# Kibana chart data view understanding **URL:** \ **Category:** Elasticsearch\ **Created:** [June 17, 2014, 4:31am UTC](https://discuss.elastic.co/t/kibana-chart-data-view-understanding/18144 "2014-06-17T04:31:04Z")\ **Posts on this page:** 4\ **Page:** 1
**Author:** ![fred\_grummit](https://avatars.discourse-cdn.com/v4/letter/f/ce73a5/32.png) [@fred\_grummit](https://discuss.elastic.co/u/fred_grummit)\ **Post date:** [June 17, 2014, 4:31am UTC](https://discuss.elastic.co/t/kibana-chart-data-view-understanding/18144/1 "2014-06-17T04:31:04Z")
I have a problem trying to visualise the data below in Kibana. Each document describes a test run audit entry with passing, failing and pending tests along with a timestamp, project identifier and host name. The curls below setup four documents and they are correctly returned if I do [http://localhost:9200/someaudits/\_search?pretty=true](http://localhost:9200/someaudits/_search?pretty=true) I would like to use kibana to display a single graph with: The X axis using @timestamp The Y axis showing four separate lines for passed, failed, pending and (passed + failed + pending) Each document (and its timestamp value) should contain a tag that references the document itself. Documents and their pass/fail/pending values should not be totalised, so they remain distinct on the graph. However the sticking point is that I'm cannot see what to click (and in what order) to setup the graph view from a blank Kibana instance located at [http://localhost:9200/\_plugin/kibana/](http://localhost:9200/_plugin/kibana/) I've read the kibana related tutorials but I'm just not groking it. # Delete the whole index: curl -XDELETE [http://localhost:9200/someaudits](http://localhost:9200/someaudits) # Create the index: curl -XPOST 'localhost:9200/someaudits/' # Use this mapping: curl -XPUT [http://localhost:9200/someaudits/testaudit/\_mapping](http://localhost:9200/someaudits/testaudit/_mapping) -d ' { "testaudit" : { "properties" : { "@timestamp" : {"format" : "dateOptionalTime", "type" : "date" }, "project" : {"type": "string" }, "host" : {"type": "string" }, "passed" : { "type" : "integer" }, "failed" : { "type" : "integer" }, "pending" : { "type" : "integer" } } } } ' # Add some data: curl -XPUT '[http://localhost:9200/someaudits/testaudit/1](http://localhost:9200/someaudits/testaudit/1)' -d ' { "@timestamp" : "2014-06-17T02:10:08.593Z", "project" : "test", "host" : "mymachine", "passed" : 10, "failed" : 20, "pending" : 1 }' curl -XPUT '[http://localhost:9200/someaudits/testaudit/2](http://localhost:9200/someaudits/testaudit/2)' -d ' { "@timestamp" : "2014-06-17T02:15:08.593Z", "project" : "test", "host" : "mymachine", "passed" : 0, "failed" : 30, "pending" : 0 }' curl -XPUT '[http://localhost:9200/someaudits/testaudit/3](http://localhost:9200/someaudits/testaudit/3)' -d ' { "@timestamp" : "2014-06-17T02:20:08.593Z", "project" : "test", "host" : "mymachine", "passed" : 50, "failed" : 0, "pending" : 1 }' curl -XPUT '[http://localhost:9200/someaudits/testaudit/4](http://localhost:9200/someaudits/testaudit/4)' -d ' { "@timestamp" : "2014-06-17T02:10:18.593Z", "project" : "another test", "host" : "mymachine", "passed" : 0, "failed" : 1, "pending" : 0 }' -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/86f13f44-868a-49b8-991d-64138c602f15%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/86f13f44-868a-49b8-991d-64138c602f15%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [June 17, 2014, 8:06am UTC](https://discuss.elastic.co/t/kibana-chart-data-view-understanding/18144/2 "2014-06-17T08:06:34Z")
Where have you gotten so far with KB? Try this; 1. Create a new blank dashboard from the default homepage 2. Configure that (top right) to point to the index and your timestamp fied then save that 3. On the main dashboard page add a new row, then save 4. Add a new panel This is where things can get tricky as you will have to figure out what panel type to use, but I think you may want to start with a histogram. Play around from there. It is a bit tough when you start, but you will pick it up pretty easily! Regards, Mark Walkom Infrastructure Engineer Campaign Monitor email: [markw@campaignmonitor.com](mailto:markw@campaignmonitor.com) web: [www.campaignmonitor.com](http://www.campaignmonitor.com) On 17 June 2014 14:31, [fred.grummit@gmail.com](mailto:fred.grummit@gmail.com) wrote: > I have a problem trying to visualise the data below in Kibana. > Each document describes a test run audit entry with passing, failing and > pending tests along with a timestamp, project identifier and host name. > The curls below setup four documents and they are correctly returned if I > do [http://localhost:9200/someaudits/\_search?pretty=true](http://localhost:9200/someaudits/_search?pretty=true) > > I would like to use kibana to display a single graph with: > The X axis using @timestamp > The Y axis