# Struggling to get Top-Hits Visualization to work

**URL:** <https://discuss.elastic.co/t/struggling-to-get-top-hits-visualization-to-work/151848>\
**Category:** Kibana\
**Created:** [October 10, 2018, 12:46pm UTC](https://discuss.elastic.co/t/struggling-to-get-top-hits-visualization-to-work/151848 "2018-10-10T12:46:40Z")\
**Posts on this page:** 13\
**Page:** 1

<div class="post-metadata">

**Author:** ![faulander](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/faulander/32/36344_2.png) [@faulander](https://discuss.elastic.co/u/faulander)\
**Post date:** [October 10, 2018, 12:46pm UTC](https://discuss.elastic.co/t/struggling-to-get-top-hits-visualization-to-work/151848/1 "2018-10-10T12:46:41Z")

</div>

I did understand that Top-Hits always shows the latest value. In my visualization it jumps from Zero Values to real values every 2-3 refreshs, and i cannot figure out why.

 ![2018-10-10%2014_45_46-Window](https://us1.discourse-cdn.com/elastic/original/3X/d/5/d5eddde744757e25d5d687975fc565cf056b1f93.png)  
 ![2018-10-10%2014_42_46-Window](https://us1.discourse-cdn.com/elastic/original/3X/f/e/fe9308ec3f7c89142ae1f7fa0376ce635dd10384.png)

Here is the setting:

 ![2018-10-10%2014_48_01-Window](https://us1.discourse-cdn.com/elastic/original/3X/7/6/7680b3ea6abf912ec276e9b0c57df7cd8cecf826.png)

Running Elastic and Metricbeat on V 6.4.2

---

<div class="post-metadata">

**Author:** ![faulander](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/faulander/32/36344_2.png) [@faulander](https://discuss.elastic.co/u/faulander)\
**Post date:** [October 11, 2018, 8:32am UTC](https://discuss.elastic.co/t/struggling-to-get-top-hits-visualization-to-work/151848/2 "2018-10-11T08:32:02Z")

</div>

nobody a clue?

---

<div class="post-metadata">

**Author:** ![faulander](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/faulander/32/36344_2.png) [@faulander](https://discuss.elastic.co/u/faulander)\
**Post date:** [October 11, 2018, 8:53am UTC](https://discuss.elastic.co/t/struggling-to-get-top-hits-visualization-to-work/151848/3 "2018-10-11T08:53:21Z")

</div>

Some more information. As you can see, metricbeat sends the info:

 ![2018-10-11%2010_56_45-Window](https://us1.discourse-cdn.com/elastic/original/3X/2/9/293df78cb635e5f800edb3c8fe776282f6a4c860.png)  
and here's the visualiation. Settings are in the screenshot above:  
 ![2018-10-11%2010_57_51-Window](https://us1.discourse-cdn.com/elastic/original/3X/b/d/bd8a2d67637f7fc13a88249299abd2f0fb60e85e.png)

---

<div class="post-metadata">

**Author:** ![Marius\_Dragomir](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marius_dragomir/32/42087_2.png) [@Marius\_Dragomir](https://discuss.elastic.co/u/Marius_Dragomir)\
**Post date:** [October 11, 2018, 10:28am UTC](https://discuss.elastic.co/t/struggling-to-get-top-hits-visualization-to-work/151848/4 "2018-10-11T10:28:47Z")

</div>

You can at first check to see if the refresh set on your dashboard is \> the shipping interval for disk statistics in Metricbeat.

---

<div class="post-metadata">

**Author:** ![faulander](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/faulander/32/36344_2.png) [@faulander](https://discuss.elastic.co/u/faulander)\
**Post date:** [October 11, 2018, 12:02pm UTC](https://discuss.elastic.co/t/struggling-to-get-top-hits-visualization-to-work/151848/5 "2018-10-11T12:02:23Z")

</div>

Shipping Interval: 30s ( presume, since `metrics.period` isn't set)  
Refresh Interval: 30s

Output:

 ![2018-10-11%2014_01_43-Window](https://us1.discourse-cdn.com/elastic/original/3X/9/5/95849acdc807fa87ae4180673d0681cccde09b99.png)  
So, no. This doesn't solve it. Tried a few different servers aswell.

