# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=974

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 975

---

## [Correlating data from 2 sources](https://discuss.elastic.co/t/correlating-data-from-2-sources/83665)

<div class="topic-metadata">

**Author:** [@10past10](https://discuss.elastic.co/u/10past10)\
**Replies:** 2\
**Last updated:** [April 26, 2017, 5:16pm UTC](https://discuss.elastic.co/t/correlating-data-from-2-sources/83665 "2017-04-26T17:16:00Z")

</div>

Starting with the following; - 1 large data-set of network traffic to be investigated (JSON) - 1 tls-fingerprinting data-set or 1 'bad/blocked' IP data-set or .... Use case; When both the network traffic and fingerprin…

---

## [How Can I set USer Security to Only view a dashboard](https://discuss.elastic.co/t/how-can-i-set-user-security-to-only-view-a-dashboard/83448)

<div class="topic-metadata">

**Author:** [@ppierce01](https://discuss.elastic.co/u/ppierce01)\
**Replies:** 6\
**Last updated:** [April 26, 2017, 5:09pm UTC](https://discuss.elastic.co/t/how-can-i-set-user-security-to-only-view-a-dashboard/83448 "2017-04-26T17:09:12Z")

</div>

I have create a couple of Dashboards and now I want to create a user that is allowed to view these dashboards. I want the user to be able to change the date range on the search as well as filter the data using the searc…

---

## [Kibana shows elasticsearch unavailable after SSL enabled](https://discuss.elastic.co/t/kibana-shows-elasticsearch-unavailable-after-ssl-enabled/83728)

<div class="topic-metadata">

**Author:** [@KeninHouston](https://discuss.elastic.co/u/KeninHouston)\
**Replies:** 2\
**Last updated:** [April 26, 2017, 4:57pm UTC](https://discuss.elastic.co/t/kibana-shows-elasticsearch-unavailable-after-ssl-enabled/83728 "2017-04-26T16:57:27Z")

</div>

Hi all, I have successfully configured SSL encryption for my elasticsearch cluster, but when I change the kibana.yml file to connect to the elasticsearch cluster, kibana starts, but it shows elasticsearch as service un…

---

## [The timestamp date in kibana is one day less than the date field shown in ES](https://discuss.elastic.co/t/the-timestamp-date-in-kibana-is-one-day-less-than-the-date-field-shown-in-es/82916)

<div class="topic-metadata">

**Author:** [@Bhavana](https://discuss.elastic.co/u/Bhavana)\
**Replies:** 9\
**Last updated:** [April 26, 2017, 2:46pm UTC](https://discuss.elastic.co/t/the-timestamp-date-in-kibana-is-one-day-less-than-the-date-field-shown-in-es/82916 "2017-04-26T14:46:17Z")

</div>

Hello Everyone, I am fetching the date field in ES as timestamp field in kibana. If the date is "2017-01-17" in ES, the same data in kibana the timestamp range is "2017-01-16 00:00:00.00" to "2017-01-16 20:00:00.000" …

---

## [Vagrant Install of Kibana works, Vagrant install of Kibana + X-Pack doesn't work unless you explicitly declare elasticsearch.requestHeadersWhitelist: \['authorization'\]](https://discuss.elastic.co/t/vagrant-install-of-kibana-works-vagrant-install-of-kibana-x-pack-doesnt-work-unless-you-explicitly-declare-elasticsearch-requestheaderswhitelist-authorization/82046)

<div class="topic-metadata">

**Author:** [@dm0000](https://discuss.elastic.co/u/dm0000)\
**Replies:** 3\
**Last updated:** [April 26, 2017, 12:55pm UTC](https://discuss.elastic.co/t/vagrant-install-of-kibana-works-vagrant-install-of-kibana-x-pack-doesnt-work-unless-you-explicitly-declare-elasticsearch-requestheaderswhitelist-authorization/82046 "2017-04-26T12:55:29Z")

</div>

I'm using Vagrant to test out some stuff with x-pack. I spin up my brand new ES, LS and Kibana 5.3.0 instance (everything on the same machine) and everything works as expected. I can reach Kibana, and ES normally The i…

