# Kibana Visualization Showing Incorrect Information from events

**URL:** <https://discuss.elastic.co/t/kibana-visualization-showing-incorrect-information-from-events/191286>\
**Category:** Kibana\
**Created:** [July 18, 2019, 10:29pm UTC](https://discuss.elastic.co/t/kibana-visualization-showing-incorrect-information-from-events/191286 "2019-07-18T22:29:12Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![zeno](https://avatars.discourse-cdn.com/v4/letter/z/57b2e6/32.png) [@zeno](https://discuss.elastic.co/u/zeno)\
**Post date:** [July 18, 2019, 10:29pm UTC](https://discuss.elastic.co/t/kibana-visualization-showing-incorrect-information-from-events/191286/1 "2019-07-18T22:29:12Z")

</div>

I have configured Kibana for visualization of logs & events regarding file integrity which shows file path & count when the file is created, deleted or modified. Now the issue is that when i create a new file on ubuntu /etc folder, the Top deleted Pie chart , shows 1 file path as deleted which is .swp file of the same file which i have created while the Action Count says 2 files are created & 2 are deleted. 1 is original text file, 2nd is .swp file which is created and deleted are .swp file twice in action count.

Can someone expert please help in this that why .swp is getting deleted twice in events and counting as 2 instead of 1 ??

Kibana version is from 2018

I will be very thankful

---

<div class="post-metadata">

**Author:** ![Marius\_Dragomir](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marius_dragomir/32/42087_2.png) [@Marius\_Dragomir](https://discuss.elastic.co/u/Marius_Dragomir)\
**Post date:** [July 19, 2019, 10:21am UTC](https://discuss.elastic.co/t/kibana-visualization-showing-incorrect-information-from-events/191286/2 "2019-07-19T10:21:08Z")

</div>

I think this more a question for the program that you're using to collect the events. Kibana just displays what information you've ingested in Elasticsearch.

---

<div class="post-metadata">

**Author:** ![zeno](https://avatars.discourse-cdn.com/v4/letter/z/57b2e6/32.png) [@zeno](https://discuss.elastic.co/u/zeno)\
**Post date:** [July 19, 2019, 3:57pm UTC](https://discuss.elastic.co/t/kibana-visualization-showing-incorrect-information-from-events/191286/3 "2019-07-19T15:57:57Z")

</div>

Sorry lets take it that way. What would be the possible reason of the .swp files in ubuntu getting deleted twice ? any idea !

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 16, 2019, 3:57pm UTC](https://discuss.elastic.co/t/kibana-visualization-showing-incorrect-information-from-events/191286/4 "2019-08-16T15:57:58Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.