# Kibana

**URL:** https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=980

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 981

---

## [Calculate duration between two events using scripted fields](https://discuss.elastic.co/t/calculate-duration-between-two-events-using-scripted-fields/81814)

<div class="topic-metadata">

**Author:** [@Robert\_Schwerdtner](https://discuss.elastic.co/u/Robert_Schwerdtner)\
**Replies:** 1\
**Last updated:** [April 10, 2017, 2:38pm UTC](https://discuss.elastic.co/t/calculate-duration-between-two-events-using-scripted-fields/81814 "2017-04-10T14:38:51Z")

</div>

Hello is it possible to calculate the duration between two events (Dates) while using scripted fields and painless? I tried a lot but I can't get it working.

---

## [Managing multiple search visualization without Dashboard?](https://discuss.elastic.co/t/managing-multiple-search-visualization-without-dashboard/44861)

<div class="topic-metadata">

**Author:** [@jyo\_biswas](https://discuss.elastic.co/u/jyo_biswas)\
**Replies:** 2\
**Last updated:** [April 10, 2017, 12:50pm UTC](https://discuss.elastic.co/t/managing-multiple-search-visualization-without-dashboard/44861 "2017-04-10T12:50:38Z")

</div>

I wanted to view multiple visualizations as similar to Kibana Dashboards (but without using Dashboards). I wish to control multiple embedded visualization through a singular search filter (as done in Dashboards). As …

---

## [License issue without using marvel,kibana and logstash](https://discuss.elastic.co/t/license-issue-without-using-marvel-kibana-and-logstash/81762)

<div class="topic-metadata">

**Author:** [@PARAMJEET\_SINGH](https://discuss.elastic.co/u/PARAMJEET_SINGH)\
**Replies:** 6\
**Last updated:** [April 10, 2017, 12:19pm UTC](https://discuss.elastic.co/t/license-issue-without-using-marvel-kibana-and-logstash/81762 "2017-04-10T12:19:19Z")

</div>

hi.. i noticed this log, \_license says it is expired. i am not using marvel,logstash or kibana so does it means i cant use this cluster once license expires? i am a beginner so your help would be appreciated. TIA LICEN…

---

## [Where to add the specified code?](https://discuss.elastic.co/t/where-to-add-the-specified-code/81751)

<div class="topic-metadata">

**Author:** [@Chandu\_Maneesh](https://discuss.elastic.co/u/Chandu_Maneesh)\
**Replies:** 3\
**Last updated:** [April 10, 2017, 11:56am UTC](https://discuss.elastic.co/t/where-to-add-the-specified-code/81751 "2017-04-10T11:56:53Z")

</div>

Continuing the discussion from Some index string fields not appearing in visualization aggregation: @ppisljar I have index field added it like this. Here app\_log is the index name and inner app\_log is the document n…

---

## [Time is missing in pdf reports for date histogram visualizations](https://discuss.elastic.co/t/time-is-missing-in-pdf-reports-for-date-histogram-visualizations/81790)

<div class="topic-metadata">

**Author:** [@Patrick\_Kast](https://discuss.elastic.co/u/Patrick_Kast)\
**Replies:** 0\
**Last updated:** [April 10, 2017, 9:51am UTC](https://discuss.elastic.co/t/time-is-missing-in-pdf-reports-for-date-histogram-visualizations/81790 "2017-04-10T09:51:23Z")

</div>

I'm creating daily reports (timeframe 24 hours) of some dashboards, which includes visualizations with date histogram. I could see that they should include the time at the bottom of the visualization as you have it on th…

---

## [Can't visualize geo\_point in nested format](https://discuss.elastic.co/t/cant-visualize-geo-point-in-nested-format/81759)

<div class="topic-metadata">

**Author:** [@higee](https://discuss.elastic.co/u/higee)\
**Replies:** 1\
**Last updated:** [April 10, 2017, 9:12am UTC](https://discuss.elastic.co/t/cant-visualize-geo-point-in-nested-format/81759 "2017-04-10T09:12:22Z")

</div>

Hi, I have problem visualizing geo data with Kibana. Below is my mapping configuration. { "mongo": { "mappings": { "order": { "properties": { "ord\_end\_location": { …

