# Canvas - Timefilter issue

**URL:** <https://discuss.elastic.co/t/canvas-timefilter-issue/287425>\
**Category:** Kibana\
**Tags:** canvas\
**Created:** [October 22, 2021, 10:10am UTC](https://discuss.elastic.co/t/canvas-timefilter-issue/287425 "2021-10-22T10:10:38Z")\
**Posts on this page:** 13\
**Page:** 1

<div class="post-metadata">

**Author:** ![r.pollak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/r.pollak/32/96284_2.png) [@r.pollak](https://discuss.elastic.co/u/r.pollak)\
**Post date:** [October 22, 2021, 10:10am UTC](https://discuss.elastic.co/t/canvas-timefilter-issue/287425/1 "2021-10-22T10:10:38Z")

</div>

Hi together,  
without using a time filter, the graph shows several data.  
All date have a timestamp of 23. September 2021

 ![2021-10-22 11_55_48-Canvas - Kibana](https://us1.discourse-cdn.com/elastic/original/3X/5/d/5d569e7a625ffaf44048eb36e7dea18796580364.jpeg)

After adding a time filer with a time range "last year" the graphs shows no more data.

 ![2021-10-22 11_56_54-Canvas - Kibana](https://us1.discourse-cdn.com/elastic/original/3X/e/9/e9319802fcaef663b22e92e4661770390765980e.jpeg)

Can you point me in the right direction?

Regards,  
Rainer

---

<div class="post-metadata">

**Author:** ![Felix\_Roessel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/felix_roessel/32/41623_2.png) [@Felix\_Roessel](https://discuss.elastic.co/u/Felix_Roessel)\
**Post date:** [October 23, 2021, 7:39am UTC](https://discuss.elastic.co/t/canvas-timefilter-issue/287425/2 "2021-10-23T07:39:03Z")

</div>

Is that the only filter you have in your workpad?

---

<div class="post-metadata">

**Author:** ![r.pollak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/r.pollak/32/96284_2.png) [@r.pollak](https://discuss.elastic.co/u/r.pollak)\
**Post date:** [October 23, 2021, 9:23am UTC](https://discuss.elastic.co/t/canvas-timefilter-issue/287425/3 "2021-10-23T09:23:36Z")

</div>

Hi Felix,  
thanks for your fast response.  
No, the only filter is the time filter "last year". All my data are in this time interval.  
I have added the debug filter for my workpad.

 ![grafik](https://us1.discourse-cdn.com/elastic/original/3X/d/1/d12dd558dd05b24c69affbf47db0998c1588f871.png)

---

<div class="post-metadata">

**Author:** ![Felix\_Roessel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/felix_roessel/32/41623_2.png) [@Felix\_Roessel](https://discuss.elastic.co/u/Felix_Roessel)\
**Post date:** [October 23, 2021, 9:39am UTC](https://discuss.elastic.co/t/canvas-timefilter-issue/287425/4 "2021-10-23T09:39:51Z")

</div>

The filter looks fine. What about the expression in your visuals? Can you copy / paste them too, pls?

---

<div class="post-metadata">

**Author:** ![r.pollak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/r.pollak/32/96284_2.png) [@r.pollak](https://discuss.elastic.co/u/r.pollak)\
**Post date:** [October 23, 2021, 10:06am UTC](https://discuss.elastic.co/t/canvas-timefilter-issue/287425/5 "2021-10-23T10:06:24Z")

</div>

Here are the two expressions:

filters  
| esdocs index="index-csv" fields=""  
| math "size('Computer Name')"  
| metric "Records"  
metricFont={font size=48 family="'Open Sans', Helvetica, Arial, sans-serif" color="#000000" align="center" lHeight=48}

labelFont={font size=14 family="'Open Sans', Helvetica, Arial, sans-serif" color="#000000" align="center"} metricFormat="0,0.[000]"  
| render

filters

| esdocs index="index-csv" fields=""  
| pointseries x="Timestamp" y="size('Computer Name')" color="Computer Name"  
| plot defaultStyle={seriesStyle bars=0.75} legend="ne"  
| render

---

<div class="post-metadata">

**Author:** ![Felix\_Roessel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/felix_roessel/32/41623_2.png) [@Felix\_Roessel](https://discuss.elastic.co/u/Felix_Roessel)\
**Post date:** [October 23, 2021, 11:05am UTC](https://discuss.elastic.co/t/canvas-timefilter-issue/287425/6 "2021-10-23T11:05:20Z")

</div>

Well...

your Timefilter is filtering on the file @timestamp.  
Your pointseries is using the field Timestamp.

