# Timelion top 5 not working compared to TSVB top 5

**URL:** <https://discuss.elastic.co/t/timelion-top-5-not-working-compared-to-tsvb-top-5/275221>\
**Category:** Kibana\
**Tags:** canvas\
**Created:** [June 8, 2021, 2:09am UTC](https://discuss.elastic.co/t/timelion-top-5-not-working-compared-to-tsvb-top-5/275221 "2021-06-08T02:09:53Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![ElasticLiver](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/elasticliver/32/64869_2.png) [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Post date:** [June 8, 2021, 2:09am UTC](https://discuss.elastic.co/t/timelion-top-5-not-working-compared-to-tsvb-top-5/275221/1 "2021-06-08T02:09:53Z")

</div>

Hi, I have this top 5 interfaces based on the average of utilization, in TSVB last 24 hours

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/5/0/509c09159de8c8af79b16043294d507b0f213044.png)

But when I try to do the same in canvas using Timelion with this query

```auto
.es(q='tenant name.keyword : LABSAV',index='metric-interface*',
    timefield='@timestamp', split=q_interface_name.keyword:5,metric=avg:utilization).label(regex='.*q_interface_name\.keyword:(.*) > .*',label='$1')

```

I get a different graph, with other interfaces as a top 5

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/b/d/bde6724e5f7b88fec37650138614cf970825114a.png)

what Im doing wrong?

---

<div class="post-metadata">

**Author:** ![tsullivan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tsullivan/32/31077_2.png) [@tsullivan](https://discuss.elastic.co/u/tsullivan)\
**Post date:** [June 8, 2021, 10:26pm UTC](https://discuss.elastic.co/t/timelion-top-5-not-working-compared-to-tsvb-top-5/275221/2 "2021-06-08T22:26:39Z")

</div>

I tried a setup pretty close to yours, and I don't see the issue that you are getting.

When you view the TSVB chart, are you applying the `tenant name.keyword : LABSAV` filter?

---

<div class="post-metadata">

**Author:** ![ElasticLiver](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/elasticliver/32/64869_2.png) [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Post date:** [June 10, 2021, 12:24am UTC](https://discuss.elastic.co/t/timelion-top-5-not-working-compared-to-tsvb-top-5/275221/3 "2021-06-10T00:24:45Z")

</div>

yes, it has that filter....could be the timezone? seems that in cavas shows the data in UTC

---

<div class="post-metadata">

**Author:** ![tsullivan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tsullivan/32/31077_2.png) [@tsullivan](https://discuss.elastic.co/u/tsullivan)\
**Post date:** [June 15, 2021, 8:21pm UTC](https://discuss.elastic.co/t/timelion-top-5-not-working-compared-to-tsvb-top-5/275221/4 "2021-06-15T20:21:51Z")

</div>

Is the TSVB chart also embedded in the Canvas worksheet when you see the problem?

---

<div class="post-metadata">

**Author:** ![ElasticLiver](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/elasticliver/32/64869_2.png) [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Post date:** [June 15, 2021, 9:23pm UTC](https://discuss.elastic.co/t/timelion-top-5-not-working-compared-to-tsvb-top-5/275221/5 "2021-06-15T21:23:10Z")

</div>

Hi Tsullivan, I didnt even know this was possible...no its not embedded.....I have just realized that theres a embed object button in canvas, but when I click on it no object is listed, and I have many visualizations....its only for maps? in kibana 7.6

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/d/e/deb8c0c7a3c8cfc90a533d531914cd7bc3dd63b7.png)

---

<div class="post-metadata">

**Author:** ![corey.robertson](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/corey.robertson/32/54611_2.png) [@corey.robertson](https://discuss.elastic.co/u/corey.robertson)\
**Post date:** [June 23, 2021, 6:41pm UTC](https://discuss.elastic.co/t/timelion-top-5-not-working-compared-to-tsvb-top-5/275221/6 "2021-06-23T18:41:52Z")

</div>

In 7.6, Maps are the only visualization type that can be embedded. I believe 7.7 allowed all the other visualizations including TSVB.

---

<div class="post-metadata">

**Author:** ![poff](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/poff/32/81795_2.png) [@poff](https://discuss.elastic.co/u/poff)\
**Post date:** [June 24, 2021, 3:01pm UTC](https://discuss.elastic.co/t/timelion-top-5-not-working-compared-to-tsvb-top-5/275221/7 "2021-06-24T15:01:30Z")

</div>

> [@ElasticLiver](#):
>
> yes, it has that filter....could be the timezone? seems that in cavas shows the data in UTC

There are a few timezone-related timelion issues in Canvas right now. This is possibly related: [Timelion query not respecting timezone parameter · Issue #67751 · elastic/kibana · GitHub](https://github.com/elastic/kibana/issues/67751)

Like Corey mentioned above, hopefully a possible workaround could be upgrading and using the TSVB visualization directly in your workpad

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 22, 2021, 3:02pm UTC](https://discuss.elastic.co/t/timelion-top-5-not-working-compared-to-tsvb-top-5/275221/8 "2021-07-22T15:02:01Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
