# Filters set not impacting graph? **URL:** \ **Category:** Kibana\ **Tags:** canvas\ **Created:** [March 26, 2021, 3:05pm UTC](https://discuss.elastic.co/t/filters-set-not-impacting-graph/268512 "2021-03-26T15:05:59Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![tpnoonan](https://avatars.discourse-cdn.com/v4/letter/t/76d3ee/32.png) [@tpnoonan](https://discuss.elastic.co/u/tpnoonan)\ **Post date:** [March 26, 2021, 3:05pm UTC](https://discuss.elastic.co/t/filters-set-not-impacting-graph/268512/1 "2021-03-26T15:05:59Z")
I have two filters on a workpad, one for time and one for customer in this case. timefilterControl compact=true column="startTime" filterGroup="perfGroup" | render esdocs index="dynatrace-problems-_" fields="customer" sort=", asc" query="SELECT customer FROM "dynatrace-problems-_" GROUP BY customer ORDER BY customer ASC" | dropdownControl valueColumn="customer" filterColumn="customer.keyword" filterGroup="perfGroup" | render Then I have a graph that references the filter group that both filters above are associated with. filters group="perfGroup" | timelion query=".es(q=\_id:_, index="dynatrace-problems-_", metric=cardinality:\_id, timefield=startTime).label('Problem Count')" interval="1d" | pointseries x="@timestamp" y="sum(value)" color="project" | plot defaultStyle={seriesStyle bars=0.75} legend=false | render The time filter seems to apply, but the customer filter does not. I've tried having the two filters having their own group names and then referencing them separately and that didn't seem to work either. Anyone have any ideas? I'm using the latest elastic (7.12) ---
**Author:** ![markov00](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/markov00/32/33316_2.png) [@markov00](https://discuss.elastic.co/u/markov00)\ **Post date:** [April 1, 2021, 10:13am UTC](https://discuss.elastic.co/t/filters-set-not-impacting-graph/268512/2 "2021-04-01T10:13:56Z")
Hi, I'm not 100% sure but seems that timelion doesn't works fine with the dropdown filter. Can you try to use a ES SQL query instead? ---
**Author:** ![tpnoonan](https://avatars.discourse-cdn.com/v4/letter/t/76d3ee/32.png) [@tpnoonan](https://discuss.elastic.co/u/tpnoonan)\ **Post date:** [April 1, 2021, 3:29pm UTC](https://discuss.elastic.co/t/filters-set-not-impacting-graph/268512/3 "2021-04-01T15:29:45Z")
I mean, I could, for some of my data, but I've got a 10-12 page live presentation that I wanted to setup to report some data to our customer base. After spending a day or two just trying to prove out some use cases I came to the conclusion that Canvas is not ready for what I wanted to do. It needs to be able to filter "ALL" objects based on the filter set, however many are allowed. I've since fallen back to using Kibana and then embedding content into an iframe that's delivered to the customer. ---
**Author:** ![Kent\_Marten](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kent_marten/32/69653_2.png) [@Kent\_Marten](https://discuss.elastic.co/u/Kent_Marten)\ **Post date:** [April 1, 2021, 11:53pm UTC](https://discuss.elastic.co/t/filters-set-not-impacting-graph/268512/4 "2021-04-01T23:53:42Z")
Hi @tpnoonan Thanks for the feedback and for posting this issue. I will chat with my team and see if there are any other ideas to help you. I am the Product Manager responsible for Canvas. Would you be interested in jumping on a call, so I could learn more about how you are using canvas and the pain-points you have encountered? Let me know. Kent M. ---
