Date range with date histogram (This interval creates too many buckets)

Elastic Stack Kibana
1

Hi all,

I am relatively new to ELK stack and try to use date range with date histogram regardless of time picker tool. But it seems Kibana behaves differently when I select time picker <= "Last 1 year" compared to >= "Last 2 year". So I get "This interval creates too many buckets to show in the selected time range....." if choose last 2 year or more, thus I can not set interval to daily. If I choose something less than, it works smoothly the way I want.

Because Kibana changes interval automatically although there are a few hit. However I want to have that interval explicitly.

I found that link on the web. I tried it, but Kibana gave me error like Visualize: Unknown key for a VALUE_BOOLEAN in [3]: [pre_zone_adjust_large_interval]

What I want to achieve is having dashboard with different time slot like hourly analysis in last 24 hours or daily in last 30 days. But I also would like to keep time picker at 2 year as I want to see some charts which use that time slot.

Any chance to do that without scripting. If not how can I do that ? Thanks.

Cheers

2

Hi @celebi,

The minimal size of the buckets used by the date histogram aggregation is always calculated relative to the time interval selected in the time picker. In general, having different time intervals for different visualization on the same dashboard is not supported right now. The workaround you linked to worked for me when I just tried it out when leaving out the key pre_zone_adjust_large_interval (it was removed in Elasticsearch 2.0).

3

Hi @weltenwort

Thanks for your reply. Isn't that strange that Kibana scaled it automatically although there are a few hits where it can easily show buckets! I think it should be scaled by number of hits not by time picker. Thanks for workaround suggestion, it worked without pre_zone_adjust_large_interval.

4

I agree that the scaling algorithm is very simplistic. There is an enhancement issue open in the Kibana repository, that is related. Feel free to add your use-cases and thoughts to it to give it some more weight.

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.