---

## [Is it possible to put dots on lines in Timelion?](https://discuss.elastic.co/t/is-it-possible-to-put-dots-on-lines-in-timelion/83675)

<div class="topic-metadata">

**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\
**Replies:** 1\
**Last updated:** [April 26, 2017, 10:46am UTC](https://discuss.elastic.co/t/is-it-possible-to-put-dots-on-lines-in-timelion/83675 "2017-04-26T10:46:30Z")

</div>

Hi, I am using ELK GA 5.0.0. I am trying to plot a line in Timelion, with dots on it, I tried below, but it shows only dots, and not lines; .points(radius=4, weight=0, fill=5).lines(width=2).color(#F00) I am trying …

---

## [Table shows a lot less than discovery or graph](https://discuss.elastic.co/t/table-shows-a-lot-less-than-discovery-or-graph/83573)

<div class="topic-metadata">

**Author:** [@tomer](https://discuss.elastic.co/u/tomer)\
**Replies:** 4\
**Last updated:** [April 26, 2017, 10:28am UTC](https://discuss.elastic.co/t/table-shows-a-lot-less-than-discovery-or-graph/83573 "2017-04-26T10:28:46Z")

</div>

Hi When I create a table to show all messages by timestamp I get a few bunches of messages but not all. Why is this? For here as an example in Discovery I see a message from 14:49:\*\* but in the table it does not appear. …

---

## [How to see/synchronize pcap file "Time" with kibana visualization?](https://discuss.elastic.co/t/how-to-see-synchronize-pcap-file-time-with-kibana-visualization/83430)

<div class="topic-metadata">

**Author:** [@Gurram\_Vinay](https://discuss.elastic.co/u/Gurram_Vinay)\
**Replies:** 4\
**Last updated:** [April 26, 2017, 9:19am UTC](https://discuss.elastic.co/t/how-to-see-synchronize-pcap-file-time-with-kibana-visualization/83430 "2017-04-26T09:19:38Z")

</div>

How to see pcap data with respect to pcap time events in kibana? Here in kibana, "Index contains time-based events" (if I checked the box then unable to load the "Time-field name"),If I unchecked the box only visualisi…

---

## [Count by regex pattern](https://discuss.elastic.co/t/count-by-regex-pattern/83395)

<div class="topic-metadata">

**Author:** [@Alexkl](https://discuss.elastic.co/u/Alexkl)\
**Replies:** 2\
**Last updated:** [April 26, 2017, 8:16am UTC](https://discuss.elastic.co/t/count-by-regex-pattern/83395 "2017-04-26T08:16:34Z")

</div>

I am struggling with a pie chart visualisation in kibana (5.2.2) I have a field url wich contains things like : https://fhfhf.jffjr.com/ping?toto=tata https://fhfhf.jffjr.com/user=tu https://fhfhf.jffjr.com/ping?tutu=t…

---

## [Url field formatter to exploit multiple fields](https://discuss.elastic.co/t/url-field-formatter-to-exploit-multiple-fields/83598)

<div class="topic-metadata">

**Author:** [@michimau](https://discuss.elastic.co/u/michimau)\
**Replies:** 4\
**Last updated:** [April 26, 2017, 7:48am UTC](https://discuss.elastic.co/t/url-field-formatter-to-exploit-multiple-fields/83598 "2017-04-26T07:48:00Z")

</div>

Is it possible to have url formatted fields with label from another field? something equivalent to html: \< a href="fieldUrl"\>fieldLabel \< /a \>

---

## [Kibana - Exclude field with same value](https://discuss.elastic.co/t/kibana-exclude-field-with-same-value/83127)

<div class="topic-metadata">

**Author:** [@chg](https://discuss.elastic.co/u/chg)\
**Replies:** 7\
**Last updated:** [April 25, 2017, 11:00pm UTC](https://discuss.elastic.co/t/kibana-exclude-field-with-same-value/83127 "2017-04-25T23:00:37Z")

</div>

I am trying to create a graph which displays deltas from the previous week and current week. In terms of delta, I would like to display the events that showed up last week, but not the current week AND the events that sh…

