Create a visualize with field value

[elk2 (piter)]

I have a lot of documents like this into elasticsearch:

{
  "_index": "logstash-people-2020.01.22",
  "_type": "_doc",
  "_id": "I7xKznAB6obTCirlmSMC",
  "_version": 1,
  "_score": null,
  "_source": {
    "men": 111,
    "@timestamp": "2020-01-22T12:00:00.000Z",
    "path": "/tmp/people.json",
    "@version": "1",
    "tags": [
      "multiline"
    ],
    "country": "US",
    "childrens": 127,
    "host": "ubuntu",
    "message": "{ \"date\": \"2020-01-22 13:00:00\",\n\"country\": \"US\",\n\"men\": 111,\n\"women\": 26,\n\"childrens\": 127\n}",
    "women": 26,
    "date": "2020-01-22 13:00:00"
  },
  "fields": {
    "@timestamp": [
      "2020-01-22T12:00:00.000Z"
    ]
  },
  "sort": [
    1579694400000
  ]
}

I would like to create a visualize to show the trendline of men field value every day. For example 2020-01-22 men 111
2020-01-23 men 134
2020-01-24 men 155

[Marta_Bondyra]

Hi Piter,

I assume that you need a metric visualisation. You have to set a sum of men on X-axis and create a split group aggregation of type date histogram. Set up minimum interval to daily. I hope you'll find this example helpful:

Regards,
Marta