# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=935

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 936

---

## [Kibana 5.5 Metrics Visualization Hyperlink Customization?](https://discuss.elastic.co/t/kibana-5-5-metrics-visualization-hyperlink-customization/96475)

<div class="topic-metadata">

**Author:** [@huy7070](https://discuss.elastic.co/u/huy7070)\
**Replies:** 1\
**Last updated:** [August 9, 2017, 11:19pm UTC](https://discuss.elastic.co/t/kibana-5-5-metrics-visualization-hyperlink-customization/96475 "2017-08-09T23:19:40Z")

</div>

Hi. I was wondering if there was documentation for how the Metrics plugin works as there are a lot of injections/dependencies? I need to add an option to make the label a hyperlink. I managed to customize the metrics vis…

---

## [Match \_id and Field Value with multimatch](https://discuss.elastic.co/t/match--id-and-field-value-with-multimatch/96388)

<div class="topic-metadata">

**Author:** [@Akanksha\_Toshniwal](https://discuss.elastic.co/u/Akanksha_Toshniwal)\
**Replies:** 1\
**Last updated:** [August 9, 2017, 10:35pm UTC](https://discuss.elastic.co/t/match--id-and-field-value-with-multimatch/96388 "2017-08-09T22:35:23Z")

</div>

I want to check whether the field value exists at particular id. I have extracted few \_ids (20-30) then on those id’s I want to perform Multimatch with another filed value to check which value multi-matches in both the…

---

## [Canvas part of x-pack?](https://discuss.elastic.co/t/canvas-part-of-x-pack/96389)

<div class="topic-metadata">

**Author:** [@michimau](https://discuss.elastic.co/u/michimau)\
**Replies:** 1\
**Last updated:** [August 9, 2017, 10:32pm UTC](https://discuss.elastic.co/t/canvas-part-of-x-pack/96389 "2017-08-09T22:32:22Z")

</div>

I have seen the keynote of elastic-on 17, and i got really curios about canvas. Is is going to be a native plugin like timelion or a part of x-pack? best! M

---

## [Dislay aggregated line in Line Graph](https://discuss.elastic.co/t/dislay-aggregated-line-in-line-graph/96373)

<div class="topic-metadata">

**Author:** [@Manoj\_13](https://discuss.elastic.co/u/Manoj_13)\
**Replies:** 1\
**Last updated:** [August 9, 2017, 10:23pm UTC](https://discuss.elastic.co/t/dislay-aggregated-line-in-line-graph/96373 "2017-08-09T22:23:39Z")

</div>

Hi, Suppose i have a Line graph with a filed(Severity), which splits into two lines (Severity1 & Severity2). Now can i get a third line(Severity) which is the sum of the other two lines? Thanks, Manoj M

---

## [Kibana times out \[5.5.x\]](https://discuss.elastic.co/t/kibana-times-out-5-5-x/96363)

<div class="topic-metadata">

**Author:** [@Drift](https://discuss.elastic.co/u/Drift)\
**Replies:** 1\
**Last updated:** [August 9, 2017, 10:20pm UTC](https://discuss.elastic.co/t/kibana-times-out-5-5-x/96363 "2017-08-09T22:20:49Z")

</div>

Kibana \[5.5.x\] times out most of the time with the following error: Error: Request Timeout after 30000ms at http://10.10.7.173:5601/bundles/kibana.bundle.js?v=15405:12:4431 at http://10.10.7.173:5601/bundles/kibana.bu…

---

## [Visualize sum of averages](https://discuss.elastic.co/t/visualize-sum-of-averages/96342)

<div class="topic-metadata">

**Author:** [@misabel](https://discuss.elastic.co/u/misabel)\
**Replies:** 1\
**Last updated:** [August 9, 2017, 8:38pm UTC](https://discuss.elastic.co/t/visualize-sum-of-averages/96342 "2017-08-09T20:38:39Z")

</div>

While working with Metricbeat statistics, I would like to do something like having an vertical bar chart where each section of a split bar represents the average CPU usage for a user (which should be the sum of all the …

