# Mapping Geospatial Time Events **URL:** \ **Category:** Kibana\ **Created:** [October 28, 2023, 12:49am UTC](https://discuss.elastic.co/t/mapping-geospatial-time-events/345958 "2023-10-28T00:49:05Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![Cal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cal/32/127008_2.png) [@Cal](https://discuss.elastic.co/u/Cal)\ **Post date:** [October 28, 2023, 12:49am UTC](https://discuss.elastic.co/t/mapping-geospatial-time-events/345958/1 "2023-10-28T00:49:05Z")
I have an index wherein one of the pieces of data is the date a last even occurred as well as location. Using geospatial I want to map the events occurring based on the dates assigned to each document. I want to use the Kibana time select to update what’s in view accordingly. So my map would effectively work as heat map, showing event locations for the past 24 hours, a week, month, whether the Kibana master date selection is. I have no issues getting the geolocation data and can see all my points for all events. I can’t seem to get it to filter based on the times or the quick select. I currently have the date formatted as a date and yyyy-MM-dd So far all I’ve found is how to filter by the event as a wildcard to show any of the events but not a way to link it to the time picker. ---
**Author:** ![Nathan\_Reese](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nathan_reese/32/84829_2.png) [@Nathan\_Reese](https://discuss.elastic.co/u/Nathan_Reese)\ **Post date:** [October 28, 2023, 3:31pm UTC](https://discuss.elastic.co/t/mapping-geospatial-time-events/345958/2 "2023-10-28T15:31:38Z")
2 thinks to check 1. Verify field containing date information is indexed as [date field](https://www.elastic.co/guide/en/elasticsearch/reference/current/date.html) 2. Verify data view time field is set. Kibana time filter uses data view time field to filter data by time To view both, got to "Stack management" -\> "Data views" and open your data view. ![Screenshot 2023-10-28 at 9.26.30 AM](https://us1.discourse-cdn.com/elastic/original/3X/f/6/f647a96bcb5873921c9926d44c375c102d50f2d4.png) ---
**Author:** ![Cal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cal/32/127008_2.png) [@Cal](https://discuss.elastic.co/u/Cal)\ **Post date:** [November 1, 2023, 3:34am UTC](https://discuss.elastic.co/t/mapping-geospatial-time-events/345958/3 "2023-11-01T03:34:45Z")
You are a hero, at least for me. This was it, thank you! ---
**Author:** ![Cal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cal/32/127008_2.png) [@Cal](https://discuss.elastic.co/u/Cal)\ **Post date:** [November 1, 2023, 3:50am UTC](https://discuss.elastic.co/t/mapping-geospatial-time-events/345958/4 "2023-11-01T03:50:55Z")
Question, in your screenshot you have 4x fields for time. Your time field for the index is, however, the one you have highlighted. I have the time field working, however, now anything that falls out of the time field no longer shows in visualizations. I'm wondering how I should approach this, so let me explain what I am doing. I have a database of threat actors. The only (currently) date field is a field for "Last Seen" which indicates when that threat actor was last known to have been conducting operations. I have a dashboard with many metrics that captures a host of data on over 1,000 threat actors. One of the items on the dashboard is a heat map for "Last Seen." However, not all threat actors have a "last seen" date. Some are historic or do not have an accurate record to go off of (yet). What this means is that my dashboard, even if I set it to show 100 years of data, only displays the ones that have a "Last Seen" entry. My question is, aside from a second index that is used specifically for the heat map, is there a way to have my entire dashboard show all results (including those missing the timefield) while keeping the heat map going with the time field? The only solution I can think of is to put in a "place holder" date for "Last Seen" that will fill the blanks and allow them all to populate. I considered adding a time field for "Date Added" to represent a date added to the database, thus giving all entries a date and allowing them to populate, but as I understand it, this would mean I would have to change the Index's Time Field to that parameter and now the heat map would fail to function as intended. ---
**Author:** ![jsanz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jsanz/32/53734_2.png) [@jsanz](https://discuss.elastic.co/u/jsanz)\ **Post date:** [November 3, 2023, 10:58am UTC](https://discuss.elastic.co/t/mapping-geospatial-time-events/345958/5 "2023-11-03T10:58:33Z")
I think the second option with a new date field that works for the whole dataset is the best option. If you add an [alias](https://www.elastic.co/guide/en/elasticsearch/reference/current/aliases.html) to your index, then you can create a new Data View that works with the `Last Seen` field and use that in your Dashboard. Something worth noting, in case you missed it and it is useful for your use case, is that a layer in Maps can: - fully ignore both the time range and the search bar - set up its own filter ![image](https://us1.discourse-cdn.com/elastic/original/3X/0/4/04fa18dc0b2584af180d9baf46b2dc930afeebc0.png) ---
**Author:** ![Cal](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cal/32/127008_2.png) [@Cal](https://discuss.elastic.co/u/Cal)\ **Post date:** [November 9, 2023, 6:20pm UTC](https://discuss.elastic.co/t/mapping-geospatial-time-events/345958/6 "2023-11-09T18:20:25Z")
I never considered an Alias, I will need to play around with this option! ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [December 7, 2023, 6:21pm UTC](https://discuss.elastic.co/t/mapping-geospatial-time-events/345958/7 "2023-12-07T18:21:02Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.