# \#kql-kibana-query-language

**URL:** https://discuss.elastic.co/tag/kql-kibana-query-language/49.md

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

---

## [Kibana Index Pattern Configuration Problem](https://discuss.elastic.co/t/kibana-index-pattern-configuration-problem/386854)

<div class="topic-metadata">

**Author:** [@Pacous](https://discuss.elastic.co/u/Pacous)\
**Replies:** 12\
**Last updated:** [June 19, 2026, 6:00pm UTC](https://discuss.elastic.co/t/kibana-index-pattern-configuration-problem/386854 "2026-06-19T18:00:59Z")

</div>

I configured Logstash as follows: input { file { path =\> "/var/log/apache2/access.log" } } filter { grok { match =\> { "message" =\> "%{COMBINEDAPACHELOG}" } } date { match =\> \[ "timestamp", "dd/MMM/yyyy:HH:mm:ss Z"…

---

## [How to fetch dashboard queries](https://discuss.elastic.co/t/how-to-fetch-dashboard-queries/379066)

<div class="topic-metadata">

**Author:** [@Parthpuri\_Goswami](https://discuss.elastic.co/u/Parthpuri_Goswami)\
**Replies:** 1\
**Last updated:** [June 10, 2025, 6:41pm UTC](https://discuss.elastic.co/t/how-to-fetch-dashboard-queries/379066 "2025-06-10T18:41:07Z")

</div>

Hi all, I want to fetch dashboard and panel details with a query. Is it possible using an API? I have checked a few APIs, but they weren't helpful. For example, \[Get a list of dashboards | Kibana API documentation\](http…

---

## [Keep the hour range and set the day dynamically](https://discuss.elastic.co/t/keep-the-hour-range-and-set-the-day-dynamically/378922)

<div class="topic-metadata">

**Author:** [@Torado](https://discuss.elastic.co/u/Torado)\
**Replies:** 7\
**Last updated:** [June 10, 2025, 8:56am UTC](https://discuss.elastic.co/t/keep-the-hour-range-and-set-the-day-dynamically/378922 "2025-06-10T08:56:58Z")

</div>

Hello everyone, I've search for a long time, unfortunately I can't found any solution. Is it any way to set dynamically the day but keeping the date range fix when I creat a Kibana visualisation ? (I don't have access …

---

## [Kibana 8.18 Problem with generating PDF reports](https://discuss.elastic.co/t/kibana-8-18-problem-with-generating-pdf-reports/378926)

<div class="topic-metadata">

**Author:** [@hofrichterovak](https://discuss.elastic.co/u/hofrichterovak)\
**Replies:** 1\
**Last updated:** [June 6, 2025, 5:18am UTC](https://discuss.elastic.co/t/kibana-8-18-problem-with-generating-pdf-reports/378926 "2025-06-06T05:18:00Z")

</div>

Hello, I am using the user "elastic" to generate PDF reports. Everything worked on version 7.17, but after upgrading to version 8.18 it shows me an error when generating PDF reports - please, see image. What should I s…

---

## [Having our own Elastic search DB, if we want to use Kibana for Production MS use , do we need a license still?](https://discuss.elastic.co/t/having-our-own-elastic-search-db-if-we-want-to-use-kibana-for-production-ms-use-do-we-need-a-license-still/376839)

<div class="topic-metadata">

**Author:** [@sujitghose](https://discuss.elastic.co/u/sujitghose)\
**Replies:** 4\
**Last updated:** [April 6, 2025, 1:08pm UTC](https://discuss.elastic.co/t/having-our-own-elastic-search-db-if-we-want-to-use-kibana-for-production-ms-use-do-we-need-a-license-still/376839 "2025-04-06T13:08:20Z")

</div>

Having our own Elastic search DB, if we want to use Kibana only for log viewing for Production MS use, do we need a license still?

