# Help needed to create VISUALIZATION

**URL:** <https://discuss.elastic.co/t/help-needed-to-create-visualization/123934>\
**Category:** Kibana\
**Created:** [March 14, 2018, 3:31pm UTC](https://discuss.elastic.co/t/help-needed-to-create-visualization/123934 "2018-03-14T15:31:37Z")\
**Posts on this page:** 11\
**Page:** 1

<div class="post-metadata">

**Author:** ![chandukreddi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chandukreddi/32/29241_2.png) [@chandukreddi](https://discuss.elastic.co/u/chandukreddi)\
**Post date:** [March 14, 2018, 3:31pm UTC](https://discuss.elastic.co/t/help-needed-to-create-visualization/123934/1 "2018-03-14T15:31:38Z")

</div>

Hello Experts,

I am trying to create Visualization for my Elasticsearch data using Kibana.

**My Grok Pattern:**

JAVALOGBACKTIMESTAMP %{YEAR}-%{MONTHNUM}-%{MONTHDAY} %{HOUR}:%{MINUTE}:%{SECOND},%{INT:msec}

CASS\_BASE ^%{LOGLEVEL:level}\s\*[(%{DATA:process}:%{INT:threadId}|%{DATA:process})]\s\*%{JAVALOGBACKTIMESTAMP:timestamp}\s\*%{DATA:java\_file}.java:%{INT:line\_number}\s\*-

CASS\_GC\_GRACE %{CASS\_BASE} %{DATA:msg} in %{INT:gc\_duration}ms. %{DATA}:\s\*%{INT:eden\_orig\_bytes}\s\*-\>\s\*%{INT:eden\_new\_bytes}; %{DATA}:\s\*%{INT:oldgen\_orig\_bytes}\s\*-\>\s\*%{INT:oldgen\_new\_bytes};(\s\*%{DATA}:\s\*%{INT:surv\_org\_bytes}\s\*-\>\s\*%{INT:surv\_new\_bytes};|)

After Parsing my log I can see the data from KIbana as I was expecting but I need some help in creating Visualization.

As you can see below Image is having my parsed data, I just want to visualize _GC\_DURATION_ field data as a timechart like 2 am gc\_duration was 300 msec, 2:01 am 350 msec, 3 am 1000 msec not like count (when I was trying to create visualize it was giving only count) to understand the gc pause time.

Below is Image from Kibana

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/b/8/b87ec40994d6ec0005da87b3457fecc93de30573.png)

I appreciate your help!

Thanks  
Chandra

---

<div class="post-metadata">

**Author:** ![bhavyarm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bhavyarm/32/22392_2.png) [@bhavyarm](https://discuss.elastic.co/u/bhavyarm)\
**Post date:** [March 14, 2018, 9:10pm UTC](https://discuss.elastic.co/t/help-needed-to-create-visualization/123934/2 "2018-03-14T21:10:23Z")

</div>

@thomasneirynck help? 🙂 Thank you!

---

<div class="post-metadata">

**Author:** ![thomasneirynck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thomasneirynck/32/23313_2.png) [@thomasneirynck](https://discuss.elastic.co/u/thomasneirynck)\
**Post date:** [March 14, 2018, 9:24pm UTC](https://discuss.elastic.co/t/help-needed-to-create-visualization/123934/3 "2018-03-14T21:24:22Z")

</div>

hi @chandukreddi ,

you probably want to create a line chart with "average gc\_duration" as the metric. Go to "Visualize" and select a line-chart. Select as "metric" "average gc\_duration", and then under "buckets", select "Date histogram".

---

<div class="post-metadata">

**Author:** ![chandukreddi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chandukreddi/32/29241_2.png) [@chandukreddi](https://discuss.elastic.co/u/chandukreddi)\
**Post date:** [March 19, 2018, 5:40pm UTC](https://discuss.elastic.co/t/help-needed-to-create-visualization/123934/4 "2018-03-19T17:40:08Z")

</div>

Thanks @thomasneirynck for your reply.. but I don't find anything name with _metric_

Went to Visualization.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/1/f/1f48d4f58ec6751753fb9b43aa1f536554327a01.png)

Choosen Line chart  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/6/4/645b251e2836fa162cfc43812886e52b7e6c4597.png)

Choosed prd-log\* index, this is where i have my data.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/e/0/e0072d4c973ca5381a2e3854600b4263ff531066.png)

But I don't see any metric as you said.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/8/1/81201cd759047bde852ba70978925978e75d976b.png)

Thanks  
Chandra

---

<div class="post-metadata">

**Author:** ![thomasneirynck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thomasneirynck/32/23313_2.png) [@thomasneirynck](https://discuss.elastic.co/u/thomasneirynck)\
**Post date:** [March 19, 2018, 6:03pm UTC](https://discuss.elastic.co/t/help-needed-to-create-visualization/123934/5 "2018-03-19T18:03:56Z")

</div>

hi @chandukreddi If you expand

![image](https://us1.discourse-cdn.com/elastic/original/3X/7/4/741d6169afd340b9802178aa89e322235a4bf76e.png)

you'll be able to configure the metric you want ES to compute.