---

## [Https://discuss.elastic.co/t/visualize-request-timeout-after-30000ms/93939](https://discuss.elastic.co/t/https-discuss-elastic-co-t-visualize-request-timeout-after-30000ms-93939/96246)

<div class="topic-metadata">

**Author:** [@swatititame](https://discuss.elastic.co/u/swatititame)\
**Replies:** 2\
**Last updated:** [August 9, 2017, 8:34pm UTC](https://discuss.elastic.co/t/https-discuss-elastic-co-t-visualize-request-timeout-after-30000ms-93939/96246 "2017-08-09T20:34:51Z")

</div>

---

## [X-axis and other elements not shown in PhantomJS PNG screenshots](https://discuss.elastic.co/t/x-axis-and-other-elements-not-shown-in-phantomjs-png-screenshots/96237)

<div class="topic-metadata">

**Author:** [@RG089](https://discuss.elastic.co/u/RG089)\
**Replies:** 2\
**Last updated:** [August 9, 2017, 8:33pm UTC](https://discuss.elastic.co/t/x-axis-and-other-elements-not-shown-in-phantomjs-png-screenshots/96237 "2017-08-09T20:33:40Z")

</div>

When I'm taking a PNG screenshot with PhantomJS (2.1.1) of a Kibana (5.5.0) dashboard (using MacOS or Ubuntu) it fails to display the graphs correctly. It looks like a CSS issue but I'm not sure where it comes from. The …

---

## [Count of orders in a certain state](https://discuss.elastic.co/t/count-of-orders-in-a-certain-state/95943)

<div class="topic-metadata">

**Author:** [@jessxyz](https://discuss.elastic.co/u/jessxyz)\
**Replies:** 4\
**Last updated:** [August 9, 2017, 2:13pm UTC](https://discuss.elastic.co/t/count-of-orders-in-a-certain-state/95943 "2017-08-09T14:13:17Z")

</div>

I have data coming into elastic search throughout the day. Each data consist of an order or an order update. For example: Order A created, Order B created, Order A processed, Order A Shipped, etc… The state of the order…

---

## [How to return predefined response fields?](https://discuss.elastic.co/t/how-to-return-predefined-response-fields/95908)

<div class="topic-metadata">

**Author:** [@bterhorst](https://discuss.elastic.co/u/bterhorst)\
**Replies:** 3\
**Last updated:** [August 9, 2017, 1:56pm UTC](https://discuss.elastic.co/t/how-to-return-predefined-response-fields/95908 "2017-08-09T13:56:29Z")

</div>

Hi, Is there a way to configure kibana to return specified fields in the response from es? I am building a custom visual and am currently receiving only the document term field that I queried and thats defined as key: …

---

## [Why kibana use match](https://discuss.elastic.co/t/why-kibana-use-match/96001)

<div class="topic-metadata">

**Author:** [@ytzlax](https://discuss.elastic.co/u/ytzlax)\
**Replies:** 2\
**Last updated:** [August 9, 2017, 1:29pm UTC](https://discuss.elastic.co/t/why-kibana-use-match/96001 "2017-08-09T13:29:03Z")

</div>

Why kibana use match instead term when filter visualisation?

---

## [Indexing in Kibana](https://discuss.elastic.co/t/indexing-in-kibana/96236)

<div class="topic-metadata">

**Author:** [@mwood](https://discuss.elastic.co/u/mwood)\
**Replies:** 11\
**Last updated:** [August 9, 2017, 9:04am UTC](https://discuss.elastic.co/t/indexing-in-kibana/96236 "2017-08-09T09:04:49Z")

</div>

Hi, I am new to ELK and have just installed the ELK stack v5.5.1. the ELK stack seems to be working fine and I am able to access the Kibana interface however I am having a problem in trying to create an index in Kibana…

---

## [How can split kibana discovery log in column permanently?](https://discuss.elastic.co/t/how-can-split-kibana-discovery-log-in-column-permanently/95474)

