Draw series from object

Hi, :slight_smile:
From this kind of structure with nested fields, how could I draw multiple series? I can't split per key in bps using the visualizations of kibana 4.x.

{
timestamp: 1491988841000,
ip: "192.168.1.1",
bps: {
"eth0" : 1000,
"eth1" : 2000,
"eth2" : 3000,
}
}

I would like to draw a chart with n series, one for each key in the bps object, using the value for the Y axis.
If this is not the proper way to do this, what is the best approach in order to avoid having a document per interface like the following?

{
timestamp: 1491988841000,
ip: "192.168.1.1",
interface: "eth0",
bps: 1000
}

{
timestamp: 1491988841000,
ip: "192.168.1.1",
interface: "eth1",
bps: 2000
}

{
timestamp: 1491988841000,
ip: "192.168.1.1",
interface: "eth2",
bps: 3000
}

Thanks in advance, :slight_smile:

Hey @carlosvega, unfortunately we don't have a way to create visualizations based off of nested data at this time. Our general recommendation is to denormalize the documents on ingest, before putting them into Elasticsearch so they are separate documents and you can then create the visualizations.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.