Edit Index numeral.js

Elastic Stack Kibana
1

Hello!
dear collegues, i try to devide numeric data, but something goes wrong.
I have the value for example 1000000 and i need output view 10.000 (in this operatin i devided start value on 100 and add splitter).

In my logstash config i did change type of value:

convert => {"amount_transaction" => "integer"
"Ammount_billing" => "integer"}

But in UI Kibana i can not understand how i should work with numeral.js becouse .devide(100) dont work.

Could you explain or show me how i can solve it, maybe in UI Kibana or in logactash config (ruby code)?

Thank you a lot

2

Can you give the _source data from a sample document in your data?

Do you have an Index Pattern defined in Kibana showing how the data is mapped, and can you see the field you expect and is it mapped how you expect?

It'll help to see the all that above info, and the entire expression you have in Timelion to understand why .divide() isn't working.

3

Hi, Tim!
Thank you for reply
Well i make some pcs to show situation:

As i see in Kibana i have numeral type for value

Common_Ammount
Common_Ammount.JPG1448×293 26.4 KB

Well next step, i did try to change my default value (1000000). I should divide on 100 (the first step).
Ammount_billing

As we can see my setting (.devide(100) ) not work.

Tim, you told about Timelion could you epxplain me how i can make troubleshooting or maybe i should to give more details about situation.

4

I apologize, this was my misunderstanding. I thought you were building visualizations using Timelion expressions, because .divide() is a Timelion function. The chained function syntax isn't used anywhere else in Kibana.

You can add a field to the index pattern to represent a calculation on a field. That isn't through field formatting: it's through scripted fields.

Please read over the documentation on scripted fields: Index patterns has been renamed to data views. | Kibana Guide [8.11] | Elastic

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.