# Built-in Visualizations don't seem to work **URL:** \ **Category:** Kibana\ **Created:** [May 3, 2024, 2:18pm UTC](https://discuss.elastic.co/t/built-in-visualizations-dont-seem-to-work/358720 "2024-05-03T14:18:06Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![artschooldropout](https://avatars.discourse-cdn.com/v4/letter/a/8491ac/32.png) [@artschooldropout](https://discuss.elastic.co/u/artschooldropout)\ **Post date:** [May 3, 2024, 2:18pm UTC](https://discuss.elastic.co/t/built-in-visualizations-dont-seem-to-work/358720/1 "2024-05-03T14:18:06Z")
I'm using Filebeat CEF module to ingest firewall logs. I'm playing around with visualizations, and none of the built-in visualizations seem to show any data. For instance, the "Top 10 Devices by Bandwidth [Filebeat CEF]" doesn't show anything. I made sure my data had the 5 or so fields used by this visualization. One thing I noticed is that in the built-in visualizations, I can't select the data view like I can when building my own visualization. Perhaps that has something to do with it? ---
**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\ **Post date:** [May 3, 2024, 2:27pm UTC](https://discuss.elastic.co/t/built-in-visualizations-dont-seem-to-work/358720/2 "2024-05-03T14:27:58Z")
Hi @artschooldropout Since you are using a module did you run `filebeat setup -e` _ **before** _ you started filebeat, otherwise the data will not be parsed correction Also What version are you on? Also what steps / how did you install filebeat, how are you running filebeat? The information you provided is not enough to help. ---
**Author:** ![artschooldropout](https://avatars.discourse-cdn.com/v4/letter/a/8491ac/32.png) [@artschooldropout](https://discuss.elastic.co/u/artschooldropout)\ **Post date:** [May 3, 2024, 2:40pm UTC](https://discuss.elastic.co/t/built-in-visualizations-dont-seem-to-work/358720/3 "2024-05-03T14:40:19Z")
I apologize - I missed some key information. I can see my data in the Discover pane, and I can even make my own visualization and see my data there. It's just the visualizations in the Visualize Library that I'm having trouble with. ---
**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\ **Post date:** [May 3, 2024, 4:31pm UTC](https://discuss.elastic.co/t/built-in-visualizations-dont-seem-to-work/358720/4 "2024-05-03T16:31:36Z")
Understood... The Module OOTB visualizations require the proper setup otherwise they we will not work. The data may be there but it may not be with the proper scheme / parsing etc. ---
**Author:** ![artschooldropout](https://avatars.discourse-cdn.com/v4/letter/a/8491ac/32.png) [@artschooldropout](https://discuss.elastic.co/u/artschooldropout)\ **Post date:** [May 3, 2024, 5:26pm UTC](https://discuss.elastic.co/t/built-in-visualizations-dont-seem-to-work/358720/5 "2024-05-03T17:26:00Z")
10-4, thanks for confirming. I tried recreating a visualization from scratch to mirror a built-in one, and it worked fine. ---
**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\ **Post date:** [May 3, 2024, 5:37pm UTC](https://discuss.elastic.co/t/built-in-visualizations-dont-seem-to-work/358720/6 "2024-05-03T17:37:46Z")
Glad you got it working.... Question are you seeing fields named like `thefield.keyword` If so that means that `setup` was not run and the schema being used is not the correct schema, which will work but is not optimal. ---
**Author:** ![artschooldropout](https://avatars.discourse-cdn.com/v4/letter/a/8491ac/32.png) [@artschooldropout](https://discuss.elastic.co/u/artschooldropout)\ **Post date:** [May 3, 2024, 8:45pm UTC](https://discuss.elastic.co/t/built-in-visualizations-dont-seem-to-work/358720/7 "2024-05-03T20:45:19Z")
Hmm... I see cef fields like `cef.extensions.ad.policyid`. Is that what you mean? ---
**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\ **Post date:** [May 3, 2024, 8:50pm UTC](https://discuss.elastic.co/t/built-in-visualizations-dont-seem-to-work/358720/8 "2024-05-03T20:50:39Z")
do you see `cef.extensions.ad.policyid.keyword` ? If not then you are probably fine ---
**Author:** ![artschooldropout](https://avatars.discourse-cdn.com/v4/letter/a/8491ac/32.png) [@artschooldropout](https://discuss.elastic.co/u/artschooldropout)\ **Post date:** [May 3, 2024, 9:02pm UTC](https://discuss.elastic.co/t/built-in-visualizations-dont-seem-to-work/358720/9 "2024-05-03T21:02:09Z")
Nope! Thank you for the prompt.