# Viewing EPS graph in Kibana

**URL:** https://discuss.elastic.co/t/viewing-eps-graph-in-kibana/261665
**Category:** Kibana
**Created:** [January 20, 2021, 2:51pm UTC](https://discuss.elastic.co/t/viewing-eps-graph-in-kibana/261665 "2021-01-20T14:51:47Z")
**Posts on this page:** 12
**Page:** 1

<div class="post-metadata">

### Author: ![Falikou1](https://avatars.discourse-cdn.com/v4/letter/f/74df32/32.png) [@Falikou1](https://discuss.elastic.co/u/Falikou1)
#### Post date: [January 20, 2021, 2:51pm UTC](https://discuss.elastic.co/t/viewing-eps-graph-in-kibana/261665/1 "2021-01-20T14:51:47Z")

</div>

I want to display a graph of the EPS in kibana.  
But, it displays a graph every 30 seconds over 1 hour that I defined.  
While I have set by second.  
Is there a possibility for it to display per second?  
Thanks for your help

Below the capture

 ![m](https://us1.discourse-cdn.com/elastic/original/3X/6/a/6a7d799f3a9fa2240a050e36b1d99ba422f231da.png)

---

<div class="post-metadata">

### Author: ![wylie](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/wylie/32/81794_2.png) [@wylie](https://discuss.elastic.co/u/wylie)
#### Post date: [January 20, 2021, 6:44pm UTC](https://discuss.elastic.co/t/viewing-eps-graph-in-kibana/261665/2 "2021-01-20T18:44:29Z")

</div>

Kibana tries to prevent you from making extremely slow queries, so the main way to get a smaller time range is to zoom into a smaller time window.

It is possible to increase the `histogram:maxBars` advanced Kibana setting to change the behavior here. This affects all date histograms in Kibana.

If you want to build a custom query that uses an exact interval, you will have to use Vega.

---

<div class="post-metadata">

### Author: ![flash1293](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/flash1293/32/41227_2.png) [@flash1293](https://discuss.elastic.co/u/flash1293)
#### Post date: [January 21, 2021, 8:21am UTC](https://discuss.elastic.co/t/viewing-eps-graph-in-kibana/261665/3 "2021-01-21T08:21:01Z")

</div>

If the exact number per second interval is not important and you just want to scale the y axis accordingly, another option to what Wylie wrote is to use TSVB and a "math" aggregation, dividing by `params._interval` which is the "width" of each bar in milliseconds:

 ![Screenshot 2021-01-21 at 09.18.53](https://us1.discourse-cdn.com/elastic/original/3X/7/9/79c09de5aa2694189cd129134375d96b7d312629.png)

This will give you the average count per second for each 30 second block.

---

<div class="post-metadata">

### Author: ![Falikou1](https://avatars.discourse-cdn.com/v4/letter/f/74df32/32.png) [@Falikou1](https://discuss.elastic.co/u/Falikou1)
#### Post date: [January 21, 2021, 8:58am UTC](https://discuss.elastic.co/t/viewing-eps-graph-in-kibana/261665/4 "2021-01-21T08:58:57Z")

</div>

We cannot set to display EPS.  
If it is possible, can you show me?

---

<div class="post-metadata">

### Author: ![wylie](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/wylie/32/81794_2.png) [@wylie](https://discuss.elastic.co/u/wylie)
#### Post date: [January 21, 2021, 4:21pm UTC](https://discuss.elastic.co/t/viewing-eps-graph-in-kibana/261665/5 "2021-01-21T16:21:37Z")

</div>

We've suggested 3 workarounds to your issue, have you tried these?

---

<div class="post-metadata">

### Author: ![Falikou1](https://avatars.discourse-cdn.com/v4/letter/f/74df32/32.png) [@Falikou1](https://discuss.elastic.co/u/Falikou1)
#### Post date: [January 22, 2021, 2:11pm UTC](https://discuss.elastic.co/t/viewing-eps-graph-in-kibana/261665/6 "2021-01-22T14:11:36Z")

</div>

I increased the histogram: maxBars. But, I would like to have only one EPS over a period of time. Which is not the case.

---

<div class="post-metadata">

### Author: ![Falikou1](https://avatars.discourse-cdn.com/v4/letter/f/74df32/32.png) [@Falikou1](https://discuss.elastic.co/u/Falikou1)
#### Post date: [January 22, 2021, 2:18pm UTC](https://discuss.elastic.co/t/viewing-eps-graph-in-kibana/261665/7 "2021-01-22T14:18:56Z")

</div>

I can't see anything in my graph.

