# Calculate values during visualize log data with Kibana4

**URL:** <https://discuss.elastic.co/t/calculate-values-during-visualize-log-data-with-kibana4/22336>\
**Category:** Elasticsearch\
**Created:** [February 23, 2015, 6:07pm UTC](https://discuss.elastic.co/t/calculate-values-during-visualize-log-data-with-kibana4/22336 "2015-02-23T18:07:23Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![cong\_yue](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/cong_yue/32/53106_2.png) [@cong\_yue](https://discuss.elastic.co/u/cong_yue)\
**Post date:** [February 23, 2015, 6:07pm UTC](https://discuss.elastic.co/t/calculate-values-during-visualize-log-data-with-kibana4/22336/1 "2015-02-23T18:07:23Z")

</div>

Hello

I am trying to evaluate ELK to help visualize my log data as we did with  
other tools till now.  
I have some log data like

15 1424376130.979 84 10.0.0.210 TCP\_MISS/200 104708 GET  
[http://en.wikipedia.org/wiki/Walden,\_New\_York](http://en.wikipedia.org/wiki/Walden,_New_York) - DIRECT/en.wikipedia.org  
text/html  
16 1424376132.409 11 10.0.0.210 TCP\_REFRESH\_HIT/200 104573 GET  
[http://en.wikipedia.org/wiki/Walden,\_New\_York](http://en.wikipedia.org/wiki/Walden,_New_York) - DIRECT/en.wikipedia.org  
text/html  
17 1424376133.240 10 10.0.0.210 TCP\_REFRESH\_HIT/200 104573 GET  
[http://en.wikipedia.org/wiki/Walden,\_New\_York](http://en.wikipedia.org/wiki/Walden,_New_York) - DIRECT/en.wikipedia.org  
text/html  
18 1424376133.937 11 10.0.0.210 TCP\_REFRESH\_HIT/200 104573 GET  
[http://en.wikipedia.org/wiki/Walden,\_New\_York](http://en.wikipedia.org/wiki/Walden,_New_York) - DIRECT/en.wikipedia.org  
text/html  
19 1424376134.644 6 10.0.0.210 TCP\_REFRESH\_HIT/200 104573 GET  
[http://en.wikipedia.org/wiki/Walden,\_New\_York](http://en.wikipedia.org/wiki/Walden,_New_York) - DIRECT/en.wikipedia.org  
text/html  
20 1424376135.366 9 10.0.0.210 TCP\_REFRESH\_HIT/200 104573 GET  
[http://en.wikipedia.org/wiki/Walden,\_New\_York](http://en.wikipedia.org/wiki/Walden,_New_York) - DIRECT/en.wikipedia.org  
text/html  
21 1424376136.057 11 10.0.0.210 TCP\_REFRESH\_HIT/200 104573 GET  
[http://en.wikipedia.org/wiki/Walden,\_New\_York](http://en.wikipedia.org/wiki/Walden,_New_York) - DIRECT/en.wikipedia.org  
text/html  
22 1424376136.821 12 10.0.0.210 TCP\_REFRESH\_HIT/200 104573 GET  
[http://en.wikipedia.org/wiki/Walden,\_New\_York](http://en.wikipedia.org/wiki/Walden,_New_York) - DIRECT/en.wikipedia.org  
text/html  
23 1424376137.410 25 10.0.0.210 TCP\_REFRESH\_HIT/200 104573 GET  
[http://en.wikipedia.org/wiki/Walden,\_New\_York](http://en.wikipedia.org/wiki/Walden,_New_York) - DIRECT/en.wikipedia.org  
text/html  
24 1424376137.956 12 10.0.0.210 TCP\_REFRESH\_HIT/200 104573 GET  
[http://en.wikipedia.org/wiki/Walden,\_New\_York](http://en.wikipedia.org/wiki/Walden,_New_York) - DIRECT/en.wikipedia.org  
text/html  
25 1424376138.508 23 10.0.0.210 TCP\_REFRESH\_HIT/200 104573 GET  
[http://en.wikipedia.org/wiki/Walden,\_New\_York](http://en.wikipedia.org/wiki/Walden,_New_York) - DIRECT/en.wikipedia.org  
text/html  
26 1424376139.142 17 10.0.0.210 TCP\_REFRESH\_HIT/200 104573 GET  
[http://en.wikipedia.org/wiki/Walden,\_New\_York](http://en.wikipedia.org/wiki/Walden,_New_York) - DIRECT/en.wikipedia.org  