showing four separate lines for passed, failed, pending and > (passed + failed + pending) > Each document (and its timestamp value) should contain a tag that > references the document itself. > Documents and their pass/fail/pending values should not be totalised, so > they remain distinct on the graph. > > However the sticking point is that I'm cannot see what to click (and in > what order) to setup the graph view from a blank Kibana instance located at > [http://localhost:9200/\_plugin/kibana/](http://localhost:9200/_plugin/kibana/) > I've read the kibana related tutorials but I'm just not groking it. > > # Delete the whole index: > > curl -XDELETE [http://localhost:9200/someaudits](http://localhost:9200/someaudits) > > # Create the index: > > curl -XPOST 'localhost:9200/someaudits/' > > # Use this mapping: > > curl -XPUT [http://localhost:9200/someaudits/testaudit/\_mapping](http://localhost:9200/someaudits/testaudit/_mapping) -d ' > { > "testaudit" : { > "properties" : { > "@timestamp" : {"format" : "dateOptionalTime", "type" : "date" }, > "project" : {"type": "string" }, > "host" : {"type": "string" }, > "passed" : { "type" : "integer" }, > "failed" : { "type" : "integer" }, > "pending" : { "type" : "integer" } > } > } > } > ' > > # Add some data: > > curl -XPUT '[http://localhost:9200/someaudits/testaudit/1](http://localhost:9200/someaudits/testaudit/1)' -d ' > { > "@timestamp" : "2014-06-17T02:10:08.593Z", > "project" : "test", > "host" : "mymachine", > "passed" : 10, > "failed" : 20, > "pending" : 1 > }' > > curl -XPUT '[http://localhost:9200/someaudits/testaudit/2](http://localhost:9200/someaudits/testaudit/2)' -d ' > { > "@timestamp" : "2014-06-17T02:15:08.593Z", > "project" : "test", > "host" : "mymachine", > "passed" : 0, > "failed" : 30, > "pending" : 0 > }' > > curl -XPUT '[http://localhost:9200/someaudits/testaudit/3](http://localhost:9200/someaudits/testaudit/3)' -d ' > { > "@timestamp" : "2014-06-17T02:20:08.593Z", > "project" : "test", > "host" : "mymachine", > "passed" : 50, > "failed" : 0, > "pending" : 1 > }' > > curl -XPUT '[http://localhost:9200/someaudits/testaudit/4](http://localhost:9200/someaudits/testaudit/4)' -d ' > { > "@timestamp" : "2014-06-17T02:10:18.593Z", > "project" : "another test", > "host" : "mymachine", > "passed" : 0, > "failed" : 1, > "pending" : 0 > }' > > -- > You received this message because you are subscribed to the Google Groups > "elasticsearch" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > To view this discussion on the web visit > [https://groups.google.com/d/msgid/elasticsearch/86f13f44-868a-49b8-991d-64138c602f15%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/86f13f44-868a-49b8-991d-64138c602f15%40googlegroups.com) > [https://groups.google.com/d/msgid/elasticsearch/86f13f44-868a-49b8-991d-64138c602f15%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/86f13f44-868a-49b8-991d-64138c602f15%40googlegroups.com?utm_medium=email&utm_source=footer) > . > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAEM624bgv8n9M6%3D2OBma0iCgn4BXkNrvn9Npc5uAL9-JEbZAJA%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAEM624bgv8n9M6%3D2OBma0iCgn4BXkNrvn9Npc5uAL9-JEbZAJA%40mail.gmail.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![fred\_grummit](https://avatars.discourse-cdn.com/v4/letter/f/ce73a5/32.png) [@fred\_grummit](https://discuss.elastic.co/u/fred_grummit)\ **Post date:** [June 18, 2014, 12:36am UTC](https://discuss.elastic.co/t/kibana-chart-data-view-understanding/18144/3 "2014-06-18T00:36:28Z")
Yes, I tried all of those steps. There doesn't seem to be a way to get the current Kibana to render multiple lines from different JSON attributes in the same histogram when the documents contain numeric values in the format described. The nearest similar prolem is: > > > I have a stats log sent from my server every now and then. I can extract the val…ues to get the following fields: > > statA = 5 > statB = 10 > statC = 100 > > The stats log is sent periodically. I'd like to graph all three stats fields against time (3 different lines on one histogram) to see how they relate. > > Is this possible at this point in time or could you implement it? or [analyse multiple numeric fields in the same histogram · Issue #150 · elastic/kibana · GitHub](https://github.com/elasticsearch/kibana/issues/150) The nearest solution I can find is this diff [add the feature to plot multiple fields in histogram, and to pair eac… · bfiorini/kibana@52b4f62 · GitHub](https://github.com/tvvmb/kibana/commit/52b4f62711176e4fc0048a6d27e42871f681b32a) Related to [https://github.com/elasticsearch/kibana/pull/374](https://github.com/elasticsearch/kibana/pull/374) I was wondering if this functionality is in the main Kibana release? On Tuesday, June 17, 2014 4:07:10 PM UTC+8, Mark Walkom wrote: > Where have you gotten so far with KB? > > Try this; > > 1. Create a new blank dashboard from the default homepage > 2. Configure that (top right) to point to the index and your timestamp > fied then save that > 3. On the main dashboard page add a new row, then save > 4. Add a new panel > > This is where things can get tricky as you will have to figure out what > panel type to use, but I think you may want to start with a histogram. > Play around from there. It is a bit tough when you start, but you will > pick it up pretty easily! > > Regards, > Mark Walkom > > Infrastructure Engineer > Campaign Monitor > email: [ma...