# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=973

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 974

---

## [Kibana 4, Sense 2](https://discuss.elastic.co/t/kibana-4-sense-2/83829)

<div class="topic-metadata">

**Author:** [@Khoa\_Nguyen](https://discuss.elastic.co/u/Khoa_Nguyen)\
**Replies:** 2\
**Last updated:** [May 1, 2017, 1:49am UTC](https://discuss.elastic.co/t/kibana-4-sense-2/83829 "2017-05-01T01:49:25Z")

</div>

setup: macos sierra downloaded kibana 4.6.4, then installed sense added config to kibana.yml kibana.enabled: false elasticsearch.enabled: false started kibana log \[18:59:09.050\] \[info\]\[optimize\] Optimizing a…

---

## [Timelion escape character for field name](https://discuss.elastic.co/t/timelion-escape-character-for-field-name/83966)

<div class="topic-metadata">

**Author:** [@Aymeric\_Caroff](https://discuss.elastic.co/u/Aymeric_Caroff)\
**Replies:** 2\
**Last updated:** [April 29, 2017, 8:25pm UTC](https://discuss.elastic.co/t/timelion-escape-character-for-field-name/83966 "2017-04-29T20:25:27Z")

</div>

Hi, I'm trying to make a cumulative sum in Timelion (using the latest ES and Kibana). The problem I have is that it seems that Timelion truncates the name of the field I want to sum because the field name contains a co…

---

## [Not enough storage is available](https://discuss.elastic.co/t/not-enough-storage-is-available/84022)

<div class="topic-metadata">

**Author:** [@gokhankocak](https://discuss.elastic.co/u/gokhankocak)\
**Replies:** 3\
**Last updated:** [April 29, 2017, 3:53pm UTC](https://discuss.elastic.co/t/not-enough-storage-is-available/84022 "2017-04-29T15:53:13Z")

</div>

Hello, We have a problem with Kibana memory usage: Not enough storage is available to complete this operation in bundles/commons.bundle.js Kibana is installed on Windows Server 2012 R2 with 16 GB of memory. As I see,…

---

## [Visualization in Kibana - Data formatting options](https://discuss.elastic.co/t/visualization-in-kibana-data-formatting-options/83614)

<div class="topic-metadata">

**Author:** [@jobyjohny](https://discuss.elastic.co/u/jobyjohny)\
**Replies:** 2\
**Last updated:** [April 29, 2017, 12:59pm UTC](https://discuss.elastic.co/t/visualization-in-kibana-data-formatting-options/83614 "2017-04-29T12:59:05Z")

</div>

I have inserted sample data into elasticsearch .PFA the sample dummy data I need it to visualize that in a tabular format by including only the columns given in the elasticsearch index and columns as header. Output sh…

---

## [Query\_string to find docs field that start with "abc-"?](https://discuss.elastic.co/t/query-string-to-find-docs-field-that-start-with-abc/83940)

<div class="topic-metadata">

**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\
**Replies:** 2\
**Last updated:** [April 29, 2017, 12:36am UTC](https://discuss.elastic.co/t/query-string-to-find-docs-field-that-start-with-abc/83940 "2017-04-29T00:36:17Z")

</div>

I have to documents with field value like "abc-def" "def-abc" "abc" I want to just search for docs that start with "abc-" but including the - in the search doesnt work and just search for "abc" will not work as it r…

---

## [Overlay GeoShapes without filtering in Kibana 5 Tilemap](https://discuss.elastic.co/t/overlay-geoshapes-without-filtering-in-kibana-5-tilemap/84030)

<div class="topic-metadata">

**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\
**Replies:** 3\
**Last updated:** [April 28, 2017, 11:08pm UTC](https://discuss.elastic.co/t/overlay-geoshapes-without-filtering-in-kibana-5-tilemap/84030 "2017-04-28T23:08:31Z")

</div>

I'm using Kibana 5.3.0 and have a use case as follows: I want to be able to overlay multiple (ideally semi-opaque) Geoshapes on a Kibana Tilemap, but not apply a filter to that data. ####Am I able to create multiple po…

