A couple questions regarding bucket splits by rows/columns and exclude patterns in kibana visualizations

[tsullivan93]

Hello,

Apologies for grouping two questions together, but I figured I would just take care of both with one post.

1.) Is there anyway to split a chart by significant term by row AND column. What I'm asking is as it stands when I split by column it will tell me my visualization is too small, and when I split by rows I'm left with 1 chart on each row that have a good deal of white space that continue down for 20 rows. Is there no way to have for example 4 columns with charts on a row for 5 rows?

2.) Also I would like to exclude certain keywords from the split but for the life of me I cannot figure out the exclude/include pattern in the advanced section of the split options. Any info on the syntax/ how to use would be appreciated. A search for documentation has come up with nothing.

I'm using Kibana version 5.3.

Thanks!

[shaunak (Shaunak Kashyap)]

1.) Is there anyway to split a chart by significant term by row AND column. What I'm asking is as it stands when I split by column it will tell me my visualization is too small, and when I split by rows I'm left with 1 chart on each row that have a good deal of white space that continue down for 20 rows. Is there no way to have for example 4 columns with charts on a row for 5 rows?

I'm not sure I'm understanding what you mean by split by column. Would it be possible for you include some screenshots explaining what you are seeing and what you'd like to see instead?

2.) Also I would like to exclude certain keywords from the split but for the life of me I cannot figure out the exclude/include pattern in the advanced section of the split options. Any info on the syntax/ how to use would be appreciated. A search for documentation has come up with nothing.

If you want to exclude a single keyword, it should be as simple as entering it in the "Exclude" field in the UI.

If you want to exclude multiple keywords, unfortunately you can't use the "Exclude" field but must use the "JSON Input" field instead.

The three screenshots below show a) without any keywords being excluded, b) with a single keyword being excluded, and c) with multiple keywords being excluded.

[tsullivan93]

Here is an example screenshot of a my problem with splitting by rows/columns

Here is a chart that was split by 15 significant terms. Now I would like to visualize them all on the same dashboard using one visualization because they represent the same thing for each term. This is splitting by rows as that is the only option. If I try to split by columns, I will not be able to make the visualization big enough no matter what because it will try to put all 15 charts on the same row. My issue with the picture above is that this way leaves so much white space to the right and continues down the page for quite some ways. If I extend the visualization to the right it just makes the single chart on the row wider.

My quest is, is there no way for a single visualization to have multiple charts on one row for multiple rows?

Also thank you for the help with the exclude and include. Got it working!