---

## [How can I add controls specific to a visualization in kibana dashboard?](https://discuss.elastic.co/t/how-can-i-add-controls-specific-to-a-visualization-in-kibana-dashboard/361459)

<div class="topic-metadata">

**Author:** [@Anupama2262](https://discuss.elastic.co/u/Anupama2262)\
**Replies:** 6\
**Last updated:** [February 20, 2025, 3:16pm UTC](https://discuss.elastic.co/t/how-can-i-add-controls-specific-to-a-visualization-in-kibana-dashboard/361459 "2025-02-20T15:16:14Z")

</div>

I have two doubts regarding control Dashboard Visualization Filtering Issue: I have a dashboard with five visualizations: two visualizations created with one data view containing an email field, and three visualizat…

---

## [Latest value in ESQL Elasticsearch piped query language on kibana](https://discuss.elastic.co/t/latest-value-in-esql-elasticsearch-piped-query-language-on-kibana/373427)

<div class="topic-metadata">

**Author:** [@roopeshetty](https://discuss.elastic.co/u/roopeshetty)\
**Replies:** 2\
**Last updated:** [January 23, 2025, 12:11pm UTC](https://discuss.elastic.co/t/latest-value-in-esql-elasticsearch-piped-query-language-on-kibana/373427 "2025-01-23T12:11:07Z")

</div>

Hi Guys We are running below ES|QL query on Kibana to make a table of list of alerts triggered from a external Monitoring tool. FROM winlogbeat-\* | WHERE event.code == "3003" | stats Alert\_Time = VALUES(@timestamp), Se…

---

## [The indexs doesn't shown in kibana](https://discuss.elastic.co/t/the-indexs-doesnt-shown-in-kibana/372239)

<div class="topic-metadata">

**Author:** [@Yasmine\_Ghorbel](https://discuss.elastic.co/u/Yasmine_Ghorbel)\
**Replies:** 1\
**Last updated:** [December 19, 2024, 5:07pm UTC](https://discuss.elastic.co/t/the-indexs-doesnt-shown-in-kibana/372239 "2024-12-19T17:07:04Z")

</div>

input { gelf { port =\> 12201 } } filter { mutate { add\_field =\> { "environment" =\> "${ENVIRONMENT}" } add\_tag =\> \[ "%{tag}" \] } if "backend" in \[tags\] { json { …

---

## [Can I able to ignore Duplicate match it is effecting on entire relevance score](https://discuss.elastic.co/t/can-i-able-to-ignore-duplicate-match-it-is-effecting-on-entire-relevance-score/369088)

<div class="topic-metadata">

**Author:** [@Anand\_Konagala](https://discuss.elastic.co/u/Anand_Konagala)\
**Replies:** 0\
**Last updated:** [October 19, 2024, 5:00am UTC](https://discuss.elastic.co/t/can-i-able-to-ignore-duplicate-match-it-is-effecting-on-entire-relevance-score/369088 "2024-10-19T05:00:42Z")

</div>

Hello, When I perform a querying on Elasticsearch the duplicate matches also take score by Inverse Document Frequency and come top of the results. Can I ignore the duplicate matching. top document, "highlight": { …

---

## [Not able to create basic authentication with username and password on elasticsearch 8.15.0 and kibana 8.15.0](https://discuss.elastic.co/t/not-able-to-create-basic-authentication-with-username-and-password-on-elasticsearch-8-15-0-and-kibana-8-15-0/368820)

<div class="topic-metadata">

**Author:** [@vikascateina](https://discuss.elastic.co/u/vikascateina)\
**Replies:** 5\
**Last updated:** [October 16, 2024, 1:05pm UTC](https://discuss.elastic.co/t/not-able-to-create-basic-authentication-with-username-and-password-on-elasticsearch-8-15-0-and-kibana-8-15-0/368820 "2024-10-16T13:05:40Z")

</div>

Hi, I want that elasticsearch of 8.15.0 should connect with kibana 8.15.0 with basic authentication but kibana is giving error i.e not server yet.But it is running without basic authentication.My docker-compose file is b…

---

## [Kibana error after upgrade to 8.13.2](https://discuss.elastic.co/t/kibana-error-after-upgrade-to-8-13-2/359016)

<div class="topic-metadata">

**Author:** [@shailendra1](https://discuss.elastic.co/u/shailendra1)\
**Replies:** 4\
**Last updated:** [September 27, 2024, 6:45am UTC](https://discuss.elastic.co/t/kibana-error-after-upgrade-to-8-13-2/359016 "2024-09-27T06:45:26Z")

</div>

Hello Team, i recently upgraded by kibana instance to 8.13.2 using zip bundle after upgrades i am seeking a pop-up error alerts in UI just after logging in kibana dashboard. is anyone can help to let me know this cause…

