I'm having some problems with the Visual Builder Gauge visualization.
I have all the data on some given indices (say test_1, test_2, test_3, test_4) between the 2019/07/10 and 2019/07/20.
I wanted to make a percentage of the error events over the total (log_level: ERROR / log_level: *) and I'm using the filter ratio agg of the VB Gauge, as I successfully did in the past.
Now, couple of problems:
Differently from the past, if I use a parent/sibling aggregation after the Filter Ratio (like the Overall Average, which was necessary to get the right estimate in past releases), it shows me "No data to visualize".
If I only keep the Filter Ratio agg with the Count metric, it returns the right estimate only if I set a very large timespan, like
6 years ago-now, even if the data are only present withn the above-mentioned timerange.
Before you ask, I only have one temporal field (@timestamp edited in Logstash and recognized as correct time field by the index pattern).
Is it a bug of the 7.3 release? Otherwise, what can cause this strange behavior?
Thank you all!