# \#timelion **URL:** https://discuss.elastic.co/tag/timelion/110.md [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) --- ## [Timelion visualization not working after upgrading from ES 7 to 8](https://discuss.elastic.co/t/timelion-visualization-not-working-after-upgrading-from-es-7-to-8/380513)
**Author:** [@oskrdt](https://discuss.elastic.co/u/oskrdt)\ **Replies:** 8\ **Last updated:** [September 2, 2025, 7:14pm UTC](https://discuss.elastic.co/t/timelion-visualization-not-working-after-upgrading-from-es-7-to-8/380513 "2025-09-02T19:14:56Z")
After upgrading my elasticsearch and kibana instance from 7 to 8.18.4 my Timelion visualizations that where previously working are getting the following error: Unable to load visualization Error: \[timelion\_vis\] \> Timeli… --- ## [Filebeat multiple outputs](https://discuss.elastic.co/t/filebeat-multiple-outputs/374668)
**Author:** [@Thirupathi](https://discuss.elastic.co/u/Thirupathi)\ **Replies:** 16\ **Last updated:** [March 7, 2025, 12:57pm UTC](https://discuss.elastic.co/t/filebeat-multiple-outputs/374668 "2025-03-07T12:57:02Z")
Filebeat to send logs to Kafka, and if Kafka is down, failover to Elasticsearch. --- ## [Moving average count based if greater than upper threshold then red color if moving avg count if lower threshold then blue color in kibana formula or vertical bar chart](https://discuss.elastic.co/t/moving-average-count-based-if-greater-than-upper-threshold-then-red-color-if-moving-avg-count-if-lower-threshold-then-blue-color-in-kibana-formula-or-vertical-bar-chart/359938)
**Author:** [@Ravisankar123](https://discuss.elastic.co/u/Ravisankar123)\ **Replies:** 1\ **Last updated:** [November 15, 2024, 2:10pm UTC](https://discuss.elastic.co/t/moving-average-count-based-if-greater-than-upper-threshold-then-red-color-if-moving-avg-count-if-lower-threshold-then-blue-color-in-kibana-formula-or-vertical-bar-chart/359938 "2024-11-15T14:10:04Z")
Moving average count based if greater than upper threshold then red color if moving avg count if lower threshold then blue color in kibana formula or vertical bar chart in kibana --- ## [Monthly Active Users (MAU)](https://discuss.elastic.co/t/monthly-active-users-mau/363058)
**Author:** [@Isadora\_Pimentel](https://discuss.elastic.co/u/Isadora_Pimentel)\ **Replies:** 0\ **Last updated:** [July 12, 2024, 9:01pm UTC](https://discuss.elastic.co/t/monthly-active-users-mau/363058 "2024-07-12T21:01:15Z")
Olá, Estou com dificuldade para gerar um histograma com o Monthly Active Users (MAU) no Kibana. Consigo fazer a contagem de usuários únicos facilmente com um unique\_count, porém isso só mostra os usuários daquele dia es… --- ## [Timelion elasticsearch documentation](https://discuss.elastic.co/t/timelion-elasticsearch-documentation/357326)
**Author:** [@Rakrish](https://discuss.elastic.co/u/Rakrish)\ **Replies:** 4\ **Last updated:** [April 15, 2024, 9:38pm UTC](https://discuss.elastic.co/t/timelion-elasticsearch-documentation/357326 "2024-04-15T21:38:04Z")
Hello - Any good documentation reference for Kibana elastsearch timelion. Thx! --- ## [Logstash 8.12.2 restart many times may encounter string index out of range -1 error](https://discuss.elastic.co/t/logstash-8-12-2-restart-many-times-may-encounter-string-index-out-of-range-1-error/356849)
**Author:** [@LiYuzhuo2020](https://discuss.elastic.co/u/LiYuzhuo2020)\ **Replies:** 4\ **Last updated:** [April 9, 2024, 10:11am UTC](https://discuss.elastic.co/t/logstash-8-12-2-restart-many-times-may-encounter-string-index-out-of-range-1-error/356849 "2024-04-09T10:11:56Z")
Hi , last time I restart the logstash 8.12.2 many times (5 - 10 +) may encounter the plugin load errror, so I change mutate { rename =\> {"\[host\]\[name\]" =\> "\[host\]"} } to mutate { remove\_field =\> \["host"\] } and there's no… --- ## [Timelion visualization - getting average of events grouped by id](https://discuss.elastic.co/t/timelion-visualization-getting-average-of-events-grouped-by-id/356936)