---

## [Kibana - comparison under the same timeframe](https://discuss.elastic.co/t/kibana-comparison-under-the-same-timeframe/84064)

<div class="topic-metadata">

**Author:** [@cabishek188](https://discuss.elastic.co/u/cabishek188)\
**Replies:** 3\
**Last updated:** [April 28, 2017, 11:05pm UTC](https://discuss.elastic.co/t/kibana-comparison-under-the-same-timeframe/84064 "2017-04-28T23:05:32Z")

</div>

Hi all, I need to do something like below but not able to figure out how to do it. Please help: Data set: time,vir-memory, res-memory April21-2009,60,80 April22-2009,34,56 April23-2009,44,33 time,vir-memory, res-m…

---

## [How do you query for logs in kibana using the searchbar](https://discuss.elastic.co/t/how-do-you-query-for-logs-in-kibana-using-the-searchbar/84019)

<div class="topic-metadata">

**Author:** [@JayArthur](https://discuss.elastic.co/u/JayArthur)\
**Replies:** 1\
**Last updated:** [April 28, 2017, 9:52pm UTC](https://discuss.elastic.co/t/how-do-you-query-for-logs-in-kibana-using-the-searchbar/84019 "2017-04-28T21:52:49Z")

</div>

Hey, I'm new with Kibana & I'd like to know how to search for logs and other parameters within kibana.. Thank you.

---

## [Kibana Line Chart Visualization - Auto scaling down the interval](https://discuss.elastic.co/t/kibana-line-chart-visualization-auto-scaling-down-the-interval/84037)

<div class="topic-metadata">

**Author:** [@Sowji\_Sowjanya](https://discuss.elastic.co/u/Sowji_Sowjanya)\
**Replies:** 1\
**Last updated:** [April 28, 2017, 9:52pm UTC](https://discuss.elastic.co/t/kibana-line-chart-visualization-auto-scaling-down-the-interval/84037 "2017-04-28T21:52:19Z")

</div>

Hi, I am trying to visualize Line chart. I gave interval as daily and chose the value as last 5 years. But Kibana gives the response by considering interval as Monthly by default. Please let me know how kibana calcula…

---

## [Visualize a number (integer field)](https://discuss.elastic.co/t/visualize-a-number-integer-field/83779)

<div class="topic-metadata">

**Author:** [@cabishek188](https://discuss.elastic.co/u/cabishek188)\
**Replies:** 2\
**Last updated:** [April 28, 2017, 7:47pm UTC](https://discuss.elastic.co/t/visualize-a-number-integer-field/83779 "2017-04-28T19:47:49Z")

</div>

Hi all, I want to visualize a simple integer field. For e.g. my data is as below: Number, Count 1,20 2,30, 3,50 I want to plot a line graph with x-axis as 1,2,3 and corresponding y-axis as 20,30,50 Note: I tri…

---

## [Better understanding of Timelion-moving average needed](https://discuss.elastic.co/t/better-understanding-of-timelion-moving-average-needed/83832)

<div class="topic-metadata">

**Author:** [@Ruthu\_Ramya](https://discuss.elastic.co/u/Ruthu_Ramya)\
**Replies:** 1\
**Last updated:** [April 28, 2017, 7:22pm UTC](https://discuss.elastic.co/t/better-understanding-of-timelion-moving-average-needed/83832 "2017-04-28T19:22:11Z")

</div>

Hi, I am generating a moving average timelion graph for my data. Below are the graphs: I have only changed the interval(or whatever it is representing) from 3 min to 4 min. I am not able to understand What this p…

---

## [\[SOLVED\] How to autorefresh kibana 5.3 discover?](https://discuss.elastic.co/t/solved-how-to-autorefresh-kibana-5-3-discover/84048)

<div class="topic-metadata">

**Author:** [@Velkan\_S](https://discuss.elastic.co/u/Velkan_S)\
**Replies:** 1\
**Last updated:** [April 28, 2017, 7:12pm UTC](https://discuss.elastic.co/t/solved-how-to-autorefresh-kibana-5-3-discover/84048 "2017-04-28T19:12:42Z")

</div>

How to make the 'Discover' tab refresh the logs as the new messages come in?

