# Timelion confusion between what's shown and what's in ES

**URL:** <https://discuss.elastic.co/t/timelion-confusion-between-whats-shown-and-whats-in-es/130427>\
**Category:** Kibana\
**Tags:** timelion\
**Created:** [May 3, 2018, 10:33am UTC](https://discuss.elastic.co/t/timelion-confusion-between-whats-shown-and-whats-in-es/130427 "2018-05-03T10:33:27Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jean-Charle\_Passepon](https://avatars.discourse-cdn.com/v4/letter/j/e95f7d/32.png) [@Jean-Charle\_Passepon](https://discuss.elastic.co/u/Jean-Charle_Passepon)\
**Post date:** [May 3, 2018, 10:33am UTC](https://discuss.elastic.co/t/timelion-confusion-between-whats-shown-and-whats-in-es/130427/1 "2018-05-03T10:33:27Z")

</div>

Hello,

I'm trying to analyse some latency in my system with different timestamps received.

In timelion I can see that after some zooming:

 ![32](https://us1.discourse-cdn.com/elastic/original/3X/8/7/876399c50b2d092ec5b6d6c825f5d8e05dae1b29.png)

which correspond to this time lapse:

 ![15](https://us1.discourse-cdn.com/elastic/original/3X/f/e/feeb6d2e907730cabd551f4757ec216fedc7400f.png)

But, in the discover area, this time lapse return no results at all.

Any ideas what's happening? Thanks!

---

<div class="post-metadata">

**Author:** ![a5a](https://avatars.discourse-cdn.com/v4/letter/a/a87d85/32.png) [@a5a](https://discuss.elastic.co/u/a5a)\
**Post date:** [May 3, 2018, 4:36pm UTC](https://discuss.elastic.co/t/timelion-confusion-between-whats-shown-and-whats-in-es/130427/2 "2018-05-03T16:36:57Z")

</div>

Hi Jean,

Timelion doesn’t use the index pattern selected in Discover. It needs to be specified in advanced settings or in the timelion expression itself. Maybe you're looking at different indices in each app?

---

<div class="post-metadata">

**Author:** ![Jean-Charle\_Passepon](https://avatars.discourse-cdn.com/v4/letter/j/e95f7d/32.png) [@Jean-Charle\_Passepon](https://discuss.elastic.co/u/Jean-Charle_Passepon)\
**Post date:** [May 3, 2018, 6:03pm UTC](https://discuss.elastic.co/t/timelion-confusion-between-whats-shown-and-whats-in-es/130427/3 "2018-05-03T18:03:11Z")

</div>

Hello a5a,

Thank you for your answer!  
It is logs from logstash-\* index that I'm visualising.

Thus I'm very surprised about the render compare to the discovery (both for logstash-\* index).

---

<div class="post-metadata">

**Author:** ![a5a](https://avatars.discourse-cdn.com/v4/letter/a/a87d85/32.png) [@a5a](https://discuss.elastic.co/u/a5a)\
**Post date:** [May 3, 2018, 9:01pm UTC](https://discuss.elastic.co/t/timelion-confusion-between-whats-shown-and-whats-in-es/130427/4 "2018-05-03T21:01:00Z")

</div>

Hmm. Something else must be going on. I'm pinging @Bargs for more insight into this.

---

<div class="post-metadata">

**Author:** ![Bargs](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bargs/32/5429_2.png) [@Bargs](https://discuss.elastic.co/u/Bargs)\
**Post date:** [May 4, 2018, 8:42pm UTC](https://discuss.elastic.co/t/timelion-confusion-between-whats-shown-and-whats-in-es/130427/5 "2018-05-04T20:42:35Z")

</div>

Are you using the same time field in Discover and Timelion? This is also configured separately in Timelion, either in the expression or in advanced settings

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 1, 2018, 8:42pm UTC](https://discuss.elastic.co/t/timelion-confusion-between-whats-shown-and-whats-in-es/130427/6 "2018-06-01T20:42:45Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.