Split Timelion view based on Field

[viswadeep (Hari Viswadeep)]

Hi,

I have an Index "school"

Each record in "School" is like
{
finance_dept: {
"budget" : $10000
"spend" : $5000
"money_left" : $5000
}
........

How to show "budget", "spend" & "money_left" in a single Timelion graph

[viswadeep (Hari Viswadeep)]

What is cardinatity ?

.es(metric=cardinality:)

[tsullivan (Tim Sullivan)]

Hi,

In Timelion, you can show multiple data series in a chart by making multiple expressions separated by a space. For example, to show "spend" vs "money_left", you would do:

.es(metric=min:money_left) .es(metric=sum:spend)

@viswadeep

What is cardinatity ?

.es(metric=cardinality:)

It is a type of aggregation built into Elasticsearch to get the number of unique values for a field: Cardinality aggregation | Elasticsearch Guide [8.11] | Elastic