Explenation why I can't see my data visualized

Elastic Stack Kibana
1

Hi I have the following data:

image
image.png385×808 4.61 KB

and when I make a visualization of this info I get nothing:

image
image.png1879×927 29 KB

Many thanks!

2

This is because it doesnt show me decimal figures

3

Decimal numbers should work fine. This test data doesn't have timestamps so I can't do the exact same as yours, but you can see the sum of my decimal values are shown on the chart.

You can click the little arrow at the bottom of the page to get to the data table and see if it just has 0.

image
image.png1790×1180 146 KB

1 Like
4

Hi,
Yes you are right, it is more inherent
as shown below:

image

I have an "ASR" that is 0.9, but when I use the following query:
GET filebeat-*/log/_search
{
"query": {

   "bool":{ 

      "must": [
        { "match": { "ASR": "0.9"}}
        
        ]
  
     
   }
  }
}

I get:

> {
>   "took": 1,
>   "timed_out": false,
>   "_shards": {
>     "total": 2,
>     "successful": 2,
>     "failed": 0
>   },
>   "hits": {
>     "total": 0,
>     "max_score": null,
>     "hits": []
>   }
> }

The log its self is as following:

"{"eventTimestamp":1505760179999,"asrFrom":1505759776499,"ASR":0.9}"

Maybe you can help me understand this I will also ask this in ES not only kibana

5

If ASR is a number data type field, I think your query should use "ASR": 0.9 (without double-quotes around the 0.9). Can you see if that changes your result?

1 Like
6

I also just did some searches in Kibana Discover query bar for decimal results and then looked at the query it uses.
When I searched for system.load.norm.15:0.155 (got 12 hits) the query Kibana used was;

"query": {
    "bool": {
      "must": [
        {
          "query_string": {
            "query": "system.load.norm.15:0.155",
            "analyze_wildcard": true
          }
        },

But I'm not an expert on Elasticsearch querying, and there's often multiple ways to get the results.

1 Like
7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.