---

## [Timelion Configurabiliy and documentation](https://discuss.elastic.co/t/timelion-configurabiliy-and-documentation/81725)

<div class="topic-metadata">

**Author:** [@Ram\_Varra](https://discuss.elastic.co/u/Ram_Varra)\
**Replies:** 1\
**Last updated:** [April 10, 2017, 12:46am UTC](https://discuss.elastic.co/t/timelion-configurabiliy-and-documentation/81725 "2017-04-10T00:46:45Z")

</div>

I was very excited about the announcement of Timelion and introductory videos about its capability. However, I am having difficulty with being able to use it with my data. Key issues I run into: 1) I am not able to f…

---

## [Fields are displayed as hidden in Kibana](https://discuss.elastic.co/t/fields-are-displayed-as-hidden-in-kibana/81698)

<div class="topic-metadata">

**Author:** [@avivc](https://discuss.elastic.co/u/avivc)\
**Replies:** 4\
**Last updated:** [April 9, 2017, 7:53am UTC](https://discuss.elastic.co/t/fields-are-displayed-as-hidden-in-kibana/81698 "2017-04-09T07:53:27Z")

</div>

Hi, My data comes from 2 data sources - an API and a local script that I'm testing. Both of them holds the same index pattern for ES & Kibana My problem is that when I'm searching for fields from my local script, I ca…

---

## [Elasticsearch query in Kibana](https://discuss.elastic.co/t/elasticsearch-query-in-kibana/81467)

<div class="topic-metadata">

**Author:** [@Akaren](https://discuss.elastic.co/u/Akaren)\
**Replies:** 4\
**Last updated:** [April 8, 2017, 11:14am UTC](https://discuss.elastic.co/t/elasticsearch-query-in-kibana/81467 "2017-04-08T11:14:12Z")

</div>

Hi, I have created nested aggs query but I would like to execute it in Kibana and create a chart (heat map from the data). Where should I paste my query? To JSON input? External script file? Thanks, Kibana 5.3 version.

---

## [Multiple proxy routes in elasticsearch plugin](https://discuss.elastic.co/t/multiple-proxy-routes-in-elasticsearch-plugin/81502)

<div class="topic-metadata">

**Author:** [@ccrecana](https://discuss.elastic.co/u/ccrecana)\
**Replies:** 3\
**Last updated:** [April 7, 2017, 11:52pm UTC](https://discuss.elastic.co/t/multiple-proxy-routes-in-elasticsearch-plugin/81502 "2017-04-07T23:52:33Z")

</div>

I want to use multiple kibana indexes for multiple users. I've already built a plugin in which I dinnamically change the elasticsearch request payload and path and reroute it to kibana server. My problem is that the core…

---

## [Filter pattern for kibana (zimbra)](https://discuss.elastic.co/t/filter-pattern-for-kibana-zimbra/81357)

<div class="topic-metadata">

**Author:** [@mhamed](https://discuss.elastic.co/u/mhamed)\
**Replies:** 8\
**Last updated:** [April 7, 2017, 9:11pm UTC](https://discuss.elastic.co/t/filter-pattern-for-kibana-zimbra/81357 "2017-04-07T21:11:07Z")

</div>

hey any idea about filter and pattern for kibana to display zimbra logs ??

---

## [Graylog - Kibana](https://discuss.elastic.co/t/graylog-kibana/81643)

<div class="topic-metadata">

**Author:** [@rohithmen](https://discuss.elastic.co/u/rohithmen)\
**Replies:** 6\
**Last updated:** [April 7, 2017, 8:04pm UTC](https://discuss.elastic.co/t/graylog-kibana/81643 "2017-04-07T20:04:45Z")

</div>

Hi All, I have been working on vendor project helping analyze log data. We have currently setup graylog server for our log management but feel restricted with visualizing some of these data. We were wondering if we cou…

---

## [How can i give color to my Data Table/ Metric/ Markdown Widget in Visualization of Kibana](https://discuss.elastic.co/t/how-can-i-give-color-to-my-data-table-metric-markdown-widget-in-visualization-of-kibana/553)

