Can you first verify that new logs are actually coming into Elasticsearch? For instance, if you go to the Discover app in Kibana, do you see new Documents coming in as you are viewing pages?
Let's try a couple other things. Can you disable the filters to see if you're getting numbers that appear to be including all of the docs? That might help us rule out if it's an issue with the filters causing the problem.
Also, and this might seem obvious but just trying to rule out everything, when creating the visualization, it doesn't auto refresh, so you will have to click the "Refresh" button in the top right to actually refresh the data.
Hi @corey.robertson I think it has something to do with the date range.
Everytime I change that, the metrics won't change.
For instance I have one domain from which I want to know the unique IPs.
If I change the date range from the last 7 days to the last 15 minutes, the number doesn't change.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.