# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=953

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 954

---

## [Discover: "field" is a required parameter](https://discuss.elastic.co/t/discover-field-is-a-required-parameter/90146)

<div class="topic-metadata">

**Author:** [@DanMa](https://discuss.elastic.co/u/DanMa)\
**Replies:** 3\
**Last updated:** [June 22, 2017, 7:24am UTC](https://discuss.elastic.co/t/discover-field-is-a-required-parameter/90146 "2017-06-22T07:24:00Z")

</div>

Hello, i want to see my logs, but i get everytime this messages: Perhaps my filter clearifies it? filter { if \[type\] == "cisco-asa" { grok { match =\> \["message", "%{CISCO\_TAGGED\_SYSLOG} %{GR…

---

## [Using Kibana to forward events as SNMP traps](https://discuss.elastic.co/t/using-kibana-to-forward-events-as-snmp-traps/90312)

<div class="topic-metadata">

**Author:** [@turnerj](https://discuss.elastic.co/u/turnerj)\
**Replies:** 2\
**Last updated:** [June 22, 2017, 7:21am UTC](https://discuss.elastic.co/t/using-kibana-to-forward-events-as-snmp-traps/90312 "2017-06-22T07:21:04Z")

</div>

Hi, I'm new to Kibana, but I've been asked to find a solution where syslogs sent into Kibana are forwarded on to CA Spectrum as SNMP traps. This is to simplify a convoluted solution we have right now where syslog messa…

---

## [How I partially filter in tab discover](https://discuss.elastic.co/t/how-i-partially-filter-in-tab-discover/90254)

<div class="topic-metadata">

**Author:** [@xavi23](https://discuss.elastic.co/u/xavi23)\
**Replies:** 2\
**Last updated:** [June 22, 2017, 6:51am UTC](https://discuss.elastic.co/t/how-i-partially-filter-in-tab-discover/90254 "2017-06-22T06:51:12Z")

</div>

Hello everyone, I've a text type field and i want to partially filter in this field: My index: put test { "settings": { "analysis": { "analyzer": { "my\_analyzer": { "tokenizer" : "sta…

---

## [Message display format in Kibana](https://discuss.elastic.co/t/message-display-format-in-kibana/90050)

<div class="topic-metadata">

**Author:** [@kottapar](https://discuss.elastic.co/u/kottapar)\
**Replies:** 4\
**Last updated:** [June 22, 2017, 5:45am UTC](https://discuss.elastic.co/t/message-display-format-in-kibana/90050 "2017-06-22T05:45:18Z")

</div>

Can we control the order in which the parameters of the message are displayed in Kibana? For example can we specify that we want the message to be displayed in the format . However if these custom fields are not foun…

---

## [Performance of a Saved Search 'table view' in Dashboard severely worse than Discover](https://discuss.elastic.co/t/performance-of-a-saved-search-table-view-in-dashboard-severely-worse-than-discover/90169)

<div class="topic-metadata">

**Author:** [@poorbob](https://discuss.elastic.co/u/poorbob)\
**Replies:** 2\
**Last updated:** [June 22, 2017, 12:05am UTC](https://discuss.elastic.co/t/performance-of-a-saved-search-table-view-in-dashboard-severely-worse-than-discover/90169 "2017-06-22T00:05:14Z")

</div>

Forgive me if I missed something online or in the documentation, but I can't seem to figure out why a saved search would perform so differently in the 'Disocver' tab as opposed to the 'Dashboard' tab. In the Dev Tools…

---

## [Custom Label for Percentile in Line Graph](https://discuss.elastic.co/t/custom-label-for-percentile-in-line-graph/90343)

<div class="topic-metadata">

**Author:** [@tidu](https://discuss.elastic.co/u/tidu)\
**Replies:** 1\
**Last updated:** [June 21, 2017, 11:10pm UTC](https://discuss.elastic.co/t/custom-label-for-percentile-in-line-graph/90343 "2017-06-21T23:10:39Z")

</div>

I am trying to remove the prefix label "Xth Percentile of" when I am aggregating using percentiles on a field. Is there a way to make this change because right now if I add the custom Label it updates the custom label t…

