Kibana not showing all events


(cablenightmare) #1

Hi,

I am using the ELK stack. I have an event that is logged 5 times an hour. I
use Kibana to query the event by type going back 24 hours (see k1.png), 6
hours (see k2.png), and 1 hour (see k3.png).

The display at 24 hours and 6 hours is confusing to me because it appears
there are no events, but when I drill down (so to speak) to the 1 hour, the
events show up as expected. For example, in k3.png you can see there are
events from 8AM to 9AM as expected, but those events don't show up in the
histogram for 24 hours and 6 hours.

Thank for your assistance.

Matt

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/dc876aac-4534-4dcd-a6cc-f55c6d9fde26%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


(cablenightmare) #2

Well, I shouldn't say "no events". What I mean is, that I expected the
histogram to be filled with events and those events don't show up until I
drill down.

On Wednesday, August 13, 2014 12:54:04 PM UTC-7, cableni...@gmail.com wrote:

Hi,

I am using the ELK stack. I have an event that is logged 5 times an hour.
I use Kibana to query the event by type going back 24 hours (see k1.png), 6
hours (see k2.png), and 1 hour (see k3.png).

The display at 24 hours and 6 hours is confusing to me because it appears
there are no events, but when I drill down (so to speak) to the 1 hour, the
events show up as expected. For example, in k3.png you can see there are
events from 8AM to 9AM as expected, but those events don't show up in the
histogram for 24 hours and 6 hours.

Thank for your assistance.

Matt

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/075a58a8-ad1c-493b-95bb-f367a596344c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


(cablenightmare) #3

I figured it out. I had modified the index "pattern" in the
/opt/kibana/app/dashboards/logstash.json file to use hourly indexes, but
forgot to modify the "interval". I set the interval "hour", the problem was
resolved. doh

On Wednesday, August 13, 2014 12:54:04 PM UTC-7, cableni...@gmail.com wrote:

Hi,

I am using the ELK stack. I have an event that is logged 5 times an hour.
I use Kibana to query the event by type going back 24 hours (see k1.png), 6
hours (see k2.png), and 1 hour (see k3.png).

The display at 24 hours and 6 hours is confusing to me because it appears
there are no events, but when I drill down (so to speak) to the 1 hour, the
events show up as expected. For example, in k3.png you can see there are
events from 8AM to 9AM as expected, but those events don't show up in the
histogram for 24 hours and 6 hours.

Thank for your assistance.

Matt

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/d2d5524e-6e53-4276-8367-207373a377e2%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


(cablenightmare) #4

I figured it out. I had modified the index "pattern" in the
/opt/kibana/app/dashboards/
logstash.json file to use hourly indexes, but forgot to modify the
"interval". I set the interval "hour", the problem was resolved. doh

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/c2f20b15-0c59-4c36-9c74-1bcabb786e0b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


(system) #5