---

## [Joining two documents with a unique session Id](https://discuss.elastic.co/t/joining-two-documents-with-a-unique-session-id/367066)

<div class="topic-metadata">

**Author:** [@sintim](https://discuss.elastic.co/u/sintim)\
**Replies:** 1\
**Last updated:** [September 25, 2024, 6:02am UTC](https://discuss.elastic.co/t/joining-two-documents-with-a-unique-session-id/367066 "2024-09-25T06:02:02Z")

</div>

Is it possible to join two documents in Elasticsearch based on the same session ID? The goal is to create a visualization that shows the field in one of the documents together with another field from the other document. …

---

## [Error: Invalid string. Length must be a multiple of 4](https://discuss.elastic.co/t/error-invalid-string-length-must-be-a-multiple-of-4/366714)

<div class="topic-metadata">

**Author:** [@lathif\_basha](https://discuss.elastic.co/u/lathif_basha)\
**Replies:** 3\
**Last updated:** [September 18, 2024, 8:28am UTC](https://discuss.elastic.co/t/error-invalid-string-length-must-be-a-multiple-of-4/366714 "2024-09-18T08:28:32Z")

</div>

Hi Can anyone help to resolve the issue, Any comment is much appreciated. kibana version 7.16.2

---

## [Examples for Elastic Span compression](https://discuss.elastic.co/t/examples-for-elastic-span-compression/364186)

<div class="topic-metadata">

**Author:** [@navya\_k](https://discuss.elastic.co/u/navya_k)\
**Replies:** 2\
**Last updated:** [August 12, 2024, 1:48am UTC](https://discuss.elastic.co/t/examples-for-elastic-span-compression/364186 "2024-08-12T01:48:24Z")

</div>

Hello Team, Need help on span compression.currently we are using 8.13 and would like to understand span compression as it reduce overhead on cluster. As part of eligibility I read exit spans are eligible. In elastic h…

---

## [Performance comparison: KQL vs ES|QL vs DSL](https://discuss.elastic.co/t/performance-comparison-kql-vs-es-ql-vs-dsl/363151)

<div class="topic-metadata">

**Author:** [@yar](https://discuss.elastic.co/u/yar)\
**Replies:** 0\
**Last updated:** [July 15, 2024, 1:33pm UTC](https://discuss.elastic.co/t/performance-comparison-kql-vs-es-ql-vs-dsl/363151 "2024-07-15T13:33:04Z")

</div>

Hi! I'm facing some performance degradation with my ELK setup. I believe that poorly written querys are one of the main causes of this degradation. Due to the specific use cases I must write queries with a lot of OR sta…

---

## [UI Controls while embed the dashboard into my application](https://discuss.elastic.co/t/ui-controls-while-embed-the-dashboard-into-my-application/361848)

<div class="topic-metadata">

**Author:** [@Anupama2262](https://discuss.elastic.co/u/Anupama2262)\
**Replies:** 1\
**Last updated:** [June 21, 2024, 12:49pm UTC](https://discuss.elastic.co/t/ui-controls-while-embed-the-dashboard-into-my-application/361848 "2024-06-21T12:49:03Z")

</div>

I have two doubts I've created a dashboard that displays the top 50 users. When I query for results of just one user, using a bar-vertical-stacked chart, the bar representing that user becomes excessively large. Is the…

---

## [502 bad gateway error](https://discuss.elastic.co/t/502-bad-gateway-error/361686)

<div class="topic-metadata">

**Author:** [@Niru8](https://discuss.elastic.co/u/Niru8)\
**Replies:** 1\
**Last updated:** [June 20, 2024, 5:02pm UTC](https://discuss.elastic.co/t/502-bad-gateway-error/361686 "2024-06-20T17:02:07Z")

</div>

in client server i am facing this issue

---

## [How to hide options in each panel in a dashboard in Kibana](https://discuss.elastic.co/t/how-to-hide-options-in-each-panel-in-a-dashboard-in-kibana/361576)

<div class="topic-metadata">

**Author:** [@Anupama2262](https://discuss.elastic.co/u/Anupama2262)\
**Replies:** 1\
**Last updated:** [June 17, 2024, 10:55am UTC](https://discuss.elastic.co/t/how-to-hide-options-in-each-panel-in-a-dashboard-in-kibana/361576 "2024-06-17T10:55:42Z")

</div>

I have created a dashboard with several panels. Is there a way to display only a limited set of options to users for all panels after embedding the dashboard into my application?

