# Kibana index pattern looks empty while related Elasticsearch index contains data

**URL:** <https://discuss.elastic.co/t/kibana-index-pattern-looks-empty-while-related-elasticsearch-index-contains-data/231217>\
**Category:** Kibana\
**Created:** [May 5, 2020, 8:05pm UTC](https://discuss.elastic.co/t/kibana-index-pattern-looks-empty-while-related-elasticsearch-index-contains-data/231217 "2020-05-05T20:05:13Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![renim](https://avatars.discourse-cdn.com/v4/letter/r/ecd19e/32.png) [@renim](https://discuss.elastic.co/u/renim)\
**Post date:** [May 5, 2020, 8:05pm UTC](https://discuss.elastic.co/t/kibana-index-pattern-looks-empty-while-related-elasticsearch-index-contains-data/231217/1 "2020-05-05T20:05:13Z")

</div>

Hi there.  
Im newbie in ELK and I ve got a trouble 🙂  
I have fresh install of ELK 7.6.2 and I want to log some value from my app via REST. So I make such calls:

```auto
POST http://es-host/app-metrics/reqs-count-doc 
{"dt":"2020-05-05T23:43:06.705Z","reqs_count": 41}

```

everything looks fine - I see all posted data via

```auto
    GET http://es-host/app-metrics/_search

    {
        ...
        "hits": {
            ... 
            "hits": [
                {
                    "_index": "app-metrics",
                    "_type": "reqs-count-doc",
                    "_id": "HpcF5nEBNHYsMieKCHIv",
                    "_score": 1,
                    "_source": {
                        "@timestamp": "2020-05-06T00:07:01.551Z",
                        "reqs_count": 90
                    }
                },
                {
                    "_index": "app-metrics",
                    "_type": "reqs-count-doc",
                    "_id": "AZcF5nEBNHYsMieK83Ss",
                    "_score": 1,
                    "_source": {
                        "@timestamp": "2020-05-06T00:08:01.841Z",
                        "reqs_count": 67
                    }
                }, ...

```

also I see auto-created index in elasticsearch with such mapping:

```auto
     {
      "mapping": {
        "reqs-count-doc": {
          "properties": {
            "@timestamp": {
              "type": "date"
            },
            "reqs_count": {
              "type": "long"
            }
          }
        }
      }
    }

```

Next I created kibana index pattern via WebUI:

- opened Management/Kibana/Index Patterns/Create
- entered pattern "app-metrics" - got a tip about one matching index
- chosen @timestamp field as Time Filter Field Name  
In created pattern I see declaration of both data fields passed to elastic: @timestamp:date and reqs\_count:number. Both are searchable, aggregatable and not excluded.

But when I try to view this pattern in Discover tab of Kibana - I get nothing (even choosing time period from 100 years ago) and there is an empty list of Available Fields on the left side.  
Also when I try to create Visualisation for this data - same empty result is returned...

All actions were made with "elastic" default user.

I have no idea - what was done wrong... appreciate any help.  
Thanks in advance.

---

<div class="post-metadata">

**Author:** ![renim](https://avatars.discourse-cdn.com/v4/letter/r/ecd19e/32.png) [@renim](https://discuss.elastic.co/u/renim)\
**Post date:** [May 6, 2020, 6:13am UTC](https://discuss.elastic.co/t/kibana-index-pattern-looks-empty-while-related-elasticsearch-index-contains-data/231217/2 "2020-05-06T06:13:05Z")

</div>

Strange things:  
I left elk as it was for some time. Next day in the morning I opened elk again and saw logs for created index in Discover tab. But logs were printed not from the moment I started to collect - it started to be printed from some moment - couple of hours before I opened it (time filter was set up correctly - from hundred years ago 🙂 ).

Next thing I done ( of course 🙂 ) was rebuilding indices for experiment... and Discover tab stopped to show anything again.

---

<div class="post-metadata">

**Author:** ![flash1293](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/flash1293/32/41227_2.png) [@flash1293](https://discuss.elastic.co/u/flash1293)\
**Post date:** [May 6, 2020, 7:05am UTC](https://discuss.elastic.co/t/kibana-index-pattern-looks-empty-while-related-elasticsearch-index-contains-data/231217/3 "2020-05-06T07:05:09Z")

</div>

Could you try to set the upper limit (the "to" part) of the timefilter to a few hours in the future? It seems like the problem here is (as so often) time zones. When `2020-05-06T00:08:01.841Z` is ingested into Elasticsearch, then the timestamp of this document is 8 AM in the UTC timezone. Kibana automatically recognizes the timezone of your browser and converts the time.

When ingesting data, make sure the timezone is either specified correctly in the iso date string or convert it to a unix timestamp before sending it to Elasticsearch.

---

<div class="post-metadata">

**Author:** ![renim](https://avatars.discourse-cdn.com/v4/letter/r/ecd19e/32.png) [@renim](https://discuss.elastic.co/u/renim)\
**Post date:** [May 13, 2020, 3:29pm UTC](https://discuss.elastic.co/t/kibana-index-pattern-looks-empty-while-related-elasticsearch-index-contains-data/231217/4 "2020-05-13T15:29:22Z")

</div>

thanks 🙂  
timezone solved the problem

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 10, 2020, 3:29pm UTC](https://discuss.elastic.co/t/kibana-index-pattern-looks-empty-while-related-elasticsearch-index-contains-data/231217/5 "2020-06-10T15:29:24Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