---

## [Kibana 5.1.1 to 5.4.1 Import Visualizations: Cannot read property 'fields' of undefined](https://discuss.elastic.co/t/kibana-5-1-1-to-5-4-1-import-visualizations-cannot-read-property-fields-of-undefined/90140)

<div class="topic-metadata">

**Author:** [@k2nike](https://discuss.elastic.co/u/k2nike)\
**Replies:** 1\
**Last updated:** [June 21, 2017, 10:50pm UTC](https://discuss.elastic.co/t/kibana-5-1-1-to-5-4-1-import-visualizations-cannot-read-property-fields-of-undefined/90140 "2017-06-21T22:50:55Z")

</div>

I'm upgrading from ES/Kibana 5.1.1 to 5.4.1. I've taken the mappings from 5.1.1 and re-created my index on 5.4.1 and re-indexed my data. However, when I export and re-import my visualization objects, I get three errors o…

---

## [Trouble Starting up Kibana](https://discuss.elastic.co/t/trouble-starting-up-kibana/90316)

<div class="topic-metadata">

**Author:** [@tman](https://discuss.elastic.co/u/tman)\
**Replies:** 1\
**Last updated:** [June 21, 2017, 9:55pm UTC](https://discuss.elastic.co/t/trouble-starting-up-kibana/90316 "2017-06-21T21:55:30Z")

</div>

I am setting up an ELK stack in AWS. I have the kibana server ready. When I started it up initially, it ran fine. I then made a few changes to the /etc/kibana/kibana.yml config file, to allow remote connections instea…

---

## [Data Table -Display set of counters per network port](https://discuss.elastic.co/t/data-table-display-set-of-counters-per-network-port/90335)

<div class="topic-metadata">

**Author:** [@Shravan\_Ambati](https://discuss.elastic.co/u/Shravan_Ambati)\
**Replies:** 1\
**Last updated:** [June 21, 2017, 8:20pm UTC](https://discuss.elastic.co/t/data-table-display-set-of-counters-per-network-port/90335 "2017-06-21T20:20:34Z")

</div>

Hi I am using Kibana 5.4. I have a set of counters per network port that I want to visualize in Kibana. What is the best way to do this and which visualization tool should i use? Thanks Shravan

---

## [Kibana 5 displaying raw data](https://discuss.elastic.co/t/kibana-5-displaying-raw-data/90336)

<div class="topic-metadata">

**Author:** [@clowder](https://discuss.elastic.co/u/clowder)\
**Replies:** 2\
**Last updated:** [June 21, 2017, 8:12pm UTC](https://discuss.elastic.co/t/kibana-5-displaying-raw-data/90336 "2017-06-21T20:12:23Z")

</div>

I would like to do the same as in this link:https://discuss.elastic.co/t/is-it-possible-to-have-a-kibana-4-data-table-without-aggregations/22473. They came to a solution which allowed them to display the data in a simple…

---

## [Kibana UI stuck in loading in kubernetes and ingress setup](https://discuss.elastic.co/t/kibana-ui-stuck-in-loading-in-kubernetes-and-ingress-setup/90326)

<div class="topic-metadata">

**Author:** [@chenww](https://discuss.elastic.co/u/chenww)\
**Replies:** 2\
**Last updated:** [June 21, 2017, 8:09pm UTC](https://discuss.elastic.co/t/kibana-ui-stuck-in-loading-in-kubernetes-and-ingress-setup/90326 "2017-06-21T20:09:03Z")

</div>

versions: Kibana: 4.6.1 ES: 2.4.1 kubernetes: 1.6.4 $ kubectl cluster-info Kubernetes master is running at http://localhost:8080 Elasticsearch is running at http://localhost:8080/api/v1/proxy/namespaces/kube-s…

---

## [Cant sho wtile map](https://discuss.elastic.co/t/cant-sho-wtile-map/90309)

<div class="topic-metadata">

**Author:** [@shaharz](https://discuss.elastic.co/u/shaharz)\
**Replies:** 1\
**Last updated:** [June 21, 2017, 8:01pm UTC](https://discuss.elastic.co/t/cant-sho-wtile-map/90309 "2017-06-21T20:01:55Z")

</div>

hi, any idea why im getting this error when trying to show tile map? ?

