# Kibana **URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=932 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 933 --- ## [Parsing fields containing jason](https://discuss.elastic.co/t/parsing-fields-containing-jason/97364)
**Author:** [@SunilSaini](https://discuss.elastic.co/u/SunilSaini)\ **Replies:** 2\ **Last updated:** [August 18, 2017, 5:51am UTC](https://discuss.elastic.co/t/parsing-fields-containing-jason/97364 "2017-08-18T05:51:45Z")
Hi, I am using Kibana 4. I have one field that contains message in Jason format (highlight in yellow in the image). Field: args = {"orderRequest":{"DeptId":83,"ClassId":4,"ItemId":2478,"StoreType":"ST"}} What i am lo… --- ## [Search for specific symbols](https://discuss.elastic.co/t/search-for-specific-symbols/97381)
**Author:** [@hsatgol](https://discuss.elastic.co/u/hsatgol)\ **Replies:** 4\ **Last updated:** [August 18, 2017, 5:12am UTC](https://discuss.elastic.co/t/search-for-specific-symbols/97381 "2017-08-18T05:12:24Z")
I'm using ELK on AWS. I want to analyze AWS ELB (load balancer) logs, and later on, I would love to see here Nginx logs as well. I've setup everything and it works! So, thanks for your software guys! Meanwhile, I have … --- ## [Charting an IP flow based metric](https://discuss.elastic.co/t/charting-an-ip-flow-based-metric/97257)
**Author:** [@mgillott](https://discuss.elastic.co/u/mgillott)\ **Replies:** 5\ **Last updated:** [August 17, 2017, 5:15pm UTC](https://discuss.elastic.co/t/charting-an-ip-flow-based-metric/97257 "2017-08-17T17:15:05Z")
I have a series of IP flows with an associated metric that I want to present as a line chart . The flows (SA, DA, SP, DP, AF) have been indexed & the addresses mapped the correct type (“IP”). I now want to visualize the… --- ## [Anonymous acces for Kibana through X-Pack](https://discuss.elastic.co/t/anonymous-acces-for-kibana-through-x-pack/95930)
**Author:** [@Grevius](https://discuss.elastic.co/u/Grevius)\ **Replies:** 3\ **Last updated:** [August 16, 2017, 10:09pm UTC](https://discuss.elastic.co/t/anonymous-acces-for-kibana-through-x-pack/95930 "2017-08-16T22:09:32Z")
Hello :slight\_smile: I’ve changed my config according to https://www.elastic.co/guide/en/x-pack/current/anonymous-access.html (plus kibana\_user role) and the user appeared in Kibana user management, but I don’t know how… --- ## [Canadian Region Maps](https://discuss.elastic.co/t/canadian-region-maps/97323)
**Author:** [@bitesize](https://discuss.elastic.co/u/bitesize)\ **Replies:** 3\ **Last updated:** [August 17, 2017, 3:42pm UTC](https://discuss.elastic.co/t/canadian-region-maps/97323 "2017-08-17T15:42:11Z")
I am using Kibana 5.5 with Region Maps. I get the city, province (state), country fields but I am unable to see the fields highlighted like the US states. Is there a specific format that I need to put in elasticsearch in… --- ## [Regex Search in Kibana](https://discuss.elastic.co/t/regex-search-in-kibana/97436)
**Author:** [@Kevin\_Wiegand](https://discuss.elastic.co/u/Kevin_Wiegand)\ **Replies:** 1\ **Last updated:** [August 17, 2017, 3:23pm UTC](https://discuss.elastic.co/t/regex-search-in-kibana/97436 "2017-08-17T15:23:58Z")
Hey there, i want to do a Regex based Search on Kibana, i’ve read the Regex Instruction for Kibana an Lucene but i can’t get my Search or Query to work. I want to find each entry which begins with "Login 123456"(\<-6 Di… --- ## [Only search index for results in a selected time range](https://discuss.elastic.co/t/only-search-index-for-results-in-a-selected-time-range/94652)
