How to get the derived metric based on the calculated metric

Elastic Stack Kibana
1

I've already get both metrics max(dt) and min(dt) of each transID in the kibana. How shoud I get the duration of each transId by the calculation max(dt) - min(dt) ? I did it by the bucket script in the dev tools as the bottom scripts . But i donot know how to implent it in the kibana. Is there any metric expresson available?

111.png1920×999 75.3 KB

POST /jun/_search
{
"size": "0",
"_source": {
"includes": [
"ct"
]
},
"aggs": {
"eachtransID": {
"terms": {
"field": "transID"
},
"aggs": {
"min_ct": {
"min": {
"field": "dt"
}
},
"max_ct": {
"max": {
"field": "dt"
}
},
"date_diff": {
"bucket_script": {
"buckets_path": {
"min_ct1": "min_ct",
"max_ct1": "max_ct"
},
"script": "params.min_ct1 - params.max_ct1"
}
}
}
},
"avg_ct": {
"avg_bucket": {
"buckets_path": "eachtransID>date_diff"
}
}
}
}
}

2

metric expression is onlh available in time series visual builder.
you could also use timelion to do something like that,
however both with only work with time series data

3

ok , thanks a lot . I'll try it later

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.