# Missing doc in kibana

**URL:** <https://discuss.elastic.co/t/missing-doc-in-kibana/206147>\
**Category:** Kibana\
**Created:** [November 1, 2019, 10:52am UTC](https://discuss.elastic.co/t/missing-doc-in-kibana/206147 "2019-11-01T10:52:50Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Gordon\_Ooi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gordon_ooi/32/56979_2.png) [@Gordon\_Ooi](https://discuss.elastic.co/u/Gordon_Ooi)\
**Post date:** [November 1, 2019, 10:52am UTC](https://discuss.elastic.co/t/missing-doc-in-kibana/206147/1 "2019-11-01T10:52:50Z")

</div>

Hi,

I've observed my kibana having some of the doc missing as compared to the elasticsearch query.

I did a query on the \_id in elasticsearch and return 1 hits

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/3/9/3970c2ea4a5d04c3fbdb67ec7bd4f1bc1aec9478.png)

But I did the same query in Kibana Discover, it did not return any result.  
I've check the index, \_id and the dates are correct

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/f/2/f2fbf803d14727e31ba4dde4b8d9f7106d0febe1.png)

Anyone know how should I troubleshoot this, please help.

Thanks

---

<div class="post-metadata">

**Author:** ![Nathan\_Reese](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nathan_reese/32/84829_2.png) [@Nathan\_Reese](https://discuss.elastic.co/u/Nathan_Reese)\
**Post date:** [November 1, 2019, 1:51pm UTC](https://discuss.elastic.co/t/missing-doc-in-kibana/206147/2 "2019-11-01T13:51:38Z")

</div>

Your elasticsearch query and the query from discover are not the same. The discover query adds a time filter as well and looks more like this

```auto
"query": {
    "bool": {
      "must": [],
      "filter": [
        {
          "match_all": {}
        },
        {
          "match_phrase": {
            "_id": "R4xEH24BB15ZvgWfHF0u"
          }
        },
        {
          "range": {
            "timestamp": {
              "format": "strict_date_optional_time",
              "gte": "2019-11-01T13:34:42.028Z",
              "lte": "2019-11-01T13:49:42.028Z"
            }
          }
        }
      ],
      "should": [],
      "must_not": []
    }
  }

```

To view the query discover is using, open inspector by clicking `Inspect`. Then use this query in console to view how Discover is fetching data.

I suspect the time range filter is filtering out your document. The range shown is your browser's time range while the document shows time range in UTC.

---

<div class="post-metadata">

**Author:** ![Gordon\_Ooi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gordon_ooi/32/56979_2.png) [@Gordon\_Ooi](https://discuss.elastic.co/u/Gordon_Ooi)\
**Post date:** [November 2, 2019, 3:55am UTC](https://discuss.elastic.co/t/missing-doc-in-kibana/206147/3 "2019-11-02T03:55:42Z")

</div>

Thanks @Nathan_Reese for the enlightening response.  
😃

I'm managed to identify the root caused via the "Inspect".

The Discover query is using time "timestamp", but the doc not shown in Discover is using "@timestamp".

I've resolved the issue by recreating the index pattern using "@timestamp" field as the time filter field.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/7/d/7ddd5e1805aee1e751c4c97ab0bd3295a114827f.png)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 30, 2019, 4:07am UTC](https://discuss.elastic.co/t/missing-doc-in-kibana/206147/4 "2019-11-30T04:07:56Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.