**Author:** [@Helix](https://discuss.elastic.co/u/Helix)\ **Replies:** 3\ **Last updated:** [August 17, 2017, 7:53am UTC](https://discuss.elastic.co/t/only-search-index-for-results-in-a-selected-time-range/94652 "2017-08-17T07:53:41Z")
Hello, I have been using kibana for several days now and ran into the following problem: Everything is working perfectly fine as long as I only store data from the last few days. I have to mention that I am collectin… --- ## [Vertical bar chart showing one bar per field](https://discuss.elastic.co/t/vertical-bar-chart-showing-one-bar-per-field/97169)
**Author:** [@GrahamHannington](https://discuss.elastic.co/u/GrahamHannington)\ **Replies:** 2\ **Last updated:** [August 17, 2017, 2:28am UTC](https://discuss.elastic.co/t/vertical-bar-chart-showing-one-bar-per-field/97169 "2017-08-17T02:28:24Z")
I am running a transaction processing system that writes a log record for each transaction. Each log record includes multiple fields that represent elapsed time in seconds spent on some aspect of the transaction; a break… --- ## [IIS Log Data - Aggregating multiple web requests up to individual page requests](https://discuss.elastic.co/t/iis-log-data-aggregating-multiple-web-requests-up-to-individual-page-requests/96504)
**Author:** [@Patrick\_Stevens](https://discuss.elastic.co/u/Patrick_Stevens)\ **Replies:** 2\ **Last updated:** [August 17, 2017, 12:12am UTC](https://discuss.elastic.co/t/iis-log-data-aggregating-multiple-web-requests-up-to-individual-page-requests/96504 "2017-08-17T00:12:28Z")
Hi all, I’m working with a web application where each page request by a user can result in 5+ web requests (each with its own line in a IIS log) to load all the components of the page. Therefore to get the actual page lo… --- ## [How can i read the searched value inside my visualizations?](https://discuss.elastic.co/t/how-can-i-read-the-searched-value-inside-my-visualizations/97226)
**Author:** [@nikhil\_ahir](https://discuss.elastic.co/u/nikhil_ahir)\ **Replies:** 1\ **Last updated:** [August 16, 2017, 6:56pm UTC](https://discuss.elastic.co/t/how-can-i-read-the-searched-value-inside-my-visualizations/97226 "2017-08-16T18:56:23Z")
Hi team, I have created a visualization that needs the data from the searched query. How can i get the query information inside the visualization? --- ## [Login in Kibana using Custom Realm installed in Elasticsearch](https://discuss.elastic.co/t/login-in-kibana-using-custom-realm-installed-in-elasticsearch/96773)
**Author:** [@sumit\_monga](https://discuss.elastic.co/u/sumit_monga)\ **Replies:** 6\ **Last updated:** [August 16, 2017, 6:53pm UTC](https://discuss.elastic.co/t/login-in-kibana-using-custom-realm-installed-in-elasticsearch/96773 "2017-08-16T18:53:54Z")
I have created a custom realm for X-Pack which uses spring-security-oauth2 based web application for authentication and authorization. This realm is working perfectly with elasticsearch i.e. user is only to able to do o… --- ## [Help understanding "order by" metric](https://discuss.elastic.co/t/help-understanding-order-by-metric/97143)
**Author:** [@rmorris](https://discuss.elastic.co/u/rmorris)\ **Replies:** 1\ **Last updated:** [August 16, 2017, 6:17pm UTC](https://discuss.elastic.co/t/help-understanding-order-by-metric/97143 "2017-08-16T18:17:13Z")
Hi there, I've been tearing my hair out in an attempt to get a heatmap to behave exactly as I'd like. My goal is to display the max timestamp for documents, grouped by a specific term. This appears to work well when I o… --- ## [Index pattern Export CSV](https://discuss.elastic.co/t/index-pattern-export-csv/97102)
