TSVB Table Sorted by timestamp

[lamp123432 (Salt Lamp)]

Hello,

I have a nice TSVB graph and I'm trying to get a table out of it sorted by timestamp. Should be simple, but it doesn't show any value:

I want a time-based table like the other Table graph, but needs to be TSVB because I use Serial Difference.

Any idea? Maybe a painless script that will make it drop any entry with 0.0bit/s value?

[Stratoula_Kalafateli]

Hey @lamp123432, TSVB table uses a terms aggregation to group the data. You can use datatable visualization instead that also supports serial diff aggregation and date histogram to group the data. For example here

I have used a date histogram for the bucket aggregation and serial diff as a metric to an average aggregation.

[lamp123432 (Salt Lamp)]

Great, the only problem is that I use a Bucket Script to convert my counters into a rate, as follow:

(params.bytes * 8) / (params._interval / 1000)

If I use your method, will I need a scripted field?

TSVB would be best, but grouping by term timestamp isn't working : (

Edit: Ok I got it working with a scripted field for the bucket script part, thanks!

[DougR]

@Stratoula_Kalafateli

Hey @lamp123432, TSVB table uses a terms aggregation to group the data. You can use datatable visualization instead that also supports serial diff aggregation and date histogram to group the data. For example here

I came to this topic because I was looking for the same functionality, the ability to create a table showing the underlying data for a graph. In my use case, I'm using a TVSB, because my data contains two separate timestamps, and the ability to override the index and specify a separate time field for each allows me to graph the two timestamps as two separate series on the same graph. Unfortunately, I don't have the capability to do this in a data table.

This would be good functionality for this type of visualization. How can I submit a feature request for this?

[Stratoula_Kalafateli]

Hey @DougR!
You can submit a feature request here https://github.com/elastic/kibana/issues/new?assignees=&labels=&template=Feature_request.md

But I am quite sure that you can do this in Lens. Lens offers a more powerful datatable than TSVB.

[DougR]

@Stratoula_Kalafateli

You can submit a feature request here Sign in to GitHub · GitHub

I will submit this, thanks.

@Stratoula_Kalafateli

But I am quite sure that you can do this in Lens. Lens offers a more powerful datatable than TSVB.

If you can, I haven't been able to figure it out. In Lens, for the graphs, you can add layers, which can be from different indices. However, the data table in Lens doesn't appear to allow multiple layers, as far as I can tell. Additionally, in creating the same graph in Lens and in TSVB, TSVB appears to render faster. Finally, in TSVB I can specify the second series from the same index (i.e., filebeat-*), but calculate the date histogram buckets with a different timestamp (i.e., use @timestamp for one data series, and log.myapp.second_timestamp for the second bucket). To do this with Lens, I need to add an alias to the index (i.e., myapp-second-timestamp), then create an index pattern with a different timestamp field; this isn't a big issue, but it would be nice to not have to do it.

I'm also reasonably certain I can do this as a Vega visualization, but I'm not wild about learning Yet Another Specification Language (YASL™).

[Stratoula_Kalafateli]

Oh, now I see what you want to do. Yes, you can't add multiple layers on a Lens datatable. Please submit your feature request in order to track this