Plot - Without Split - Y Fields with Multiple Filter Aggregation

Elastic Stack Kibana
1

Hi
I am reading data from multiple log files, which have identical format and are processed with the same grok filter. Format is SystemWideTimestamp, LogId, Value.
I would like to be able to draw the Value time-series, from various log files, on the same graph, with SystemWideTimestamp as X axis. Currently, I do the following:
1- In Line Chart, Y-axis, select Max/Avg as aggregation and use Value as its field
2- Use SystemWideTimestamp, in X-axis, as aggregation field, which is order by "Term", ascendingly
3- Add Split-Lines sub-bucket, and select "Filter" as sub aggregation, then define filters with LogId:logx, LogId:logy, etc

This works fine, except, as the name implies, the x-axis is split vertically. What I really like is for these time series to use a single x-axis, SystemWideTimestamp.
Anything I can do within Kibana?
Cheers,

2

So I can almost get there, by:
1- 1st aggregating on the common time stamp
2- Sub aggregate on "Split Chart", and select rows
3- Define qualifying filters

The only hitch is that non-sequential Y points are not connected.

Pasted image1078×234 2.77 KB

(Opened another topic for this.)
Cheers,

3

I responded to your other topic about the broken lines, but it will probably ultimately be something we need to write some code to fix in Kibana. If you're on Kibana 5, have you tried using Timelion? You could probably accomplish exactly what you want there, as an alternative.

4

Thanks again. Will give it a shot.
Cheers,

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.