**Author:** [@dmil](https://discuss.elastic.co/u/dmil)\ **Replies:** 1\ **Last updated:** [August 16, 2017, 5:04pm UTC](https://discuss.elastic.co/t/index-pattern-export-csv/97102 "2017-08-16T17:04:20Z")
Hi, I am using Kibana v5.4.0. I can not find feature so I was wondering is it possible to export all fields and data from index pattern to .csv? Thanks. --- ## [Filter of kibana : extracting documents with a condition](https://discuss.elastic.co/t/filter-of-kibana-extracting-documents-with-a-condition/97075)
**Author:** [@marwa](https://discuss.elastic.co/u/marwa)\ **Replies:** 1\ **Last updated:** [August 16, 2017, 4:49pm UTC](https://discuss.elastic.co/t/filter-of-kibana-extracting-documents-with-a-condition/97075 "2017-08-16T16:49:55Z")
Hi , i have data of transactions, each transaction is made by a customer , i want to extrat only documents where i have repeat customer (a customer that had made more then one transaction) so i have to filter the docum… --- ## [TSVB Start of day showing 6:00 pm when using Interval 1d](https://discuss.elastic.co/t/tsvb-start-of-day-showing-6-00-pm-when-using-interval-1d/95238)
**Author:** [@Dallas\_Toth](https://discuss.elastic.co/u/Dallas_Toth)\ **Replies:** 4\ **Last updated:** [August 16, 2017, 4:24pm UTC](https://discuss.elastic.co/t/tsvb-start-of-day-showing-6-00-pm-when-using-interval-1d/95238 "2017-08-16T16:24:27Z")
In this video you can see that in Discovery there are 19 count for the 24th 1 of those items at 6:05 pm (18:05) You can see that when I switch to the TSVB where my interval is by 1d it starts the day at 6:00 pm and on… --- ## [Investigating tools - seeking suggestions](https://discuss.elastic.co/t/investigating-tools-seeking-suggestions/96533)
**Author:** [@Yaj](https://discuss.elastic.co/u/Yaj)\ **Replies:** 1\ **Last updated:** [August 16, 2017, 3:04pm UTC](https://discuss.elastic.co/t/investigating-tools-seeking-suggestions/96533 "2017-08-16T15:04:41Z")
Hello Could forum members kindly help with the choice of an optimal tool-set? Load a bunch of Excel spreadsheets and CSV files (preferably on the server side), combine the columns, parse and display the results of a … --- ## [Kibana changing date time field while displaying](https://discuss.elastic.co/t/kibana-changing-date-time-field-while-displaying/96006)
**Author:** [@Shantanu\_Deshmukh](https://discuss.elastic.co/u/Shantanu_Deshmukh)\ **Replies:** 3\ **Last updated:** [August 16, 2017, 11:58am UTC](https://discuss.elastic.co/t/kibana-changing-date-time-field-while-displaying/96006 "2017-08-16T11:58:55Z")
I have an index in elastic search. One of the fields in date time format has this format "“yyyy-MM-dd-HH:mm:ss.SSS”. When we see this index on Kibana, it automatically adds +5.30 hours to date. After searching I know th… --- ## [Markdown widget query](https://discuss.elastic.co/t/markdown-widget-query/96181)
**Author:** [@Vivek\_Sharma](https://discuss.elastic.co/u/Vivek_Sharma)\ **Replies:** 3\ **Last updated:** [August 16, 2017, 10:07am UTC](https://discuss.elastic.co/t/markdown-widget-query/96181 "2017-08-16T10:07:24Z")
Hi I have created 3 visualizations as below: Visualization\_1 ====\> Markdown Visualization\_2 ====\> bar chart Visualization\_3 ====\> bar chart I have created two dashboards also as below: Dashboard\_1 ====\> This contai… --- ## [Have created a hack in Kibana and want it to run only once](https://discuss.elastic.co/t/have-created-a-hack-in-kibana-and-want-it-to-run-only-once/96122)
