi Guys, currently, i have a requirement about kibana visualize tab, i want to display the division result of two sum(field). how can i display that result. my script is { “query”: { “bool”: { “must”: \[ { “query\_s…

---

## [How to make dropdown menu stay on top of other visualization below it](https://discuss.elastic.co/t/how-to-make-dropdown-menu-stay-on-top-of-other-visualization-below-it/98301)

<div class="topic-metadata">

**Author:** [@spacepacket](https://discuss.elastic.co/u/spacepacket)\
**Replies:** 2\
**Last updated:** [August 29, 2017, 12:17am UTC](https://discuss.elastic.co/t/how-to-make-dropdown-menu-stay-on-top-of-other-visualization-below-it/98301 "2017-08-29T00:17:19Z")

</div>

I am using the kibana-html-plugin from https://github.com/5thColumn/kibana5-html-plugin. My html in the plugin has the css styles for a dropdown menu, and the html to create a couple of them. The height of the visualizat…

---

## [Converting a text field to integer via painless or expression- impossible?](https://discuss.elastic.co/t/converting-a-text-field-to-integer-via-painless-or-expression-impossible/98423)

<div class="topic-metadata">

**Author:** [@James\_S](https://discuss.elastic.co/u/James_S)\
**Replies:** 1\
**Last updated:** [August 28, 2017, 11:28pm UTC](https://discuss.elastic.co/t/converting-a-text-field-to-integer-via-painless-or-expression-impossible/98423 "2017-08-28T23:28:35Z")

</div>

Hello, I have been trying, for months, how to convert a text field to integer using painless, but everytime I try the whole index will not longer show when going to “Discover”. I have tried: return Integer.parseInt(do…

---

## ["Clip" extrenous data in the Y Axis](https://discuss.elastic.co/t/clip-extrenous-data-in-the-y-axis/95546)

<div class="topic-metadata">

**Author:** [@Ian\_J\_Plamondon](https://discuss.elastic.co/u/Ian_J_Plamondon)\
**Replies:** 6\
**Last updated:** [August 28, 2017, 9:02pm UTC](https://discuss.elastic.co/t/clip-extrenous-data-in-the-y-axis/95546 "2017-08-28T21:02:50Z")

</div>

Hello, I’m a bit new to Kibana 5, and I was hoping someone could help me out. Previously, in Kibana 3, we could clip externous data from the Y access due to recording errors, and “clean up” our graphs. I can’t seem to f…

---

## [Kibana 5.4 behind Nginx](https://discuss.elastic.co/t/kibana-5-4-behind-nginx/98114)

<div class="topic-metadata">

**Author:** [@Nikhanj](https://discuss.elastic.co/u/Nikhanj)\
**Replies:** 8\
**Last updated:** [August 28, 2017, 7:18pm UTC](https://discuss.elastic.co/t/kibana-5-4-behind-nginx/98114 "2017-08-28T19:18:37Z")

</div>

Hello, I have researched a lot of posts about configuring Kibana 5 behind Nginx, but I am not able to achieve it. I am trying to set up like this : http://myhost/kibana to work. I tried this in kibana.conf location /…

---

## [Timelion dashboard unable to identify Elasticsearch index](https://discuss.elastic.co/t/timelion-dashboard-unable-to-identify-elasticsearch-index/98574)

<div class="topic-metadata">

**Author:** [@rajisankar](https://discuss.elastic.co/u/rajisankar)\
**Replies:** 4\
**Last updated:** [August 28, 2017, 7:01pm UTC](https://discuss.elastic.co/t/timelion-dashboard-unable-to-identify-elasticsearch-index/98574 "2017-08-28T19:01:27Z")

</div>

I have a few Timelion visualizations which depend on logstash index. We have exported the dashboard, visualizations and index-pattern as JSON. When a kibana container comes up, these dashboard, visualizations and index-p…

---

## [X-axis labels are getting truncated instead of getting wordwrapped](https://discuss.elastic.co/t/x-axis-labels-are-getting-truncated-instead-of-getting-wordwrapped/98551)

<div class="topic-metadata">

**Author:** [@Vijay\_Goturi](https://discuss.elastic.co/u/Vijay_Goturi)\
**Replies:** 2\
**Last updated:** [August 28, 2017, 6:08pm UTC](https://discuss.elastic.co/t/x-axis-labels-are-getting-truncated-instead-of-getting-wordwrapped/98551 "2017-08-28T18:08:00Z")

</div>

Prefer the values along the x-axis to get word-wrapped then truncated. Any configuration or work around to achieve this?

---

## [Getting documents not in current timerange](https://discuss.elastic.co/t/getting-documents-not-in-current-timerange/98507)

<div class="topic-metadata">

**Author:** [@sLuvpreet33](https://discuss.elastic.co/u/sLuvpreet33)\
**Replies:** 1\
**Last updated:** [August 28, 2017, 5:54pm UTC](https://discuss.elastic.co/t/getting-documents-not-in-current-timerange/98507 "2017-08-28T17:54:59Z")

</div>

I want to get documents which are not in the current timerange in kibana. I have some data about bookings and users. I want to see the users who have not done booking this month(or any selected timerange). But info is …

---

## [Scripted fields - regex always return false](https://discuss.elastic.co/t/scripted-fields-regex-always-return-false/98361)

<div class="topic-metadata">

**Author:** [@Jean-Christophe\_Hege](https://discuss.elastic.co/u/Jean-Christophe_Hege)\
**Replies:** 4\
**Last updated:** [August 28, 2017, 3:25pm UTC](https://discuss.elastic.co/t/scripted-fields-regex-always-return-false/98361 "2017-08-28T15:25:04Z")

</div>

I get some technical emails from many machines. In order to sort them out, if put a \[hostname|ip\] string either in “from” field, or in the subject. While I’m trying to write a scripted field to extract them, regex (m.ma…

---

## [How to add multiple search panel for different fields](https://discuss.elastic.co/t/how-to-add-multiple-search-panel-for-different-fields/98432)

<div class="topic-metadata">

**Author:** [@saafianihan](https://discuss.elastic.co/u/saafianihan)\
**Replies:** 1\
**Last updated:** [August 28, 2017, 6:51am UTC](https://discuss.elastic.co/t/how-to-add-multiple-search-panel-for-different-fields/98432 "2017-08-28T06:51:28Z")

</div>

I am using Kibana. 5.5. Having only one search panel on the top. It support search for all fields. \[search\_big\] But i need one more search panel and one for search a field and another one for search another field. That…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=927)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=929)