<div class="topic-metadata">

**Author:** [@rkhapre](https://discuss.elastic.co/u/rkhapre)\
**Replies:** 10\
**Last updated:** [April 7, 2017, 6:21pm UTC](https://discuss.elastic.co/t/how-can-i-give-color-to-my-data-table-metric-markdown-widget-in-visualization-of-kibana/553 "2017-04-07T18:21:35Z")

</div>

How can i give color to my Data Table/ Metric/ Markdown Widget in Visualization of Kibana To make the look and feel of my Kibana Dashbaord cool, i want to give colors to various visualization components. Please let me …

---

## [Adding graphic assets to plugins](https://discuss.elastic.co/t/adding-graphic-assets-to-plugins/81501)

<div class="topic-metadata">

**Author:** [@Simone\_Scarduzio](https://discuss.elastic.co/u/Simone_Scarduzio)\
**Replies:** 4\
**Last updated:** [April 7, 2017, 5:44pm UTC](https://discuss.elastic.co/t/adding-graphic-assets-to-plugins/81501 "2017-04-07T17:44:46Z")

</div>

Hello, I'm writing a plugin, now I want to add an image to the HTML. What would the path be? public/templates/myplugin.html \<img src="???/cat.jpg" /\> My image is stored under /public/cat.jpg.

---

## [How To Change Kibana Theme or RYO?](https://discuss.elastic.co/t/how-to-change-kibana-theme-or-ryo/81596)

<div class="topic-metadata">

**Author:** [@initproto](https://discuss.elastic.co/u/initproto)\
**Replies:** 4\
**Last updated:** [April 7, 2017, 5:32pm UTC](https://discuss.elastic.co/t/how-to-change-kibana-theme-or-ryo/81596 "2017-04-07T17:32:34Z")

</div>

Hi, I find the kibana colors and theme a bit unprofessional and kiddie-looking (like candy crush). Has any thought been put into the idea that people want to change the theme or branding with this version? In the past…

---

## [Can't figure out how to load the Kibana Index Pattern](https://discuss.elastic.co/t/cant-figure-out-how-to-load-the-kibana-index-pattern/81218)

<div class="topic-metadata">

**Author:** [@song](https://discuss.elastic.co/u/song)\
**Replies:** 5\
**Last updated:** [April 7, 2017, 2:46pm UTC](https://discuss.elastic.co/t/cant-figure-out-how-to-load-the-kibana-index-pattern/81218 "2017-04-07T14:46:35Z")

</div>

Hello, I hit a road block with trying to load the Kibana Index Pattern. I thought I follow the instruction from Elastic site but whatever I do, I can't get the Index Pattern to load on the Kibana. I try to follow the in…

---

## [Push data into Kibana](https://discuss.elastic.co/t/push-data-into-kibana/81589)

<div class="topic-metadata">

**Author:** [@Kagelmacher](https://discuss.elastic.co/u/Kagelmacher)\
**Replies:** 3\
**Last updated:** [April 7, 2017, 1:10pm UTC](https://discuss.elastic.co/t/push-data-into-kibana/81589 "2017-04-07T13:10:30Z")

</div>

Hello, Actually i developed a medical application with a backend in rails. I use postgresql for the storage. I would like to use Kibana to make "some datamining" . But i don't know what is the best way to send the data…

---

## [Timelion & Metricbeats values falling off](https://discuss.elastic.co/t/timelion-metricbeats-values-falling-off/81538)

<div class="topic-metadata">

**Author:** [@Chris\_Marzullo](https://discuss.elastic.co/u/Chris_Marzullo)\
**Replies:** 2\
**Last updated:** [April 7, 2017, 11:17am UTC](https://discuss.elastic.co/t/timelion-metricbeats-values-falling-off/81538 "2017-04-07T11:17:03Z")

</div>

So one of the things I'm failing to grasp with what combination of 'fit' values I need so my graph doesn't drop off like it does in the attached picture. I can refresh and sometimes it goes away, but it'll come back. Lot…

---

## [Index Pattern doesn't match all the indices](https://discuss.elastic.co/t/index-pattern-doesnt-match-all-the-indices/81584)

