Trying to create a pie chart but Im a bit lost

I've managed to get some data from Jboss Fuse into my Kibana, and now I want to create a Pie chart displaying log level. It can either be TRACE, DEBUG, INFO, WARN, ERROR or FATAL.

I've studied some tutorials on YouTube but they state that I have to do some search before creating pie chart?

This is a example entry:

offset:
    57,393
subsystem:
    FelixDispatchQueue
level:
    INFO 
class:
    io.fabric8.patch.patch-management
beat.name:
    selite
beat.hostname:
    selite
beat.version:
    6.2.2
source:
    /usr/lib/jboss-fuse/data/log/fuse.log
prospector.type:
    log
@timestamp:
    March 19th 2018, 13:43:35.191
tags:
    beats_input_codec_plain_applied
message:
    Storing user changes
timestamp:
    2018-03-19 13:43:35,191
route:
host:
    selite
@version:
    1
_id:
    WaVJPmIBRSa89YvqV2-V
_type:
    %{[metadata][type]}
_index:
    filebeat-2018.03.19
_score:
    - 

Here is a screenshot with my data so far:
https://imgur.com/kkWO0p6

Hi,

you don't need a search if you don't want to narrow your documents down any further.

In your case you could just go to visualize, create a new pie chart, select the index pattern that holds your documents and select the following configuration:

  • Metrics, Slice Size: Count (is the default value)
  • Under Buckets:
    • Split Slices
    • Terms aggregation on field level
    • Set size to 6 (since you have 6 possible values)

And that should give you a pie chart, showing the percentage of the different log levels.

Cheers,
Tim

I cant use level as Field, because it doesnt exist in the drop down list.
What did I do wrong? I can see it on "Discover".

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.