<div class="topic-metadata">

**Author:** [@abu.sayeed](https://discuss.elastic.co/u/abu.sayeed)\
**Replies:** 4\
**Last updated:** [August 9, 2017, 6:00am UTC](https://discuss.elastic.co/t/how-can-split-kibana-discovery-log-in-column-permanently/95474 "2017-08-09T06:00:06Z")

</div>

Kibana Discovery logs format: host:VM\_5 source:/home/user/user.log message:smsStatus : \[SENT\] But I wish log format: host: source: message: VM\_5 /home/user/user.log smsStatus : \[SENT\]

---

## [ML increase top anomaly view](https://discuss.elastic.co/t/ml-increase-top-anomaly-view/96063)

<div class="topic-metadata">

**Author:** [@rcfontana](https://discuss.elastic.co/u/rcfontana)\
**Replies:** 1\
**Last updated:** [August 8, 2017, 6:36pm UTC](https://discuss.elastic.co/t/ml-increase-top-anomaly-view/96063 "2017-08-08T18:36:22Z")

</div>

Hi, I’m experimenting machine learning at Kibana and I wonder if there’s a way to increase the data split view. By default it shows the Top 10 by max anomaly score. Thanks!

---

## [Unique field query in Timelion](https://discuss.elastic.co/t/unique-field-query-in-timelion/95847)

<div class="topic-metadata">

**Author:** [@sLuvpreet33](https://discuss.elastic.co/u/sLuvpreet33)\
**Replies:** 3\
**Last updated:** [August 8, 2017, 6:30pm UTC](https://discuss.elastic.co/t/unique-field-query-in-timelion/95847 "2017-08-08T18:30:57Z")

</div>

I want to make a visualization using Timelion. I want to plot the count of documents only where a field is unique. In my case it is the user\_id of the user. How do I put the condition that some field should be unique i…

---

## [Getting different count on different timefields](https://discuss.elastic.co/t/getting-different-count-on-different-timefields/95849)

<div class="topic-metadata">

**Author:** [@sLuvpreet33](https://discuss.elastic.co/u/sLuvpreet33)\
**Replies:** 2\
**Last updated:** [August 8, 2017, 6:07pm UTC](https://discuss.elastic.co/t/getting-different-count-on-different-timefields/95849 "2017-08-08T18:07:52Z")

</div>

I have data about bookings. The data has been pulled from different tables from postgresql. And I have pushed them all under the same index and type. Now I have 6 timefields in a document. booking\_time booking\_update\_…

---

## [Replicating Splunk query](https://discuss.elastic.co/t/replicating-splunk-query/96158)

<div class="topic-metadata">

**Author:** [@shroh](https://discuss.elastic.co/u/shroh)\
**Replies:** 3\
**Last updated:** [August 8, 2017, 5:48pm UTC](https://discuss.elastic.co/t/replicating-splunk-query/96158 "2017-08-08T17:48:10Z")

</div>

Hi I have injested my data into ELK and i can see the data in Kibana as well. in splunk i have this query index=app “verifyStatusCode” | stats ExecutionTime I can see the ExecutionTime field in kibana as per my GROK f…

---

## [Aggregate multiple records to single chart](https://discuss.elastic.co/t/aggregate-multiple-records-to-single-chart/86561)

<div class="topic-metadata">

**Author:** [@avivc](https://discuss.elastic.co/u/avivc)\
**Replies:** 24\
**Last updated:** [August 8, 2017, 4:49pm UTC](https://discuss.elastic.co/t/aggregate-multiple-records-to-single-chart/86561 "2017-08-08T16:49:12Z")

</div>

Hi, The API I'm using holds nested json data (i.e, base-derived nodes relation) When index it in ES, it's flat-json index What I'm trying to do simply is to aggregate base object with derived object into single chart E…

---

## [Webservice call from Kibana dashboard](https://discuss.elastic.co/t/webservice-call-from-kibana-dashboard/96138)

<div class="topic-metadata">

**Author:** [@Prachi\_Mishra](https://discuss.elastic.co/u/Prachi_Mishra)\
**Replies:** 1\
**Last updated:** [August 8, 2017, 2:08pm UTC](https://discuss.elastic.co/t/webservice-call-from-kibana-dashboard/96138 "2017-08-08T14:08:59Z")