---

<div class="post-metadata">

**Author:** ![Marius\_Dragomir](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marius_dragomir/32/42087_2.png) [@Marius\_Dragomir](https://discuss.elastic.co/u/Marius_Dragomir)\
**Post date:** [October 11, 2018, 12:39pm UTC](https://discuss.elastic.co/t/struggling-to-get-top-hits-visualization-to-work/151848/6 "2018-10-11T12:39:55Z")

</div>

Can you show how the visualization is built? Maybe we can achieve something similar to this using a different metric/aggregation.

---

<div class="post-metadata">

**Author:** ![faulander](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/faulander/32/36344_2.png) [@faulander](https://discuss.elastic.co/u/faulander)\
**Post date:** [October 11, 2018, 12:49pm UTC](https://discuss.elastic.co/t/struggling-to-get-top-hits-visualization-to-work/151848/7 "2018-10-11T12:49:35Z")

</div>

Actually, i have the exact same problem with the Gauge i am using as an overview. Here are the settings for it:

 ![2018-10-11%2014_48_44-Window](https://us1.discourse-cdn.com/elastic/original/3X/6/4/64baf2244be17333c5a5711afeaafc5abf62a48e.png)

and here are the metrics related to it:

 ![2018-10-11%2014_50_20-Window](https://us1.discourse-cdn.com/elastic/original/3X/c/2/c2166ebf2f6d55e7f3c7d2f68a9e8ad9737acaa5.png)

---

<div class="post-metadata">

**Author:** ![Marius\_Dragomir](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marius_dragomir/32/42087_2.png) [@Marius\_Dragomir](https://discuss.elastic.co/u/Marius_Dragomir)\
**Post date:** [October 11, 2018, 1:13pm UTC](https://discuss.elastic.co/t/struggling-to-get-top-hits-visualization-to-work/151848/8 "2018-10-11T13:13:14Z")

</div>

you might be hitting some of the device\_names that have no free space reported for. Could you try and recreate the same thing in the normal Data Table instead of the TSVB Data Table?  
I tried something like that and there are devices for which there is Data and there are a lot that don't have any data, like /dev/loopX.

 ![Screenshot%20from%202018-10-11%2016-12-05](https://us1.discourse-cdn.com/elastic/original/3X/0/4/04669ffda0d634fc182374a4b150c0fd58e5357b.png)

---

<div class="post-metadata">

**Author:** ![faulander](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/faulander/32/36344_2.png) [@faulander](https://discuss.elastic.co/u/faulander)\
**Post date:** [October 11, 2018, 1:42pm UTC](https://discuss.elastic.co/t/struggling-to-get-top-hits-visualization-to-work/151848/9 "2018-10-11T13:42:41Z")

</div>

No Marius, please check the first post i made.  
The visualization jumps from 0 values to the correct values every 1-3 refreshs.  
My original question was: Shouldn't the Top-Hit always be the highest amount reported, thus never resulting in a zero value if there has been a non-zero value reported in the given timerange.

---

<div class="post-metadata">

**Author:** ![Marius\_Dragomir](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marius_dragomir/32/42087_2.png) [@Marius\_Dragomir](https://discuss.elastic.co/u/Marius_Dragomir)\
**Post date:** [October 11, 2018, 1:52pm UTC](https://discuss.elastic.co/t/struggling-to-get-top-hits-visualization-to-work/151848/10 "2018-10-11T13:52:56Z")

</div>

it shows the top hit in that bucket, not overall, so that it's why it will show 0 for some of them when you don't have any events for that drive\_name in the interval of the bucket.

---

<div class="post-metadata">

**Author:** ![faulander](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/faulander/32/36344_2.png) [@faulander](https://discuss.elastic.co/u/faulander)\
**Post date:** [October 11, 2018, 1:54pm UTC](https://discuss.elastic.co/t/struggling-to-get-top-hits-visualization-to-work/151848/11 "2018-10-11T13:54:17Z")

</div>

ok, i try with a normal data table. Let's see if this works.  
Thanks for your guidance though 🙂

---

<div class="post-metadata">

**Author:** ![faulander](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/faulander/32/36344_2.png) [@faulander](https://discuss.elastic.co/u/faulander)\
**Post date:** [October 11, 2018, 2:11pm UTC](https://discuss.elastic.co/t/struggling-to-get-top-hits-visualization-to-work/151848/12 "2018-10-11T14:11:27Z")

</div>

That works perfect, thanks Marius!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 8, 2018, 2:19pm UTC](https://discuss.elastic.co/t/struggling-to-get-top-hits-visualization-to-work/151848/13 "2018-11-08T14:19:22Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
