# TimeLion Shows Data When Shouldn't

**URL:** <https://discuss.elastic.co/t/timelion-shows-data-when-shouldnt/156109>\
**Category:** Kibana\
**Created:** [November 9, 2018, 9:29pm UTC](https://discuss.elastic.co/t/timelion-shows-data-when-shouldnt/156109 "2018-11-09T21:29:16Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![wwalker](https://avatars.discourse-cdn.com/v4/letter/w/43a26b/32.png) [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Post date:** [November 9, 2018, 9:29pm UTC](https://discuss.elastic.co/t/timelion-shows-data-when-shouldnt/156109/1 "2018-11-09T21:29:16Z")

</div>

I am trying to graph total hits to a website with two lines, one for current time and another offset by 24 hours.

`.es(index='cloudflare-*',metric='count:ClientIP').label('Current'), .es(offset='-1d',index='cloudflare-*',metric='count:ClientIP').label('Previous Hour')`

The data that's ingested is 45 minutes behind so if it's 12:00, the line for the current time period should be zero after 11:15. However, below is what I get. The graph on top is a standard kibana visualization tracking Unique Count of ClientIP.keyword and is displaying data as expected.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/e/8/e804c9c4ae64de1800bf5086d51acd26d8697564.png)

---

<div class="post-metadata">

**Author:** ![wwalker](https://avatars.discourse-cdn.com/v4/letter/w/43a26b/32.png) [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Post date:** [November 9, 2018, 9:54pm UTC](https://discuss.elastic.co/t/timelion-shows-data-when-shouldnt/156109/2 "2018-11-09T21:54:00Z")

</div>

Resolved the issue by specifying the `timefield` I am using as the timestamp field, which is not the default `@timestamp` field.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 7, 2018, 9:54pm UTC](https://discuss.elastic.co/t/timelion-shows-data-when-shouldnt/156109/3 "2018-12-07T21:54:06Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
