Visualization and Dynamically Parse Field Values

Elastic Stack Kibana
1

I have log events with the following fields:

src.class: MyClass
src.method: myMethod
message: start=12345678,end=12345679,duration=1

src.class: MyClass
src.method: myMethod
message: start=12345678,end=12345678,duration=0

etc.

How would I go about in Kibana to plot over time the duration of MyClass.myMethod? I'd like the visualization to show "MyClass.myMethod". The idea is the visualization will display a duration graph of classes and methods.

I'd prefer not having to parse the log entry into the right format before indexing. Idea is to use Kibana to do the processing. Possible? What functions would I need to use?

Thanks...

2

No, you have to split out the values into separate fields with the correct data types you want to plot over prior to visualizing them. Kibana currently does not provide a way to extract values from raw messages.