Type of aggregation?

[SirJune]

Hi,
I have these documents in ElasticSearch (single indexname)
|datetime|, |label|, |count|
2019-09-06 13:32:18,host1 service1,876
2019-09-06 13:32:18,host1 service1,353
2019-09-06 13:32:18,host2 service2,911
2019-09-06 13:32:18,host2 service2,55

My fields are "datetime", "label" and "count". How do I graph these 4 numbers as it is? I tried VisualBuilderTimeSeries but the aggregations "max" or "min" will basically drop the two values, and what i get are just 2 (points): 1 for host1 and one for host2. Is there a way to plot these in 1 line(X) and show all 4 numbers ?

thanks,
SirJune

[Mark_Harwood]

@SirJune

I tried VisualBuilderTimeSeries

I think you need the Kibana forum - moving there.

[wylie (Wylie Conlon)]

Kibana is primarily for aggregated data, but there are 2 built-in tools that let you break out of this.

• Vega lets you run a search query and graph it directly https://www.elastic.co/blog/custom-vega-visualizations-in-kibana
• Canvas has tools to show individual documents in various graph types

[SirJune]

Thank you Mark and Wylie! I will try to explore Vega and Canvas.