Creating a visualization that uses filter ratios to see utilization rate of a certain field

Elastic Stack Kibana
1

Hi! I have a very simple query that I need to make with a dashboard/visualization, but can't figure out how. I believe I need to use the visualization builder widget and filter ratios for this, but perhaps there is a better way.

Essentially I have an index/index pattern that has a certain field, like BusinessArea. And I want to see the ratio of this field being defined/not null over ALL records in that index. For example something like Field:BusinessArea not NULL or something, so I can get the % of records that have the field defined.

Anytime I try and do this I always end up with a 100%, which I know is not correct.

Could anyone explain how to do this?

2

You can do this in TSVB in the Metric tab using the "Filter ratio" aggregation. Numerator and denominator are specified using Lucene syntax, so in your case the numerator should be _exists_:BusinessArea and the denominator should be *

3

Thanks! I'll try it out and post results! Is there anyway to also return a list of all index entries where it does not exist and have them in a list?

4

You can do that in Discover. By saving a search as a "saved search", you can also add a table view of your documents to a dashboard.

5

Hi Joe, the second thing worked with the saved search. However using the numerator and denominator as indicated does not seem to work. Not sure if it's the syntax or what, but I tried both _exists:_ and exists:

6

Nevermind! It works! Thanks!

7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.