---

<div class="post-metadata">

### Author: ![wylie](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/wylie/32/81794_2.png) [@wylie](https://discuss.elastic.co/u/wylie)
#### Post date: [January 22, 2021, 9:19pm UTC](https://discuss.elastic.co/t/viewing-eps-graph-in-kibana/261665/8 "2021-01-22T21:19:31Z")

</div>

What do you mean by "only one EPS over a period of time". Can you explain:

1. What is your goal, as specifically as possible?
2. What have you tried so far?
3. What does your data look like in Elasticsearch?

---

<div class="post-metadata">

### Author: ![Falikou1](https://avatars.discourse-cdn.com/v4/letter/f/74df32/32.png) [@Falikou1](https://discuss.elastic.co/u/Falikou1)
#### Post date: [January 23, 2021, 7:24pm UTC](https://discuss.elastic.co/t/viewing-eps-graph-in-kibana/261665/9 "2021-01-23T19:24:29Z")

</div>

> [@wylie](#):
>
> What do you mean by "only one EPS over a period of time". Can you explain:
> 
> 1. What is your goal, as specifically as possible?
> 2. What have you tried so far?
> 3. What does your data look like in Elasticsearch?

1. The goal for me is to filter for example on an interval of 24 hours. And then display for example that the EPS is equal to 300 in a table for example or on a graph.
2. I tried to display on a graph and in a table. But, it displays details that vary every second of the 24 hour interval.

Like this:

 ![n](https://us1.discourse-cdn.com/elastic/original/3X/7/5/75142dfac7242ee2ee8279875ea28d05ab809c0e.png)  
3. My data looks like this:

\<189\>timestamp=1611418837 devname="DCL0001FW" devid="FG100FTK20004077" vd="VPN-PARTNER" date=2021-01-23 time=17:20:37 logid="0000000013" type="traffic" subtype="forward" level="notice" eventtime=1611418837682800503 tz="+0100" srcip=10.226.32.16 srcport=60166 srcintf="To-GCP" srcintfrole="undefined" dstip=10.2.26.51 dstport=80 dstintf="To-KLGRP\_PRD" dstintfrole="undefined" srccountry="Reserved" dstcountry="Reserved" sessionid=2602487300 proto=6 action="close" policyid=246 policytype="policy" poluuid="76391d82-299a-51eb-1a72-b3bda661976d" policyname="KLEEGROUP\_PRD-5" service="HTTP" trandisp="snat" transip=192.168.131.117 transport=60166 duration=2 sentbyte=633 rcvdbyte=487 sentpkt=6 rcvdpkt=6 vpn="To-KLGRP\_PRD" vpntype="ipsec-static" appcat="unscanned"

---

<div class="post-metadata">

### Author: ![wylie](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/wylie/32/81794_2.png) [@wylie](https://discuss.elastic.co/u/wylie)
#### Post date: [January 25, 2021, 3:34pm UTC](https://discuss.elastic.co/t/viewing-eps-graph-in-kibana/261665/10 "2021-01-25T15:34:24Z")

</div>

Okay, I understand that you want to calculate "Events per second" across a time range of 24 hours. I think your best bet is to use TSVB, like Joe previous suggested. Open TSVB, then:

1. Go to Panel Options \> Index pattern and choose the right index pattern
2. Go back to Data and configure Count, then Math, then type `params.count / params._interval * 1000`
3. You'll start seeing average values per second
4. Switch to Metric to reduce this to a single number
5. _Important_: Go back to Panel Options \> Data timerange mode \> Entire time range

---

<div class="post-metadata">

### Author: ![Falikou1](https://avatars.discourse-cdn.com/v4/letter/f/74df32/32.png) [@Falikou1](https://discuss.elastic.co/u/Falikou1)
#### Post date: [January 25, 2021, 8:09pm UTC](https://discuss.elastic.co/t/viewing-eps-graph-in-kibana/261665/11 "2021-01-25T20:09:04Z")

</div>

> [@wylie](#):
>
> Okay, I understand that you want to calculate "Events per second" across a time range of 24 hours. I think your best bet is to use TSVB, like Joe previous suggested. Open TSVB, then:
> 
> 1. Go to Panel Options \> Index pattern and choose the right index pattern
> 2. Go back to Data and configure Count, then Math, then type `params.count / params._interval * 1000`
> 3. You'll start seeing average values per second
> 4. Switch to Metric to reduce this to a single number
> 5. _Important_ : Go back to Panel Options \> Data timerange mode \> Entire time range

Thank you so much. That's what I wanted.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [February 22, 2021, 8:09pm UTC](https://discuss.elastic.co/t/viewing-eps-graph-in-kibana/261665/12 "2021-02-22T20:09:06Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
