ElasticSearch DAU and MAU

Hello Team

In Kibana Visualisation Dashboard , we have option to get charts for DAU and MAU.

I would like to check the query used by Kibana in background to get the data.

My purpose is to get the query and use it in CURL to have data saved in a file text .

If you open the visualisation menu, the 3 dots in the top right, you can use the Inspect option to view the query that is sent to Elasticsearch.

Hello Mark

My Elasticsearch and Kibana version is 5.6.3

Then you should really upgrade, 5.X has been EOL for quite a long time now.

Yes Mark...

But due to infra limitation i have to be on ES 5.6.3 as of now.... Will be upgrading in coming months very soon.

Could you please help me with 5.6.3 I have pasted above my screen shot too..

I am not able to get Inspect option in kibana 5.6.16

I am looking for various options in it.

Secondly ,

Is there a provision , via shell-script or logstash or otherway via script { Automation } i can generate csv file of kibana DAU/MAU ?

Hello Team

Finally , I was able to write a QUERY using CURL command and get the required data as below.

Could you please help me , how to get only

doc_count: 11111111 , value : 222222

and exclude all other stuff using CURL command.

  "aggregations" : {
    "count_per_month" : {
      "buckets" : [
        {
          "key_as_string" : "2020-12-01T00:00:00.000Z",
          "key" : 1606780800000,
          "doc_count" : 86956624,
          "type_count" : {
            "value" : 2111421
          }
        },
        {
          "key_as_string" : "2020-12-02T00:00:00.000Z",
          "key" : 1606867200000,
          "doc_count" : 83205134,
          "type_count" : {
            "value" : 2139852
          }
        },
        {
          "key_as_string" : "2020-12-03T00:00:00.000Z",
          "key" : 1606953600000,
          "doc_count" : 87624223,
          "type_count" : {
            "value" : 2123403
          }
        },
        {
          "key_as_string" : "2020-12-04T00:00:00.000Z",
          "key" : 1607040000000,
          "doc_count" : 87149873,
          "type_count" : {
            "value" : 2141200
          }
        }
      ]
    }

Hello Team

I was able to achieve same using "jason query" i.e. "jq" .

It took time , but was able to get it properly into csv file.

For your reference

jq -r ' .aggregations.count_per_month.buckets[] | [.key,.doc_count,.type_count[] ] | @csv' > 123.csv
1 Like