# Error In Visualization (Kibana Dashboard)

**URL:** <https://discuss.elastic.co/t/error-in-visualization-kibana-dashboard/172312>\
**Category:** Kibana\
**Created:** [March 14, 2019, 10:42am UTC](https://discuss.elastic.co/t/error-in-visualization-kibana-dashboard/172312 "2019-03-14T10:42:19Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jsof](https://avatars.discourse-cdn.com/v4/letter/j/a4c791/32.png) [@Jsof](https://discuss.elastic.co/u/Jsof)\
**Post date:** [March 14, 2019, 10:42am UTC](https://discuss.elastic.co/t/error-in-visualization-kibana-dashboard/172312/1 "2019-03-14T10:42:19Z")

</div>

Hi,

I am new to kibana, logstash and elasticsearch, i am trying to implement [https://github.com/shadow-box/Palo-Alto-Networks-ELK-Stack](https://github.com/shadow-box/Palo-Alto-Networks-ELK-Stack) on my kibana and i am getting the following error when i open the kibana dashboard. Appreciate any help given, thank you.

 ![Screenshot_4](https://us1.discourse-cdn.com/elastic/original/3X/d/4/d4e70f0209a9e01ab7dd61842589dbf3e73d701c.png)

 ![Screenshot_5](https://us1.discourse-cdn.com/elastic/original/3X/a/7/a7dc609ea4da478c9503fdea5cf366b0d3c84ce0.png)

---

<div class="post-metadata">

**Author:** ![jbudz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jbudz/32/45922_2.png) [@jbudz](https://discuss.elastic.co/u/jbudz)\
**Post date:** [March 14, 2019, 6:24pm UTC](https://discuss.elastic.co/t/error-in-visualization-kibana-dashboard/172312/2 "2019-03-14T18:24:37Z")

</div>

Can you share your Kibana version? [https://github.com/elastic/kibana/pull/10193](https://github.com/elastic/kibana/pull/10193) looks like the fix, but it doesn't seem to cover significant terms.

---

<div class="post-metadata">

**Author:** ![jbudz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jbudz/32/45922_2.png) [@jbudz](https://discuss.elastic.co/u/jbudz)\
**Post date:** [March 14, 2019, 6:27pm UTC](https://discuss.elastic.co/t/error-in-visualization-kibana-dashboard/172312/3 "2019-03-14T18:27:02Z")

</div>

I opened [https://github.com/elastic/kibana/issues/33263](https://github.com/elastic/kibana/issues/33263) for tracking

---

<div class="post-metadata">

**Author:** ![joshdover](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/joshdover/32/42020_2.png) [@joshdover](https://discuss.elastic.co/u/joshdover)\
**Post date:** [March 14, 2019, 6:28pm UTC](https://discuss.elastic.co/t/error-in-visualization-kibana-dashboard/172312/4 "2019-03-14T18:28:40Z")

</div>

The `exclude.pattern` syntax that is being used in the significant\_terms aggregation was available in Elasticsearch 2.0 - 5.6.x. It is [no longer available in 6.x](https://www.elastic.co/guide/en/elasticsearch/reference/6.0/breaking_60_aggregations_changes.html#_deprecated_literal_pattern_literal_element_of_include_exclude_for_terms_aggregations_has_been_removed) and greater (looks like you're running 6.x based on the screenshot).

You'll need to update the saved objects for this visualization to use the new syntax (see the doc linked above).

---

<div class="post-metadata">

**Author:** ![joshdover](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/joshdover/32/42020_2.png) [@joshdover](https://discuss.elastic.co/u/joshdover)\
**Post date:** [March 14, 2019, 6:32pm UTC](https://discuss.elastic.co/t/error-in-visualization-kibana-dashboard/172312/5 "2019-03-14T18:32:44Z")

</div>

Jon has good point, Kibana _should_ handle this for you (this is a bug), but if you'd like to fix it today, I suggest editing the objects by hand.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 11, 2019, 6:43pm UTC](https://discuss.elastic.co/t/error-in-visualization-kibana-dashboard/172312/6 "2019-04-11T18:43:04Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
