Timelion expression Problem


I have a very basic question about Kibana's Timelion. I'm trying to create a visualization of Bytes arriving in a router's interface, I'm using Ntopng which I have configured to send data to ElasticSerch so I can visualize throughput with Kibana.

So far so good, I created an index called ntopng and I can see hits from this index in Timelion:

The index provides several fields, like "IN_BYTES" or "IN_PKTS" which I'd like to use to generate traffic graphs:

But if I add a query with the mentioned field, all I get is a flat line:

I'm sure there's something wrong with the Timelion expression, but as I'm still learning how to use Kibana, so I'm quite stuck.

Any help on how to visualize fields in Timelion would be appreciated.


Ok,after researching I found I was missing timefield and metric parameters in the expression, now I see traffic from the field required.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.