**Author:** [@Sabika](https://discuss.elastic.co/u/Sabika)\ **Replies:** 2\ **Last updated:** [April 8, 2024, 7:49am UTC](https://discuss.elastic.co/t/timelion-visualization-getting-average-of-events-grouped-by-id/356936 "2024-04-08T07:49:04Z")
Hi, I am tryng to calculate average of a group of events by calculating the difference between min and max timestamps and then dividing by count. Split events by an ID For each of these groups calculate time taken(by … --- ## [Can we consolidate or correlate simliar incidents](https://discuss.elastic.co/t/can-we-consolidate-or-correlate-simliar-incidents/346304)
**Author:** [@ksrawat88](https://discuss.elastic.co/u/ksrawat88)\ **Replies:** 3\ **Last updated:** [November 13, 2023, 3:02pm UTC](https://discuss.elastic.co/t/can-we-consolidate-or-correlate-simliar-incidents/346304 "2023-11-13T15:02:33Z")
We are using open source ELK stack and we have different log sources enabled. Is there anyway we can have log correlation between different log sources. For example if we search for one IP or user we can see all logs fr… --- ## [Group fields in a visualization for time series](https://discuss.elastic.co/t/group-fields-in-a-visualization-for-time-series/325934)
**Author:** [@dannie-ml](https://discuss.elastic.co/u/dannie-ml)\ **Replies:** 2\ **Last updated:** [August 3, 2023, 7:20am UTC](https://discuss.elastic.co/t/group-fields-in-a-visualization-for-time-series/325934 "2023-08-03T07:20:16Z")
Hi, im new in Elastic and i want to build some visualization of this table: But when building both lens or line chart or vega-lite (in this one i really dont know how to achieve a visualization) but for the other ones… --- ## [求助kibana执行yarn build --skip-os-packages报错](https://discuss.elastic.co/t/kibana-yarn-build-skip-os-packages/338554)
**Author:** [@gao](https://discuss.elastic.co/u/gao)\ **Replies:** 1\ **Last updated:** [July 18, 2023, 2:27pm UTC](https://discuss.elastic.co/t/kibana-yarn-build-skip-os-packages/338554 "2023-07-18T14:27:39Z")
yarn run v1.21.1 $ node scripts/build --all-platforms --skip-os-packages Browserslist: caniuse-lite is outdated. Please run: npx browserslist@latest --update-db Why you should do it regularly: GitHub - browserslist/b… --- ## [Timelion not working at all: "Timelion request error: in cell #1: No such function: es"](https://discuss.elastic.co/t/timelion-not-working-at-all-timelion-request-error-in-cell-1-no-such-function-es/324211)
**Author:** [@matej.szabo](https://discuss.elastic.co/u/matej.szabo)\ **Replies:** 7\ **Last updated:** [February 1, 2023, 5:02pm UTC](https://discuss.elastic.co/t/timelion-not-working-at-all-timelion-request-error-in-cell-1-no-such-function-es/324211 "2023-02-01T17:02:50Z")
Hello everyone, We have just finished building up our ELK stack from the latest pieces of this puzzle (8.6.0): elasticsearch+kibana+filebeat+metricbeat. We are trying to build some timelion visualizations from metricbea… --- ## [Timelion query filter returning constant 0 results](https://discuss.elastic.co/t/timelion-query-filter-returning-constant-0-results/323625)
