Questions tagged [kibana-4]

Kibana is a highly scalable user interface for `elasticsearch` that allows you to efficiently search, graph, analyze and otherwise make sense of a mountain(s) of data. It is often used to visualize data that is stored in `elasticsearch` which agains is usually parsed and fed in by `logstash`. It essentially uses the `elasticsearch's` REST APIs to query it and has in built graphing and search functionalities that are highly intuitive and simple to use.

Kibana is an application for exploring and visualizing your data. It helps you find meaning in that data with tools for searching, creating visualizations, and combining those visualizations to build dashboards. It is commonly used within the system administration, logging, and business analytics communities but is compatible with just about any data.

Kibana is an open-source project and uses the engine, another open-source project, for its powerful search and aggregation capabilities.

As a part of the , Kibana and elasticsearch can be paired with to build a powerful logging analysis solution.

Overview: Kibana

Related tags:

, , ,

611 questions
30
votes
5 answers

Timestamp not appearing in Kibana

I'm pretty new to Kibana and just set up an instance to look at some ElasticSearch data. I have one index in Elastic Search, which has a few fields including _timestamp. When I go to the 'Discover' tab and look at my documents, each have the…
HHHH
  • 1,197
  • 2
  • 16
  • 28
25
votes
3 answers

Can I change the index pattern of a visualization in Kibana?

I have created a full set of visualizations.Due to some reason I have to deleted that index in elastic. We need to create a new pattern of index. Problem is that after deleting index visualizations will not work . I will have to recreate it one by…
Kumar Pallav
  • 590
  • 1
  • 6
  • 16
22
votes
1 answer

Performing Calculations on Multiple Metrics (Counts) in Kibana 4

I have a number of separate searches (elasticsearch) that produce simple metric visualisations. Each of these visualisations is a simple total (integer). That's easy enough. What I'd like to be able to do is work out the conversion rates between…
NickJHoran
  • 597
  • 4
  • 13
20
votes
3 answers

Are there conventions for naming/organizing Elasticsearch indexes which store log data?

I'm in the process of setting up Elasticsearch and Kibana as a centralized logging platform in our office. We have a number of custom utilities and plug-ins which I would like to track the usage of and if users are encountering any errors. Not to…
Eric Anastas
  • 21,675
  • 38
  • 142
  • 236
19
votes
2 answers

How to create value over time line chart in Kibana 4?

I'm facing a following problem. In Kibana 4 I've created a line chart based on my input from elasticeasrch but I can only display average, min, max instead of an actual value of the field per time, e.g. sent bytes. Most answears to that question on…
Artemis
  • 271
  • 1
  • 2
  • 8
18
votes
3 answers

Kibana 4 : How to remove saved discover request

A trivial question but I can't figure how to remove or clean some saved requests in the Discover tab. Thank's for any help.
user2406187
  • 193
  • 1
  • 4
17
votes
6 answers

FIELDDATA Data is too large

I open kibana and do a search and i get the error where shards failed. I looked in the elasticsearch.log file and I saw this error: org.elasticsearch.common.breaker.CircuitBreakingException: [FIELDDATA] Data too large, data for [@timestamp] would be…
lezzago
  • 271
  • 1
  • 6
  • 15
16
votes
2 answers

How can you set the colors in a chart with Kibana 4?

I have a stacked bar chart in Kibana 4, and I would like the error bar to be red, the warning bar to be orange and the info bar to be green. This used to be simple to accomplish in Kibana 3, but I cannot figure out how to do it in Kibana 4. Has…
Jason Martens
  • 1,305
  • 11
  • 22
16
votes
1 answer

Kibana and fixed time spans

Is it possible to set a fixed timespan for a saved visualization or a saved search in Kibana 4? Scenario: I want to create one dashboard with 2 visualizations with different time spans. A metric counting unique users within 10 min (last 10…
jaspernygaard
  • 3,098
  • 5
  • 35
  • 52
15
votes
2 answers

How can I do scripted aggregation in Kibana + Elasticsearch?

Let's say I have a log of events of ad displays and ad clicks stored via Logstash in Elasticsearch and displayed in Kibana 4. I would like to calculate a simple metric like CTR (Click-Through-Rate) of the events , which is : CTR =…
zarzyk
  • 694
  • 4
  • 18
13
votes
1 answer

How to do a time range search in Kibana

We are using the ELK for log aggregation. Is it possible to search for events that occured during a particular time range. Lets say I want to see all exceptions that occurred between 10am and 11am in last month. Is it possible to extract the time…
markus
  • 1,631
  • 2
  • 17
  • 31
13
votes
6 answers

Query two indexes simultaneously in Kibana 4?

Whenever I create a visualization, Kibana 4 asks me to select the index for doing the search. My project requires searching data that is present in multiple indexes and hence I am stuck. I wish to search two indexes for my data and then visualize…
Shubham Mishra
  • 1,053
  • 4
  • 13
  • 23
12
votes
2 answers

ElasticSearch entered "read only" mode, node cannot be altered

Something happened during the night to my ES cluster (composed of 5 data nodes, 3 master nodes). I have no idea what happened but all the indices and data were deleted and the cluster entered a "read only" mode, possibly hacked? When trying to get…
Orz
  • 585
  • 1
  • 5
  • 26
11
votes
4 answers

OR filter on dashboard in Kibana 4

I want to create a dashboard which shows information about a limited set of request values : request:("/path1" OR "/path2" OR "/path3") What I've tried so far: I can add filters to the dashboard by clicking on a part of a pie chart, but all these…
Conffusion
  • 4,335
  • 2
  • 16
  • 28
11
votes
1 answer

New Fields Not Visible in Kibana

I have Kibana 4.0.1 running on top of elasticsearch 1.4.4. It was very smooth and virtually had no setup time. Suddenly I have run into a problem. If I add a new field in my elasticsearch index, it's not visible in fields section. I can still query…
azi
  • 929
  • 1
  • 11
  • 31
1
2
3
40 41