**Author:** ![tpnoonan](https://avatars.discourse-cdn.com/v4/letter/t/76d3ee/32.png) [@tpnoonan](https://discuss.elastic.co/u/tpnoonan)\ **Post date:** [April 2, 2021, 3:38pm UTC](https://discuss.elastic.co/t/filters-set-not-impacting-graph/268512/5 "2021-04-02T15:38:52Z")
Thanks for the response @markov00. Is it possible with an ES SQL Query to group the results in a daily interval? I need count of documents by startTime. Here's an example document. The filters that I would involve would use the "customer" element and then timefilter using startTime. Typically showing a month of time and rolled up by day. {"\_index":"dynatrace-problems-2021","\_type":"\_doc","\_id":"576669061982728329\_1617336180000V2","\_version":1,"\_score":null,"fields":{"environment.keyword":["PRD"],"problemFilters.name.keyword":["DevOps"],"evidenceDetails.details.endTime":["2021-04-02T04:07:00.000Z"],"evidenceDetails.details.eventId.keyword":["-5623364224221843904\_1617335880000","576669061982728329\_1617336180000"],"severityLevel.keyword":["PERFORMANCE"],"impactedEntities.entityId.id.keyword":["SERVICE-CDF52097AD793C51"],"durationMins":[13],"evidenceDetails.details.unit":["MicroSecond"],"evidenceDetails.details.groupingEntity.entityId.id.keyword":["SERVICE-CDF52097AD793C51"],"title.keyword":["Response time degradation"],"rootCauseEntity.name.keyword":["amanprdg"],"problemFilters.id.keyword":["80625a21-feba-4b0b-98e0-982fe4945412"],"evidenceDetails.details.entity.name":["amanprdg","amanprdg","Unmapped Instance for amanprdg"],"evidenceDetails.details.entity.name.keyword":["amanprdg","amanprdg","Unmapped Instance for amanprdg"],"affectedEntities.entityId.type":["SERVICE"],"evidenceDetails.details.groupingEntity.name":["amanprdg"],"impactAnalysis.impacts.impactedEntity.entityId.type":["APPLICATION","SERVICE","SERVICE","APPLICATION","SERVICE"],"evidenceDetails.details.groupingEntity.entityId.type":["SERVICE"],"impactAnalysis.impacts.impactedEntity.entityId.id":["APPLICATION-3DA11D91C31A98E6","SERVICE-09B41A8923E6C506","SERVICE-216B6E27675B4AC6","APPLICATION-F3CC21300BB8312A","SERVICE-8FE2E4B3DE765F64"],"impactAnalysis.impacts.impactedEntity.name.keyword":["AMANDA Portal","XSSFilter (/XSSFilter)","WSAmandaSecurityService","AMANDA Back Office","AMANDA5 (/AMANDA5)"],"evidenceDetails.details.evidenceType":["EVENT","EVENT","TRANSACTIONAL"],"evidenceDetails.details.entity.entityId.type.keyword":["SERVICE","SERVICE","SERVICE\_INSTANCE"],"evidenceDetails.details.unit.keyword":["MicroSecond"],"evidenceDetails.details.groupingEntity.entityId.type.keyword":["SERVICE"],"impactAnalysis.impacts.estimatedAffectedUsers":[26,26,0,12,12],"customer.keyword":["COA"],"affectedEntities.name.keyword":["amanprdg"],"problemId.keyword":["576669061982728329\_1617336180000V2"],"evidenceDetails.details.displayName":["Response time degradation","Response time degradation","Client response time"],"impactAnalysis.impacts.impactedEntity.entityId.type.keyword":["APPLICATION","SERVICE","SERVICE","APPLICATION","SERVICE"],"impactedEntities.name":["amanprdg"],"problemFilters.id":["80625a21-feba-4b0b-98e0-982fe4945412"],"impactAnalysis.impacts.numberOfPotentiallyAffectedServiceCalls":[427,20,199],"displayId":["P-210422"],"status":["CLOSED"],"affectedEntities.entityId.id.keyword":["SERVICE-CDF52097AD793C51"],"evidenceDetails.details.startTime":["2021-04-02T03:58:00.000Z","2021-04-02T04:03:00.000Z","2021-04-02T03:44:00.000Z"],"durationHours":[0.21666667],"evidenceDetails.details.valueAfterChangePoint":[55736.023],"impactLevel.keyword":["SERVICES"],"rootCauseEntity.entityId.id.keyword":["SERVICE-CDF52097AD793C51"],"evidenceDetails.details.groupingEntity.entityId.id":["SERVICE-CDF52097AD793C51"],"impactAnalysis.impacts.impactedEntity.entityId.id.keyword":["APPLICATION-3DA11D91C31A98E6","SERVICE-09B41A8923E6C506","SERVICE-216B6E27675B4AC6","APPLICATION-F3CC21300BB8312A","SERVICE-8FE2E4B3DE765F64"],"evidenceDetails.details.entity.entityId.type":["SERVICE","SERVICE","SERVICE\_INSTANCE"],"evidenceDetails.details.groupingEntity.name.keyword":["amanprdg"],"status.keyword":["CLOSED"],"evidenceDetails.details.entity.entityId.id.keyword":["SERVICE-CDF52097AD793C51","SERVICE-CDF52097AD793C51","SERVICE\_INSTANCE-F823C60D6BB7BDB0"],"impactedEntities.entityId.type":["SERVICE"],"evidenceDetails.details.displayName.keyword":["Response time degradation","Response time degradation","Client response