---

## [Kibana (json input) - wrong counter (Count) for vertical bar](https://discuss.elastic.co/t/kibana-json-input-wrong-counter-count-for-vertical-bar/90212)

<div class="topic-metadata">

**Author:** [@MarvinK](https://discuss.elastic.co/u/MarvinK)\
**Replies:** 1\
**Last updated:** [June 21, 2017, 6:42pm UTC](https://discuss.elastic.co/t/kibana-json-input-wrong-counter-count-for-vertical-bar/90212 "2017-06-21T18:42:49Z")

</div>

Hey, for my visualisation with the vertical bar-type in Kibana i need to divide the Count (Y-Axis, Aggregation-\>Count) by number 2. In conclusion the vertical bars should look as half as high as they are at this moment. …

---

## [The meaning of Kibana](https://discuss.elastic.co/t/the-meaning-of-kibana/89828)

<div class="topic-metadata">

**Author:** [@Danielle\_Greenberg](https://discuss.elastic.co/u/Danielle_Greenberg)\
**Replies:** 1\
**Last updated:** [June 21, 2017, 6:04pm UTC](https://discuss.elastic.co/t/the-meaning-of-kibana/89828 "2017-06-21T18:04:37Z")

</div>

Hello just curious, what is the meaning of the name 'Kibana' ???

---

## [Update\_by\_query 404 Not Found](https://discuss.elastic.co/t/update-by-query-404-not-found/90190)

<div class="topic-metadata">

**Author:** [@whoami](https://discuss.elastic.co/u/whoami)\
**Replies:** 1\
**Last updated:** [June 21, 2017, 5:54pm UTC](https://discuss.elastic.co/t/update-by-query-404-not-found/90190 "2017-06-21T17:54:00Z")

</div>

I use updateByQuery in kibana plugin, but get 404 not found Error, my code as below: esAdmin.updateByQuery({ index: 'logstash-0', conflicts: 'proceed', body: { query: {...}, doc: {extension: …

---

## [How to fix @timestamp](https://discuss.elastic.co/t/how-to-fix-timestamp/90026)

<div class="topic-metadata">

**Author:** [@Thanadol\_Thadasade](https://discuss.elastic.co/u/Thanadol_Thadasade)\
**Replies:** 5\
**Last updated:** [June 21, 2017, 1:09pm UTC](https://discuss.elastic.co/t/how-to-fix-timestamp/90026 "2017-06-21T13:09:07Z")

</div>

Hi ! i'm newbie this. how to fix it ? i tries many advices this blog, but didn't success. i used winlogbeat and do it by https://www.elastic.co/guide/en/beats/winlogbeat/current/index.html step1-6 please. sorry, if…

---

## [Kibana - SESSSION\_EXPIRED right after login](https://discuss.elastic.co/t/kibana-sesssion-expired-right-after-login/90061)

<div class="topic-metadata">

**Author:** [@Benjamin\_Dahon](https://discuss.elastic.co/u/Benjamin_Dahon)\
**Replies:** 6\
**Last updated:** [June 21, 2017, 12:51pm UTC](https://discuss.elastic.co/t/kibana-sesssion-expired-right-after-login/90061 "2017-06-21T12:51:51Z")

</div>

I have a kibana cluster up and running with xpack security enabled. Whenever I try to login, I see the homepage being displayed and right after a redirect happens (in js) to the login page again with the "Your session ha…

---

## [Graph a ratio between two counts](https://discuss.elastic.co/t/graph-a-ratio-between-two-counts/29011)

<div class="topic-metadata">

**Author:** [@yoann](https://discuss.elastic.co/u/yoann)\
**Replies:** 7\
**Last updated:** [June 21, 2017, 12:05pm UTC](https://discuss.elastic.co/t/graph-a-ratio-between-two-counts/29011 "2017-06-21T12:05:30Z")

</div>

Hello, I would like to graph a ratio between two counts on the same index. For example, if we take the books dataset, count the ratio of American book out of all the expensive books (more than 10$) count(books wher…

---

## [Kibana 5.4 and ES 5.5 made work together](https://discuss.elastic.co/t/kibana-5-4-and-es-5-5-made-work-together/90113)

<div class="topic-metadata">

**Author:** [@leonmex](https://discuss.elastic.co/u/leonmex)\
**Replies:** 10\
**Last updated:** [June 21, 2017, 11:39am UTC](https://discuss.elastic.co/t/kibana-5-4-and-es-5-5-made-work-together/90113 "2017-06-21T11:39:02Z")