**Author:** [@nikhil\_ahir](https://discuss.elastic.co/u/nikhil_ahir)\ **Replies:** 2\ **Last updated:** [August 16, 2017, 9:44am UTC](https://discuss.elastic.co/t/have-created-a-hack-in-kibana-and-want-it-to-run-only-once/96122 "2017-08-16T09:44:56Z")
Hi Team, I have created a hack in Kibana and want it to run only once. So on refresh this hack should not run. It should run only once. Does Kibana provide any provision to achieve this? --- ## [Dashboard not showing lines correctly](https://discuss.elastic.co/t/dashboard-not-showing-lines-correctly/95874)
**Author:** [@jarko.piironen](https://discuss.elastic.co/u/jarko.piironen)\ **Replies:** 7\ **Last updated:** [August 16, 2017, 8:31am UTC](https://discuss.elastic.co/t/dashboard-not-showing-lines-correctly/95874 "2017-08-16T08:31:20Z")
Using Kibana 5.5.1 In my dashboard I am getting dots instead of a lines graph, if i go to the vizulation its shows the lines perfactly. What could be wrong? Dashboard: Vizualize: --- ## [Compare two document in Kibana by string array field](https://discuss.elastic.co/t/compare-two-document-in-kibana-by-string-array-field/96810)
**Author:** [@olegb](https://discuss.elastic.co/u/olegb)\ **Replies:** 2\ **Last updated:** [August 16, 2017, 6:09am UTC](https://discuss.elastic.co/t/compare-two-document-in-kibana-by-string-array-field/96810 "2017-08-16T06:09:43Z")
Hi All please hell me to Compare two document in Kibana by some string array field, that contains a string unique values, No order required. this array string may contain till to 3000 strings thank you in avance --- ## [Not able to filter on geoip.location?](https://discuss.elastic.co/t/not-able-to-filter-on-geoip-location/96683)
**Author:** [@Puk](https://discuss.elastic.co/u/Puk)\ **Replies:** 6\ **Last updated:** [August 16, 2017, 2:23am UTC](https://discuss.elastic.co/t/not-able-to-filter-on-geoip-location/96683 "2017-08-16T02:23:36Z")
So I’m fairly new to ELK Stack over the last few weeks, but I have most my systems reporting in fine for Windows logs, and Linux Secure/System logs OK. Today I added in the Apache logs for my DMZ and again these are g… --- ## [Need help on kibana for visualize from kv filter](https://discuss.elastic.co/t/need-help-on-kibana-for-visualize-from-kv-filter/96890)
**Author:** [@Amity4](https://discuss.elastic.co/u/Amity4)\ **Replies:** 6\ **Last updated:** [August 16, 2017, 12:35am UTC](https://discuss.elastic.co/t/need-help-on-kibana-for-visualize-from-kv-filter/96890 "2017-08-16T00:35:29Z")
so, i need to change this message to column and filter it with type=traffic , subtype=forward and visualize it. can anyone help me? thankyou --- ## [Painscript Script - cast String as Int?](https://discuss.elastic.co/t/painscript-script-cast-string-as-int/97034)
**Author:** [@daflookie](https://discuss.elastic.co/u/daflookie)\ **Replies:** 2\ **Last updated:** [August 15, 2017, 8:14pm UTC](https://discuss.elastic.co/t/painscript-script-cast-string-as-int/97034 "2017-08-15T20:14:20Z")
We have a mapping issue that will be addressed soon for a field that should be an int but is presently a string. All values in the index should cast cleanly. Anyhow, in a pinch I wanted to aggregate some data on the fi… --- ## [Cannot see some of index logstash-dev\*](https://discuss.elastic.co/t/cannot-see-some-of-index-logstash-dev/96690)
