Kibana map timestamp on layer with geoshapes

[smartjack (Daniel)]

Hello,

I'm trying to create a network visualisation using a map and ran into trouble with filtering of the documents using the time range picker in a dashboard.

The flow is following:

Send data with geo_shape information into elasticsearch -> ingest processor automatically adds a @timestamp field -> index used in a kibana map as a source of geoshape data.

My issue is, that even with the timestamp, the map would reference all documents related to a particular shape. I would expect that the shape would only show (as tooltips) only data that would fall into the specified time range that is picked on the dashboard.

If I create a different visualization in the dashboard, e.g. a linechart, the data is correctly filtered.

Is the map filtering something I should be able to do, or the map just will not support such query?

Thank you
Daniel

[nickpeihl]

Hi Daniel. Is the layer in your map configured to "Apply global time to layer data"?

[smartjack (Daniel)]

Hi Nick,

I did find that there should be an option like that at some point, however I'm missing it on the layer configuration:

Is it something that is only available on one of the higher tiered subscriptions?

I am currently using (for labbing purposes) only the basic/free tier.

Thank you
Daniel

[smartjack (Daniel)]

Ok, figured it out, the data view that I had initially created did not mention the time field which to use for time filterint, although it was present in the data. I manually selected it in the Data View for that particular index and now I do see the mentioned filter in the layer.

Thank you for the insights.