text/html  
27 1424376139.713 26 10.0.0.210 TCP\_REFRESH\_HIT/200 104573 GET  
[http://en.wikipedia.org/wiki/Walden,\_New\_York](http://en.wikipedia.org/wiki/Walden,_New_York) - DIRECT/en.wikipedia.org  
text/html  
28 1424376140.404 20 10.0.0.210 TCP\_REFRESH\_HIT/200 104573 GET  
[http://en.wikipedia.org/wiki/Walden,\_New\_York](http://en.wikipedia.org/wiki/Walden,_New_York) - DIRECT/en.wikipedia.org  
text/html  
29 1424376141.084 21 10.0.0.210 TCP\_REFRESH\_HIT/200 104573 GET  
[http://en.wikipedia.org/wiki/Walden,\_New\_York](http://en.wikipedia.org/wiki/Walden,_New_York) - DIRECT/en.wikipedia.org  
text/html  
30 1424376141.677 25 10.0.0.210 TCP\_REFRESH\_HIT/200 104573 GET  
[http://en.wikipedia.org/wiki/Walden,\_New\_York](http://en.wikipedia.org/wiki/Walden,_New_York) - DIRECT/en.wikipedia.org  
text/html  
31 1424376142.216 25 10.0.0.210 TCP\_REFRESH\_HIT/200 104573 GET  
[http://en.wikipedia.org/wiki/Walden,\_New\_York](http://en.wikipedia.org/wiki/Walden,_New_York) - DIRECT/en.wikipedia.org  
text/html  
32 1424376142.937 44 10.0.0.210 TCP\_REFRESH\_HIT/200 104573 GET  
[http://en.wikipedia.org/wiki/Walden,\_New\_York](http://en.wikipedia.org/wiki/Walden,_New_York) - DIRECT/en.wikipedia.org  
text/html  
33 1424376144.726 13 10.0.0.210 TCP\_REFRESH\_HIT/200 104573 GET  
[http://en.wikipedia.org/wiki/Walden,\_New\_York](http://en.wikipedia.org/wiki/Walden,_New_York) - DIRECT/en.wikipedia.org  
text/html  
34 1424376170.692 32 10.0.0.210 TCP\_REFRESH\_HIT/200 104565 GET  
[http://en.wikipedia.org/wiki/Walden,\_New\_York](http://en.wikipedia.org/wiki/Walden,_New_York) - DIRECT/en.wikipedia.org  
text/html  
35 1424376172.692 213 10.0.0.210 TCP\_REFRESH\_HIT/200 104565 GET  
[http://en.wikipedia.org/wiki/Walden,\_New\_York](http://en.wikipedia.org/wiki/Walden,_New_York) - DIRECT/en.wikipedia.org  
text/html  
36 1424376173.400 10 10.0.0.210 TCP\_REFRESH\_HIT/200 104565 GET  
[http://en.wikipedia.org/wiki/Walden,\_New\_York](http://en.wikipedia.org/wiki/Walden,_New_York) - DIRECT/en.wikipedia.org  
text/html  
37 1424376174.895 9 10.0.0.210 TCP\_REFRESH\_HIT/200 104565 GET  
[http://en.wikipedia.org/wiki/Walden,\_New\_York](http://en.wikipedia.org/wiki/Walden,_New_York) - DIRECT/en.wikipedia.org  
text/html  
38 1424376274.397 1384 10.0.0.210 TCP\_MISS/200 86976 GET  
[http://www.citrix.co.jp/products.html?posit=glnav](http://www.citrix.co.jp/products.html?posit=glnav) - DIRECT/www.citrix.co.jp  
text/html

These log data is with timestamp in the unit of milliseconds. I succeed to  
put it into elasticsearch, but can somebody advise how I can do this with  
kibana4?

- Calculate the HIT ratio per second. The Hit ration will be calculated as  
the percentation of "HIT" happens among all logs in that time.

Thanks,  
Cong

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/9c3cba40-48d0-4837-a1f0-62b06f12740c%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/9c3cba40-48d0-4837-a1f0-62b06f12740c%40googlegroups.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 12:30am UTC](https://discuss.elastic.co/t/calculate-values-during-visualize-log-data-with-kibana4/22336/2 "2017-07-06T00:30:43Z")

</div>


