Sum values before applying calculation

Elastic Stack Kibana
1

Hi,

I try to display a throughput graph over a time period of 7 days.
To do this I need to set Interval in DateHistorogram to 600s.
(Otherwise there are to many events. Kibana will complain)
This will make the result 600 time greater than it should be.

To compensate for this I add formula in JSON input window for Y-axis where I sum the values.
Unfortunately is the calculation done on each event instead of the sum of the time interval.
This makes the result after calculation = 0. And then the sum of 0 is always 0

image
image.png417×904 44 KB

I wonder if it is possible to first sum all values over a timespan and then apply the calculation?

Br Mathias

2

You should be able to do this in Timelion or the new Time Series visualization. It's not yet possible in the basic Kibana visualization editor.

3

Thanks for your answer.

I have tried the new Time Series visualization but I do not know how to make sub aggregation.

I need to aggregate over time.
Then I need to apply a filter.
Then I need to split series to show one line per type.

It seems like after I have made a filter aggregation in the new visual builder I can not make another aggregation.
Or at least I do not know how to do it and no one has been able to answer my question in this forum.

https://discuss.elastic.co/t/several-groupings-using-visual-builder/100519/2

Timelion is too painful to maintain when you have many graphs.

Br Mathias

4

I don't have the answer off the top of my head, I'll have to ask around. Right now a lot of folks are traveling so it might take a few days, but I'll get back to you. It may be that it's not possible right now and we'll need to file an enhancement request.

5

Hi Bargs,

Have you been able to find any answer from the experts?

Br Mathias

6

Instead of creating a filter aggregation in the "group by" section you can use the "panel filter" in the "Panel Options".

7

Hi,

I understand what you mean. I add a common filter in Panel Options and the group by Terms in the "Group By" section.
In panel filter I can add a filter common for all timeseries.
That works for time series using the same filter.
Unfortunately I have 4 time series with 4 different filters.

I think new functionality is needed to make Visual Builder complete.
It would be good if adding new groupings could be as easy as it is in Grafana.

Br Mathias

8

So you want a filter per Series? I’ve been thinking about adding that for the last 2 months, let’s see what happens in the next couple of days :wink:

9

If you can add this functionality you make me very happy.

Thanks in Advance.
Mathias

10

Here is the PR I threaten to write: https://github.com/elastic/kibana/pull/14696

11

Many thanks,

Any plans to tag it with 5.x.y?

Something completely different related to visual builder:
Do you know if it would be easy to add a variable keeping track of used time interval (when time_interval=auto) which could be used in formulas? This would make it possible to select different time span and use kibana's time interval=auto and get the correct result of sum values.

Kind regards
Mathias

12

The only things getting back ported to 5.x is bug fixes. I will look into adding the interval to equations. :smiley:

13

Thanks a lot.

It would simplify things a lot if we make use of an interval variable.

Br Mathias

14

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.