# Difficulties with creating Kibana dashboard

**URL:** <https://discuss.elastic.co/t/difficulties-with-creating-kibana-dashboard/381341>\
**Category:** Kibana\
**Created:** [August 26, 2025, 9:37am UTC](https://discuss.elastic.co/t/difficulties-with-creating-kibana-dashboard/381341 "2025-08-26T09:37:09Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![cow\_on\_lsd](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cow_on_lsd/32/144438_2.png) [@cow\_on\_lsd](https://discuss.elastic.co/u/cow_on_lsd)\
**Post date:** [August 26, 2025, 9:37am UTC](https://discuss.elastic.co/t/difficulties-with-creating-kibana-dashboard/381341/1 "2025-08-26T09:37:09Z")

</div>

I am collecting SNMP data from my switch. A sample of the data that I am getting looks like this:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/1/0/100044cc4fffc6b39f2eab767710fdb787668059.png)  
[here the pastebin](https://paste.opensuse.org/pastes/bec3e52c11ad)

Every interface is generating its own document. I want to display for each interface its description, its operational status and its physical address.

I have tried creating a table by having the first row as interface.id and the metric aka second row as the \_descr.keyword like this

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/4/1/41cb38416593e1d15f14a51e03c097ec0636fa71.png)

But nothing is showing up for the majority of the interfaces, even if the value very clearly is there.

(an example)

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/5/1/517be5e1fab00e03b28895c53d02446d67df4df8.png)

I am sure I am doing something wrong, as ELK is made to monitor / visualize these kind of things. Any kind of help or direction to relevant documentation would be deeply appreciated.

---

<div class="post-metadata">

**Author:** ![Tortoise](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tortoise/32/147587_2.png) [@Tortoise](https://discuss.elastic.co/u/Tortoise)\
**Post date:** [August 26, 2025, 9:49am UTC](https://discuss.elastic.co/t/difficulties-with-creating-kibana-dashboard/381341/2 "2025-08-26T09:49:11Z")

</div>

Hello @cow_on_lsd

**first screenshot =\>**

```auto
interface.id = 307
interface._descr = 5/1/51

```

**second screenshot =\>**

```auto
interface.id = 0
interface._descr = 1/1/1

```

**third screenshot =\>**

```auto
interface.id = 2
interface._descry = 1/1/2

```

From \*\*second screenshot \*\*  
interface.id = 1,000,000/2,000,000/3,000,000... is having descr blank

So for the records where you do not see the descr, could you please check/share the latest document similar to **third screenshot.**

This must be issue with your data if it is visible for few records & missing for others.

Thanks!!

---

<div class="post-metadata">

**Author:** ![cow\_on\_lsd](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cow_on_lsd/32/144438_2.png) [@cow\_on\_lsd](https://discuss.elastic.co/u/cow_on_lsd)\
**Post date:** [August 26, 2025, 9:55am UTC](https://discuss.elastic.co/t/difficulties-with-creating-kibana-dashboard/381341/3 "2025-08-26T09:55:55Z")

</div>

Sadly I am not missing any values.

I took a random interface (29). This screenshot is the last document of this interface, \_descr is clearly defined.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/a/5/a5bbf8aa55fff19104ea39e15d6d594373a2f937.png)

But it is not showing up anywhere. Same thing is happening for every other interface id.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/f/7/f7b5a77534fdb6e7b11940a94e8aee77da5cd625.png)

What I am noticing is, that Kibana is not treating 29 as 29 but as 29'000'000 for some reason.

Thank you for your help.

---

<div class="post-metadata">

**Author:** ![Tortoise](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tortoise/32/147587_2.png) [@Tortoise](https://discuss.elastic.co/u/Tortoise)\
**Post date:** [August 26, 2025, 11:10am UTC](https://discuss.elastic.co/t/difficulties-with-creating-kibana-dashboard/381341/4 "2025-08-26T11:10:12Z")

</div>

Hello @cow_on_lsd

I believe it must be something with your data , could you please share the mappings?

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/7/2/724f8ec0c074e727f52a7790c162958ce705e67d.png)

Thanks!!

---

<div class="post-metadata">

**Author:** ![cow\_on\_lsd](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cow_on_lsd/32/144438_2.png) [@cow\_on\_lsd](https://discuss.elastic.co/u/cow_on_lsd)\
**Post date:** [August 26, 2025, 2:28pm UTC](https://discuss.elastic.co/t/difficulties-with-creating-kibana-dashboard/381341/5 "2025-08-26T14:28:22Z")

</div>

As my data might change slightly, I have not set up a "permanent" mapping yet but am still relying on dynamic mapping (afaik). My mapping in [json](https://paste.opensuse.org/pastes/6addc6391f20) and here as screenshot

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/b/d/bd476659b133db7c9a05f08c23c42ad016fe4a6a.png)

Thank you again for taking your time with this.

---

<div class="post-metadata">

**Author:** ![Tortoise](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tortoise/32/147587_2.png) [@Tortoise](https://discuss.elastic.co/u/Tortoise)\
**Post date:** [August 28, 2025, 9:53am UTC](https://discuss.elastic.co/t/difficulties-with-creating-kibana-dashboard/381341/6 "2025-08-28T09:53:30Z")

</div>

Hello @cow_on_lsd

Tried with the mappings provided by you & did not see any issues.

Maybe you can try to filter the values \< 50 to see if there are really 2 id’s 29 & 29,000,000

It has to be the data stored in the index maybe review it once via discover which can help why the descr is not populated?

Thanks!!