@campaignmonitor.com](mailto:ma...@campaignmonitor.com) \ > web: [www.campaignmonitor.com](http://www.campaignmonitor.com) > > On 17 June 2014 14:31, \<[fred.g...@gmail.com](mailto:fred.g...@gmail.com) \\> wrote: > > > I have a problem trying to visualise the data below in Kibana. > > Each document describes a test run audit entry with passing, failing and > > pending tests along with a timestamp, project identifier and host name. > > The curls below setup four documents and they are correctly returned if I > > do [http://localhost:9200/someaudits/\_search?pretty=true](http://localhost:9200/someaudits/_search?pretty=true) > > > > I would like to use kibana to display a single graph with: > > The X axis using @timestamp > > The Y axis showing four separate lines for passed, failed, pending and > > (passed + failed + pending) > > Each document (and its timestamp value) should contain a tag that > > references the document itself. > > Documents and their pass/fail/pending values should not be totalised, so > > they remain distinct on the graph. > > > > However the sticking point is that I'm cannot see what to click (and in > > what order) to setup the graph view from a blank Kibana instance located at > > [http://localhost:9200/\_plugin/kibana/](http://localhost:9200/_plugin/kibana/) > > I've read the kibana related tutorials but I'm just not groking it. > > > > # Delete the whole index: > > > > curl -XDELETE [http://localhost:9200/someaudits](http://localhost:9200/someaudits) > > > > # Create the index: > > > > curl -XPOST 'localhost:9200/someaudits/' > > > > # Use this mapping: > > > > curl -XPUT [http://localhost:9200/someaudits/testaudit/\_mapping](http://localhost:9200/someaudits/testaudit/_mapping) -d ' > > { > > "testaudit" : { > > "properties" : { > > "@timestamp" : {"format" : "dateOptionalTime", "type" : "date" }, > > "project" : {"type": "string" }, > > "host" : {"type": "string" }, > > "passed" : { "type" : "integer" }, > > "failed" : { "type" : "integer" }, > > "pending" : { "type" : "integer" } > > } > > } > > } > > ' > > > > # Add some data: > > > > curl -XPUT '[http://localhost:9200/someaudits/testaudit/1](http://localhost:9200/someaudits/testaudit/1)' -d ' > > { > > "@timestamp" : "2014-06-17T02:10:08.593Z", > > "project" : "test", > > "host" : "mymachine", > > "passed" : 10, > > "failed" : 20, > > "pending" : 1 > > }' > > > > curl -XPUT '[http://localhost:9200/someaudits/testaudit/2](http://localhost:9200/someaudits/testaudit/2)' -d ' > > { > > "@timestamp" : "2014-06-17T02:15:08.593Z", > > "project" : "test", > > "host" : "mymachine", > > "passed" : 0, > > "failed" : 30, > > "pending" : 0 > > }' > > > > curl -XPUT '[http://localhost:9200/someaudits/testaudit/3](http://localhost:9200/someaudits/testaudit/3)' -d ' > > { > > "@timestamp" : "2014-06-17T02:20:08.593Z", > > "project" : "test", > > "host" : "mymachine", > > "passed" : 50, > > "failed" : 0, > > "pending" : 1 > > }' > > > > curl -XPUT '[http://localhost:9200/someaudits/testaudit/4](http://localhost:9200/someaudits/testaudit/4)' -d ' > > { > > "@timestamp" : "2014-06-17T02:10:18.593Z", > > "project" : "another test", > > "host" : "mymachine", > > "passed" : 0, > > "failed" : 1, > > "pending" : 0 > > }' > > > > -- > > You received this message because you are subscribed to the Google Groups > > "elasticsearch" group. > > To unsubscribe from this group and stop receiving emails from it, send an > > email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com) \. > > To view this discussion on the web visit > > [https://groups.google.com/d/msgid/elasticsearch/86f13f44-868a-49b8-991d-64138c602f15%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/86f13f44-868a-49b8-991d-64138c602f15%40googlegroups.com) > > [https://groups.google.com/d/msgid/elasticsearch/86f13f44-868a-49b8-991d-64138c602f15%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/86f13f44-868a-49b8-991d-64138c602f15%40googlegroups.com?utm_medium=email&utm_source=footer) > > . > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/db957733-1a2c-43b0-8550-ebd6246f5327%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/db957733-1a2c-43b0-8550-ebd6246f5327%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 1:21am UTC](https://discuss.elastic.co/t/kibana-chart-data-view-understanding/18144/4 "2017-07-06T01:21:38Z")