Can you paste a screenshot of what you have and then use that to describe how you'd like to change it?
I did this, created some sample data (ignore the "words" and "id" fields. Just note that there are different values for "action" in each minute interval (you could paste this in the Dev Tool > Console
;
POST discuss/test/
{
"date" : "2017-08-15T00:01:00",
"action" : "start",
"myid" : 1,
"words" : "these are words right here and in fact a long sentance cr /n break <BR>"
}
POST discuss/test/
{
"date" : "2017-08-15T00:01:00",
"action" : "stop",
"myid" : 6,
"words" : "these are words right here and in fact a long sentance cr /n break <BR> followed by more words"
}
POST discuss/test/
{
"date" : "2017-08-15T00:02:00",
"action" : "stop",
"myid" : 1
}
POST discuss/test/
{
"date" : "2017-08-15T00:03:00",
"action" : "test",
"myid" : 2
}
POST discuss/test/
{
"date" : "2017-08-15T00:04:00",
"action" : "aaaa",
"myid" : 2
}
POST discuss/test/
{
"date" : "2017-08-15T00:04:00",
"action" : "bbbb",
"myid" : 3
}
POST discuss/test/
{
"date" : "2017-08-15T00:04:00",
"action" : "cccc",
"myid" : 2
}
POST discuss/test/
{
"date" : "2017-08-15T00:04:00",
"action" : "dddd",
"myid" : 3
}
POST discuss/test/
{
"date" : "2017-08-15T00:04:00",
"action" : "eeee",
"myid" : 4
}
I created an index pattern in Kibana for this discuss index.
Then I created a Line chart visualization with the metric being the unique count of action.keyword.
It looks like I would expect, but it sounds like you want it to show the sum of the unique counts added each internal?
If you use Timelion you could use this expression to show unique counts just like in the Line Chart Visualization;
.es(index=discuss, timefield=date, metric=cardinality:action.keyword)
And with Timelion I can add the cumulative sum function like this;
.es(index=discuss, timefield=date, metric=cardinality:action.keyword).cusum()
Which shows those counts adding up each interval;
Regards,
Lee