<div class="topic-metadata">

**Author:** [@Emilien](https://discuss.elastic.co/u/Emilien)\
**Replies:** 3\
**Last updated:** [April 7, 2017, 11:07am UTC](https://discuss.elastic.co/t/index-pattern-doesnt-match-all-the-indices/81584 "2017-04-07T11:07:55Z")

</div>

Hello everyone, I'm new using ELK and I'm encountering an issue with Kibana. I'm importing catalina.out in elasticsearch with logstash. In this part, I don't have any particular problem and the indices seems to be cor…

---

## [Timelion: divide by number of days in the selected range?](https://discuss.elastic.co/t/timelion-divide-by-number-of-days-in-the-selected-range/80865)

<div class="topic-metadata">

**Author:** [@olexij](https://discuss.elastic.co/u/olexij)\
**Replies:** 2\
**Last updated:** [April 7, 2017, 8:25am UTC](https://discuss.elastic.co/t/timelion-divide-by-number-of-days-in-the-selected-range/80865 "2017-04-07T08:25:33Z")

</div>

I would like to have an average value in the selected time range. For that purpose I would take the value I have (say number of documents), divide it by the number of days and display it as single value. Is it possible w…

---

## [How to exclude numeric value from a pie chart?](https://discuss.elastic.co/t/how-to-exclude-numeric-value-from-a-pie-chart/81458)

<div class="topic-metadata">

**Author:** [@pmbanka](https://discuss.elastic.co/u/pmbanka)\
**Replies:** 2\
**Last updated:** [April 7, 2017, 7:22am UTC](https://discuss.elastic.co/t/how-to-exclude-numeric-value-from-a-pie-chart/81458 "2017-04-07T07:22:01Z")

</div>

I'm trying to set up a piechart displaying data from a number-type field. In advanced option there is an "Exclude" field which I want to use, but I can't find a way to get it to work. Whatever I type in (I want to exclud…

---

## [How to use more than 10 filters without having a error message](https://discuss.elastic.co/t/how-to-use-more-than-10-filters-without-having-a-error-message/79919)

<div class="topic-metadata">

**Author:** [@Tijot](https://discuss.elastic.co/u/Tijot)\
**Replies:** 9\
**Last updated:** [April 7, 2017, 7:10am UTC](https://discuss.elastic.co/t/how-to-use-more-than-10-filters-without-having-a-error-message/79919 "2017-04-07T07:10:35Z")

</div>

Helle everyone, Since one week, im stucked! please come and save me!! :disappointed\_relieved:-( I am trying to initiate a new dashboard and the results that i want to display is a result that i can obtain with the a…

---

## [Unable to create index](https://discuss.elastic.co/t/unable-to-create-index/80939)

<div class="topic-metadata">

**Author:** [@Raja1](https://discuss.elastic.co/u/Raja1)\
**Replies:** 12\
**Last updated:** [April 7, 2017, 6:54am UTC](https://discuss.elastic.co/t/unable-to-create-index/80939 "2017-04-07T06:54:35Z")

</div>

Hi All, I am unable to create index in Kibana dashboard and even deafault index also not showing. Some one please suggest what could be the reason behind this. Please find below screen shot. Regards Raja

---

## [Kibana query searching for s3.amazonaws.com matches other keys as well unless double quoted](https://discuss.elastic.co/t/kibana-query-searching-for-s3-amazonaws-com-matches-other-keys-as-well-unless-double-quoted/80906)

<div class="topic-metadata">

**Author:** [@gjws](https://discuss.elastic.co/u/gjws)\
**Replies:** 4\
**Last updated:** [April 7, 2017, 5:49am UTC](https://discuss.elastic.co/t/kibana-query-searching-for-s3-amazonaws-com-matches-other-keys-as-well-unless-double-quoted/80906 "2017-04-07T05:49:07Z")

</div>

Hi all, I've got an ES cluster that contains a heap of AWS events. One of the main fields I would like to search on is eventSource. In Kibana I have a number of filters saved, one of them is: eventSource:s3.amazonaws…

---

## [Number of Days between date Range](https://discuss.elastic.co/t/number-of-days-between-date-range/78444)

<div class="topic-metadata">

**Author:** [@Varun\_Patel](https://discuss.elastic.co/u/Varun_Patel)\
**Replies:** 4\
**Last updated:** [April 7, 2017, 5:16am UTC](https://discuss.elastic.co/t/number-of-days-between-date-range/78444 "2017-04-07T05:16:15Z")

</div>

Hi, I have a date Range. Lets say 2015-01-01 to 2017-03-01. I wanted to calculate only days between this two dates using scripted field. How can i achieve this ?