**Author:** [@vector\_prime](https://discuss.elastic.co/u/vector_prime)\ **Replies:** 1\ **Last updated:** [January 23, 2023, 9:52pm UTC](https://discuss.elastic.co/t/timelion-query-filter-returning-constant-0-results/323625 "2023-01-23T21:52:50Z")
I have an index with the following document structure: "\_source": { "installcreatedbyusername": "xxxx", "@timestamp": "2023-01-20T16:30:03.840332Z", "type": "aegis", "num\_packages": 2, "num\_environme… --- ## [How can I make trend line as a dotted line](https://discuss.elastic.co/t/how-can-i-make-trend-line-as-a-dotted-line/320213)
**Author:** [@princejaiswal03](https://discuss.elastic.co/u/princejaiswal03)\ **Replies:** 1\ **Last updated:** [December 27, 2022, 2:24pm UTC](https://discuss.elastic.co/t/how-can-i-make-trend-line-as-a-dotted-line/320213 "2022-12-27T14:24:54Z")
I have used trend() function for generating the trend line. How can I make that trend line as a dotted line? I have one more question. Is it possible to remove the background grid lines in the timelion charts? --- ## [Timelion query to string containing slash "/" -- aka: howto use regexp in timelion](https://discuss.elastic.co/t/timelion-query-to-string-containing-slash-aka-howto-use-regexp-in-timelion/320158)
**Author:** [@DrG](https://discuss.elastic.co/u/DrG)\ **Replies:** 0\ **Last updated:** [November 30, 2022, 1:58pm UTC](https://discuss.elastic.co/t/timelion-query-to-string-containing-slash-aka-howto-use-regexp-in-timelion/320158 "2022-11-30T13:58:52Z")
Hello everybody, in the database, a set of strings (stringified ids) are there, stemming from a directory view. Now I like to filter out subfolders - aka filter out those elements containing slash(es). the database co… --- ## [Dropdown filter does not apply on chart created using timelion](https://discuss.elastic.co/t/dropdown-filter-does-not-apply-on-chart-created-using-timelion/320109)
**Author:** [@Zaid\_Raza](https://discuss.elastic.co/u/Zaid_Raza)\ **Replies:** 0\ **Last updated:** [November 30, 2022, 6:18am UTC](https://discuss.elastic.co/t/dropdown-filter-does-not-apply-on-chart-created-using-timelion/320109 "2022-11-30T06:18:11Z")
Hi, I have created a chart using Timelion on canvas. kibana |filters | timelion query=".es(index='traces-apm\*,apm-\*,logs-apm\*,apm-\*,metrics-apm\*,apm-\*',metric=avg:transaction.duration.us, timefield=@timestamp,q=' \_e… --- ## [Hide value of legend in Timelion](https://discuss.elastic.co/t/hide-value-of-legend-in-timelion/315470)
**Author:** [@S-elk](https://discuss.elastic.co/u/S-elk)\ **Replies:** 2\ **Last updated:** [October 7, 2022, 6:41pm UTC](https://discuss.elastic.co/t/hide-value-of-legend-in-timelion/315470 "2022-10-07T18:41:08Z")
Hello! could anyone tell me how can i hide the value of the legend without hide the whole legend? Thanks in advanced! --- ## [\[Kibana timelion\] Error in the continuation of the trend in the future (fit function)](https://discuss.elastic.co/t/kibana-timelion-error-in-the-continuation-of-the-trend-in-the-future-fit-function/313968)
**Author:** [@daniele.saccon](https://discuss.elastic.co/u/daniele.saccon)\ **Replies:** 1\ **Last updated:** [September 9, 2022, 8:32pm UTC](https://discuss.elastic.co/t/kibana-timelion-error-in-the-continuation-of-the-trend-in-the-future-fit-function/313968 "2022-09-09T20:32:04Z")
Hi, I am trying to create a timelion chart with the aim of plotting the trend over time of my size field. I would like the line to continue in the future with the latest available data after today's date. I am using v… --- ## [Zomming timelion chart](https://discuss.elastic.co/t/zomming-timelion-chart/313231)
