Kibana chart data view understanding


(fred.grummit) #1

I have a problem trying to visualise the data below in Kibana.
Each document describes a test run audit entry with passing, failing and
pending tests along with a timestamp, project identifier and host name.
The curls below setup four documents and they are correctly returned if I
do http://localhost:9200/someaudits/_search?pretty=true

I would like to use kibana to display a single graph with:
The X axis using @timestamp
The Y axis showing four separate lines for passed, failed, pending and
(passed + failed + pending)
Each document (and its timestamp value) should contain a tag that
references the document itself.
Documents and their pass/fail/pending values should not be totalised, so
they remain distinct on the graph.

However the sticking point is that I'm cannot see what to click (and in
what order) to setup the graph view from a blank Kibana instance located at
http://localhost:9200/_plugin/kibana/
I've read the kibana related tutorials but I'm just not groking it.

Delete the whole index:

curl -XDELETE http://localhost:9200/someaudits

Create the index:

curl -XPOST 'localhost:9200/someaudits/'

Use this mapping:

curl -XPUT http://localhost:9200/someaudits/testaudit/_mapping -d '
{
"testaudit" : {
"properties" : {
"@timestamp" : {"format" : "dateOptionalTime", "type" : "date" },
"project" : {"type": "string" },
"host" : {"type": "string" },
"passed" : { "type" : "integer" },
"failed" : { "type" : "integer" },
"pending" : { "type" : "integer" }
}
}
}
'

Add some data:

curl -XPUT 'http://localhost:9200/someaudits/testaudit/1' -d '
{
"@timestamp" : "2014-06-17T02:10:08.593Z",
"project" : "test",
"host" : "mymachine",
"passed" : 10,
"failed" : 20,
"pending" : 1
}'

curl -XPUT 'http://localhost:9200/someaudits/testaudit/2' -d '
{
"@timestamp" : "2014-06-17T02:15:08.593Z",
"project" : "test",
"host" : "mymachine",
"passed" : 0,
"failed" : 30,
"pending" : 0
}'

curl -XPUT 'http://localhost:9200/someaudits/testaudit/3' -d '
{
"@timestamp" : "2014-06-17T02:20:08.593Z",
"project" : "test",
"host" : "mymachine",
"passed" : 50,
"failed" : 0,
"pending" : 1
}'

curl -XPUT 'http://localhost:9200/someaudits/testaudit/4' -d '
{
"@timestamp" : "2014-06-17T02:10:18.593Z",
"project" : "another test",
"host" : "mymachine",
"passed" : 0,
"failed" : 1,
"pending" : 0
}'

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/86f13f44-868a-49b8-991d-64138c602f15%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


(Mark Walkom) #2

Where have you gotten so far with KB?

Try this;

  1. Create a new blank dashboard from the default homepage
  2. Configure that (top right) to point to the index and your timestamp
    fied then save that
  3. On the main dashboard page add a new row, then save
  4. Add a new panel

This is where things can get tricky as you will have to figure out what
panel type to use, but I think you may want to start with a histogram.
Play around from there. It is a bit tough when you start, but you will pick
it up pretty easily!

Regards,
Mark Walkom

Infrastructure Engineer
Campaign Monitor
email: markw@campaignmonitor.com
web: www.campaignmonitor.com

On 17 June 2014 14:31, fred.grummit@gmail.com wrote:

I have a problem trying to visualise the data below in Kibana.
Each document describes a test run audit entry with passing, failing and
pending tests along with a timestamp, project identifier and host name.
The curls below setup four documents and they are correctly returned if I
do http://localhost:9200/someaudits/_search?pretty=true

I would like to use kibana to display a single graph with:
The X axis using @timestamp
The Y axis showing four separate lines for passed, failed, pending and
(passed + failed + pending)
Each document (and its timestamp value) should contain a tag that
references the document itself.
Documents and their pass/fail/pending values should not be totalised, so
they remain distinct on the graph.

However the sticking point is that I'm cannot see what to click (and in
what order) to setup the graph view from a blank Kibana instance located at
http://localhost:9200/_plugin/kibana/
I've read the kibana related tutorials but I'm just not groking it.

Delete the whole index:

curl -XDELETE http://localhost:9200/someaudits

Create the index:

curl -XPOST 'localhost:9200/someaudits/'

Use this mapping:

curl -XPUT http://localhost:9200/someaudits/testaudit/_mapping -d '
{
"testaudit" : {
"properties" : {
"@timestamp" : {"format" : "dateOptionalTime", "type" : "date" },
"project" : {"type": "string" },
"host" : {"type": "string" },
"passed" : { "type" : "integer" },
"failed" : { "type" : "integer" },
"pending" : { "type" : "integer" }
}
}
}
'