---

## [How to enable Kibana to get the fields from an ES object (esp. elastalert)](https://discuss.elastic.co/t/how-to-enable-kibana-to-get-the-fields-from-an-es-object-esp-elastalert/84044)

<div class="topic-metadata">

**Author:** [@mr\_chang7](https://discuss.elastic.co/u/mr_chang7)\
**Replies:** 0\
**Last updated:** [April 28, 2017, 6:19pm UTC](https://discuss.elastic.co/t/how-to-enable-kibana-to-get-the-fields-from-an-es-object-esp-elastalert/84044 "2017-04-28T18:19:11Z")

</div>

The following is some of the fields from the elastalert; but learned that the match\_body is an object that cannot be recognized/used on kibana. (Kibana index refresh does not get the ? marks away) t index elast…

---

## [Unable to fetch mapping. do you have indices matching the pattern error](https://discuss.elastic.co/t/unable-to-fetch-mapping-do-you-have-indices-matching-the-pattern-error/83517)

<div class="topic-metadata">

**Author:** [@sanjays](https://discuss.elastic.co/u/sanjays)\
**Replies:** 2\
**Last updated:** [April 28, 2017, 5:20pm UTC](https://discuss.elastic.co/t/unable-to-fetch-mapping-do-you-have-indices-matching-the-pattern-error/83517 "2017-04-28T17:20:53Z")

</div>

Hello, I am unable to configure an index pattern, experiencing following issue . verified index in elastic search \[root@elk ~\]# curl 'localhost:9200/\_cat/indices?v' health status index uuid …

---

## [Querying of JSON fields](https://discuss.elastic.co/t/querying-of-json-fields/83688)

<div class="topic-metadata">

**Author:** [@rahul\_surya](https://discuss.elastic.co/u/rahul_surya)\
**Replies:** 7\
**Last updated:** [April 28, 2017, 2:02pm UTC](https://discuss.elastic.co/t/querying-of-json-fields/83688 "2017-04-28T14:02:33Z")

</div>

{"subscriber1": {"Downlink Bytes": "1.47kb", "id": "25.25.25.2", "Uplink Pkts": "8", "Downlink Pkts": "8", "DNS": {"start time": "12:27:27", "Downlink Bytes": "249", "Uplink Pkts": "1", "Downlink Pkts": "1", "Uplink Byte…

---

## [Kibana Pie and action on legend](https://discuss.elastic.co/t/kibana-pie-and-action-on-legend/83180)

<div class="topic-metadata">

**Author:** [@mk3dk](https://discuss.elastic.co/u/mk3dk)\
**Replies:** 3\
**Last updated:** [April 28, 2017, 1:59pm UTC](https://discuss.elastic.co/t/kibana-pie-and-action-on-legend/83180 "2017-04-28T13:59:24Z")

</div>

Hi All Is it possible to have same "action" possibility on pie legends in kibana? /Murat

---

## [Running Kibana behind Nginx](https://discuss.elastic.co/t/running-kibana-behind-nginx/83981)

<div class="topic-metadata">

**Author:** [@sLuvpreet33](https://discuss.elastic.co/u/sLuvpreet33)\
**Replies:** 1\
**Last updated:** [April 28, 2017, 12:51pm UTC](https://discuss.elastic.co/t/running-kibana-behind-nginx/83981 "2017-04-28T12:51:50Z")

</div>

I am trying to run Kibana behind nginx, but it does not seem to work. Kibana is latest version (5.3.1) on ubuntu 16.04 This is the nginx configuration, location ~ ^/kibana/.\* { proxy\_pass http://lo…

---

## [Timelion display value Xaxis](https://discuss.elastic.co/t/timelion-display-value-xaxis/83816)

<div class="topic-metadata">

**Author:** [@mehdichilla](https://discuss.elastic.co/u/mehdichilla)\
**Replies:** 2\
**Last updated:** [April 28, 2017, 12:27pm UTC](https://discuss.elastic.co/t/timelion-display-value-xaxis/83816 "2017-04-28T12:27:33Z")

