# Can't split series on visualization **URL:** \ **Category:** Kibana\ **Created:** [May 6, 2018, 3:27am UTC](https://discuss.elastic.co/t/cant-split-series-on-visualization/130725 "2018-05-06T03:27:42Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![hio77](https://avatars.discourse-cdn.com/v4/letter/h/eb9ed0/32.png) [@hio77](https://discuss.elastic.co/u/hio77)\ **Post date:** [May 6, 2018, 3:27am UTC](https://discuss.elastic.co/t/cant-split-series-on-visualization/130725/1 "2018-05-06T03:27:42Z")
Hey, bit of a weird one here. all my visualizations that do a split series aggregation seem to have stopped working. this happened about the same time that i had to rebuild my main node, so i suspected it was corrupted data. However, even recreating the searches it still doesn't seem to be working quite right. ![image](https://us1.discourse-cdn.com/elastic/original/3X/2/6/26a4ed33ba352ac6505182131e8c561720067683.png) if i remove the split series aggregation, all works well again. Visualization is as follows: ``` { "title": "Modem Speeds", "type": "line", "params": { "addTooltip": true, "addLegend": true, "legendPosition": "right", "showCircles": true, "interpolate": "linear", "scale": "linear", "drawLinesBetweenPoints": true, "radiusRatio": 9, "times": [], "addTimeMarker": false, "defaultYExtents": false, "setYExtents": false, "grid": { "categoryLines": false, "style": { "color": "#eee" } }, "categoryAxes": [ { "id": "CategoryAxis-1", "type": "category", "position": "bottom", "show": true, "style": {}, "scale": { "type": "linear" }, "labels": { "show": true, "truncate": 100 }, "title": { "text": "@timestamp per 10 minutes" } } ], "valueAxes": [ { "id": "ValueAxis-1", "name": "LeftAxis-1", "type": "value", "position": "left", "show": true, "style": {}, "scale": { "type": "linear", "mode": "normal", "setYExtents": false, "defaultYExtents": false }, "labels": { "show": true, "rotate": 0, "filter": false, "truncate": 100 }, "title": { "text": "Kbit" } } ], "seriesParams": [ { "show": "true", "type": "line", "mode": "normal", "data": { "label": "Downstream Speed", "id": "1" }, "valueAxis": "ValueAxis-1", "drawLinesBetweenPoints": true, "showCircles": true, "interpolate": "linear", "radiusRatio": 9 }, { "show": true, "mode": "normal", "type": "line", "drawLinesBetweenPoints": true, "showCircles": true, "interpolate": "linear", "data": { "id": "3", "label": "Upstream Speed" }, "valueAxis": "ValueAxis-1" }, { "show": true, "mode": "normal", "type": "line", "drawLinesBetweenPoints": true, "showCircles": true, "interpolate": "linear", "data": { "id": "5", "label": "Attainable Downstream Speeds" }, "valueAxis": "ValueAxis-1" }, { "show": true, "mode": "normal", "type": "line", "drawLinesBetweenPoints": true, "showCircles": true, "interpolate": "linear", "data": { "id": "6", "label": "Attainable Upstream Speeds" }, "valueAxis": "ValueAxis-1" } ], "type": "line" }, "aggs": [ { "id": "2", "enabled": true, "type": "date_histogram", "schema": "segment", "params": { "field": "@timestamp", "interval": "auto", "customInterval": "2h", "min_doc_count": 1, "extended_bounds": {} } }, { "id": "4", "enabled": true, "type": "significant_terms", "schema": "group", "params": { "field": "DataSource.raw", "size": 4 } }, { "id": "1", "enabled": true, "type": "avg", "schema": "metric", "params": { "field": "DownstreamSync", "customLabel": "Downstream Speed" } }, { "id": "3", "enabled": true, "type": "avg", "schema": "metric", "params": { "field": "UpstreamSync", "customLabel": "Upstream Speed" } }, { "id": "5", "enabled": true, "type": "avg", "schema": "metric", "params": { "field": "AttainableDownstream", "customLabel": "Attainable Downstream Speeds" } }, { "id": "6", "enabled": true, "type": "avg", "schema": "metric", "params": { "field": "AttainableUpstream", "customLabel": "Attainable Upstream Speeds" } } ], "listeners": {} } ``` The search on the data is very simple, Type:broadcombeat. Which is the datasource for all the data I'm trying to graph. Visualization is set to do the split series on DataSource.raw, which previously worked. Data is still structured in the way inwhich it should handle nicely. ![image](https://us1.discourse-cdn.com/elastic/original/3X/0/6/06d64c7a400b36e2be8996029007876943811828.png) i suspect there may have been some query logic changes that i'm hitting, but nothing in change logs or anything stick out at me. ---
**Author:** ![ppisljar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ppisljar/32/11588_2.png) [@ppisljar](https://discuss.elastic.co/u/ppisljar)\ **Post date:** [May 7, 2018, 1:25pm UTC](https://discuss.elastic.co/t/cant-split-series-on-visualization/130725/2 "2018-05-07T13:25:32Z")
You didn't update kibana or elasticsearch right ? This just suddenly broke ? ---
**Author:** ![hio77](https://avatars.discourse-cdn.com/v4/letter/h/eb9ed0/32.png) [@hio77](https://discuss.elastic.co/u/hio77)\ **Post date:** [May 8, 2018, 10:27am UTC](https://discuss.elastic.co/t/cant-split-series-on-visualization/130725/3 "2018-05-08T10:27:10Z")
Highly likely i updated it overnight and didnt test, thus not linking to a version change. I have since updated the whole ELK stack twice expecting it was just an error in the kibana build. but regardless, I've been unable to see any version changes that would add up to this. I'm running Kibana 5.6.9 JVM: 1.8.0\_171 ES: 5.6.9 ---
**Author:** ![hio77](https://avatars.discourse-cdn.com/v4/letter/h/eb9ed0/32.png) [@hio77](https://discuss.elastic.co/u/hio77)\ **Post date:** [May 14, 2018, 9:44am UTC](https://discuss.elastic.co/t/cant-split-series-on-visualization/130725/4 "2018-05-14T09:44:26Z")
Worked this out atlast. ``` "aggs": { "4": { "significant_terms": { "field": "DataSource.keyword", "size": 2 }, "aggs": { "1": { "avg": { "field": "DownstreamSync" } }, "3": { "avg": { "field": "UpstreamSync" } }, "5": { "avg": { "field": "AttainableDownstream" } }, "6": { "avg": { "field": "AttainableUpstream" } } } } } ``` aggregations are all working again. Change was .raw to .keyword - looking over changelogs for .keyword.... All makes sense now. Wups. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [June 11, 2018, 9:44am UTC](https://discuss.elastic.co/t/cant-split-series-on-visualization/130725/5 "2018-06-11T09:44:29Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.