**Author:** [@michalruszczyk](https://discuss.elastic.co/u/michalruszczyk)\ **Replies:** 0\ **Last updated:** [August 30, 2022, 8:59am UTC](https://discuss.elastic.co/t/zomming-timelion-chart/313231 "2022-08-30T08:59:55Z")
Hi, is it possible to zoom some specific range in timelion chart? I have such a chart: \<.es(index = nebula, timefield=CreationDate, metric=sum:SettlementAmount).cusum().subtract(.es(index = nebula,timefield=ReleaseDate,… --- ## [How to calculate % growth for a sliding time window with a yearly offset?](https://discuss.elastic.co/t/how-to-calculate-growth-for-a-sliding-time-window-with-a-yearly-offset/312880)
**Author:** [@tastyminerals](https://discuss.elastic.co/u/tastyminerals)\ **Replies:** 0\ **Last updated:** [August 25, 2022, 7:58am UTC](https://discuss.elastic.co/t/how-to-calculate-growth-for-a-sliding-time-window-with-a-yearly-offset/312880 "2022-08-25T07:58:58Z")
I would like to create a timelion visualizaiton which shows a % growth of received documents within a range of 1 week against the same week but a year ago. I am not sure if the below timelion expression does exactly that… --- ## [Issue with Date Filter in Timelion (Kibana 6.8), TODAY starts at 9AM](https://discuss.elastic.co/t/issue-with-date-filter-in-timelion-kibana-6-8-today-starts-at-9am/311298)
**Author:** [@anthony\_g](https://discuss.elastic.co/u/anthony_g)\ **Replies:** 3\ **Last updated:** [August 4, 2022, 5:44pm UTC](https://discuss.elastic.co/t/issue-with-date-filter-in-timelion-kibana-6-8-today-starts-at-9am/311298 "2022-08-04T17:44:32Z")
Hello, I'm really new to the Elastic Stack and I'm currently working on some dashboards that will rely on time series built using Timelion. I'm working on Kibana 6.8 and I have a totally unexpected issue: whenever I se… --- ## [Horizontal Line on Visualization Based on Max of Query Result](https://discuss.elastic.co/t/horizontal-line-on-visualization-based-on-max-of-query-result/309559)
**Author:** [@LisaJ](https://discuss.elastic.co/u/LisaJ)\ **Replies:** 3\ **Last updated:** [July 22, 2022, 8:09pm UTC](https://discuss.elastic.co/t/horizontal-line-on-visualization-based-on-max-of-query-result/309559 "2022-07-22T20:09:51Z")
I am looking for some way chart a horizontal line at some value determined by a query. I have a time series line chart showing dB loss values across the time series. There is another index that stores baseline dB loss va… --- ## [How to return day num in Kibana Scripted field](https://discuss.elastic.co/t/how-to-return-day-num-in-kibana-scripted-field/299683)
**Author:** [@krishray09](https://discuss.elastic.co/u/krishray09)\ **Replies:** 2\ **Last updated:** [April 5, 2022, 5:18am UTC](https://discuss.elastic.co/t/how-to-return-day-num-in-kibana-scripted-field/299683 "2022-04-05T05:18:55Z")
Hi all, Im using ES query in multiple Timelion charts to compare data for multiple dates. So I used new variables e.x: $u1=-32d, $u2=-69d in below es() query. Can anyone guide me how to use this as a scripted field to be… --- ## [Where are timelion visualizations saved?](https://discuss.elastic.co/t/where-are-timelion-visualizations-saved/300387)
**Author:** [@fcarrasco](https://discuss.elastic.co/u/fcarrasco)\ **Replies:** 2\ **Last updated:** [March 23, 2022, 1:22pm UTC](https://discuss.elastic.co/t/where-are-timelion-visualizations-saved/300387 "2022-03-23T13:22:39Z")
Hi we have Elasticsearch 7.16.3 Platinum, we create 35 viz in timelion but we need change name of index. Where are timelion visualizations saved? In any system index? Anybody have script to update index name? Any ap… --- ## [Turn off label for split fields in Timelion](https://discuss.elastic.co/t/turn-off-label-for-split-fields-in-timelion/297177)