</div>

Hello, Any one can get work Kibana 5.4 and Elasticsearch 5.5.0 Right now I running ES 5.5.0 and in The dashboard of kibana i get the next error: This version of Kibana requires Elasticsearch v5.4.1 on all nodes. I…

---

## [Issues in performing actions with Kibana dashboard :501 (Not Implemented)](https://discuss.elastic.co/t/issues-in-performing-actions-with-kibana-dashboard-501-not-implemented/90175)

<div class="topic-metadata">

**Author:** [@AtShar](https://discuss.elastic.co/u/AtShar)\
**Replies:** 2\
**Last updated:** [June 21, 2017, 7:07am UTC](https://discuss.elastic.co/t/issues-in-performing-actions-with-kibana-dashboard-501-not-implemented/90175 "2017-06-21T07:07:39Z")

</div>

Hello ! I installed Elasticsearch,Kibana and Fluentd on AWS instance. Elasticserach and Fluentd seems to work fine.But I am facing issues in working with Kibana dashboard. I am accessing dashboard on my local machine. …

---

## [Help with line graph and netflow/ipfix to graph bits/s of a ASN](https://discuss.elastic.co/t/help-with-line-graph-and-netflow-ipfix-to-graph-bits-s-of-a-asn/90183)

<div class="topic-metadata">

**Author:** [@digitalpilot](https://discuss.elastic.co/u/digitalpilot)\
**Replies:** 1\
**Last updated:** [June 21, 2017, 5:54am UTC](https://discuss.elastic.co/t/help-with-line-graph-and-netflow-ipfix-to-graph-bits-s-of-a-asn/90183 "2017-06-21T05:54:32Z")

</div>

Hi, I'm trying to create a line graph of bandwidth based on data from net flow. I'm pretty new to kibana and so not sure what I should share here on config. Basically I have a ingress BGP AS number as a filter and I …

---

## [Kibana status RED if number of indexes \> 1500](https://discuss.elastic.co/t/kibana-status-red-if-number-of-indexes-1500/90018)

<div class="topic-metadata">

**Author:** [@popthink](https://discuss.elastic.co/u/popthink)\
**Replies:** 4\
**Last updated:** [June 21, 2017, 5:27am UTC](https://discuss.elastic.co/t/kibana-status-red-if-number-of-indexes-1500/90018 "2017-06-21T05:27:22Z")

</div>

Env. ELK : 5.3.0 OS : Ubuntu 16.04 x64 If number of Indice exceeds about 1500 indices then Kibana shows 'ElasticSearch Plugin status RED'. I've searched about this topic... but couldn't find any similar thread. …

---

## [Kibana tile map color error](https://discuss.elastic.co/t/kibana-tile-map-color-error/90028)

<div class="topic-metadata">

**Author:** [@higee](https://discuss.elastic.co/u/higee)\
**Replies:** 2\
**Last updated:** [June 21, 2017, 1:10am UTC](https://discuss.elastic.co/t/kibana-tile-map-color-error/90028 "2017-06-21T01:10:37Z")

</div>

Hi, I've been using Kibana with Tile Map. The error or bug I've found is that whenever I try to zoom in/out each visualization object, color of every visualization object changes. Please take a look at following images…

---

## [\`defaultIndex\` value silently set to Kibana version](https://discuss.elastic.co/t/defaultindex-value-silently-set-to-kibana-version/89793)

<div class="topic-metadata">

**Author:** [@Li\_Xu](https://discuss.elastic.co/u/Li_Xu)\
**Replies:** 3\
**Last updated:** [June 20, 2017, 5:42pm UTC](https://discuss.elastic.co/t/defaultindex-value-silently-set-to-kibana-version/89793 "2017-06-20T17:42:08Z")

</div>

We are seeing a weird situation where Kibana UI will fail to function complaining about Error: Could not locate that index-pattern (id: 5.3.1) while loading default index pattern in Chrome console. We are able to consist…

---

## [Encryption between browser and kibana server](https://discuss.elastic.co/t/encryption-between-browser-and-kibana-server/90127)