---

## [Kibana produces data view incrementally](https://discuss.elastic.co/t/kibana-produces-data-view-incrementally/361402)

<div class="topic-metadata">

**Author:** [@iamp3](https://discuss.elastic.co/u/iamp3)\
**Replies:** 3\
**Last updated:** [June 17, 2024, 9:43am UTC](https://discuss.elastic.co/t/kibana-produces-data-view-incrementally/361402 "2024-06-17T09:43:10Z")

</div>

Hi, It looks like smth block search/view of metric data in real-time mode (from otel-collectors) and produces this data incrementally. For example, on 12 June I could check data till 01:00, but today at 13 June I could s…

---

## [Date filter](https://discuss.elastic.co/t/date-filter/361304)

<div class="topic-metadata">

**Author:** [@Anupama2262](https://discuss.elastic.co/u/Anupama2262)\
**Replies:** 3\
**Last updated:** [June 13, 2024, 4:38am UTC](https://discuss.elastic.co/t/date-filter/361304 "2024-06-13T04:38:48Z")

</div>

Is it possible to configure a specific visualization within a dashboard to display data from the last 7 days while the other visualizations in the same dashboard display data for last 3 months? If yes, how can I achieve …

---

## [How can I hide some buttons of dashboard while embed into my application](https://discuss.elastic.co/t/how-can-i-hide-some-buttons-of-dashboard-while-embed-into-my-application/361378)

<div class="topic-metadata">

**Author:** [@Anupama2262](https://discuss.elastic.co/u/Anupama2262)\
**Replies:** 1\
**Last updated:** [June 13, 2024, 8:39am UTC](https://discuss.elastic.co/t/how-can-i-hide-some-buttons-of-dashboard-while-embed-into-my-application/361378 "2024-06-13T08:39:10Z")

</div>

I can be able to hide filter bar, query, time filter while embedding the kibana dashboard into my application. But I don't want all the users to view create visualization button, add controls and add panel buttons. How c…

---

## [Specific API keys, specific data on dashboard](https://discuss.elastic.co/t/specific-api-keys-specific-data-on-dashboard/361267)

<div class="topic-metadata">

**Author:** [@Sukuna](https://discuss.elastic.co/u/Sukuna)\
**Replies:** 2\
**Last updated:** [June 12, 2024, 3:33pm UTC](https://discuss.elastic.co/t/specific-api-keys-specific-data-on-dashboard/361267 "2024-06-12T15:33:35Z")

</div>

Hi everybody, I'm new here, happy to see you all. I am currently brainstorming for a project and right now I'm gathering ideas. I want to create a external webapp and display a kibana dashboard (through Iframe) that sh…

---

## [Create Pie chart](https://discuss.elastic.co/t/create-pie-chart/361292)

<div class="topic-metadata">

**Author:** [@Anupama2262](https://discuss.elastic.co/u/Anupama2262)\
**Replies:** 2\
**Last updated:** [June 12, 2024, 7:32am UTC](https://discuss.elastic.co/t/create-pie-chart/361292 "2024-06-12T07:32:25Z")

</div>

I have two fields in my data 'type' field and 'count' field. I want to create pie chart without any of the aggregation. I want to create pie chart based on the type and count. How to do that in kibana lens?

---

## [How can I display visualizations that are specific to each user?](https://discuss.elastic.co/t/how-can-i-display-visualizations-that-are-specific-to-each-user/360915)

<div class="topic-metadata">

**Author:** [@Anupama2262](https://discuss.elastic.co/u/Anupama2262)\
**Replies:** 2\
**Last updated:** [June 7, 2024, 11:11am UTC](https://discuss.elastic.co/t/how-can-i-display-visualizations-that-are-specific-to-each-user/360915 "2024-06-07T11:11:23Z")

</div>

I've integrated a dashboard in my application using an iframe. For user-specific visualizations upon user login, I've applied a query parameter like \_a=(query:(language:kuery,query:'user\_id:example\_user\_id')) in iframe e…

---

## [Annotation API in elasticsearch in kibana for transactions](https://discuss.elastic.co/t/annotation-api-in-elasticsearch-in-kibana-for-transactions/360398)

