Visualisation / json request to view data


(Stefano) #1

Hello Community,

if I want to do this:
display the raw data behind the visualization, clicking the bar at the bottom of the container
and in order to achieve this then take a look at the request tab (please see example - I made a copy and paste of a sample request).

My question is: How do I 'use' this request? How does it look like to actually use this raw request to query the server? With xget? Please give me a short example.

The idea behind is to use this request in some scripts in order to query elasticsearch from there.
Thank you for your help!!!

Here is an example of a request:
{
"size": 0,
"aggs": {
"2": {
"terms": {
"field": "timestamp",
"size": 5,
"order": {
"_count": "desc"
}
}
}
},
"query": {
"filtered": {
"query": {
"query_string": {
"analyze_wildcard": true,
"query": ""
}
},
"filter": {
"bool": {
"must": [
{
"query": {
"match": {
"host": {
"query": "ubuntu64",
"type": "phrase"
}
}
}
},
{
"query": {
"query_string": {
"analyze_wildcard": true,
"query": "
"
}
}
},
{
"range": {
"timestamp": {
"gte": 1450937938662,
"lte": 1450941538663
}
}
}
],
"must_not": []
}
}
}
},
"highlight": {
"pre_tags": [
"@kibana-highlighted-field@"
],
"post_tags": [
"@/kibana-highlighted-field@"
],
"fields": {
"*": {}
},
"fragment_size": 2147483647
}
}


(Lukas Olson) #2

You can use the given body inside any Elasticsearch request context that uses a query. An example would be _search:

POST http://localhost:9200/<index>/[<type>]/_search { (request body here) }


(system) #3