Visualization from two indexes

[ugi.bugi (lukasz)]

Hello ElasticTeam,

I have two indexes and I want to make one visualization from it.

First index looks like:
Id,
Timespan,
Date,
LineType.

Second index looks like:
Id,
Timespan,
Date,
LineType,
Genre,
Description,
RaportingUser.

I want to create visualization like on image below:

The visualization should only show data from current shift in factory. Can it be made with Kibana?

Is it even possible to do that ? Should I merge data to one index or go on with two separated?

Thanks for all responses,
Lukasz

[ArisP (Aris)]

Hi Lukasz, in Kibana you'll work with index patterns. You can combine the two indices in an index pattern: https://www.elastic.co/guide/en/kibana/current/index-patterns.html

[ugi.bugi (lukasz)]

Hello Aris,

Thank you for response, it helped me a lot.
I have another questions now.
My timespan column I mentioned before has its values in miliseconds. Is it possible to divide its values so I have minutes on my visualization? If yes, where can I do that?
Also, is it possible to have my visualization change its filters automatically at particular hours ? Visualized data has to be from current shift in factory, for example from between 2 P.M to 10 P.M, and at 10 P.M it should change its filters to take only data from between 10 P.M to 6 A.M.
I hope I explained everything clearly

Thanks in advance,
Lukasz

[ArisP (Aris)]

Glad it was of help For the first part, you may want to use scripted fields (assuming you prefer not to pre-process the data): https://www.elastic.co/guide/en/kibana/current/scripted-fields.html. For the second part, you basically need scheduled activation/deactivation of filters in a visualisation?

[ugi.bugi (lukasz)]

Thank you v.much again, scripted fields will do the work
I need my filters to change at particular hours.
For example:
Between 10 P.M and 6 A.M I need my filters to get only data which is from between 10 P.M to 6 A.M, then, starting at 6 A.M to 2 P.M I need my filters to get only data which is from between 6 A.M and 2 P.M. Then, starting at 2 P.M to 10 P.M I need my filters to get only data which is from between 2 P.M to 10 P.M.
This is like workers have their shifts at factory.
Is there a way to change filters or should I make 3 separated visualizations:

• One with first type of filter (10 P.M - 6 A.M),
• Second with second type of filter (6 A.M - 2 P.M),
• Third one with (2 P.M - 10 P.M)
  And just switch between them at that particular hours ?

I also have another problem which I cant solve.
I have a metric visualization of my data, currently it has 2 metrics like on the image below:

I have to create one more metric, it has to show percentage share of "Metric Sum of odpad" in "Metric Sum of ilosc" (these two metrics are on the image).
The mathematical formula for this would be like:
NewMetricValue = ("Metric Sum of odpad" / "Metric Sum of ilosc") * 100;
How can I achieve that on my visualization ??

Thanks,
Lukasz

[ugi.bugi (lukasz)]

Hello again,

If there's no response should I recognize that things that I mentioned before are impossible to do and look for some kind of workaround?

Edit 2019-12-16 1:32PM:
I solved problem with displaying that percentage share by creating TSVB chart.

Best regards,
Lukasz