# Unable to use TSVB visualization even after specifying index

**URL:** <https://discuss.elastic.co/t/unable-to-use-tsvb-visualization-even-after-specifying-index/279311>\
**Category:** Kibana\
**Created:** [July 21, 2021, 8:25pm UTC](https://discuss.elastic.co/t/unable-to-use-tsvb-visualization-even-after-specifying-index/279311 "2021-07-21T20:25:46Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Shreesh\_Narayanan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shreesh_narayanan/32/87312_2.png) [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\
**Post date:** [July 21, 2021, 8:25pm UTC](https://discuss.elastic.co/t/unable-to-use-tsvb-visualization-even-after-specifying-index/279311/1 "2021-07-21T20:25:46Z")

</div>

I'm trying out TSVB viz on kibana, and the visualization doesnt work as expected . Are there any rules to creating a TSVB viz ? like use a particular date format or visualize only a certain data pattern ?

 ![Screen Shot 2021-07-22 at 1.53.32 AM](https://us1.discourse-cdn.com/elastic/original/3X/2/5/254cee448c1a210056cc14b5084f7051058886e6.jpeg)

---

<div class="post-metadata">

**Author:** ![markov00](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/markov00/32/33316_2.png) [@markov00](https://discuss.elastic.co/u/markov00)\
**Post date:** [July 22, 2021, 10:42am UTC](https://discuss.elastic.co/t/unable-to-use-tsvb-visualization-even-after-specifying-index/279311/2 "2021-07-22T10:42:56Z")

</div>

Hi, does it renders data if the interval is set to `auto`?

---

<div class="post-metadata">

**Author:** ![Shreesh\_Narayanan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shreesh_narayanan/32/87312_2.png) [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\
**Post date:** [July 22, 2021, 12:01pm UTC](https://discuss.elastic.co/t/unable-to-use-tsvb-visualization-even-after-specifying-index/279311/3 "2021-07-22T12:01:45Z")

</div>

Unfortunately it doesn't render data ,even if the interval is set at auto . Should the interval be reduced ? or increased ?

---

<div class="post-metadata">

**Author:** ![Shreesh\_Narayanan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shreesh_narayanan/32/87312_2.png) [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\
**Post date:** [July 22, 2021, 12:49pm UTC](https://discuss.elastic.co/t/unable-to-use-tsvb-visualization-even-after-specifying-index/279311/4 "2021-07-22T12:49:52Z")

</div>

okay fixed it , it came once i added the @timestamp back in logstash . Can we replace the value in @timestamp to the timestamp on the log ?

---

<div class="post-metadata">

**Author:** ![markov00](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/markov00/32/33316_2.png) [@markov00](https://discuss.elastic.co/u/markov00)\
**Post date:** [July 22, 2021, 1:39pm UTC](https://discuss.elastic.co/t/unable-to-use-tsvb-visualization-even-after-specifying-index/279311/5 "2021-07-22T13:39:15Z")

</div>

I think so, but depends if the field is mapped correctly as `date`  
can you share the output of `curl -XGET <es_url>/logstash_viz/_mappings` so we can check the correct type for the`Time_UTC` field  
Can you also please send an example value from that field?

---

<div class="post-metadata">

**Author:** ![Shreesh\_Narayanan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shreesh_narayanan/32/87312_2.png) [@Shreesh\_Narayanan](https://discuss.elastic.co/u/Shreesh_Narayanan)\
**Post date:** [July 22, 2021, 1:47pm UTC](https://discuss.elastic.co/t/unable-to-use-tsvb-visualization-even-after-specifying-index/279311/6 "2021-07-22T13:47:19Z")

</div>

I changed the mapping a few minutes ago and now able to redirect the value to @timestamp using date filter .

```auto
 curl -XGET http://172.26.207.164:9200/logstash_viz/_mappings 
{"logstash_viz":{"mappings":{"properties":{"@timestamp":{"type":"date"},
"GM_CPU_Percentage":{"type":"text","fields":{"keyword":{"type":"keyword","ignore_above":256}}},
"GM_Hour:Min:Sec":{"type":"text","fields":{"keyword":{"type":"keyword","ignore_above":256}}},"GM_Month/Day":{"type":"text","fields":{"keyword":{"type":"keyword","ignore_above":256}}},"GM_Suspend_Flag":{"type":"text","fields":{"keyword":{"type":"keyword","ignore_above":256}}},"GM_month/Day":{"type":"text","fields":{"keyword":{"type":"keyword","ignore_above":256}}},"Ghostmon_log_filename":{"type":"text","fields":{"keyword":{"type":"keyword","ignore_above":256}}}}}}}

```

checked output here

```auto
{
              "GM_Time" => "07/22 09:07:40",
    "GM_CPU_Percentage" => "81.5",
           "@timestamp" => 2021-07-22T09:07:40.000Z
}

```

the log line that was parsed :-

```auto
[07-22 09:07:40 I systeminfo.cpp: 394] cpu usage = 81.5%

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 19, 2021, 1:48pm UTC](https://discuss.elastic.co/t/unable-to-use-tsvb-visualization-even-after-specifying-index/279311/7 "2021-08-19T13:48:16Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
