Vertical bar chart with stack elapsed data


(Dmitry Reshetnik) #1

I'd like to trace some command execution across entire code slice (from UI to DB).
Using elapsed logs I retrieved duration on each layer I'ld like to visualize.

fields:
{
    elapsed: 9.34
    id: "12"
    commandName: "MyCommand"
    layer: "UI"
}
fields:
{
    elapsed: 7.34
    id: "12"
    commandName: "MyCommand"
    layer: "Backend"
}
fields:
{
    elapsed: 6.34
    id: "12"
    commandName: "MyCommand"
    layer: "DB"
}

Now I'ld ike to visualize this data using vertical bar chart.
But I'd like to add such structure:
X-axis: all fields by concatting commandName + Id.
Y-axis: duration (from elapsed). But there should be a split bar with max value = 9.34, then inner bar = 7.34, and the last one inner bar = 6.34.
So I'd like to see that for "MyCommand"-"12" entire time was 9.34. But for other layers execution was 7.34 and 6.34.

Is that possible to do that with Kibana?


(Tanya Bragin) #2

Kibana supports scripted fields, but they use Lucene Expressions, which does not operate on strings, so you'd have to index in the concatenated commandName and id during ingest (e.g. in Logstash).

As far as showing a stacked bar with Backend and DB, that should be possible using the Filters agg,

Only thing I'm not sure about is how you'd fit two bars that add up to more than 9.34 in a bar with max height of that magnitude, but maybe you need to use Kibana scripted fields to do additional calculations on the fields to end up to something that adds up.


(system) #3