# Kibana discover not showing data

**URL:** https://discuss.elastic.co/t/kibana-discover-not-showing-data/265918
**Category:** Kibana
**Created:** [March 2, 2021, 7:53am UTC](https://discuss.elastic.co/t/kibana-discover-not-showing-data/265918 "2021-03-02T07:53:28Z")
**Posts on this page:** 11
**Page:** 1

<div class="post-metadata">

### Author: ![Aniket\_Pant](https://avatars.discourse-cdn.com/v4/letter/a/77aa72/32.png) [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)
#### Post date: [March 2, 2021, 7:53am UTC](https://discuss.elastic.co/t/kibana-discover-not-showing-data/265918/1 "2021-03-02T07:53:28Z")

</div>

i have the following indices

1. log-pb-flow-2021.02.22-000001
2. log-pb-flow-2021.02.22-000002

```auto
health status index uuid pri rep docs.count docs.deleted store.size pri.store.size
green open log-pb-flow-2021.02.22-000001 iepJGgSAR6-gQ9SDh_WJ3w 1 1 265881 0 209mb 104.5mb
green open log-pb-flow-2021.03.01-000002 PpI7dOp7Ttyjcg3z1rl_DQ 1 1 28643 0 23.6mb 11.7mb

```

But Kibana discover can't show the data

 ![ha](https://us1.discourse-cdn.com/elastic/original/3X/8/d/8dcf841a7265746ba1a77bac890ce3250461ac9e.jpeg)

---

<div class="post-metadata">

### Author: ![flash1293](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/flash1293/32/41227_2.png) [@flash1293](https://discuss.elastic.co/u/flash1293)
#### Post date: [March 2, 2021, 8:58am UTC](https://discuss.elastic.co/t/kibana-discover-not-showing-data/265918/2 "2021-03-02T08:58:36Z")

</div>

In the top right you can see the time filter set to "Today". In your post there are two conflicting statements about the indices you have (`log-pb-flow-2021.02.22-000001` and `log-pb-flow-2021.02.22-000002 ` vs `log-pb-flow-2021.02.22-000001` and `log-pb-flow-2021.03.01-000002`), but given the time field is configured correctly, none of them would match "today". Try to expand the time range in the top right like the message in the center explains.

---

<div class="post-metadata">

### Author: ![Aniket\_Pant](https://avatars.discourse-cdn.com/v4/letter/a/77aa72/32.png) [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)
#### Post date: [March 2, 2021, 4:48pm UTC](https://discuss.elastic.co/t/kibana-discover-not-showing-data/265918/3 "2021-03-02T16:48:34Z")

</div>

I did that i set it to 7 days but nothing happened i have other indices log-wlb-sysmon-00001 log-wlb-application-00001 their data is coming

---

<div class="post-metadata">

### Author: ![Aniket\_Pant](https://avatars.discourse-cdn.com/v4/letter/a/77aa72/32.png) [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)
#### Post date: [March 3, 2021, 9:16am UTC](https://discuss.elastic.co/t/kibana-discover-not-showing-data/265918/4 "2021-03-03T09:16:48Z")

</div>

![ha1](https://us1.discourse-cdn.com/elastic/original/3X/7/5/75fddd9f360f74dbb66ebab16e802503ca5d5569.jpeg)  
The data is coming.. i have not done anything but yesterday data is not discover.

---

<div class="post-metadata">

### Author: ![Royal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/royal/32/77467_2.png) [@Royal](https://discuss.elastic.co/u/Royal)
#### Post date: [March 3, 2021, 10:04am UTC](https://discuss.elastic.co/t/kibana-discover-not-showing-data/265918/5 "2021-03-03T10:04:00Z")

</div>

Is this issue resolved?

---

<div class="post-metadata">

### Author: ![flash1293](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/flash1293/32/41227_2.png) [@flash1293](https://discuss.elastic.co/u/flash1293)
#### Post date: [March 3, 2021, 5:43pm UTC](https://discuss.elastic.co/t/kibana-discover-not-showing-data/265918/6 "2021-03-03T17:43:43Z")

</div>

Can you check the index from yesterday whether the timestamp field is there, has the right name and right type and is actually filled with data in the documents?