<div class="topic-metadata">

**Author:** [@navya\_k](https://discuss.elastic.co/u/navya_k)\
**Replies:** 2\
**Last updated:** [May 30, 2024, 5:06pm UTC](https://discuss.elastic.co/t/annotation-api-in-elasticsearch-in-kibana-for-transactions/360398 "2024-05-30T17:06:02Z")

</div>

Need help on Annotation API on transactions in Elasticsearch. I have tried to create for one of my .Net service below is the code I run in kibana dev tools: POST /api/apm/service/1ACT/annotation { -H 'Content-Type: appl…

---

## [field.IpAddress returns loadbalancer IP](https://discuss.elastic.co/t/field-ipaddress-returns-loadbalancer-ip/358845)

<div class="topic-metadata">

**Author:** [@engin](https://discuss.elastic.co/u/engin)\
**Replies:** 2\
**Last updated:** [May 16, 2024, 7:42am UTC](https://discuss.elastic.co/t/field-ipaddress-returns-loadbalancer-ip/358845 "2024-05-16T07:42:01Z")

</div>

Hi, newbie on elastic here, I have several applications run on kubernetes. I am trying to get the real ips that comes from loadbalancer but all I see is the loadbalancer IP. { "\_index": "application-dev-2024.04.15", "…

---

## [Parse Kibana Saved Search Metadata and build elastic DSL to query elastic index](https://discuss.elastic.co/t/parse-kibana-saved-search-metadata-and-build-elastic-dsl-to-query-elastic-index/359242)

<div class="topic-metadata">

**Author:** [@yarramreddysasi](https://discuss.elastic.co/u/yarramreddysasi)\
**Replies:** 0\
**Last updated:** [May 10, 2024, 8:43am UTC](https://discuss.elastic.co/t/parse-kibana-saved-search-metadata-and-build-elastic-dsl-to-query-elastic-index/359242 "2024-05-10T08:43:52Z")

</div>

Hello there , I am working on a project where user are asked to create saved searches as per their requirement on the single elastic index available through discover page . Now I will have to download this saved search …

---

## [Visualizations in Kibana to Display Last Updated Instance of Records](https://discuss.elastic.co/t/visualizations-in-kibana-to-display-last-updated-instance-of-records/358072)

<div class="topic-metadata">

**Author:** [@seanmb](https://discuss.elastic.co/u/seanmb)\
**Replies:** 3\
**Last updated:** [May 8, 2024, 1:35pm UTC](https://discuss.elastic.co/t/visualizations-in-kibana-to-display-last-updated-instance-of-records/358072 "2024-05-08T13:35:00Z")

</div>

Good day, I am relatively new to the ELK stack and still getting use to how things are done. I am working on a solution to provide ATM statuses (whether up or down) in the form of a dashboard. I have a csv file that l…

---

## [Connection pool in elasticsearch kibana](https://discuss.elastic.co/t/connection-pool-in-elasticsearch-kibana/358736)

<div class="topic-metadata">

**Author:** [@navya\_k](https://discuss.elastic.co/u/navya_k)\
**Replies:** 4\
**Last updated:** [May 6, 2024, 1:52pm UTC](https://discuss.elastic.co/t/connection-pool-in-elasticsearch-kibana/358736 "2024-05-06T13:52:06Z")

</div>

Hello, Good day. Need help on connection pooling. We have onboard application of type Java and dependency with mango DB. Successfully sending APM and transaction data to elastic from application. Able to view data in …

---

## [Secure Kibana Dasboard Iframes](https://discuss.elastic.co/t/secure-kibana-dasboard-iframes/356738)

<div class="topic-metadata">

**Author:** [@kishorkumar](https://discuss.elastic.co/u/kishorkumar)\
**Replies:** 1\
**Last updated:** [April 30, 2024, 11:20am UTC](https://discuss.elastic.co/t/secure-kibana-dasboard-iframes/356738 "2024-04-30T11:20:44Z")

</div>

Hello @elastic #stack-kibana #dev-kibana. We aim to create a restricted iframe that cannot be exploit it is also public iframe url but is only accessible by specific userIds. We intend to embed this iframe in our app. H…

[Next page](https://discuss.elastic.co/tag/kql-kibana-query-language/49.md?match_all_tags=true&page=1&tags%5B%5D=kql-kibana-query-language)
