What I wanted to do is at the top level display the switches and if you select any switch it should display the interfaces and for the interface should display the relevant metrics over time.
to achieve what you want, you would need to use a terms aggregation on a field containing the ID of the switch or network interface (I can't find that in your above document). On the x-axis you would then create a date histogram on the @timestamp field and on the y-axis you can then visualize any metric you want (like average of trasnfered bytes, etc.).
Please also have a look into the Getting started documentation to find more information on how to setup your first chart.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.