</div>

Hello, I have a visualization created with timelion, and I need to display a line indicating the value of the X axis (time index). I am looking for how to recover the value of the X axis. Thank you all for your hel…

---

## [Modify round to the nearest - Time Animation](https://discuss.elastic.co/t/modify-round-to-the-nearest-time-animation/82853)

<div class="topic-metadata">

**Author:** [@mdiserio](https://discuss.elastic.co/u/mdiserio)\
**Replies:** 4\
**Last updated:** [April 28, 2017, 10:21am UTC](https://discuss.elastic.co/t/modify-round-to-the-nearest-time-animation/82853 "2017-04-28T10:21:24Z")

</div>

Hello i'm New Kibana user. I need to modify the default "round to the nearest" value of the Time Animation plug-in in Kibana 5.2.2. Now is "Second" to default. I need to change it in "Week". Can you help me, please?

---

## [UTC+2 been added to the Time field in kibana](https://discuss.elastic.co/t/utc-2-been-added-to-the-time-field-in-kibana/82724)

<div class="topic-metadata">

**Author:** [@rabbit](https://discuss.elastic.co/u/rabbit)\
**Replies:** 9\
**Last updated:** [April 28, 2017, 10:09am UTC](https://discuss.elastic.co/t/utc-2-been-added-to-the-time-field-in-kibana/82724 "2017-04-28T10:09:52Z")

</div>

I have a Timestamp field in my log lines as following : 2017-04-03 07:21:39,092 In grok pattern I get the field "data"(timestamp\_iso8601 type) as following : grok{ match =\> {"message" =\> "%{TIMESTAMP\_ISO8601:…

---

## [Kibana not working after x-pack uninstalled](https://discuss.elastic.co/t/kibana-not-working-after-x-pack-uninstalled/83799)

<div class="topic-metadata">

**Author:** [@sLuvpreet33](https://discuss.elastic.co/u/sLuvpreet33)\
**Replies:** 2\
**Last updated:** [April 28, 2017, 8:35am UTC](https://discuss.elastic.co/t/kibana-not-working-after-x-pack-uninstalled/83799 "2017-04-28T08:35:37Z")

</div>

I had installed x-pack earlier and used it, and hosted Kibana through Nginx. I yesterday uninstalled x-pack from both elasticsearch and kibana, via sudo bin/elasticsearch-plugin remove x-pack and sudo bin/kibana-plug…

---

## [Kibana 5.3.0 Slow UI](https://discuss.elastic.co/t/kibana-5-3-0-slow-ui/83891)

<div class="topic-metadata">

**Author:** [@adonahoe](https://discuss.elastic.co/u/adonahoe)\
**Replies:** 1\
**Last updated:** [April 28, 2017, 8:12am UTC](https://discuss.elastic.co/t/kibana-5-3-0-slow-ui/83891 "2017-04-28T08:12:07Z")

</div>

Hello everyone, I am reaching out because I installed Kibana 5.3.0 about a week ago and recently within the past 3 days I have experienced severe lag when attempting to go to any of the tabs i.e Discover, Visualize, Tim…

---

## [SUM of two fields?](https://discuss.elastic.co/t/sum-of-two-fields/83958)

<div class="topic-metadata">

**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Replies:** 1\
**Last updated:** [April 28, 2017, 8:00am UTC](https://discuss.elastic.co/t/sum-of-two-fields/83958 "2017-04-28T08:00:21Z")

</div>

Hello, I've got a metric with two metrics, SUM field A and SUM field B. I would like to add another metric that contains the SUM of field A and field B but this data is not in ES (Kibana would need to generate it from …

---

## [Reporting error can't output x-pack when enabled](https://discuss.elastic.co/t/reporting-error-cant-output-x-pack-when-enabled/83785)

<div class="topic-metadata">

**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Replies:** 1\
**Last updated:** [April 27, 2017, 4:02pm UTC](https://discuss.elastic.co/t/reporting-error-cant-output-x-pack-when-enabled/83785 "2017-04-27T16:02:48Z")

