Histogram facet - how is the start of the interval determined?


(ppearcy) #1

Hello,
I am playing around with the histogram facet and was curious about
an aspect of this functionality. I am converting the returned values
back into UTC date strings and when I look at the results, I see
something like (taken from our custom interface that wraps around ES,
but hopefully should be clear):
Facet.Result[0].Row[0].count:LONGLONG:1
Facet.Result[0].Row[0].value:STRING:"2010-10-12 00:00:00"
Facet.Result[0].Row[1].count:LONGLONG:1
Facet.Result[0].Row[1].value:STRING:"2010-11-02 00:00:00"
Facet.Result[0].Row[2].count:LONGLONG:1
Facet.Result[0].Row[2].value:STRING:"2010-11-11 00:00:00"
Facet.Result[0].Row[3].count:LONGLONG:1
Facet.Result[0].Row[3].value:STRING:"2010-11-15 00:00:00"
Facet.Result[0].Row[4].count:LONGLONG:1
Facet.Result[0].Row[5].value:STRING:"2010-11-25 00:00:00"

What dictates the starting time slice for the facet interval? It
appears to be based on UTC date offset, but if I wanted to start the
interval based on EST date cutoff, is that possible? Or would I need
to do a hourly interval, in this case, and create my own day buckets
based on my start interval?

Thanks,
Paul


(Shay Banon) #2

All dates in ES are stored in UTC, so, yes, you would get it in UTC. You can do a script that calculates it yourself, but, it should be supported in ES with better date handling for histogram based facets.
On Tuesday, December 14, 2010 at 8:37 PM, Paul wrote:

Hello,
I am playing around with the histogram facet and was curious about
an aspect of this functionality. I am converting the returned values
back into UTC date strings and when I look at the results, I see
something like (taken from our custom interface that wraps around ES,
but hopefully should be clear):
Facet.Result[0].Row[0].count:LONGLONG:1
Facet.Result[0].Row[0].value:STRING:"2010-10-12 00:00:00"
Facet.Result[0].Row[1].count:LONGLONG:1
Facet.Result[0].Row[1].value:STRING:"2010-11-02 00:00:00"
Facet.Result[0].Row[2].count:LONGLONG:1
Facet.Result[0].Row[2].value:STRING:"2010-11-11 00:00:00"
Facet.Result[0].Row[3].count:LONGLONG:1
Facet.Result[0].Row[3].value:STRING:"2010-11-15 00:00:00"
Facet.Result[0].Row[4].count:LONGLONG:1
Facet.Result[0].Row[5].value:STRING:"2010-11-25 00:00:00"

What dictates the starting time slice for the facet interval? It
appears to be based on UTC date offset, but if I wanted to start the
interval based on EST date cutoff, is that possible? Or would I need
to do a hourly interval, in this case, and create my own day buckets
based on my start interval?

Thanks,
Paul


(system) #3