# Bad Top values on Data table

**URL:** https://discuss.elastic.co/t/bad-top-values-on-data-table/273276
**Category:** Kibana
**Created:** [May 18, 2021, 11:59am UTC](https://discuss.elastic.co/t/bad-top-values-on-data-table/273276 "2021-05-18T11:59:15Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![Arethusa](https://avatars.discourse-cdn.com/v4/letter/a/9dc877/32.png) [@Arethusa](https://discuss.elastic.co/u/Arethusa)
#### Post date: [May 18, 2021, 11:59am UTC](https://discuss.elastic.co/t/bad-top-values-on-data-table/273276/1 "2021-05-18T11:59:15Z")

</div>

Hello,  
I'm on Kibana V7.12.0  
I have inconsistent values on data table :

Like you see, I have lot of **Other** value... But, I can understant why (the limits of 100 values).  
But you can see "RepMgr.exe" is on second position with 8400 events.

 ![bug1](https://us1.discourse-cdn.com/elastic/original/3X/8/b/8b36f13103383dd114b6959d92b97801429565f0.png)

And now the problem ! I Know **sh.exe** is a high value, so... I add in on filter !

So why I see **sh.exe** at 24 000 after filter and don't see **sh.exe** WITHOUT filter ?

 ![bug2](https://us1.discourse-cdn.com/elastic/original/3X/d/8/d840052ccc34a1c24343580c50af7a4068231e1f.png)

I try to change "Rank by" Alphabetical by Count of records but that don't work:

 ![bug3](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1afb5f60b94cacced24de9e7b3fc4a7643d4b44c.png)

Considering **sh.exe** is a top value, how can i see it without filter ?

Thank you.

---

<div class="post-metadata">

### Author: ![Arethusa](https://avatars.discourse-cdn.com/v4/letter/a/9dc877/32.png) [@Arethusa](https://discuss.elastic.co/u/Arethusa)
#### Post date: [May 18, 2021, 12:21pm UTC](https://discuss.elastic.co/t/bad-top-values-on-data-table/273276/2 "2021-05-18T12:21:47Z")

</div>

Ok I'm a bit stupid:

I have to choice Rank by " **Count of records**" and Rank direction " **Descending**"

 ![bug4](https://us1.discourse-cdn.com/elastic/original/3X/8/8/880906d38cdcb829912cc272c399c7e54e5c82f4.png)

Thank you : p

---

<div class="post-metadata">

### Author: ![flash1293](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/flash1293/32/41227_2.png) [@flash1293](https://discuss.elastic.co/u/flash1293)
#### Post date: [May 18, 2021, 12:28pm UTC](https://discuss.elastic.co/t/bad-top-values-on-data-table/273276/3 "2021-05-18T12:28:37Z")

</div>

Glad you figured it out. For reference in case someone else is running into this:

There are two "sorting"s going on here - one is the "ranking" configured in the config panel to the right which is executed server side and restricts which data is actually streamed to the browser.

The second sorting of the table (indicated by the little arrow in the column header) is independent of this and is purely happening in the browser for display purposes.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 15, 2021, 12:29pm UTC](https://discuss.elastic.co/t/bad-top-values-on-data-table/273276/4 "2021-06-15T12:29:37Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.