Time Series Visual Builder: Kibana

Elastic Stack Kibana
1

Hello

These are my sample logs.

Fields: Volume-ID / Metric Name / Timestamp / Values

vol-081c15a3e11eee991 VolumeReadBytes 2018-06-01 13:10:00+00:00 25582.035087719298
vol-081c15a3e11eee991 VolumeReadBytes 2018-06-01 13:04:00+00:00 28072.585365853658
vol-081c15a3e11eee991 VolumeReadBytes 2018-06-01 13:00:00+00:00 24455.791304347826
vol-081c15a3e11eee991 VolumeWriteBytes 2018-05-30 09:40:00+00:00 16597.136258660506
vol-081c15a3e11eee991 VolumeWriteBytes 2018-05-30 09:34:00+00:00 16689.222279703397
vol-081c15a3e11eee991 VolumeWriteBytes 2018-05-30 09:30:00+00:00 16970.72654370489
vol-081c15a3e11eee991 VolumeReadOps 2018-05-25 10:34:00+00:00 30.0
vol-081c15a3e11eee991 VolumeReadOps 2018-05-25 10:30:00+00:00 44.0
vol-081c15a3e11eee991 VolumeReadOps 2018-05-25 10:24:00+00:00 42.0

I want to build a Timeseries Dashboard with the below requirements

It should be able to display Values without performing aggregation as These values are already the output of an aggregation(Avg) from a data source. Now, in Kibana again I dont want to perform aggregation on Values Field.
How can I do this?

And, in dashboard I should be able to show VolumeReadBytes, VolumeWriteBytes and VolumeReadOps each with different colors from the past one month.

Please suggest me a way to do this. I tried my best but facing difficulties in doing so.

Any help is appreciated

Thanks for your time as always :slight_smile:

2

Hey @rahulnama, as you've probably discovered, all Visualizations in Kibana are based on aggregations and aren't based around displaying single documents.

One work-around you use is to create a "Terms" aggregation in Visualize on a field that is unique, but it's really not ideal.

1 Like
3

Thank you @Brandon_Kobel.

Yea, maybe that's the only option I can have

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.