You can do this using the dev tools by querying elasticsearch directly. Like this

```auto
GET my-index-name/_mapping

GET my-index-name/_search

```

---

<div class="post-metadata">

### Author: ![Aniket\_Pant](https://avatars.discourse-cdn.com/v4/letter/a/77aa72/32.png) [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)
#### Post date: [March 13, 2021, 9:48am UTC](https://discuss.elastic.co/t/kibana-discover-not-showing-data/265918/7 "2021-03-13T09:48:53Z")

</div>

hey @flash1293 , the problem occured again today

```auto
GET /_cat/indices/log-wlb-sysmon*?v&pretty
health status index uuid pri rep docs.count docs.deleted store.size pri.store.size
green open log-wlb-sysmon-2021.03.13-000001 O-C3mMwUTo2dOVbppR6IUg 1 1 41582 502 55.4mb 26.8mb

```

 ![ha4](https://us1.discourse-cdn.com/elastic/original/3X/e/f/efc0cda77e655770df10d128e4153d4bdd5b4041.jpeg) ![ha5](https://us1.discourse-cdn.com/elastic/original/3X/3/e/3eee35f2860502f09a2ff49f8e8a9fcb81b80751.jpeg) ![ha6](https://us1.discourse-cdn.com/elastic/original/3X/1/4/14318b55c06393bad382d13bdfeecaa3f0938885.jpeg)

---

<div class="post-metadata">

### Author: ![Aniket\_Pant](https://avatars.discourse-cdn.com/v4/letter/a/77aa72/32.png) [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)
#### Post date: [March 13, 2021, 9:54am UTC](https://discuss.elastic.co/t/kibana-discover-not-showing-data/265918/8 "2021-03-13T09:54:55Z")

</div>

> [@flash1293](#):
>
> ```auto
> GET my-index-name/_search
> 
> ```

```auto
{
  "took" : 3,
  "timed_out" : false,
  "_shards" : {
    "total" : 1,
    "successful" : 1,
    "skipped" : 0,
    "failed" : 0
  },
  "hits" : {
    "total" : {
      "value" : 10000,
      "relation" : "gte"
    },
    "max_score" : 1.0,
    "hits" : [
      {
        "_index" : "log-wlb-sysmon-2021.03.13-000001",
        "_type" : "_doc",
        "_id" : "0f157aea9661dca667b49a785f273f824fd6ddb1",
        "_score" : 1.0,
        "_source" : {
          "target_process_name" : "startmenuexperiencehost.exe",
          "process_granted_access_orig" : "0x1400",
          "level" : "information",
          "event_timezone" : "UTC",
          "etl_processed_time" : "2021-03-13T09:33:59.590Z",

```

---

<div class="post-metadata">

### Author: ![Aniket\_Pant](https://avatars.discourse-cdn.com/v4/letter/a/77aa72/32.png) [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)
#### Post date: [March 13, 2021, 9:56am UTC](https://discuss.elastic.co/t/kibana-discover-not-showing-data/265918/9 "2021-03-13T09:56:46Z")

</div>

> [@flash1293](#):
>
> You can do this using the dev tools by querying elasticsearch directly. Like this
> 
> `GET my-index-name/_mapping`

```auto
{
  "log-wlb-sysmon-2021.03.13-000001" : {
    "mappings" : {
      "properties" : {
        "@timestamp" : {
          "type" : "date"
        },
        "@version" : {
          "type" : "text",
          "fields" : {
            "keyword" : {
              "type" : "keyword",
              "ignore_above" : 256
            }
          }
        },
        "Archived" : {
          "type" : "text",
          "fields" : {
            "keyword" : {
              "type" : "keyword",
              "ignore_above" : 256
            }
          }
        },
        "ClientInfo" : {
          "type" : "text",
          "fields" : {
            "keyword" : {
              "type" : "keyword",
              "ignore_above" : 256
            }
          }
        },

```

---

<div class="post-metadata">

### Author: ![flash1293](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/flash1293/32/41227_2.png) [@flash1293](https://discuss.elastic.co/u/flash1293)
#### Post date: [March 15, 2021, 10:00am UTC](https://discuss.elastic.co/t/kibana-discover-not-showing-data/265918/10 "2021-03-15T10:00:25Z")

</div>

Could you share the query Discover is running by clicking "Inspect" in the top right, then switching to the requests view?

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 12, 2021, 10:01am UTC](https://discuss.elastic.co/t/kibana-discover-not-showing-data/265918/11 "2021-04-12T10:01:02Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
