Timelion giving wrong metric aggregate value on enlarging

[devika_sudheer]

Hi,

My timelion plot which uses the following aggregation

.es(metric=max:value_field).if(operator=gte, if=.es(metric=min:value_field).abs(), then=.es(metric=max:value_field), else=.es(metric=min:value_field))

is showing wrong values when i select a portion and enlarge. If I enlarge it many times then it gives the real values

Initial Timelion

Timelion after enlarging

[chrisronline (Chris Roberson)]

Hi @devika_sudheer,

That's expected behavior. The graph shows the sum of the buckets found in the time range. As you zoom in, the bucket size will continue to shrink as the time range narrows which leads to less actual data to show.

If you hover over the various points in the bottom graph, you can sorta see how the combined sum of those data points will lead to what you see in the first graph.