I have a requirement, looks like this scenario, from a CSV file 5 columns are imported into kibana and the expected visualization of it data is to create kind of table Visia.. where the values of the fields exchange with another, an example.
Column1 : Date
Column2 : Start Status Date is written in the file as date 12.03.2019 11:23:44 Start Status is written in the file as text (string) Start inboud XY.
i want to get a visualization which show me die field Start Status inside there the value from the other field Date, some thing like :
the input format CSV looks like 1
i want a table visualization looks like 2
How can I use Vega code or the Table visualization in kibana to create a table that look like the second example above.
Your question is a bit confusing, so I am going to try to make some general comments to help you clarify your question:
It looks like you haven't created any documents inside Elasticsearch. My expertise is Kibana visualizations, and there are other forums that can help you figure out how to convert CSVs into documents
Vega can't build tables. I wish it could, but it's not supported.
There are two main types of tables in Kibana: aggregated and non-aggregated.
a. Discover is non-aggregated, and can be saved onto a dashboard.
b. Aggregated tables are commonly shown as "detail views" where you use a Terms aggregation for your first column, and then all the metrics are Top Hits/Last Value. "Last value" is a useful concept for many tables
I recommend creating tables in Lens, but it can also be done in TSVB and aggregation-based visualizations.
There is a third-party table plugin called kibana-enhanced-table that some users prefer
so i have already imported my CSV file on my Elasticsearch and split it into single fields/. i started with the Aggregate Tables visualisation and used the metrics Top/hit Last Value, it's ok it delivers the data in a row, that's fine, however i want to see the distribution of the field (Start and End Date & Processing status) as described in the picture, see below.
how can I use JSON input here for a nested aggregation or something like that, what can you recommend here?
Okay. What you've asked for is "splitting the columns". What you need to do that is to add additional fields to your Kibana index pattern. There are two ways to do this:
You can add extra Kibana runtime fields (in 7.12)/scripted fields (older versions). Since you have Start and End Date as one field, but want to display it as two fields, you can split this using a Painless script
You can use an Elasticsearch ingest pipeline (a built-in feature) to process each document as it is ingested into Elasticsearch. For example, using the script processor
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.
