# Kibana visualizations not showing some documents?

**URL:** <https://discuss.elastic.co/t/kibana-visualizations-not-showing-some-documents/118130>\
**Category:** Kibana\
**Created:** [February 2, 2018, 12:51am UTC](https://discuss.elastic.co/t/kibana-visualizations-not-showing-some-documents/118130 "2018-02-02T00:51:27Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![kyle1441](https://avatars.discourse-cdn.com/v4/letter/k/f0a364/32.png) [@kyle1441](https://discuss.elastic.co/u/kyle1441)\
**Post date:** [February 2, 2018, 12:51am UTC](https://discuss.elastic.co/t/kibana-visualizations-not-showing-some-documents/118130/1 "2018-02-02T00:51:27Z")

</div>

Hi everyone,  
I have some basic visualizations set up to calculate some basic things from the documents in elastic search. The data is basic product analytics information for some alpha software. I only have ~4 days of documents in elastic search, and not much at that (~600 documents in this index logstash-clients-) We do have ~2 million documents in a different index (logstash-) if it matters.

When I look in the Discover tab, I see 21 unique user ids (event.local\_user\_id) within the first 500 records (I pasted the first 500 records into excel and de-duped on that column)

 ![kibana3](https://us1.discourse-cdn.com/elastic/original/3X/6/4/640f15b14144fc30bf192e7092a2850b7cea31cd.png)

Note datetime and user ids, 3 unique seen in the frame of this screenshot.

Then in these two visualizations, these documents don't appear to be part of the visualizations and I don't see anything that is keeping them filtered out.

 ![kibana2](https://us1.discourse-cdn.com/elastic/original/3X/a/8/a83295de3ce7c3d19aee790656eb7d0b3900c56a.png)

In the above visualization, note how Feb 1st doesn't have any user ids present, when they appear to be present on the first screenshot.

Second visualization, would expect this count to be at least 20, if not higher.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/3/0/3049bb084d32d53a221ca5bc5df58ab997cd4640.png)

The only thing that I can think of is ts the field in visualizations are ".keyword" -- I've tried to google this and not sure what it means and why it is appended to the end of the field.

Thank you in advance,  
Kyle

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [February 2, 2018, 1:07am UTC](https://discuss.elastic.co/t/kibana-visualizations-not-showing-some-documents/118130/2 "2018-02-02T01:07:21Z")

</div>

It looks like you are running 5.X, you should definitely upgrade to get access to the awesomeness in 6.1 😃

> [@kyle1441](#):
>
> In the above visualization, note how Feb 1st doesn't have any user ids present, when they appear to be present on the first screenshot.

In the first screenshot, the time displayed is not `event.t`. You may want to add that to the `Selected Fields` and remove that `Time` one to properly sort the events.

---

<div class="post-metadata">

**Author:** ![kyle1441](https://avatars.discourse-cdn.com/v4/letter/k/f0a364/32.png) [@kyle1441](https://discuss.elastic.co/u/kyle1441)\
**Post date:** [February 2, 2018, 2:03am UTC](https://discuss.elastic.co/t/kibana-visualizations-not-showing-some-documents/118130/3 "2018-02-02T02:03:19Z")

</div>

I'll check out the change log for 6.1 and see if there is enough to tempt me... 😃 This is indeed 5.5.2

Good eyes on catching`Time` vs `event.t` @warkolm ... They are identical however so I don't think that has solved my issue. (I thought maybe we had screwed it up though so you got me excited)

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/2/7/27ab02a73cfb8b4be83aeca72c7e15be329c0c60.png)

---

<div class="post-metadata">

**Author:** ![kyle1441](https://avatars.discourse-cdn.com/v4/letter/k/f0a364/32.png) [@kyle1441](https://discuss.elastic.co/u/kyle1441)\
**Post date:** [February 2, 2018, 7:30pm UTC](https://discuss.elastic.co/t/kibana-visualizations-not-showing-some-documents/118130/4 "2018-02-02T19:30:48Z")

</div>

I wanted to confirm changing the date in the visualizations has not solved the problem...

As you can see from the other reply, the times are the same in both fields.

Any other suggestions?

---

<div class="post-metadata">

**Author:** ![kyle1441](https://avatars.discourse-cdn.com/v4/letter/k/f0a364/32.png) [@kyle1441](https://discuss.elastic.co/u/kyle1441)\
**Post date:** [February 5, 2018, 5:51pm UTC](https://discuss.elastic.co/t/kibana-visualizations-not-showing-some-documents/118130/5 "2018-02-05T17:51:35Z")

</div>

Issue is still persisting. I can post more screenshots if it would help. Please let me know what else I should check / post.

Thank you!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 5, 2018, 5:52pm UTC](https://discuss.elastic.co/t/kibana-visualizations-not-showing-some-documents/118130/6 "2018-03-05T17:52:05Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
