# Kibana not showing accurate count **URL:** \ **Category:** Kibana\ **Created:** [February 25, 2018, 7:48pm UTC](https://discuss.elastic.co/t/kibana-not-showing-accurate-count/121405 "2018-02-25T19:48:22Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![wdaburu](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/wdaburu/32/27817_2.png) [@wdaburu](https://discuss.elastic.co/u/wdaburu)\ **Post date:** [February 25, 2018, 7:48pm UTC](https://discuss.elastic.co/t/kibana-not-showing-accurate-count/121405/1 "2018-02-25T19:48:23Z")
Hi, im new to this ELK and i hope that the community can guide men on solving this. OK so the data i got is from the xml file input on logstash then transferred to the elasticsearch, in kibana i do the manual index pattern just typing "index-pattern-\*" and then click on next step. ![Capture6](https://us1.discourse-cdn.com/elastic/original/3X/9/6/96466390d3872544baf53e5811112c351302a014.PNG) The data when i hover on the screen shows accurate count. ![Capture7](https://us1.discourse-cdn.com/elastic/original/3X/e/b/ebf1fc1d4e2e3d8cf0f0e04273dacaa92fcfb60e.PNG) But when i click visualize it only shows 1 count for each risk\_score. Thanks in advance. ---
**Author:** ![wdaburu](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/wdaburu/32/27817_2.png) [@wdaburu](https://discuss.elastic.co/u/wdaburu)\ **Post date:** [February 26, 2018, 7:51pm UTC](https://discuss.elastic.co/t/kibana-not-showing-accurate-count/121405/2 "2018-02-26T19:51:29Z")
Anyone can help me? ---
**Author:** ![joconner](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/joconner/32/24360_2.png) [@joconner](https://discuss.elastic.co/u/joconner)\ **Post date:** [February 26, 2018, 11:38pm UTC](https://discuss.elastic.co/t/kibana-not-showing-accurate-count/121405/3 "2018-02-26T23:38:42Z")
Hi @wdaburu, I have found that the more information I provide about document mapping, the better help I get. it sounds like you have a `risk_score` field in each document. However, you're trying to create a single "Metric" number? I'm not sure a Metric visualization does multiple aggregations.... it's just a single number, right? You're trying to create a `Metric` visualization? ---
**Author:** ![wdaburu](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/wdaburu/32/27817_2.png) [@wdaburu](https://discuss.elastic.co/u/wdaburu)\ **Post date:** [February 27, 2018, 12:59am UTC](https://discuss.elastic.co/t/kibana-not-showing-accurate-count/121405/4 "2018-02-27T00:59:13Z")
Yes, just a single number for the `risk_score` with the value of `0` `1` `3` and then count the occurence of it. This is from the previous question that i asked before at [Parsing nessus XML in Logstash](https://discuss.elastic.co/t/parsing-nessus-xml-in-logstash/120861) ---
**Author:** ![vinodr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vinodr/32/28759_2.png) [@vinodr](https://discuss.elastic.co/u/vinodr)\ **Post date:** [February 27, 2018, 3:37pm UTC](https://discuss.elastic.co/t/kibana-not-showing-accurate-count/121405/5 "2018-02-27T15:37:34Z")
Did you compare the 'Time Picker' in Visualize v/s Discover? May be you have a lower time window selected in Visualize (say Last 15 Minutes) and higher one in Discover (say Last 1 hour) ---
**Author:** ![wdaburu](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/wdaburu/32/27817_2.png) [@wdaburu](https://discuss.elastic.co/u/wdaburu)\ **Post date:** [February 27, 2018, 9:55pm UTC](https://discuss.elastic.co/t/kibana-not-showing-accurate-count/121405/6 "2018-02-27T21:55:57Z")
Yup i did select the maximum time 5 years at the upper right corner each time the data come in from logstash and still the same. ---
**Author:** ![vinodr](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/vinodr/32/28759_2.png) [@vinodr](https://discuss.elastic.co/u/vinodr)\ **Post date:** [March 14, 2018, 12:36am UTC](https://discuss.elastic.co/t/kibana-not-showing-accurate-count/121405/7 "2018-03-14T00:36:35Z")
> [@wdaburu](#): > > "index-pattern-\*" @wdaburu What is the index pattern name for your data set, is it:"index-pattern-_" or "nessus-data-_" ? I see that you have chosen the index pattern: "nessus-data-\*" in the Table Visualization. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [April 11, 2018, 12:36am UTC](https://discuss.elastic.co/t/kibana-not-showing-accurate-count/121405/8 "2018-04-11T00:36:42Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.