I have a set of devices that I monitor, and for which the data lands into Elastic. For context: each of these devices draw electrical power from two sources, and I want to be aware, using a Kibana visualization, of which source each device is set to be pulling from. This is done via a switch, and the device reports on the position of that switch, in the form of a set of booleans.
One easy option to show that data was via a data table visualization. In plain English, "Give me the max value of each switch setting". The data I get is sane, and reliable:
(Some devices report all zeroes; that's because they are powered off right now.)
Now, I wanted to show that information in a more eye-catching way, and found that in Visual Builder, I could dynamically color these values. Good! I settled on blue for "False" and pink for "True". I set up my metrics once again to be "Max value of each switch setting". However, I get nothing but zeroes:
This is I keep my time period to "Last 15 minutes". If I increase the time period, once I got "Last 2 hours", I finally get data that looks real:
I am not sure I understand what is going on here. Why would Visual Builder misreport on the switch settings when the Data Table works right out of the box? I suppose it has to do something with the metrics or panel options in Visual Builder. Here's how I set things up:
Whether I specify a field/aggregate in the Options tab or not doesn't change the end result.
What am I doing wrong here? How can I make the Visual Builder table report the switch position accurately? It's worth noting that I'll use this visualization only across short time periods (last few minutes) so I'm not too worried about value overlap due to the chosen aggregation.