</div>

I want to modify the kibana dashboard by adding buttons to my visualization and onclick of the button I want to call a Rest API and the response I want to show as a pop up . Is it possible to do so by developing a plugi…

---

## [Split on Geo Maps](https://discuss.elastic.co/t/split-on-geo-maps/96045)

<div class="topic-metadata">

**Author:** [@Nithin\_Devang](https://discuss.elastic.co/u/Nithin_Devang)\
**Replies:** 1\
**Last updated:** [August 8, 2017, 1:44pm UTC](https://discuss.elastic.co/t/split-on-geo-maps/96045 "2017-08-08T13:44:05Z")

</div>

Hi, My document is in this format. { "type: 1, “location” : } here type can take 4 kinds of value like 1, 2, 3, 4. I want to plot a heat map in Kibana which shows in each location which type prevails the max. (li…

---

## [How to get index in kibana](https://discuss.elastic.co/t/how-to-get-index-in-kibana/95826)

<div class="topic-metadata">

**Author:** [@vivekpandey564](https://discuss.elastic.co/u/vivekpandey564)\
**Replies:** 1\
**Last updated:** [August 8, 2017, 1:41pm UTC](https://discuss.elastic.co/t/how-to-get-index-in-kibana/95826 "2017-08-08T13:41:37Z")

</div>

Hi Below is my logstash.conf file input { file { add\_field =\> \[ "host", "my-dev-host" \] path =\> "D:\\JHipster\_Demo\\logFile.2017-08-04.log" codec =\> "plain" } } filter { grok { match =\> \[ “path”, “(?logFi…

---

## [A question about how to show the average rate per second](https://discuss.elastic.co/t/a-question-about-how-to-show-the-average-rate-per-second/92728)

<div class="topic-metadata">

**Author:** [@xwang12345](https://discuss.elastic.co/u/xwang12345)\
**Replies:** 5\
**Last updated:** [August 8, 2017, 8:47am UTC](https://discuss.elastic.co/t/a-question-about-how-to-show-the-average-rate-per-second/92728 "2017-08-08T08:47:52Z")

</div>

Hi, I have a number of documents, each document with information of number of bytes has been transferred. Each document also has its timestamp. I would like to show a metric that average the total bytes by time range…

---

## [Execute child\_procces in plugin kibana](https://discuss.elastic.co/t/execute-child-procces-in-plugin-kibana/96204)

<div class="topic-metadata">

**Author:** [@tkg\_cangkul](https://discuss.elastic.co/u/tkg_cangkul)\
**Replies:** 4\
**Last updated:** [August 8, 2017, 7:40am UTC](https://discuss.elastic.co/t/execute-child-procces-in-plugin-kibana/96204 "2017-08-08T07:40:43Z")

</div>

hi, is there any way to execute shell script from the kibana plugin. i’m trying to create a simple plugin that can be execute shell script. i was trying to use child procces but i have some error massage like below : …

---

## [Playing with more interesting data, chapter 2](https://discuss.elastic.co/t/playing-with-more-interesting-data-chapter-2/94096)

<div class="topic-metadata">

**Author:** [@alvaro13](https://discuss.elastic.co/u/alvaro13)\
**Replies:** 4\
**Last updated:** [August 8, 2017, 7:49am UTC](https://discuss.elastic.co/t/playing-with-more-interesting-data-chapter-2/94096 "2017-08-08T07:49:45Z")

</div>

I am with the second part of the manual: Playing with more interesting data. A Practical Introduction to Elasticsearch Ready to try Elasticsearch and see results? Copy and paste these requests to get started. Let’…

---

## [Kibana change field type to geopoint](https://discuss.elastic.co/t/kibana-change-field-type-to-geopoint/96152)

<div class="topic-metadata">

**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\
**Replies:** 1\
**Last updated:** [August 7, 2017, 10:53pm UTC](https://discuss.elastic.co/t/kibana-change-field-type-to-geopoint/96152 "2017-08-07T22:53:50Z")