Add some data:

curl -XPUT 'http://localhost:9200/someaudits/testaudit/1' -d '
{
"@timestamp" : "2014-06-17T02:10:08.593Z",
"project" : "test",
"host" : "mymachine",
"passed" : 10,
"failed" : 20,
"pending" : 1
}'

curl -XPUT 'http://localhost:9200/someaudits/testaudit/2' -d '
{
"@timestamp" : "2014-06-17T02:15:08.593Z",
"project" : "test",
"host" : "mymachine",
"passed" : 0,
"failed" : 30,
"pending" : 0
}'

curl -XPUT 'http://localhost:9200/someaudits/testaudit/3' -d '
{
"@timestamp" : "2014-06-17T02:20:08.593Z",
"project" : "test",
"host" : "mymachine",
"passed" : 50,
"failed" : 0,
"pending" : 1
}'

curl -XPUT 'http://localhost:9200/someaudits/testaudit/4' -d '
{
"@timestamp" : "2014-06-17T02:10:18.593Z",
"project" : "another test",
"host" : "mymachine",
"passed" : 0,
"failed" : 1,
"pending" : 0
}'

--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/86f13f44-868a-49b8-991d-64138c602f15%40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/86f13f44-868a-49b8-991d-64138c602f15%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/CAEM624bgv8n9M6%3D2OBma0iCgn4BXkNrvn9Npc5uAL9-JEbZAJA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.


(fred.grummit) #3

Yes, I tried all of those steps. There doesn't seem to be a way to get the
current Kibana to render multiple lines from different JSON attributes in
the same histogram when the documents contain numeric values in the format
described.

The nearest similar prolem is:


or https://github.com/elasticsearch/kibana/issues/150
The nearest solution I can find is this
diff https://github.com/tvvmb/kibana/commit/52b4f62711176e4fc0048a6d27e42871f681b32a
Related to https://github.com/elasticsearch/kibana/pull/374

I was wondering if this functionality is in the main Kibana release?

On Tuesday, June 17, 2014 4:07:10 PM UTC+8, Mark Walkom wrote:

Where have you gotten so far with KB?

Try this;

  1. Create a new blank dashboard from the default homepage
  2. Configure that (top right) to point to the index and your timestamp
    fied then save that
  3. On the main dashboard page add a new row, then save
  4. Add a new panel

This is where things can get tricky as you will have to figure out what
panel type to use, but I think you may want to start with a histogram.
Play around from there. It is a bit tough when you start, but you will
pick it up pretty easily!

Regards,
Mark Walkom

Infrastructure Engineer
Campaign Monitor
email: ma...@campaignmonitor.com <javascript:>
web: www.campaignmonitor.com

On 17 June 2014 14:31, <fred.g...@gmail.com <javascript:>> wrote:

I have a problem trying to visualise the data below in Kibana.
Each document describes a test run audit entry with passing, failing and
pending tests along with a timestamp, project identifier and host name.
The curls below setup four documents and they are correctly returned if I
do http://localhost:9200/someaudits/_search?pretty=true

I would like to use kibana to display a single graph with:
The X axis using @timestamp
The Y axis showing four separate lines for passed, failed, pending and
(passed + failed + pending)
Each document (and its timestamp value) should contain a tag that
references the document itself.
Documents and their pass/fail/pending values should not be totalised, so
they remain distinct on the graph.

However the sticking point is that I'm cannot see what to click (and in
what order) to setup the graph view from a blank Kibana instance located at
http://localhost:9200/_plugin/kibana/
I've read the kibana related tutorials but I'm just not groking it.

Delete the whole index:

curl -XDELETE http://localhost:9200/someaudits

Create the index:

curl -XPOST 'localhost:9200/someaudits/'

Use this mapping:

curl -XPUT http://localhost:9200/someaudits/testaudit/_mapping -d '
{
"testaudit" : {
"properties" : {
"@timestamp" : {"format" : "dateOptionalTime", "type" : "date" },
"project" : {"type": "string" },
"host" : {"type": "string" },
"passed" : { "type" : "integer" },
"failed" : { "type" : "integer" },
"pending" : { "type" : "integer" }
}
}
}
'

Add some data:

curl -XPUT 'http://localhost:9200/someaudits/testaudit/1' -d '
{
"@timestamp" : "2014-06-17T02:10:08.593Z",
"project" : "test",
"host" : "mymachine",
"passed" : 10,
"failed" : 20,
"pending" : 1
}'

curl -XPUT 'http://localhost:9200/someaudits/testaudit/2' -d '
{
"@timestamp" : "2014-06-17T02:15:08.593Z",
"project" : "test",
"host" : "mymachine",
"passed" : 0,
"failed" : 30,
"pending" : 0
}'

curl -XPUT 'http://localhost:9200/someaudits/testaudit/3' -d '
{
"@timestamp" : "2014-06-17T02:20:08.593Z",
"project" : "test",
"host" : "mymachine",
"passed" : 50,
"failed" : 0,
"pending" : 1
}'

curl -XPUT 'http://localhost:9200/someaudits/testaudit/4' -d '
{
"@timestamp" : "2014-06-17T02:10:18.593Z",
"project" : "another test",
"host" : "mymachine",
"passed" : 0,
"failed" : 1,
"pending" : 0
}'

--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to elasticsearc...@googlegroups.com <javascript:>.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/86f13f44-868a-49b8-991d-64138c602f15%40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/86f13f44-868a-49b8-991d-64138c602f15%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/db957733-1a2c-43b0-8550-ebd6246f5327%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


(system) #4