Hi, I'm using 7.17 (we're upgrading soon). At the moment I have lens/graph/visualize library all open searching for a way to include all fields (many) from an index and display them in a pie chart. I can see how to do this manually, but there must be an easier way. Thank you!
Edit: By manually, I meant selecting 1 field at a time.
Hi @Marco_Liberti, thanks for your response. The idea was to put all the whole index into a visualization, then use filters to audit it and eventually prune frivolous log fields from ingestion. I realize it is a heavily visual approach and is looking more like a pipe (line) dream. It seems like aggregation might be the solution, but my first impression is that the index data is a bit much for it.
Selecting all field is not possible other than manually creating filter buckets with all field: value combinations.
On the other hand, having all this buckets won't be that useful within a pie visualization: best practices suggest to use no more than 3/4 categories within a pie chart. The use case sounds more something a table could do best.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.