We've got Twitter data in the form of tweets in ES and I'm building views for analyzing them.
Different timelines (histograms with tweet.created_at) showing tweets over time are used to spot patterns, outliers or strange things.
It's also useful to analyse user.created_at together with these timelines. For example, selecting a spike in a histogram over user.created_at to filter the tweet timelines to see what these users are tweeting.
My index pattern has tweet.created_at as the time-field. There's no problem in creating histograms based on this field.
But when I try to create a histogram based on user.created_at I get strange problems. First, the value "auto" is removed in the interval setting. And when setting the interval manually I get an empty view. A "solution" I found here was to create an alias index in ES and then a new index pattern for that one in Kibana with user.created_at as time-field. This solution allowed me to have both types of histograms in the same dashboard: tweets over time and users over time.
But the problem is that both histograms are filtered to the time filter, so if I want to see one year of tweets I also am limited to seeing users created only this year. A "solution" I found here was to set a very wide time filter. But the problem is that the two histograms are connected via two different fields (tweet.created_at and user.created_at) and the filtering therefore gets completely wrong for my purpose. If I select a certain two days worth of tweets in the tweets histogram the result in the user histogram would be users created these two days, and NOT the distribution over time of user_created_at for the selected tweets (like I want).
How do I solve this problem?