Elasticsearch time chart

(Akhil Prashar) #1

I would like to create a time chart which searches a keyword through multiple indexes and finally forms a graph which shows the repetition of keyword through days. Can anyone help me with how to do this?

(Mark Walkom) #2

Yes, we can.

You will need to use Logstash, or similar, to structure the data and extract things like timestamp and the text into their own fields. Then use Kibana to build a graph.

(Akhil Prashar) #3

Thanks Mark, actually I am new to elasticsearch. Could you please explain a bit in detail or if you can provide me any link of tutorial or example so that I can understand things clearly?

(Mark Walkom) #4

I'd suggested you start with https://www.elastic.co/guide/en/logstash/5.5/getting-started-with-logstash.html, learn the basics and then come back to us with further questions :slight_smile:

(Akhil Prashar) #5

Hi Mark I have studied the link provided by you. I have installed logstash and filebeat. Now there is a thing that when we have to give the path of log files I am not able to understand what path should I give. As I have text files which I have indexed in elasticsearch and displaying the results via php interface.

(Mark Walkom) #6

If you have data in Elasticsearch already then install Kibana and see what you can build.
eg https://www.elastic.co/guide/en/kibana/5.5/getting-started.html, but you can skip the loading data part.

(Akhil Prashar) #7

Yes I have data in elasticsearch. Does that mean I do not need logstash and filebeat?

(Mark Walkom) #8

No you don't.

(Akhil Prashar) #9

Thanks mate.
You are a gem

(system) #10

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.