Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

How to create value over time line chart in Kibana 4?

I'm facing a following problem. In Kibana 4 I've created a line chart based on my input from elasticeasrch but I can only display average, min, max instead of an actual value of the field per time, e.g. sent bytes. Most answears to that question on stackoverflow are about Kibana 3 (How to create value over time chart with Kibana 3?) and seem to include a Histogram on a X axis, yet I can't seem to find one which will enable me to apply them to Kibana 4. I was unable to find the histogram panel and once I click on the discover tab there is the constant Searching loading.

If I have the following fields in my _source: {"timestamp":"2015-06-02T10:16:44.0855","time":587,"threadName":"Thread Group 1-957","byte":1372,"status":"false","latence":306,"registerCall":"404"}

and I would like to have the number of bytes on the Y-axis and on the X-axis my timestamp.

Any help in the right direction will be appreciated :)

like image 806
Artemis Avatar asked May 08 '15 09:05

Artemis


People also ask

How do I make a graph in Kibana?

To create a new Kibana visualization, select Visualize in the menu on the left, click the + icon and then select the visualization you want to create. You are then presented with a choice — either create the new visualization on one of the indices you have in Elasticsearch or a saved search.

What is Timelion in Kibana?

Timelion is a visualization tool for time series in Kibana. Time series visualizations are visualizations, that analyze data in time order. Timelion can be used to draw two dimensional graphs, with the time drawn on the x-axis.

How do I make a pie chart in Kibana?

Pie chart editor After opening the Kibana website, the following steps can be taken to make a pie chart: Select the Visualize tab from the left menu bar. Click the Create a Visualization button. Select the Pie chart .


2 Answers

To create a value over time line chart in Kibana, follow these steps: Go to visualize tab and select line chart In the X-axis, select X-axis, Aggregation as Date Histogram and then select your timestamp field as the date field.

Next for the Y-Axis, select Sum as the aggregation and then bytes as the field.

like image 65
Limit Avatar answered Oct 03 '22 01:10

Limit


For the X axis, what Alcanzar said is good, but as you notice, the Y axis is problematic.

Sum (suggested by "Limit") works, but since it's aggregated, it shows the total used in each aggregated bucket, but that may be meaningless depending on what you are trying to show. Your question isn't clear on what you want, so I'm just guessing here. One hour of requests, each of which ran for one minute and sent 1 megabyte is indeed 60 megabytes-minutes, if you are trying to show total capacity used over than hour (maybe you are paying a bill based on usage per time). On the other hand, if you are trying to show peak usage in each time, it would be wrong.

You said you already looked and Max and Min and they don't meet your needs. I don't suppose Standard Deviation would be any better?

I have the same concern. The best I've been able to do so far is display Min and Max simultaneously in the Y axis. When they diverge, I know I'm zoomed out too far, so I zoom in until they align. when zoomed out too far, max and min diverge This is how I know I'm seeing individual events.

In any case, I share your frustration. I too would like to be able to show time series as easily as I can in, say, Excel.

like image 39
Jim Davis Avatar answered Oct 03 '22 03:10

Jim Davis