# Dashboard and visualization showing No results found, but Discover page shows data

**URL:** <https://discuss.elastic.co/t/dashboard-and-visualization-showing-no-results-found-but-discover-page-shows-data/319344>\
**Category:** Kibana\
**Tags:** elastic-stack-alerting\
**Created:** [November 19, 2022, 1:51pm UTC](https://discuss.elastic.co/t/dashboard-and-visualization-showing-no-results-found-but-discover-page-shows-data/319344 "2022-11-19T13:51:53Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![D3epDiv3r](https://avatars.discourse-cdn.com/v4/letter/d/a9adbd/32.png) [@D3epDiv3r](https://discuss.elastic.co/u/D3epDiv3r)\
**Post date:** [November 19, 2022, 1:51pm UTC](https://discuss.elastic.co/t/dashboard-and-visualization-showing-no-results-found-but-discover-page-shows-data/319344/1 "2022-11-19T13:51:53Z")

</div>

Hello team,  
I am using Elastic Stack 5.2.2, I have been able to parse logs from Suricata to Logstash and Elasticsearch which displays in the Kibana Discover page as seen below:

 ![Screenshot 2022-11-19 123112](https://us1.discourse-cdn.com/elastic/original/3X/4/0/4078679d5c66f77e27b506a4ca9503e4a2b982b8.png)

But whenever I go to the Dashboard tab and insert the Visualization I want, I do not get any data found or showing.

 ![Screenshot 2022-11-19 135032](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1a992dfb6062f3ca0d730437e2d715f80b959ba1.png)

Please can you kindly help me resolve this or tell me what to do 🙏 I have been on this setup for nearly 3 days now... ☹

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [November 19, 2022, 4:49pm UTC](https://discuss.elastic.co/t/dashboard-and-visualization-showing-no-results-found-but-discover-page-shows-data/319344/2 "2022-11-19T16:49:41Z")

</div>

Hi @D3epDiv3r First Version 5.2 is soooo Old and EOL you are probably not going to get much help

Elastic Stack on 8.5.1. and this would probably all work out OOTB for you using the suricata module

If you are just getting started with Elastic this would be a _ **much** _ better option / approach

> **[Suricata module | Filebeat Reference \[8.5\] | Elastic](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-module-suricata.html)**

But the little help I can offer... because you did not show any details

You parsed the data in Logstash?, where did you get the dashboards and mappings?

Did you create a template / mapping?

Most likely the Dashboards are not using the same fields / field names / field types.. that you mapped ... so if you open / edit one of the visualizations you should be able to see that.

Maybe it is not even using the correct index?

Most likely you did _not_ create a mapping so the fields are using the default mapping which creates 2 types a `text` and a `keyword` type and the visualization is not looking at the right fields.

Example your

`stats.decode.bytes`

really probably is a multi-field

`stats.decode.bytes` which is of type `text` \<!--- Probably what the viz is looking for but is the wrong type.  
and  
`stats.decode.bytes.keyword` which is of type `keyword` which is probably the right type but not what this viz is looking for

Me I would get up to date 8.5.1 and use the filebeat module direct to Elasticsearch  
Use the quick start for modules and get this all running much faster.

---

<div class="post-metadata">

**Author:** ![D3epDiv3r](https://avatars.discourse-cdn.com/v4/letter/d/a9adbd/32.png) [@D3epDiv3r](https://discuss.elastic.co/u/D3epDiv3r)\
**Post date:** [November 20, 2022, 3:04am UTC](https://discuss.elastic.co/t/dashboard-and-visualization-showing-no-results-found-but-discover-page-shows-data/319344/3 "2022-11-20T03:04:12Z")

</div>

Hey yeah, the issue was with the map and timelines, I had to parse new logs to logstash and max the timeline to 5 years then it showed the data needed! Thank you!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 18, 2022, 3:04am UTC](https://discuss.elastic.co/t/dashboard-and-visualization-showing-no-results-found-but-discover-page-shows-data/319344/4 "2022-12-18T03:04:24Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
