I am unable to understand why when I use metric max on this field - max(timestamp) I am getting a timestamp that is not within the range of timestamps I am seeing in Discover. I am certain that Discover shows the right data and nothing is missing.
Perhaps also worth to mention that date type of this 'timestamp' is number.
In the Panel Options tab in TSVB you should check that "Drop Last Bucket" is set to "No". By default it's set to Yes so it might drop the values from your discover interval.
Thank you for suggestion. I selected 'Drap Last Bucket' but it has not had any impact.
Another illustation of this problem is from Workbeanch where I use SQL:
select timestamp from ab-realtime
where v_sess_id = 843820799
order by timestamp;
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.