---

## [Percentages with kibana](https://discuss.elastic.co/t/percentages-with-kibana/83417)

<div class="topic-metadata">

**Author:** [@Sam67000](https://discuss.elastic.co/u/Sam67000)\
**Replies:** 4\
**Last updated:** [April 25, 2017, 4:55pm UTC](https://discuss.elastic.co/t/percentages-with-kibana/83417 "2017-04-25T16:55:32Z")

</div>

Hello everyone, I need help. I work on logs of calls and I extract from these logs 2 values : if they are yes or not passed and I store them in 2 different variables (DAS1 and DAS2). I have mapped it as keyword. Ho…

---

## [Query to get servers that have increased storage usage by X% during last X months?](https://discuss.elastic.co/t/query-to-get-servers-that-have-increased-storage-usage-by-x-during-last-x-months/80140)

<div class="topic-metadata">

**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\
**Replies:** 17\
**Last updated:** [April 25, 2017, 4:44pm UTC](https://discuss.elastic.co/t/query-to-get-servers-that-have-increased-storage-usage-by-x-during-last-x-months/80140 "2017-04-25T16:44:46Z")

</div>

Is there any way to get a list of servers that have increased storage usage by 20% or X% in last 3 months or X months? I am indexing daily server storage usage as numeric percentage\_used (ej. 80.55) and want to get a l…

---

## [Timelion bar graph](https://discuss.elastic.co/t/timelion-bar-graph/83361)

<div class="topic-metadata">

**Author:** [@Padmavathy](https://discuss.elastic.co/u/Padmavathy)\
**Replies:** 3\
**Last updated:** [April 25, 2017, 4:42pm UTC](https://discuss.elastic.co/t/timelion-bar-graph/83361 "2017-04-25T16:42:23Z")

</div>

Is there a way to change the mode from stacked to grouped in a timelion chart.The graph i need with timelion is a bar chart.

---

## [Uncaught Error: \[$injector:modulerr\] Failed to instantiate module kibana due to: Error: \[$injector:unpr\] Unknown provider: $tooltipProvider](https://discuss.elastic.co/t/uncaught-error-injector-modulerr-failed-to-instantiate-module-kibana-due-to-error-injector-unpr-unknown-provider-tooltipprovider/83556)

<div class="topic-metadata">

**Author:** [@whoami](https://discuss.elastic.co/u/whoami)\
**Replies:** 6\
**Last updated:** [April 25, 2017, 3:50pm UTC](https://discuss.elastic.co/t/uncaught-error-injector-modulerr-failed-to-instantiate-module-kibana-due-to-error-injector-unpr-unknown-provider-tooltipprovider/83556 "2017-04-25T15:50:08Z")

</div>

Kibana Version: 5.2.0 Question: Uncaught Error: \[$injector:modulerr\] Failed to instantiate module kibana due to: Error: \[$injector:unpr\] Unknown provider: $tooltipProvider

---

## [Authorization per alias problem](https://discuss.elastic.co/t/authorization-per-alias-problem/83418)

<div class="topic-metadata">

**Author:** [@jhn134910](https://discuss.elastic.co/u/jhn134910)\
**Replies:** 3\
**Last updated:** [April 25, 2017, 3:45pm UTC](https://discuss.elastic.co/t/authorization-per-alias-problem/83418 "2017-04-25T15:45:57Z")

</div>

Hello there, I'm using elastic-search, kibana and x-pack version 5.1.2, I'm using the native user-store. I have two different aliases and templates: $ cat irldf-campaign\_manager\_stats\_template.json { "aliases": {…

---

## [Kibana: getting wrong data with offset -1w?](https://discuss.elastic.co/t/kibana-getting-wrong-data-with-offset-1w/83360)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 3\
**Last updated:** [April 25, 2017, 2:56pm UTC](https://discuss.elastic.co/t/kibana-getting-wrong-data-with-offset-1w/83360 "2017-04-25T14:56:54Z")

</div>

Hi, I've got a problem with kibana's timelion. I am comparing the count of today and last week using offset functionality. This picture I got, when running for today: This picture I get, if I set the time picker - …

