# Kibana data values after rollup **URL:** \ **Category:** Kibana\ **Tags:** rollups\ **Created:** [July 15, 2022, 8:02am UTC](https://discuss.elastic.co/t/kibana-data-values-after-rollup/309716 "2022-07-15T08:02:59Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![thirty2](https://avatars.discourse-cdn.com/v4/letter/t/a9a28c/32.png) [@thirty2](https://discuss.elastic.co/u/thirty2)\ **Post date:** [July 15, 2022, 8:02am UTC](https://discuss.elastic.co/t/kibana-data-values-after-rollup/309716/1 "2022-07-15T08:02:59Z")
Hi, in an index (_raw\_data_) where i have raw data i have records every minute. Each record has always the same value for a field called loss \>\>\> LOSS: 100 ![raw_data](https://us1.discourse-cdn.com/elastic/original/3X/a/2/a228b36d92ea33175809a5e3a33df76d8b9bf071.png) Then i created a rollup job for _raw\_data_ index, to rollup data every 5 minutes. Rollup is running, but when i am checking data in that new rollup index there i see two issues: 1. data are there not every 5minute but only every 1 hour. Why? 2. Values are 200 or 300 or 500. How is it possible since in _raw\_data_ value is always 100? ![rollup data](https://us1.discourse-cdn.com/elastic/original/3X/8/6/86c3a9697140d136d0505ab2be984c9957f6abba.png) This is an example for device A. When checking different device, records in rollup index are correct, every 5minutes + with correct values. Thanks ---
**Author:** ![LeeDr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leedr/32/9289_2.png) [@LeeDr](https://discuss.elastic.co/u/LeeDr)\ **Post date:** [July 15, 2022, 2:13pm UTC](https://discuss.elastic.co/t/kibana-data-values-after-rollup/309716/2 "2022-07-15T14:13:10Z")
Hi, Can you tell us what version of Kibana you're using and how you created the rollup jobs? Did you use the Kibana interface or the API? If you used Kibana maybe you could post a screenshot of the rollup configuration. Regards, Lee ---
**Author:** ![thirty2](https://avatars.discourse-cdn.com/v4/letter/t/a9a28c/32.png) [@thirty2](https://discuss.elastic.co/u/thirty2)\ **Post date:** [July 18, 2022, 7:44am UTC](https://discuss.elastic.co/t/kibana-data-values-after-rollup/309716/3 "2022-07-18T07:44:38Z")
Hi, Kibana version is 7.10.2. It was via Kibana UI: ![image](https://us1.discourse-cdn.com/elastic/original/3X/4/9/49c8f40e8fe96b6bdf9c43d11b21104f41bfe840.png) ![image](https://us1.discourse-cdn.com/elastic/original/3X/2/d/2ddd3f9f29dbc72e0f0aea22d5dd362480a26d97.png) Thanks ---
**Author:** ![LeeDr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leedr/32/9289_2.png) [@LeeDr](https://discuss.elastic.co/u/LeeDr)\ **Post date:** [July 18, 2022, 9:01pm UTC](https://discuss.elastic.co/t/kibana-data-values-after-rollup/309716/4 "2022-07-18T21:01:00Z")
When you're looking at this data, I think you're look at in in Discover? Do these values change when you select a smaller time range? I'm not sure what version of Kibana this changed in, but you used to see text below the histogram in Discover that showed the duration of each bar. You can manually set that as well but you may be using the Auto time interval. > [@thirty2](#): > > - data are there not every 5minute but only every 1 hour. Why? > - Values are 200 or 300 or 500. How is it possible since in _raw\_data_ value is always 100? > ![rollup data](https://us1.discourse-cdn.com/elastic/original/3X/8/6/86c3a9697140d136d0505ab2be984c9957f6abba.png) ---
**Author:** ![thirty2](https://avatars.discourse-cdn.com/v4/letter/t/a9a28c/32.png) [@thirty2](https://discuss.elastic.co/u/thirty2)\ **Post date:** [July 19, 2022, 7:03am UTC](https://discuss.elastic.co/t/kibana-data-values-after-rollup/309716/5 "2022-07-19T07:03:20Z")
Well, for the first time i noticed it while creating a visualization, then i check the values in Discover. Values are not changing, they are same. I do not see any reasonable explanation why i am getting values like this. ---
