How to create line chart to show disk utilization

Elastic Stack Kibana
1

Hi Experts,

Need your valuable suggestions here . My plan is to prepare a line chart for disk utilization for 10 servers .
I have data like , here total memory will always be fixed but utilization will be variable .
timestamp, servername, total_memory, Utilization
Aug 25, abc1, 100, 20
Aug25,abc2,100,30
Aug25,abc3,100,50
.
.
.
.

I want to prepare a histogram , a line chart for all the servers first then I will be filtering it out for individual server , so it would be like in Y axis shows disk utilization in % and X axis shows date and time .

I do not find a perfect solution in kibana for this requirement . Please suggest how i can achieve this .

Thanks
Vikas

2

This type of vis should work:

  • Y-Axis: average Utilization
  • X-Axis:
    • First split by terms to get your top servers (by some criteria)
    • Then split by date

Screen Shot 2015-08-26 at 10.31.34 PM.png2874×1440 315 KB

3

Thank You Tanya,

Actually I am facing an issue , in the data i already have a field timestamp . I want to create a histogram on that field only . My CSV file has data like

timestamp,ServerName,Memory,Util
2015-08-24 07:00,abc1,100,10
2015-08-24 07:10,abc1,100,50
2015-08-24 07:20,abc1,100,05
2015-08-24 07:30,abc1,100,60
2015-08-24 07:40,abc1,100,90
2015-08-24 07:50,abc1,100,20
2015-08-24 08:00,abc1,100,60
2015-08-24 08:05,abc2,100,30
2015-08-24 08:10,abc2,100,30
2015-08-24 08:20,abc2,100,50
2015-08-24 08:30,abc2,100,60
2015-08-24 08:40,abc2,100,70
2015-08-24 08:50,abc2,100,20
2015-08-24 09:00,abc2,100,30

I followed the steps you mentioned , but because histogram is not picking up my csv time so in the line chart it only shows a dot for top 5 servers .

Pasted image1339×647 58.3 KB

4

You need a 'date' type field in Elasticsearch to construct a Date histogram. It doesn't have to be "@timestamp", but it does have to have the correct type. If it's any other type (e.g. string) it won't work.

5

I am using this this but when I try to create index using this field I got nothing .
date
{
match => [ "logtime", "yyyy-MM-dd HH:mm:ss" ]
target => ["logtime"]
}

Do I need to change the default date format of kibana as well ?

6

Could you post a sample JSON document and a resulting Elasticsearch mapping for the "logtime" field?

for reference, here is what mine looks like (except mine is named "@timestamp"):

      "@timestamp" : {
        "type" : "date",
        "format" : "strict_date_optional_time||epoch_millis"
      },