# Metrics Explorer results incorrect?

**URL:** <https://discuss.elastic.co/t/metrics-explorer-results-incorrect/242152>\
**Category:** Metrics\
**Created:** [July 22, 2020, 8:40am UTC](https://discuss.elastic.co/t/metrics-explorer-results-incorrect/242152 "2020-07-22T08:40:17Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![norgro2601](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/norgro2601/32/33292_2.png) [@norgro2601](https://discuss.elastic.co/u/norgro2601)\
**Post date:** [July 22, 2020, 8:40am UTC](https://discuss.elastic.co/t/metrics-explorer-results-incorrect/242152/1 "2020-07-22T08:40:18Z")

</div>

![Discover](https://us1.discourse-cdn.com/elastic/original/3X/b/2/b28a81db0e7ef3f0eeacd2302cbe648f6294e512.png) ![Metrics Explorer](https://us1.discourse-cdn.com/elastic/original/3X/b/c/bc809286ac941176a010a6bc1b09bccaf2e45680.png) ![TSVB](https://us1.discourse-cdn.com/elastic/original/3X/e/e/eeab4713e35b9071d5fef996652da64c18ceee79.png)  
I've created some views with Metrics Explorer, but by chance I've noticed, that the results seems to be incorrect. I compared it with the results from Discover and the visualization "CPU Usage [Metricbeat System] ECS". All screenshots compare a 30 seconds timeframe. Do I understand the Metrics Explorer results wrong ?

---

<div class="post-metadata">

**Author:** ![norgro2601](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/norgro2601/32/33292_2.png) [@norgro2601](https://discuss.elastic.co/u/norgro2601)\
**Post date:** [July 22, 2020, 9:15am UTC](https://discuss.elastic.co/t/metrics-explorer-results-incorrect/242152/2 "2020-07-22T09:15:08Z")

</div>

I've noticed one more thing. When I do a "graph per agent.hostname", then the results for the host are completely the same as in TSVB and Discover, when I select a single host with the search like I did in the screenshot, the result is different.

---

<div class="post-metadata">

**Author:** ![norgro2601](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/norgro2601/32/33292_2.png) [@norgro2601](https://discuss.elastic.co/u/norgro2601)\
**Post date:** [July 22, 2020, 9:50am UTC](https://discuss.elastic.co/t/metrics-explorer-results-incorrect/242152/3 "2020-07-22T09:50:22Z")

</div>

OK, I think I know now, what my problem is. I've done a test, if the search is working at all using agent.hostname : "xyz", and the result is the same as without any search. As the search seems to work when I do an "Add filter" from the Actions menu but not with a search I've composed on my own, I do not understand what the usage of the search bar is or if it is a bug.  
Can anybody please explain ?

---

<div class="post-metadata">

**Author:** ![simianhacker](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/simianhacker/32/3383_2.png) [@simianhacker](https://discuss.elastic.co/u/simianhacker)\
**Post date:** [July 27, 2020, 2:42pm UTC](https://discuss.elastic.co/t/metrics-explorer-results-incorrect/242152/4 "2020-07-27T14:42:54Z")

</div>

Instead of using `agent.hostname`, what does it look like when you use `host.name`?

---

<div class="post-metadata">

**Author:** ![norgro2601](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/norgro2601/32/33292_2.png) [@norgro2601](https://discuss.elastic.co/u/norgro2601)\
**Post date:** [July 28, 2020, 6:24am UTC](https://discuss.elastic.co/t/metrics-explorer-results-incorrect/242152/5 "2020-07-28T06:24:31Z")

</div>

Hi @simianhacker,  
unfortunately it is exactly the same result using host.name

---

<div class="post-metadata">

**Author:** ![norgro2601](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/norgro2601/32/33292_2.png) [@norgro2601](https://discuss.elastic.co/u/norgro2601)\
**Post date:** [July 28, 2020, 6:51am UTC](https://discuss.elastic.co/t/metrics-explorer-results-incorrect/242152/6 "2020-07-28T06:51:29Z")

</div>

Hi @simianhacker,

sometimes the answer is easy and the problem is sitting at the keyboard 🙂.

I've used the search like in Discover, I've entered the search and hit the "Refresh"-Button, which in Discover changes to an "Update"-Button as soon as I enter a single letter.  
When I press Enter instead, it works immediately as expected.

Maybe it would be a good idea to enhance the usage of all search bars to work similar to Discover and all entries have the button change to "Update".

Greetings,  
Norbert

---

<div class="post-metadata">

**Author:** ![simianhacker](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/simianhacker/32/3383_2.png) [@simianhacker](https://discuss.elastic.co/u/simianhacker)\
**Post date:** [July 28, 2020, 7:57pm UTC](https://discuss.elastic.co/t/metrics-explorer-results-incorrect/242152/7 "2020-07-28T19:57:36Z")

</div>

Doah! Sorry about that weird UX behaviour, I consider that a useability bug.

@hbharding We should add this to our list of UX improvements (unless there's an issue for it already).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 25, 2020, 7:57pm UTC](https://discuss.elastic.co/t/metrics-explorer-results-incorrect/242152/8 "2020-08-25T19:57:42Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