time"],"affectedEntities.entityId.type.keyword":["SERVICE"],"title":["Response time degradation"],"affectedEntities.entityId.id":["SERVICE-CDF52097AD793C51"],"severityLevel":["PERFORMANCE"],"problemFilters.name":["DevOps"],"evidenceDetails.totalCount":[3],"evidenceDetails.details.entity.entityId.id":["SERVICE-CDF52097AD793C51","SERVICE-CDF52097AD793C51","SERVICE\_INSTANCE-F823C60D6BB7BDB0"],"impactAnalysis.impacts.impactedEntity.name":["AMANDA Portal","XSSFilter (/XSSFilter)","WSAmandaSecurityService","AMANDA Back Office","AMANDA5 (/AMANDA5)"],"impactedEntities.entityId.id":["SERVICE-CDF52097AD793C51"],"startTime":["2021-04-02T04:03:00.000Z"],"rootCauseEntity.entityId.type.keyword":["SERVICE"],"evidenceDetails.details.eventType.keyword":["SERVICE\_RESPONSE\_TIME\_DEGRADED","SERVICE\_RESPONSE\_TIME\_DEGRADED"],"impactAnalysis.impacts.impactType.keyword":["APPLICATION","SERVICE","SERVICE","APPLICATION","SERVICE"],"impactedEntities.name.keyword":["amanprdg"],"impactAnalysis.impacts.impactType":["APPLICATION","SERVICE","SERVICE","APPLICATION","SERVICE"],"evidenceDetails.details.rootCauseRelevant":[true,true,true],"rootCauseEntity.name":["amanprdg"],"rootCauseEntity.entityId.type":["SERVICE"],"evidenceDetails.details.evidenceType.keyword":["EVENT","EVENT","TRANSACTIONAL"],"evidenceDetails.details.eventType":["SERVICE\_RESPONSE\_TIME\_DEGRADED","SERVICE\_RESPONSE\_TIME\_DEGRADED"],"impactLevel":["SERVICES"],"environment":["PRD"],"affectedEntities.name":["amanprdg"],"impactedEntities.entityId.type.keyword":["SERVICE"],"displayId.keyword":["P-210422"],"recentComments.totalCount":[0],"endTime":["2021-04-02T04:16:00.000Z"],"rootCauseEntity.entityId.id":["SERVICE-CDF52097AD793C51"],"problemId":["576669061982728329\_1617336180000V2"],"evidenceDetails.details.eventId":["-5623364224221843904\_1617335880000","576669061982728329\_1617336180000"],"evidenceDetails.details.valueBeforeChangePoint":[1567.77],"customer":["COA"]},"sort":[1617336180000,13]} ---
**Author:** ![tpnoonan](https://avatars.discourse-cdn.com/v4/letter/t/76d3ee/32.png) [@tpnoonan](https://discuss.elastic.co/u/tpnoonan)\ **Post date:** [April 2, 2021, 3:41pm UTC](https://discuss.elastic.co/t/filters-set-not-impacting-graph/268512/6 "2021-04-02T15:41:25Z")
@Kent_Marten - Thanks for reaching out, hopefully one of the times that I proposed works for you. -Tommy ---
**Author:** ![Felix\_Roessel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/felix_roessel/32/41623_2.png) [@Felix\_Roessel](https://discuss.elastic.co/u/Felix_Roessel)\ **Post date:** [April 3, 2021, 8:28am UTC](https://discuss.elastic.co/t/filters-set-not-impacting-graph/268512/7 "2021-04-03T08:28:19Z")
Also If you like to learn from examples you may find this interesting: > **[Kibana Canvas examples | Download now from Elastic content share](https://elastic-content-share.eu/downloads/category/kibana/kibana-canvas-examples/)** > > Download Kibana Canvas examples or deploy directly into your Elastic Cloud deployments. Our Kibana Canvas examples helping you to quickly start. % ---
**Author:** ![markov00](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/markov00/32/33316_2.png) [@markov00](https://discuss.elastic.co/u/markov00)\ **Post date:** [April 6, 2021, 10:56am UTC](https://discuss.elastic.co/t/filters-set-not-impacting-graph/268512/8 "2021-04-06T10:56:05Z")
> [@tpnoonan](#): > > Is it possible with an ES SQL Query to group the results in a daily interval? Yes sure, you can use a query like: ```auto SELECT HISTOGRAM("@timestamp", INTERVAL 1 DAY) as day, count(*) as count FROM "kibana_sample_data_logs" GROUP BY day ``` to group by a day interval of a specific time field (in my usecase it was @timestamp) and apply whatever aggregation you are interested in. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [May 4, 2021, 10:56am UTC](https://discuss.elastic.co/t/filters-set-not-impacting-graph/268512/9 "2021-05-04T10:56:20Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.