**Author:** [@VincentNgai86](https://discuss.elastic.co/u/VincentNgai86)\ **Replies:** 1\ **Last updated:** [August 15, 2017, 7:27pm UTC](https://discuss.elastic.co/t/cannot-see-some-of-index-logstash-dev/96690 "2017-08-15T19:27:00Z")
Hi all... I have index like below Suppose logstash-dev\* are included all index start with logstash-dev-...... However logstash-dev\* only contain logstash-dev-haproxy\* logstash-dev-mqtt\*' But not logstash-dev-ap… --- ## [Cannot refresh mapping and get Unkown fields from Cowrie in kibana](https://discuss.elastic.co/t/cannot-refresh-mapping-and-get-unkown-fields-from-cowrie-in-kibana/94555)
**Author:** [@Joechip](https://discuss.elastic.co/u/Joechip)\ **Replies:** 1\ **Last updated:** [August 15, 2017, 7:12pm UTC](https://discuss.elastic.co/t/cannot-refresh-mapping-and-get-unkown-fields-from-cowrie-in-kibana/94555 "2017-08-15T19:12:36Z")
Hi, I'm quite new with ELK and I was trying to get some nice graphs with cowrie honeypots input. but I only have unkown fileds. I tried to refresh pattern but it doesn't seem to work. What am I doing wrong ? I'm … --- ## [Strange search result with time range](https://discuss.elastic.co/t/strange-search-result-with-time-range/96882)
**Author:** [@Flemming\_Harms](https://discuss.elastic.co/u/Flemming_Harms)\ **Replies:** 2\ **Last updated:** [August 15, 2017, 5:43pm UTC](https://discuss.elastic.co/t/strange-search-result-with-time-range/96882 "2017-08-15T17:43:10Z")
Hello, I have weird problem with the time range search in Kibana if select the “Today” in time range dialog it return 2 documents as expected in this case. Now If then select the “Last 7 days” instead I see alot of rec… --- ## [Not able to create a data table using Split rows bucket type](https://discuss.elastic.co/t/not-able-to-create-a-data-table-using-split-rows-bucket-type/96819)
**Author:** [@shroh](https://discuss.elastic.co/u/shroh)\ **Replies:** 1\ **Last updated:** [August 15, 2017, 3:20pm UTC](https://discuss.elastic.co/t/not-able-to-create-a-data-table-using-split-rows-bucket-type/96819 "2017-08-15T15:20:57Z")
Kibana Version : 5.5 I want to create a data table to show the number of logins to a website based on the user names. so basically it will be like this UserID First Name Last Name Count ABC … --- ## [Line graph with Timespan of 1 Hour](https://discuss.elastic.co/t/line-graph-with-timespan-of-1-hour/97004)
**Author:** [@shroh](https://discuss.elastic.co/u/shroh)\ **Replies:** 1\ **Last updated:** [August 15, 2017, 3:20pm UTC](https://discuss.elastic.co/t/line-graph-with-timespan-of-1-hour/97004 "2017-08-15T15:20:07Z")
Is it possible in Kibana to draw a line graph with count of an event over a timespan of 1 hour. We are right now doing the same thing in Splunk and want to replicate the same thing in Kibana. --- ## [What permissions/roles should I assign to create a read-only Kibana user?](https://discuss.elastic.co/t/what-permissions-roles-should-i-assign-to-create-a-read-only-kibana-user/97108)
**Author:** [@TimWard](https://discuss.elastic.co/u/TimWard)\ **Replies:** 1\ **Last updated:** [August 15, 2017, 2:17pm UTC](https://discuss.elastic.co/t/what-permissions-roles-should-i-assign-to-create-a-read-only-kibana-user/97108 "2017-08-15T14:17:32Z")
One who can read all my indices, see all my visualisations and dashboards, but not be able to change any visualisations or dashboards? The built-in kibana\_user role doesn’t do it, because that lets the user destroy thin… [Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=931) [Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=933)