Filtering Data based on previous input selected

[sahadevgd (Sahadev)]

Hi Team,

Kibana Version - 6.2.3

I'm working on a dashboard where i would need to first select a couple of parameters using the Controls visualization and based on those inputs, the dashboard should be displayed. For example -

I have two parameters - Application and Environment
Application 'AAA' has environments L1, L2, L3
Application 'BBB' has environments M1, M2, M3, M4

When i first select the application choice and select 'AAA', my second choice - environment should automatically show that it only has L1, L2, L3. And when i chose let's say, L2, the below graphs should be filtered based on these parameters. Is it possible ? kindly help.

I have one choice parameter and it's working as expected, but how can this be done when we have one second choice is dependent on the first one?

Thanks,
Sahadev

[christophilus (Chris Davies)]

Hi Sahadev,

This is, indeed possible (at least in the latest version of Kibana). Let's say you've modeled your data to look something like this:

{
  "application": "AAA",
  "environments": ["L1", "L2", "L3"]
}

You simply have to specify the "Parent control" field as I have done below (although, here, I called my "environment" property "stuff" which is hardy useful...):

[sahadevgd (Sahadev)]

Hi Chris,

Thanks for the response. I understood the logic behind this now.

But, I don't see "Parent control" field when i add my second parameter into the list. how can i get this ?

Kibana verison - 6.2.3

My data that i feed will be like below -

ApplicationName,Environment,Status,Code
AAA,L1,200,UP
AAA,L2,200,UP
AAA,L3,200,UP
BBB,M1,200,UP
BBB,M2,404,DOWN
BBB,M3,200,UP
BBB,M4,500,DOWN

I have to get these fields and take the data accordingly.

[christophilus (Chris Davies)]

Ah. Well, I have good news, and I have bad news.

The good news is that we support this in Kibana 6.3.x, and you can have flattened documents like the ones you seem to have (rather than the nested ones I suggested). The bad news is, that "Parent control" is not available in 6.2.x.

[sahadevgd (Sahadev)]

Ah ok.

Thanks Chris. Will upgrade my ELK stack to 6.3.x and work on it.