**Author:** ![LeeDr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leedr/32/9289_2.png) [@LeeDr](https://discuss.elastic.co/u/LeeDr)\ **Post date:** [July 21, 2022, 5:40pm UTC](https://discuss.elastic.co/t/kibana-data-values-after-rollup/309716/6 "2022-07-21T17:40:44Z")
I tried a simple rollup test and I also found problems in Discover. I filed this issue [Discover shows wrong values for rollup indices · Issue #136866 · elastic/kibana · GitHub](https://github.com/elastic/kibana/issues/136866) But what I also found is that if you look at the rollup date with some visualization the data appears correct. As I noted in that issue I filed, I can create a Data Table in Lens and the data appears as I expect. Please see if this also gives you the expected results. ---
**Author:** ![thirty2](https://avatars.discourse-cdn.com/v4/letter/t/a9a28c/32.png) [@thirty2](https://discuss.elastic.co/u/thirty2)\ **Post date:** [July 25, 2022, 7:37am UTC](https://discuss.elastic.co/t/kibana-data-values-after-rollup/309716/7 "2022-07-25T07:37:14Z")
I am not sure if we are talking here about same problem. As written in my origin post i see two issues: 1. data are there not every 5minute but only every 1 hour. Why? // i mean why in roll up index i have data not every 5 minutes but only every hour. 2. Values are 200 or 300 or 500. How is it possible since in _raw\_data_ value is always 100? // how is it possible to get value 200 or 300 in rollup, if the raw data has always value 100. I also see the wrong data in visualuzations. It was the first place where i noticed it. Raw data values: ![image](https://us1.discourse-cdn.com/elastic/original/3X/5/5/55a4bd17de6bb42898caeac150fc11cbdbb6363e.png) Values after rollup: ![image](https://us1.discourse-cdn.com/elastic/original/3X/a/b/abf8d9280fe159b87202e862fea3e12e77c2cde2.png) Thanks ---
**Author:** ![LeeDr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leedr/32/9289_2.png) [@LeeDr](https://discuss.elastic.co/u/LeeDr)\ **Post date:** [July 25, 2022, 10:28pm UTC](https://discuss.elastic.co/t/kibana-data-values-after-rollup/309716/8 "2022-07-25T22:28:28Z")
I'm reaching out to a few other people for suggestions in debugging your issue. You mentioned that; > [@thirty2](#): > > This is an example for device A. > When checking different device, records in rollup index are correct, every 5minutes + with correct values. How many different devices do you have rollup jobs for? Do any of your rollup jobs have 1 hour intervals? Are the index names, and the rollup index names all unique enough that they couldn't interfere with each other? Was this problematic rollup job created before the other working ones, or after? I'm thinking there must be something different either about the input data or the rollup job configuration itself. Have you tried deleting this rollup job and the rollup index and re-creating it? ---
**Author:** ![thirty2](https://avatars.discourse-cdn.com/v4/letter/t/a9a28c/32.png) [@thirty2](https://discuss.elastic.co/u/thirty2)\ **Post date:** [August 2, 2022, 7:05am UTC](https://discuss.elastic.co/t/kibana-data-values-after-rollup/309716/9 "2022-08-02T07:05:15Z")
Around 200 devices. Yes, i have 1h interval too. There it is even more strange, records i have in 5min are missing in 1h and opposite. 5min is called **5min-stats** , 1h is called **1h-stats** Yes, i tried to delete the job and create it again, but same results. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [August 30, 2022, 7:05am UTC](https://discuss.elastic.co/t/kibana-data-values-after-rollup/309716/10 "2022-08-30T07:05:37Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.