Kibana Bar Char Visualization for Unique URL call

Hi,

I would like to create a horizontal bar visualization in Kibana with API endpoints (methods) use. Most of those endpoints are parameterized and I would like to count unique endpoints.

For example, I have the next endpoints:

GET http://xyz.com/user/1/profile
GET http://xyz.com/user/2/profile
GET http://xyz.com/user/3/profile
GET http://xyz.com/profile/1
GET http://xyz.com/profile/2

So, the results should be a horizontal bar

The problem I am facing now is that I am getting one bar for each entry.

Any ideas about how to create a single bar for the unique entries.

Thanks

When you say "one bar for each unique entry", are you referring to:

a) One bar for each unique endpoint, with the aggregated count?
b) One bar for each request, which is not aggregated?

If you are referring to a), then you need to increase the size of the Terms aggregation you're using. If you are referring to b), then that is only supported using the Vega visualization type.

Thanks, Wylie for the answer.

I think what I am looking if for the point (a) One bar for each unique endpoint, with the aggregated count. When you say "then you need to increase the size of the Terms aggregation you're using." it means that I need to include one term entry for each value? Keep in mind that I could have 1000s of values.

Is there a general way to define filtering with value 'GET http://xyz.com/user/{{value}}/profile' and use it for the bar chart?

You are past the limits of Elasticsearch and Kibana if you want to show thousands of unique strings in a visualization. The Terms aggregation which you are using is limited by the search.max_buckets Elasticsearch setting, and none of our visualizations support the composite aggregation which can be paginated over the limit.

The only option that exists if you want to show thousands of unique values is:

  1. Use the Transformation API to create pre-aggregated documents https://www.elastic.co/guide/en/elasticsearch/reference/current/transforms.html
  2. Create a Kibana index pattern for the pre-aggregated documents
  3. Create a Kibana saved search in Discover, which is only available as a data table (no bar chart)

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.