# Canvas & .monitoring-es-6\* **URL:** \ **Category:** Kibana\ **Tags:** canvas\ **Created:** [January 8, 2019, 2:55pm UTC](https://discuss.elastic.co/t/canvas-monitoring-es-6/163385 "2019-01-08T14:55:34Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![rog\_NB](https://avatars.discourse-cdn.com/v4/letter/r/5fc32e/32.png) [@rog\_NB](https://discuss.elastic.co/u/rog_NB)\ **Post date:** [January 8, 2019, 2:55pm UTC](https://discuss.elastic.co/t/canvas-monitoring-es-6/163385/1 "2019-01-08T14:55:35Z")
Hello all I'm tring to get a simple graph of our Elasticsearch's Document count over time. The Canvas Layer has 3 elements: - Time filter - Area Chart - Debug Time filter's only one setting (Column in Display) points to "timestamp" (without the @) I've set it to "Last 24 hours" . Debug and Area Chart has the same settings in "Data" I've tried to do the following: ``` filters | esdocs index=".monitoring-es-6*" fields="timestamp, node_stats.indices.docs.count" sort="timestamp, asc" query="_exists_:node_stats.indices.docs.count" | pointseries x="timestamp" y="node_stats.indices.docs.count" | plot defaultStyle={seriesStyle lines=1 fill=1} | render ``` Area Chart: On the X-axis you see only about 30 secs (instead of 24h) and on Y-axis starts the top number by 1.00 and the bottom number is -1.00. And of course, I don't see any line, it's a blank white area. Debug: I see here clearly a timestamp in format like "2019-01-01T00:00:00.000Z" plus below a number in the billiions for the filed _node\_stats.indices.docs.count_ Can anyone let me know, how I do a nice graph of these docs'counts? thanks rog ---
**Author:** ![Nathan\_Reese](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nathan_reese/32/84829_2.png) [@Nathan\_Reese](https://discuss.elastic.co/u/Nathan_Reese)\ **Post date:** [January 9, 2019, 2:27am UTC](https://discuss.elastic.co/t/canvas-monitoring-es-6/163385/2 "2019-01-09T02:27:00Z")
`esdocs` returns individual documents from elasticsearch. Only the first 100 documents are returned by default. Most likely, your results only cover the first 30 seconds. Use the visualization application, which will display aggregation results, to visualize large data sets. ---
**Author:** ![rog\_NB](https://avatars.discourse-cdn.com/v4/letter/r/5fc32e/32.png) [@rog\_NB](https://discuss.elastic.co/u/rog_NB)\ **Post date:** [January 9, 2019, 7:39am UTC](https://discuss.elastic.co/t/canvas-monitoring-es-6/163385/3 "2019-01-09T07:39:13Z")
I would like to know what the daily data growth is like and thus also check whether data arrive and are processed evenly. The time span should be around 60 days. I want to use canvas, because then I can include the CPU load, bandwidth and disk usage in the overview page. Well... does this work with canvas? Thanks roger ---
**Author:** ![Nathan\_Reese](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nathan_reese/32/84829_2.png) [@Nathan\_Reese](https://discuss.elastic.co/u/Nathan_Reese)\ **Post date:** [January 9, 2019, 4:01pm UTC](https://discuss.elastic.co/t/canvas-monitoring-es-6/163385/4 "2019-01-09T16:01:10Z")
You can use the "Elasticsearch SQL" data source to display aggregation results in Canvas. Checkout the `Grouping` section in [An Introduction to Elasticsearch SQL with Practical Examples - Part 2](https://www.elastic.co/blog/an-introduction-to-elasticsearch-sql-with-practical-examples-part-2). `SELECT AVG(FlightTimeHour)` is pulling aggregation results. With aggregations, you can group your data in elasticsearch and calculate metrics. Then, only those metrics get returned to the browser. This is a scalable solution that will allow the visualization of large data sets. ---
**Author:** ![rog\_NB](https://avatars.discourse-cdn.com/v4/letter/r/5fc32e/32.png) [@rog\_NB](https://discuss.elastic.co/u/rog_NB)\ **Post date:** [January 10, 2019, 7:45am UTC](https://discuss.elastic.co/t/canvas-monitoring-es-6/163385/5 "2019-01-10T07:45:58Z")
Thank you Nathan Now I'll see the time as I whish. I've added now the Data Table element besides the debug element. In both elements I see exact the same data. Even on the graphs I see the correct time stamp - but the line is still on zero. This time I tried with element Line chart. This is the request: > filters > | essql > query="SELECT node\_stats.indices.docs.count, timestamp FROM ".monitoring-es-6\*" WHERE node\_stats.indices.docs.count \> 1 AND timestamp \> '2019-01-08T08:00:00.000Z' AND timestamp \< '2019-01-08T08:15:00.000Z' ORDER BY timestamp ASC" > | pointseries x="timestamp" y="mean(node\_stats.indices.docs.count)" > | plot defaultStyle={seriesStyle lines=3} > | render Do you have any Idea, why my Graphs shows only zero's? I've tried this also with different fields - but without luck - always zero... thank you rog ---
**Author:** ![rog\_NB](https://avatars.discourse-cdn.com/v4/letter/r/5fc32e/32.png) [@rog\_NB](https://discuss.elastic.co/u/rog_NB)\ **Post date:** [January 11, 2019, 9:44am UTC](https://discuss.elastic.co/t/canvas-monitoring-es-6/163385/6 "2019-01-11T09:44:45Z")
Oh, well, the problem is solved! I had to update kibana: yum update kibana ---\> Package kibana.x86\_64 0:6.5.2-1 will be updated ---\> Package kibana.x86\_64 0:6.5.4-1 will be an update Now I do see the graphs. Anyway, I couldn't find any information in the change logs that would have put me up to it. I only noticed this when I tried to recreate the same configurations in the lab - the new version was already installed there. greetings rog ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [February 8, 2019, 9:44am UTC](https://discuss.elastic.co/t/canvas-monitoring-es-6/163385/7 "2019-02-08T09:44:47Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.