---

## [Kibana/Elastic user restricted to specific index](https://discuss.elastic.co/t/kibana-elastic-user-restricted-to-specific-index/83567)

<div class="topic-metadata">

**Author:** [@groyee](https://discuss.elastic.co/u/groyee)\
**Replies:** 3\
**Last updated:** [April 25, 2017, 2:46pm UTC](https://discuss.elastic.co/t/kibana-elastic-user-restricted-to-specific-index/83567 "2017-04-25T14:46:23Z")

</div>

Hi, Is it possible to create a kibana/elastic user limited to a specific index? I would like that this user will be able to perform all readonly operations on a specific index. He must not see any other indices in th…

---

## [Applying "OR" operator between filtered fields](https://discuss.elastic.co/t/applying-or-operator-between-filtered-fields/83569)

<div class="topic-metadata">

**Author:** [@arieltk](https://discuss.elastic.co/u/arieltk)\
**Replies:** 1\
**Last updated:** [April 25, 2017, 1:24pm UTC](https://discuss.elastic.co/t/applying-or-operator-between-filtered-fields/83569 "2017-04-25T13:24:07Z")

</div>

Hello all, I have a Vertical bar chart visualization, and I want to be able to filter by the selected values, but applying OR between the filtered fields instead of AND. For example, I would like the user to select som…

---

## [Feature request: Set term colors, dashboard-global](https://discuss.elastic.co/t/feature-request-set-term-colors-dashboard-global/83511)

<div class="topic-metadata">

**Author:** [@luckydonald](https://discuss.elastic.co/u/luckydonald)\
**Replies:** 3\
**Last updated:** [April 25, 2017, 12:03pm UTC](https://discuss.elastic.co/t/feature-request-set-term-colors-dashboard-global/83511 "2017-04-25T12:03:00Z")

</div>

Dashboards already trying to use the same colors for each term. See the Status codes as an example: It would be great to have a color settings storable on the dashboard, not the used graphs. (Maybe later also a GUI …

---

## [Modal window in kibana](https://discuss.elastic.co/t/modal-window-in-kibana/83526)

<div class="topic-metadata">

**Author:** [@venkatesanvaishali](https://discuss.elastic.co/u/venkatesanvaishali)\
**Replies:** 1\
**Last updated:** [April 25, 2017, 10:24am UTC](https://discuss.elastic.co/t/modal-window-in-kibana/83526 "2017-04-25T10:24:24Z")

</div>

Is it possible to open modal window on clicking a link in kibana ?

---

## [How to stop kibana in RHEL](https://discuss.elastic.co/t/how-to-stop-kibana-in-rhel/83494)

<div class="topic-metadata">

**Author:** [@bvnages](https://discuss.elastic.co/u/bvnages)\
**Replies:** 13\
**Last updated:** [April 25, 2017, 10:24am UTC](https://discuss.elastic.co/t/how-to-stop-kibana-in-rhel/83494 "2017-04-25T10:24:24Z")

</div>

How to stop kibana . We are download tar file and unzipped after i will run kibana. cd kibana/bin ./kibana Above start kibana. But how to stop kibana. Could you please tell me.

---

## [Custom average for unique records](https://discuss.elastic.co/t/custom-average-for-unique-records/82988)

<div class="topic-metadata">

**Author:** [@avivc](https://discuss.elastic.co/u/avivc)\
**Replies:** 6\
**Last updated:** [April 25, 2017, 8:43am UTC](https://discuss.elastic.co/t/custom-average-for-unique-records/82988 "2017-04-25T08:43:29Z")

</div>

HI guys, I'm trying to figure out if there's a way to customize the average of my visualizes I.e, I want the average for the unique records and not the average for all records 1,2,3,4,5,6,7,8,8,9 The average will re…

---

## [Using Kibana on Docker](https://discuss.elastic.co/t/using-kibana-on-docker/83428)

<div class="topic-metadata">

**Author:** [@Chemse](https://discuss.elastic.co/u/Chemse)\
**Replies:** 2\
**Last updated:** [April 25, 2017, 7:58am UTC](https://discuss.elastic.co/t/using-kibana-on-docker/83428 "2017-04-25T07:58:33Z")

