TSVB Table Sorted by timestamp

Elastic Stack Kibana
1

Hello,

I have a nice TSVB graph and I'm trying to get a table out of it sorted by timestamp. Should be simple, but it doesn't show any value:

image
image1162×716 80.9 KB

I want a time-based table like the other Table graph, but needs to be TSVB because I use Serial Difference.

Any idea? Maybe a painless script that will make it drop any entry with 0.0bit/s value?

2

Hey @lamp123432, TSVB table uses a terms aggregation to group the data. You can use datatable visualization instead that also supports serial diff aggregation and date histogram to group the data. For example here

image
image1504×2072 174 KB

I have used a date histogram for the bucket aggregation and serial diff as a metric to an average aggregation.

1 Like
3

Great, the only problem is that I use a Bucket Script to convert my counters into a rate, as follow:

(params.bytes * 8) / (params._interval / 1000)

If I use your method, will I need a scripted field?

TSVB would be best, but grouping by term timestamp isn't working : (

Edit: Ok I got it working with a scripted field for the bucket script part, thanks!

1 Like
4

I came to this topic because I was looking for the same functionality, the ability to create a table showing the underlying data for a graph. In my use case, I'm using a TVSB, because my data contains two separate timestamps, and the ability to override the index and specify a separate time field for each allows me to graph the two timestamps as two separate series on the same graph. Unfortunately, I don't have the capability to do this in a data table.

This would be good functionality for this type of visualization. How can I submit a feature request for this?

1 Like
5

Hey @DougR!
You can submit a feature request here https://github.com/elastic/kibana/issues/new?assignees=&labels=&template=Feature_request.md

But I am quite sure that you can do this in Lens. Lens offers a more powerful datatable than TSVB.

6

I will submit this, thanks.

If you can, I haven't been able to figure it out. In Lens, for the graphs, you can add layers, which can be from different indices. However, the data table in Lens doesn't appear to allow multiple layers, as far as I can tell. Additionally, in creating the same graph in Lens and in TSVB, TSVB appears to render faster. Finally, in TSVB I can specify the second series from the same index (i.e., filebeat-*), but calculate the date histogram buckets with a different timestamp (i.e., use @timestamp for one data series, and log.myapp.second_timestamp for the second bucket). To do this with Lens, I need to add an alias to the index (i.e., myapp-second-timestamp), then create an index pattern with a different timestamp field; this isn't a big issue, but it would be nice to not have to do it.

I'm also reasonably certain I can do this as a Vega visualization, but I'm not wild about learning Yet Another Specification Language (YASL™). :smiley:

7

Oh, now I see what you want to do. Yes, you can't add multiple layers on a Lens datatable. Please submit your feature request in order to track this :slightly_smiling_face:

1 Like
8

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.