</div>

when i use x-pack reporting ,copy the url i can't see the reporting ,the error is "{"statusCode":405,"error":"Method Not Allowed","message":"GET is not allowed"}" how i can see the reporting and shared it. thanks. …

---

## [Showing Values on a graph/chart](https://discuss.elastic.co/t/showing-values-on-a-graph-chart/24296)

<div class="topic-metadata">

**Author:** [@pickett](https://discuss.elastic.co/u/pickett)\
**Replies:** 3\
**Last updated:** [April 27, 2017, 3:53pm UTC](https://discuss.elastic.co/t/showing-values-on-a-graph-chart/24296 "2017-04-27T15:53:59Z")

</div>

New to kibana - how do I get a value to show on each slice - current image I searched and found this example that shows what I mean - values in both the legend and on the actual chart:

---

## [Unable to Install Xpack on ElasticSearch and Kibana](https://discuss.elastic.co/t/unable-to-install-xpack-on-elasticsearch-and-kibana/83827)

<div class="topic-metadata">

**Author:** [@Sam67000](https://discuss.elastic.co/u/Sam67000)\
**Replies:** 9\
**Last updated:** [April 27, 2017, 1:22pm UTC](https://discuss.elastic.co/t/unable-to-install-xpack-on-elasticsearch-and-kibana/83827 "2017-04-27T13:22:28Z")

</div>

Hella EveryOne , I need help to install x-pack plugin. When I try to install it on elasticSearch with the following command : bin/elasticsearch-plugin install x-pack, that put me this : I do not know if the installa…

---

## [Fuzziness](https://discuss.elastic.co/t/fuzziness/83772)

<div class="topic-metadata">

**Author:** [@Akaren](https://discuss.elastic.co/u/Akaren)\
**Replies:** 2\
**Last updated:** [April 27, 2017, 7:55am UTC](https://discuss.elastic.co/t/fuzziness/83772 "2017-04-27T07:55:34Z")

</div>

Hi, I have Kibana 5.3 and in Advanced Settings is "query:queryString:options" and parameter "fuzziness". I would like to diasable it. So I set "fuzziness" to 0. But when I search "jiri" it returns also "giri". How to sea…

---

## [Can searchSource's query use not only query\_string](https://discuss.elastic.co/t/can-searchsources-query-use-not-only-query-string/83796)

<div class="topic-metadata">

**Author:** [@whoami](https://discuss.elastic.co/u/whoami)\
**Replies:** 0\
**Last updated:** [April 27, 2017, 6:03am UTC](https://discuss.elastic.co/t/can-searchsources-query-use-not-only-query-string/83796 "2017-04-27T06:03:13Z")

</div>

in kibana 5.x, from the source code we can see: function addToBody() { state.body = state.body || {}; // ignore if we already have a value if (state.body\[key\] == null) { if (key === 'que…

---

## [Build Kibana options](https://discuss.elastic.co/t/build-kibana-options/83690)

<div class="topic-metadata">

**Author:** [@Sebastien\_ROUL](https://discuss.elastic.co/u/Sebastien_ROUL)\
**Replies:** 4\
**Last updated:** [April 26, 2017, 11:14pm UTC](https://discuss.elastic.co/t/build-kibana-options/83690 "2017-04-26T23:14:09Z")

</div>

Hi, Is it possible to specify only one OS and/or only archive in the command "npm run build" ? We work with Kibana 5.3. Ex npm run build -- --os=linux-x86\_64 --only-archive Thanks

---

## [Are Kibana console and sense same?](https://discuss.elastic.co/t/are-kibana-console-and-sense-same/67999)

<div class="topic-metadata">

**Author:** [@Ahmad\_Ahmadi](https://discuss.elastic.co/u/Ahmad_Ahmadi)\
**Replies:** 2\
**Last updated:** [April 26, 2017, 8:00pm UTC](https://discuss.elastic.co/t/are-kibana-console-and-sense-same/67999 "2017-04-26T20:00:40Z")

</div>

I was reading elasticsearch guide then I tried to install Sense. While I was trying to install Sense I noticed the console section seems same as Sense screenshots. Is the guide out of date and Sense is merged to Kibana?

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=972)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=974)
