# Timelion raw data scatterplot

**URL:** <https://discuss.elastic.co/t/timelion-raw-data-scatterplot/68420>\
**Category:** Kibana\
**Created:** [December 8, 2016, 10:45am UTC](https://discuss.elastic.co/t/timelion-raw-data-scatterplot/68420 "2016-12-08T10:45:01Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![dandrestor](https://avatars.discourse-cdn.com/v4/letter/d/7cd45c/32.png) [@dandrestor](https://discuss.elastic.co/u/dandrestor)\
**Post date:** [December 8, 2016, 10:45am UTC](https://discuss.elastic.co/t/timelion-raw-data-scatterplot/68420/1 "2016-12-08T10:45:01Z")

</div>

Hi,

On the [Kibana product page](https://www.elastic.co/products/kibana) I saw very nice examples of timelion graphing moving averages over what appears to be a scatterplot of the raw data points used to produce the average in question (see the earthquake depth and magnitude graphs there).

How can I replicate this? What is the metric used to obtain the raw data?

Thanks,  
Dan

---

<div class="post-metadata">

**Author:** ![tylersmalley](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tylersmalley/32/8833_2.png) [@tylersmalley](https://discuss.elastic.co/u/tylersmalley)\
**Post date:** [December 9, 2016, 12:35am UTC](https://discuss.elastic.co/t/timelion-raw-data-scatterplot/68420/2 "2016-12-09T00:35:49Z")

</div>

Dan,

Here is a quick example I put together using logstash data.

 ![](https://us1.discourse-cdn.com/elastic/original/2X/5/58d0666a780adefab00a8dd4bf666afbdc1e44c3.png)

Is this what you were looking for? We have some [good videos](https://www.elastic.co/blog/timelion-timeline) on our blog which goes over more features, as well as the search bar in Timelion provides useful feedback to the options available.

---

<div class="post-metadata">

**Author:** ![dandrestor](https://avatars.discourse-cdn.com/v4/letter/d/7cd45c/32.png) [@dandrestor](https://discuss.elastic.co/u/dandrestor)\
**Post date:** [December 9, 2016, 11:19am UTC](https://discuss.elastic.co/t/timelion-raw-data-scatterplot/68420/3 "2016-12-09T11:19:37Z")

</div>

Hi Tyler,

Thanks for responding. No, this isn't exactly what I need. The principle is the same, but instead of plotting the count of events in the logstash index as you are doing, I want to plot the values of some numeric field (such as presumably the earthquake magnitude and depth fields are in the examples that I referenced).

In fact, this is the difficulty I encountered - using the values of a numeric field, instead an aggregation such as count or average. If you look at the legends of the earthquake graphs, they seem to be using 'raw' values.

Dan

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 6, 2017, 11:19am UTC](https://discuss.elastic.co/t/timelion-raw-data-scatterplot/68420/4 "2017-01-06T11:19:39Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.