</div>

Hello ! I want to use elasticsearch and kibana in Docker, I used for each one of them a container, elasticsearch works well, but kibana no, I pulled the image and when i tried to run it with this command docker run -p …

---

## [System.process.cpu.total.pct Output Clarifications](https://discuss.elastic.co/t/system-process-cpu-total-pct-output-clarifications/82850)

<div class="topic-metadata">

**Author:** [@prakash1243](https://discuss.elastic.co/u/prakash1243)\
**Replies:** 6\
**Last updated:** [April 25, 2017, 6:37am UTC](https://discuss.elastic.co/t/system-process-cpu-total-pct-output-clarifications/82850 "2017-04-25T06:37:11Z")

</div>

Hi - I tried to get the Total Percentage of CPU consumption of a specific process using Ruby client, with an aggregation of AVG and MAX. For Average aggregation, I've got the output as 0.0834, and which also displayed…

---

## [Auto interval creates spiky graphs, 1m interval OK](https://discuss.elastic.co/t/auto-interval-creates-spiky-graphs-1m-interval-ok/83349)

<div class="topic-metadata">

**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\
**Replies:** 2\
**Last updated:** [April 25, 2017, 5:03am UTC](https://discuss.elastic.co/t/auto-interval-creates-spiky-graphs-1m-interval-ok/83349 "2017-04-25T05:03:57Z")

</div>

Hi, I'm having some problems graphing netflow bps in timelion. Interval = auto $q='test\_name:test\_1', .es($q,metric='sum:netflow.in\_bytes').scale\_interval(1s).divide(1024).label('Up - KBps'), $q='test\_name:test\_1', .…

---

## [Kinbana not loading and can't create index to elaticsearch](https://discuss.elastic.co/t/kinbana-not-loading-and-cant-create-index-to-elaticsearch/83480)

<div class="topic-metadata">

**Author:** [@TidyHuang](https://discuss.elastic.co/u/TidyHuang)\
**Replies:** 1\
**Last updated:** [April 25, 2017, 3:12am UTC](https://discuss.elastic.co/t/kinbana-not-loading-and-cant-create-index-to-elaticsearch/83480 "2017-04-25T03:12:43Z")

</div>

Hi all, I saw the issue was raised Github: kinbana not loading · Issue #11356 · elastic/kibana · GitHub I encounter the same issue and here is the Kibana Startup running log: log \[10:11:51.856\] \[info\]\[status\]\[plu…

---

## [Ignoring "holes" in timeseries](https://discuss.elastic.co/t/ignoring-holes-in-timeseries/83299)

<div class="topic-metadata">

**Author:** [@Cornoualis](https://discuss.elastic.co/u/Cornoualis)\
**Replies:** 3\
**Last updated:** [April 25, 2017, 12:18am UTC](https://discuss.elastic.co/t/ignoring-holes-in-timeseries/83299 "2017-04-25T00:18:58Z")

</div>

Hi! I'm using kibana to visualize forex data. My problem is that as the forex market is closed during the weekend, I have "holes" in my timeseries: Is there a way to ignore dates having no values in timelion? Thank…

---

## [Import kibana dashboard using curl request](https://discuss.elastic.co/t/import-kibana-dashboard-using-curl-request/83459)

<div class="topic-metadata">

**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\
**Replies:** 1\
**Last updated:** [April 24, 2017, 11:29pm UTC](https://discuss.elastic.co/t/import-kibana-dashboard-using-curl-request/83459 "2017-04-24T23:29:31Z")

</div>

Hello, Is there any way I can import an exported kibana dashboard using curl? Cheers,

---

## [Timelion](https://discuss.elastic.co/t/timelion/83414)

<div class="topic-metadata">

**Author:** [@Padmavathy](https://discuss.elastic.co/u/Padmavathy)\
**Replies:** 1\
**Last updated:** [April 24, 2017, 11:04pm UTC](https://discuss.elastic.co/t/timelion/83414 "2017-04-24T23:04:49Z")

</div>

Is there a way to use multiple filters in timelion similar to the one used with a vertical bar chart that is like using AND operator

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=973)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=975)
