Kibana visualisation from SQL query

Elastic Stack Kibana
1

Hello friends! Need help with visualisation in Kibana from sql query:

  1. I have the same table from sql query:
    1
    11301×250 33.2 KB

    I need to group results values by columns of actions values and by Mail ID. In splunk I realise it with chart option ("chart latest(results) as status over mail_id by actions"):
    2
    21429×263 51.6 KB

    How to get something like this in Kibana?
  2. With an sql query, I get the difference between two time parameters in milliseconds. How to display this data on the graph on the Y-axis, on the x-axis-the time of data receipt:
    3
    31368×676 69.1 KB
2

hi @Mkapustin,

Can you add a group by clause?

e.g.

Select MailId, action, last(timestamp)
FROM filebeat
WHERE ...
GROUP BY MailId, action
3

Hi! Yes, I can add a grouping, however, this does not lead to the desired result (screenshot), I need a table of results by steps, as in the attached screenshot from Splunk (first message).

elk5
elk51483×637 134 KB

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.