<div class="topic-metadata">

**Author:** [@CraigFoote](https://discuss.elastic.co/u/CraigFoote)\
**Replies:** 1\
**Last updated:** [June 20, 2017, 5:24pm UTC](https://discuss.elastic.co/t/encryption-between-browser-and-kibana-server/90127 "2017-06-20T17:24:54Z")

</div>

I'm following along at https://www.elastic.co/guide/en/kibana/current/production.html#enabling-ssl and I'm not having much success. I've added the three properties listed there and restarted kibana but the browser refuse…

---

## [How to skip kibana discover and directly go to dashboard, and use the index pattern I created by directly using elasticsearch APIs](https://discuss.elastic.co/t/how-to-skip-kibana-discover-and-directly-go-to-dashboard-and-use-the-index-pattern-i-created-by-directly-using-elasticsearch-apis/89822)

<div class="topic-metadata">

**Author:** [@xwang12345](https://discuss.elastic.co/u/xwang12345)\
**Replies:** 2\
**Last updated:** [June 20, 2017, 5:14pm UTC](https://discuss.elastic.co/t/how-to-skip-kibana-discover-and-directly-go-to-dashboard-and-use-the-index-pattern-i-created-by-directly-using-elasticsearch-apis/89822 "2017-06-20T17:14:56Z")

</div>

I am trying to import the index-pattern as well as visualization object, dashboard etc not going through kibana GUI but elasticsearch API. After I have the data ready(The .kibana index is fully populated). It keep asking…

---

## [Kibana discovery and timelion page are blank](https://discuss.elastic.co/t/kibana-discovery-and-timelion-page-are-blank/89092)

<div class="topic-metadata">

**Author:** [@xwang12345](https://discuss.elastic.co/u/xwang12345)\
**Replies:** 13\
**Last updated:** [June 20, 2017, 5:13pm UTC](https://discuss.elastic.co/t/kibana-discovery-and-timelion-page-are-blank/89092 "2017-06-20T17:13:42Z")

</div>

Elasticsearch version 5.2.0, Kibana version 5.0.2 Both discovery and timelion pages are blank I got a lot of status code 304 {"type":"response","@timestamp":"2017-06-12T18:28:44Z","tags":\[\],"pid":1,"method":"get","s…

---

## [Scripted fields in kibana for IP public and Private](https://discuss.elastic.co/t/scripted-fields-in-kibana-for-ip-public-and-private/89643)

<div class="topic-metadata">

**Author:** [@tatdat](https://discuss.elastic.co/u/tatdat)\
**Replies:** 3\
**Last updated:** [June 20, 2017, 3:46pm UTC](https://discuss.elastic.co/t/scripted-fields-in-kibana-for-ip-public-and-private/89643 "2017-06-20T15:46:22Z")

</div>

Hi, Im using Kibana 5.4.0 I have field netflow.ipv4\_dst\_addr. I want check this is private ỏ public ip. Here is my script filed def m = ^(?:10|127|172.(?:1\[6-9\]|2\[0-9\]|3\[01\])|192.168)..\*$/.matcher(doc\['netflow.ipv4\_…

---

## [Manipulate fonts](https://discuss.elastic.co/t/manipulate-fonts/90069)

<div class="topic-metadata">

**Author:** [@avivc](https://discuss.elastic.co/u/avivc)\
**Replies:** 3\
**Last updated:** [June 20, 2017, 3:24pm UTC](https://discuss.elastic.co/t/manipulate-fonts/90069 "2017-06-20T15:24:28Z")

</div>

Hi, I'm using a process that render my visualize to Email base64 (body content) The problem is that I need to change the font family from Kibana, that display as font-family: 'Open Sans'; is there a way to custom/ …

---

## [Generate PDF url broken in 5.4?](https://discuss.elastic.co/t/generate-pdf-url-broken-in-5-4/89815)

<div class="topic-metadata">

**Author:** [@initproto](https://discuss.elastic.co/u/initproto)\
**Replies:** 5\
**Last updated:** [June 20, 2017, 2:20pm UTC](https://discuss.elastic.co/t/generate-pdf-url-broken-in-5-4/89815 "2017-06-20T14:20:31Z")

</div>

Hi I made s chart and want to use the pdf url to download a pdf of the chart. But it gives an error. Says method not allowed. Is this broke? Also how come we cannot get url to image of the chart to embed elsewhere? S…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=952)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=954)
