I have a kibana visualisation that runs a query containing a wildcard
"query": "system.auth.message:Connection closed*preauth\]",
When this query is ran in visualise page Query Duration = 100 ms and Request Duration = 180 ms
When the visualisation is added to a dashboard (as the sole visualisation, no others exist on the dashboard), the dashboard and visualisation takes 15 seconds + to load.
Any ideas why the duration's would differ to such an extent?