# Show incremental data in Kibana \[ Like Incremental Bytes value \]

**URL:** <https://discuss.elastic.co/t/show-incremental-data-in-kibana-like-incremental-bytes-value/35248>\
**Category:** Kibana\
**Created:** [November 22, 2015, 7:39pm UTC](https://discuss.elastic.co/t/show-incremental-data-in-kibana-like-incremental-bytes-value/35248 "2015-11-22T19:39:29Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![gugansankar](https://avatars.discourse-cdn.com/v4/letter/g/e274bd/32.png) [@gugansankar](https://discuss.elastic.co/u/gugansankar)\
**Post date:** [November 22, 2015, 7:39pm UTC](https://discuss.elastic.co/t/show-incremental-data-in-kibana-like-incremental-bytes-value/35248/1 "2015-11-22T19:39:29Z")

</div>

In my setup, IN/OUT bytes value is an Incremental one.

For example,  
1st 60mins --\> 120KB  
2nd 60mins --\> 134KB  
3rd 60mins --\> 160KB

How do I graph it ?. Since, this bytes value is incremental one.

Either any option to show end value , like in my case total consumption bytes value is 160KB.

Graphs comes like this, but its not a correct one. Since, if 3rd person come and check the graph, he may thought total consumption of BW is 414KB. But actual consumption is 160KB only.

 ![](https://us1.discourse-cdn.com/elastic/original/2X/4/47a5291f7cc88b0f172647f588bd298d76e45dbb.png)

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 22, 2015, 11:38pm UTC](https://discuss.elastic.co/t/show-incremental-data-in-kibana-like-incremental-bytes-value/35248/2 "2015-11-22T23:38:45Z")

</div>

This isn't yet available in KB, you'd have to see if you can script something to get the results you want.

---

<div class="post-metadata">

**Author:** ![gugansankar](https://avatars.discourse-cdn.com/v4/letter/g/e274bd/32.png) [@gugansankar](https://discuss.elastic.co/u/gugansankar)\
**Post date:** [November 23, 2015, 4:30am UTC](https://discuss.elastic.co/t/show-incremental-data-in-kibana-like-incremental-bytes-value/35248/3 "2015-11-23T04:30:56Z")

</div>

Thanks for your reply.

I think, I can get the value if set "Metric Aggregation" to "Max". Could you please confirm , this is a correct method ?

This is my data,  
{"cClientID": "117928312", "IoBytesSent": "3559817"}  
{"cClientID": "117928312", "IoBytesSent": "4559817"}  
{"cClientID": "117928312", "IoBytesSent": "5559817"}  
{"cClientID": "117928312", "IoBytesSent": "6559817"}  
{"cClientID": "117928312", "IoBytesSent": "7559817"}  
{"cClientID": "117928312", "IoBytesSent": "8559817"}  
{"cClientID": "117928312", "IoBytesSent": "9559817"}

Kibana output

![](https://us1.discourse-cdn.com/elastic/original/2X/4/4ee58d174791b0d51680040dfa19fa0358a21af1.png)

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [November 23, 2015, 4:32am UTC](https://discuss.elastic.co/t/show-incremental-data-in-kibana-like-incremental-bytes-value/35248/4 "2015-11-23T04:32:39Z")

</div>

That's not incremental, that's the max value of the field.  
But it does show a point in time value of consumption, which sounds like what you want 🙂

---

<div class="post-metadata">

**Author:** ![gugansankar](https://avatars.discourse-cdn.com/v4/letter/g/e274bd/32.png) [@gugansankar](https://discuss.elastic.co/u/gugansankar)\
**Post date:** [November 23, 2015, 4:36am UTC](https://discuss.elastic.co/t/show-incremental-data-in-kibana-like-incremental-bytes-value/35248/5 "2015-11-23T04:36:56Z")

</div>

😉

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 2:08pm UTC](https://discuss.elastic.co/t/show-incremental-data-in-kibana-like-incremental-bytes-value/35248/6 "2017-07-06T14:08:30Z")

</div>