Get visualization of missing data

Elastic Stack Kibana
2

Hi, probably one way to do that is:

  • create a data table in TSVB
  • pick Entire time range on the Data timerange mode in the Panel options.
  • Select the last month as time interval
  • specify the group by related to your sources field
  • keep the current count metric aggregation
  • on the options panel of your count metric aggregation apply a filter: like @timestamp >= now-48h

This should basically get all the sources available in the last month but counts the number of documents only for the documents with a timestamp greater than now - 48h. In the table, will appear all your sources with no data in the last 48 hours at 0.
You can also specify a text color if the metric is at zero