I asked this question a few months ago, and I am asking the same question again because the old ticket is closed when I realized there was a response and possibly a solution. (Link to the old ticket 121737. Thank you, Timrose - who responded a few months ago.)
We have a DevOp ticket status dashboard to show the number of IT help desk tickets in the pipeline and the status of the ticket. I want to create a bar chart to show the number of open tickets daily and I am not sure how to do it.
The index name is _index:devop_api_mdn-% and the document id (_id) is the helpdesk ticket ID. The data is updated hourly and the document of a specific ticket is updated every time when the status of the ticket changes. Since each ticket has an open date and close date (when it's closed), is there a way to get the number of open tickets daily based on the open and close dates? For example, if I have 10 tickets open and closed in January, can I get a date histogram chart to show the open ticket number? I created a chart to show the expected outcome.
I understand that this metrics can be achieved by configuring the index a different way, for example - differentiating the ingestion by having date stamp as part of the index name to keep a record of the daily open count. The issue here is that if we do it that way, we will end up have a lot of duplicated data in the system.
Based on the response, this use case is possibly achievable by using the Timelion plug-in. (Thanks again, Timrose.)
How can I create this chart using Timlion? Thank you very much.