TimeLion Shows Data When Shouldn't

Elastic Stack Kibana
1

I am trying to graph total hits to a website with two lines, one for current time and another offset by 24 hours.

.es(index='cloudflare-*',metric='count:ClientIP').label('Current'), .es(offset='-1d',index='cloudflare-*',metric='count:ClientIP').label('Previous Hour')

The data that's ingested is 45 minutes behind so if it's 12:00, the line for the current time period should be zero after 11:15. However, below is what I get. The graph on top is a standard kibana visualization tracking Unique Count of ClientIP.keyword and is displaying data as expected.

image
image.png773×510 26.3 KB

2

Resolved the issue by specifying the timefield I am using as the timestamp field, which is not the default @timestamp field.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.