Better understanding of Timelion-moving average needed


#1

Hi,

I am generating a moving average timelion graph for my data. Below are the graphs:


I have only changed the interval(or whatever it is representing) from 3 min to 4 min. I am not able to understand

  1. What this particular interval is/signifies
  2. How is it affecting the graph(difference in shape)
  3. When i change it to 10min, no graph is visible

Any help is appreciated. Thanks.

Regards,
Ruthu


(Tim Sullivan) #2

The "interval" represents the interval used in the Elasticsearch date histogram aggregation: https://www.elastic.co/guide/en/elasticsearch/reference/current/search-aggregations-bucket-datehistogram-aggregation.html

Date histograms are bucket aggregations, and the interval controls the size of the buckets / how many buckets there are from the start time to the end time.

Moving averages need to create subsets of the data to average, and then shift the subset forward across the data to continuously calculate an average. I would guess you don't have enough data to create enough subsets for calculation when your interval size is 10m. See https://www.elastic.co/guide/en/elasticsearch/reference/master/search-aggregations-pipeline-movavg-aggregation.html

For fun, you could try running those moving average aggregation queries on your data yourself using the Console Dev Tool :smiley:

-Tim


(system) #3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.