Is there a way to show zero values in line chart? One single point looks weird to me.
It would be great if we have things like this:
I use a date histogram aggregation for X-axis and a term aggregation as the sub-bucket.
The query for the visualization is:
{
"size": 0,
"_source": {
"excludes": []
},
"aggs": {
"2": {
"date_histogram": {
"field": "@datetime",
"interval": "12h",
"time_zone": "America/Los_Angeles",
"min_doc_count": 1
},
"aggs": {
"3": {
"terms": {
"field": "beat.hostname.keyword",
"size": 5,
"order": {
"_count": "desc"
}
}
}
}
}
},
"version": true,
"stored_fields": [
"*"
],
"script_fields": {},
"docvalue_fields": [
"@datetime",
"@timestamp"
],
"query": {
"bool": {
"must": [
{
"query_string": {
"query": "\"Itec.zkclient.exception.ZkException\" OR \"Itec.zkclient.exception.ZkTimeoutException\"",
"analyze_wildcard": true,
"default_field": "*"
}
},
{
"match_all": {}
},
{
"range": {
"@datetime": {
"gte": 1529794790328,
"lte": 1532386790328,
"format": "epoch_millis"
}
}
}
],
"filter": [],
"should": [],
"must_not": []
}
},
"highlight": {
"pre_tags": [
"@kibana-highlighted-field@"
],
"post_tags": [
"@/kibana-highlighted-field@"
],
"fields": {
"*": {}
},
"fragment_size": 2147483647
}
}