Pie chart: display all records equal to the value clicked

Elastic Stack Kibana
1

Hi, i am just getting started with the ELK stack and am just trying to do some basic stuff first.
As a test i am sending cisco logs to logstash. I have created a Visualization that count the number of records by severity level 0-6. When I click a piece of the chart I would like to display all records with that severity level. How can I accomplish this with Kibana?

21
Schermafbeelding 2018-11-12 om 21.24.21.jpg1598×900 77 KB

2

Hi,

Do you mean to say you want to display full documents as tooltip? Like this?

20%20PM
Screen Shot 2018-11-12 at 6.51.20 PM.jpg2880×1800 763 KB

You can display parts of your document depending on which field you are aggregating on.
Does that help?

Thanks,
Bhavya

3

Hi Bhavya,

i want to click in the pie char for example the serverity_level_keyword warning and then I want to have a list of all events with that severity level, as in picture included.

07
Schermafbeelding 2018-11-13 om 22.51.07.jpg3296×1982 773 KB

4

Hi,

Unfortunately this isn't possible yet. What you want is drill downs and they are in the roadmap.

Thanks,
Bhavya