---

<div class="post-metadata">

**Author:** ![chandukreddi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chandukreddi/32/29241_2.png) [@chandukreddi](https://discuss.elastic.co/u/chandukreddi)\
**Post date:** [March 19, 2018, 8:30pm UTC](https://discuss.elastic.co/t/help-needed-to-create-visualization/123934/6 "2018-03-19T20:30:55Z")

</div>

@thomasneirynck , Yes your correct I was able to choose Average but my field gc\_duration was not showing up in that drop down list.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/8/3/834752415c7e919d8a8148a0962c4d1b4d2eb158.png)

But I could see in Discover page.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/e/f/ef779590cf4448422280628e04c14196330e3df1.png)

I just want to let you know gc\_duration field value is time and it's in milliseconds.

Thanks  
Chandra

---

<div class="post-metadata">

**Author:** ![thomasneirynck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thomasneirynck/32/23313_2.png) [@thomasneirynck](https://discuss.elastic.co/u/thomasneirynck)\
**Post date:** [March 19, 2018, 8:48pm UTC](https://discuss.elastic.co/t/help-needed-to-create-visualization/123934/7 "2018-03-19T20:48:02Z")

</div>

Can you index it as a number?

---

<div class="post-metadata">

**Author:** ![chandukreddi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chandukreddi/32/29241_2.png) [@chandukreddi](https://discuss.elastic.co/u/chandukreddi)\
**Post date:** [March 19, 2018, 9:18pm UTC](https://discuss.elastic.co/t/help-needed-to-create-visualization/123934/8 "2018-03-19T21:18:15Z")

</div>

I didn't get it! I believe it's already indexed.

I am converting that as INT, below is my grok pattern.

WARN [Service Thread] 2016-06-30 14:42:41,538 GCInspector.java:256 - G1 Young Generation GC in 211ms. G1 Eden Space: 16894656512 -\> 0; G1 Old Gen: 13259744800 -\> 13267292200;  
CASS\_GC\_GRACE %{CASS\_BASE} %{DATA:msg} in %{INT:gc\_duration}ms. %{DATA}:\s\*%{INT:eden\_orig\_bytes}\s\*-\>\s\*%{INT:eden\_new\_bytes}; %{DATA}:\s\*%{INT:oldgen\_orig\_bytes}\s\*-\>\s\*%{INT:oldgen\_new\_bytes};(\s\*%{DATA}:\s\*%{INT:surv\_org\_bytes}\s\*-\>\s\*%{INT:surv\_new\_bytes};|)

Thanks  
Chandra

---

<div class="post-metadata">

**Author:** ![suripaleru](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/suripaleru/32/32286_2.png) [@suripaleru](https://discuss.elastic.co/u/suripaleru)\
**Post date:** [March 19, 2018, 9:45pm UTC](https://discuss.elastic.co/t/help-needed-to-create-visualization/123934/9 "2018-03-19T21:45:33Z")

</div>

Hi, I tried to apply above concepts on pie chart but I count see more fields under metrics. I could see only two metric under metrics , those are level order and totlaexectioninmiili . How I can get all fields under metric dropdown ?

---

<div class="post-metadata">

**Author:** ![chandukreddi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/chandukreddi/32/29241_2.png) [@chandukreddi](https://discuss.elastic.co/u/chandukreddi)\
**Post date:** [March 21, 2018, 8:09pm UTC](https://discuss.elastic.co/t/help-needed-to-create-visualization/123934/10 "2018-03-21T20:09:53Z")

</div>

Hi @thomasneirynck,

Now I could see my filed in Kibana, but Y-axis you asked me to choose average right? can I take Y-axis my gc\_duration field (I see only aggregation on Y-axis) and x-axis timestamp?

I really appreciate your help!

Thanks  
Chandra

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 18, 2018, 8:10pm UTC](https://discuss.elastic.co/t/help-needed-to-create-visualization/123934/11 "2018-04-18T20:10:02Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
