Running out of hope with Timelion

Elastic Stack Kibana
1

Im trying to visualize my data with Timelion for the first time and its just showing me straight line at value 0. I have chaged the timestamp value in advanced setting and tried all the tricks but nothing seems to work. My code looks like this:
.es(index=jira_issues_elk*,metric=count,timefield=UPDATED_UTC).points()
The timefield value UPDATED_UTC is a date type that is a scripted field in index pattern.

Anyone know a solution here?

2

Timelion doesn't know about scripted fields. To use timelion, the fields have to be present in the index. You can do this by calculating the scripts value at ingest time, for example with an ingest pipeline configured in Elasticsearch and the script processor.

3

Thanks for the reply! Your reply still left some questions. Do you have any link to a guide on how to do this?

4

This page shows how pipelines work in general https://www.elastic.co/guide/en/elasticsearch/reference/current/ingest.html

Define a pipeline with a script processor that does the calculation you are currently doing in your scripted field.

Then ingest your data through the pipeline. Now timelion will now about UPDATED_UTC field because it will be part of the regular document.

5

I was trying to figure this out but couldnt get it yet. I have data coming from Kafka to elasticsearch. Is it somehow possible to use ingest pipeline to add this timestamp before it reaches the index?

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.