**Author:** [@ElasticQuestion\_1234](https://discuss.elastic.co/u/ElasticQuestion_1234)\ **Replies:** 2\ **Last updated:** [March 2, 2022, 4:07am UTC](https://discuss.elastic.co/t/turn-off-label-for-split-fields-in-timelion/297177 "2022-03-02T04:07:46Z")
Is it possible to turn off the label in Timelion chart? When I created my Timelion chart, I have many points on the chart that is obvious what they are. So I don't need to have labels for all of them showing up. However,… --- ## ["Split chart" for Timelion charts, is it possible?](https://discuss.elastic.co/t/split-chart-for-timelion-charts-is-it-possible/287596)
**Author:** [@viacheslav](https://discuss.elastic.co/u/viacheslav)\ **Replies:** 2\ **Last updated:** [October 26, 2021, 6:04am UTC](https://discuss.elastic.co/t/split-chart-for-timelion-charts-is-it-possible/287596 "2021-10-26T06:04:30Z")
I need to have the same "split charts" in timelion as basic aggregation charts. It will very powerful feature for me. I see a topic about it which was closed 2 year ago: Are you planning to implement a feature to ren… --- ## [Blank Timelion](https://discuss.elastic.co/t/blank-timelion/286579)
**Author:** [@ebosdev](https://discuss.elastic.co/u/ebosdev)\ **Replies:** 1\ **Last updated:** [October 25, 2021, 9:09pm UTC](https://discuss.elastic.co/t/blank-timelion/286579 "2021-10-25T21:09:18Z")
Hello everyone, I am using Kibana 7.9.3 and I am currently facing an issue where the timelion is blank this is the query i am using .es(index=investigation\_master\_index,timefield=uco-observable:sentTime.@value, split=… --- ## [Timelion : display sum of days on y axis](https://discuss.elastic.co/t/timelion-display-sum-of-days-on-y-axis/285908)
**Author:** [@hiba](https://discuss.elastic.co/u/hiba)\ **Replies:** 1\ **Last updated:** [October 25, 2021, 8:09pm UTC](https://discuss.elastic.co/t/timelion-display-sum-of-days-on-y-axis/285908 "2021-10-25T20:09:51Z")
Hi, i create i scripted field "sejour" to calculate the duration between two dates. I want to use a Timelion visualization to calculate the sum of those days. for exemple in 04/09/2021 i want to get 6 days , i… --- ## [Scrollbar not present in timelion legend](https://discuss.elastic.co/t/scrollbar-not-present-in-timelion-legend/284051)
**Author:** [@vikramdayma](https://discuss.elastic.co/u/vikramdayma)\ **Replies:** 2\ **Last updated:** [October 5, 2021, 7:23am UTC](https://discuss.elastic.co/t/scrollbar-not-present-in-timelion-legend/284051 "2021-10-05T07:23:44Z")
Hi, I am facing an issue in timelion legend scrollbar. I create a timelion visualization with some trend lines. I create 70 legend dynamically but scroll bar is not displaying to scroll all legend. So all legends ar… --- ## [Adding more information on legends on Timelion chart](https://discuss.elastic.co/t/adding-more-information-on-legends-on-timelion-chart/276955)
**Author:** [@ElasticQuestion\_1234](https://discuss.elastic.co/u/ElasticQuestion_1234)\ **Replies:** 2\ **Last updated:** [July 27, 2021, 10:02pm UTC](https://discuss.elastic.co/t/adding-more-information-on-legends-on-timelion-chart/276955 "2021-07-27T22:02:06Z")
Hi, I am using Timelion chart to show some measurement data as in the screenshot. When I move the mouse to one of the points, it will show the data on the legend as Measurement (18.0) along with timestamps. Is it possib… --- ## [Change date format in Timelion](https://discuss.elastic.co/t/change-date-format-in-timelion/279121)
**Author:** [@vikramdayma](https://discuss.elastic.co/u/vikramdayma)\ **Replies:** 2\ **Last updated:** [July 23, 2021, 5:17am UTC](https://discuss.elastic.co/t/change-date-format-in-timelion/279121 "2021-07-23T05:17:21Z")
Hi, I want to change x-axis time format in Timelion visualization like 2021-04-16 to April -2021. Here is a screenshot. [Next page](https://discuss.elastic.co/tag/timelion/110.md?match_all_tags=true&page=1&tags%5B%5D=timelion)