</div>

Hello, I have parsed the an auth.log via grok and elasticsearch is looking up the IP geo location but the system.auth.ssh.geoip.city\_name field is set as string and not geopoint. Is it possible to change it’s type someh…

---

## [Custom y axis](https://discuss.elastic.co/t/custom-y-axis/96000)

<div class="topic-metadata">

**Author:** [@Nithin\_Devang](https://discuss.elastic.co/u/Nithin_Devang)\
**Replies:** 9\
**Last updated:** [August 7, 2017, 5:55pm UTC](https://discuss.elastic.co/t/custom-y-axis/96000 "2017-08-07T17:55:43Z")

</div>

Hi, I have multiple doc in this format "x": { “frequency” : 13.671875, “amplitude”: 109.45423957023802 } I want to plot line graph with amplitude in y axis and frequency in x axis, I am not finding any option which…

---

## [Kibana 5.1 keeps crashing](https://discuss.elastic.co/t/kibana-5-1-keeps-crashing/95642)

<div class="topic-metadata">

**Author:** [@Shantanu\_Deshmukh](https://discuss.elastic.co/u/Shantanu_Deshmukh)\
**Replies:** 8\
**Last updated:** [August 7, 2017, 4:16pm UTC](https://discuss.elastic.co/t/kibana-5-1-keeps-crashing/95642 "2017-08-07T16:16:48Z")

</div>

We have a single node of Kibana 5.1 and two nodes of Elasticsearch 5.1. It has been deployed in production and just one admin uses the console. So there’s hadly any load. Just a few queries are performed in a day as of n…

---

## [Kibana cannot search the string that input in Discover page](https://discuss.elastic.co/t/kibana-cannot-search-the-string-that-input-in-discover-page/96012)

<div class="topic-metadata">

**Author:** [@sockaddr\_in](https://discuss.elastic.co/u/sockaddr_in)\
**Replies:** 1\
**Last updated:** [August 7, 2017, 3:53pm UTC](https://discuss.elastic.co/t/kibana-cannot-search-the-string-that-input-in-discover-page/96012 "2017-08-07T15:53:42Z")

</div>

Hi, everyone! The following is my question： Env: Filebeat 5.5.1 Elasticsearch 5.5.1 Logstash 5.5.1 Kibana 5.5.1 OS : Linux 64bit I use Filebeat as shipper to ship log to logstash, then output to Elasticsearch. Us…

---

## [Can we make values of variable as columns in datatable](https://discuss.elastic.co/t/can-we-make-values-of-variable-as-columns-in-datatable/95879)

<div class="topic-metadata">

**Author:** [@Manoj\_13](https://discuss.elastic.co/u/Manoj_13)\
**Replies:** 3\
**Last updated:** [August 7, 2017, 3:06pm UTC](https://discuss.elastic.co/t/can-we-make-values-of-variable-as-columns-in-datatable/95879 "2017-08-07T15:06:35Z")

</div>

Suppose i have a variable called status of my Incident. Its value can be open ,closed,resolved,reopened .(pic below) Now can i refactor the datatable such that list of available terms in status like Open , Resolved e…

---

## [Trying to vizualize "top N/ordered" ratios](https://discuss.elastic.co/t/trying-to-vizualize-top-n-ordered-ratios/95747)

<div class="topic-metadata">

**Author:** [@smcooper](https://discuss.elastic.co/u/smcooper)\
**Replies:** 2\
**Last updated:** [August 4, 2017, 9:11pm UTC](https://discuss.elastic.co/t/trying-to-vizualize-top-n-ordered-ratios/95747 "2017-08-04T21:11:40Z")

</div>

Hi, I am unsuccessfully trying to get a visualization of ordered ratio. After reading various posts/questions/requests I start to doubt that what I am looking for is (yet) available through Kibana, but as a I am a new…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=934)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=936)