Does your index has the @timestamp field?

---

<div class="post-metadata">

**Author:** ![r.pollak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/r.pollak/32/96284_2.png) [@r.pollak](https://discuss.elastic.co/u/r.pollak)\
**Post date:** [October 23, 2021, 11:44am UTC](https://discuss.elastic.co/t/canvas-timefilter-issue/287425/7 "2021-10-23T11:44:56Z")

</div>

Yes, I have also created several visuals for a dashboard based on this index filtering on @timespamp without any problems,

```auto
{
  "mappings": {
    "_doc": {
      "_meta": {
        "created_by": "file-data-visualizer"
      },
      "properties": {
        "Computer Name": {
          "type": "keyword"
        },
        "Context": {
          "type": "keyword"
        },
        "Duration": {
          "type": "keyword"
        },
        "Event": {
          "type": "keyword"
        },
        "Extended Id": {
          "type": "keyword"
        },
        "Id": {
          "type": "keyword"
        },
        "Level": {
          "type": "long"
        },
        "Media": {
          "type": "keyword"
        },
        "Page": {
          "type": "long"
        },
        "Page Duration": {
          "type": "keyword"
        },
        "Previous Page": {
          "type": "long"
        },
        "Project": {
          "type": "keyword"
        },
        "Timestamp": {
          "type": "keyword"
        },
        "Title": {
          "type": "keyword"
        }
      }
    }
  }
}

```

---

<div class="post-metadata">

**Author:** ![Felix\_Roessel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/felix_roessel/32/41623_2.png) [@Felix\_Roessel](https://discuss.elastic.co/u/Felix_Roessel)\
**Post date:** [October 23, 2021, 11:53am UTC](https://discuss.elastic.co/t/canvas-timefilter-issue/287425/8 "2021-10-23T11:53:18Z")

</div>

Your Timestamp field is a keyword and not an actual date field.  
This needs to get converted during ingest or using a runtime field.  
You may see data on a normal dashboard as you also can see data in canvas.  
But the time picker for the normal dashboard is most likely disabled as you dont have any date field in your mapping.

---

<div class="post-metadata">

**Author:** ![r.pollak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/r.pollak/32/96284_2.png) [@r.pollak](https://discuss.elastic.co/u/r.pollak)\
**Post date:** [October 23, 2021, 11:57am UTC](https://discuss.elastic.co/t/canvas-timefilter-issue/287425/9 "2021-10-23T11:57:54Z")

</div>

Hi Felix,

thanks for your create support!  
Have a great weekend!  
Regards,  
Rainer

---

<div class="post-metadata">

**Author:** ![r.pollak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/r.pollak/32/96284_2.png) [@r.pollak](https://discuss.elastic.co/u/r.pollak)\
**Post date:** [October 23, 2021, 12:10pm UTC](https://discuss.elastic.co/t/canvas-timefilter-issue/287425/10 "2021-10-23T12:10:51Z")

</div>

Sorry, but I have changed the format do date:

 ![grafik](https://us1.discourse-cdn.com/elastic/original/3X/e/7/e7313b3d0e49b247f84f27f7e5e5f1229fe943ac.png)

some outcome.

---

<div class="post-metadata">

**Author:** ![Felix\_Roessel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/felix_roessel/32/41623_2.png) [@Felix\_Roessel](https://discuss.elastic.co/u/Felix_Roessel)\
**Post date:** [October 23, 2021, 12:15pm UTC](https://discuss.elastic.co/t/canvas-timefilter-issue/287425/11 "2021-10-23T12:15:30Z")

</div>

In canvas you need to configure the timefilter to filter your custom time field. The @ before @timestsmp is part of the default timestamp name.  
Your time field is called Timestamp without the @ sign. Thats a difference.

The configuration is called Column in the sidebar

---

<div class="post-metadata">

**Author:** ![r.pollak](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/r.pollak/32/96284_2.png) [@r.pollak](https://discuss.elastic.co/u/r.pollak)\
**Post date:** [October 23, 2021, 2:15pm UTC](https://discuss.elastic.co/t/canvas-timefilter-issue/287425/12 "2021-10-23T14:15:01Z")

</div>

Smal change .. big difference!  
Thanks

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 20, 2021, 2:15pm UTC](https://discuss.elastic.co/t/canvas-timefilter-issue/287425/13 "2021-11-20T14:15:37Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.