TSVB Table And Regular Table Vis Not Same

I have two tables, one that was created using the table visual in Kibana, the other is a Time Series Visual Builder table. They each are grouping by a URI field (The stuff after .com, .net, .org, etc...) and reporting two numbers. The first number is your basic count, how many times that URI appears for a given time, no problems there. The second number is where things get weird for me. The second number reports how many times that URI appears based on the cardinality (unique count) of another field, IP address. The intent here is to see how many unique visitors we have to any given URI. Unfortunately, over the same time period, TSVB reports a significantly higher cardinality count than the Kibana table. Is there a bug with something or have I just configured something wrong? TSVB table on the left, Kibana table on the right

image image

Guess I could include my filter configs...doh....

Kibana table:

TSVB table:

Anybody see this before?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.