---

## [Logstash grok filter for mailbox.log zimbra](https://discuss.elastic.co/t/logstash-grok-filter-for-mailbox-log-zimbra/81459)

<div class="topic-metadata">

**Author:** [@aziz\_007](https://discuss.elastic.co/u/aziz_007)\
**Replies:** 2\
**Last updated:** [April 6, 2017, 9:10pm UTC](https://discuss.elastic.co/t/logstash-grok-filter-for-mailbox-log-zimbra/81459 "2017-04-06T21:10:37Z")

</div>

hi i am triying to build a pattern fro this log line in mailbox.log for zimbra 2017-04-03 20:31:09,256 INFO \[LmtpServer-3\] \[ip=192.168.1.102;\] lmtp - Delivering message: size=1517 bytes, nrcpts=1, sender=admin@server…

---

## [Scripted Field: getting first index of a substring](https://discuss.elastic.co/t/scripted-field-getting-first-index-of-a-substring/81418)

<div class="topic-metadata">

**Author:** [@vishalkin](https://discuss.elastic.co/u/vishalkin)\
**Replies:** 1\
**Last updated:** [April 6, 2017, 7:45pm UTC](https://discuss.elastic.co/t/scripted-field-getting-first-index-of-a-substring/81418 "2017-04-06T19:45:19Z")

</div>

Hi. I have a following string field string\_value.keyword The following code gives the last part that comes after / (slash). How can I get only the first part that comes before /? def path = doc\['string\_value.keyword…

---

## [Kibana port on 80 throws error](https://discuss.elastic.co/t/kibana-port-on-80-throws-error/80987)

<div class="topic-metadata">

**Author:** [@Rupesh\_Ranjan](https://discuss.elastic.co/u/Rupesh_Ranjan)\
**Replies:** 2\
**Last updated:** [April 6, 2017, 5:28pm UTC](https://discuss.elastic.co/t/kibana-port-on-80-throws-error/80987 "2017-04-06T17:28:44Z")

</div>

I am using a linux RHEL server, and trying to change kibana port from 5601 to 80. With port 5601, everything seems working fine. But kibana does not start at all while changing port to 80. Any suggestions?

---

## [Kibana and AWS Ec2](https://discuss.elastic.co/t/kibana-and-aws-ec2/81271)

<div class="topic-metadata">

**Author:** [@ivivomar](https://discuss.elastic.co/u/ivivomar)\
**Replies:** 4\
**Last updated:** [April 6, 2017, 4:37pm UTC](https://discuss.elastic.co/t/kibana-and-aws-ec2/81271 "2017-04-06T16:37:16Z")

</div>

I am new in this... I am using a AWS Ec-2 and I have installed Elasticsearch and Kibana in it. In the configuration of Kibana I have modified the server.host parameter to use the ec2 ip in order to allow remote access t…

---

## [Url not found](https://discuss.elastic.co/t/url-not-found/81365)

<div class="topic-metadata">

**Author:** [@ipl2004](https://discuss.elastic.co/u/ipl2004)\
**Replies:** 4\
**Last updated:** [April 6, 2017, 4:35pm UTC](https://discuss.elastic.co/t/url-not-found/81365 "2017-04-06T16:35:50Z")

</div>

Forgive me as I am not familiar with the expected behavior but when I try to open the url within a browser https://basemap.nationalmap.gov/arcGIS/services/USGSTopo/MapServer/WMSServer The requested URL /arcGIS/services…

[Previous page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=979)

[Next page](https://discuss.elastic.co/c/elastic-stack/kibana/7.md?page=981)
