search

elastic / kibana

Your window into the Elastic Stack
https://www.elastic.co/products/kibana
Other
19.49k stars 8.05k forks source link

Plot document values instead of aggregation #3572

Closed timmolter closed 9 years ago

timmolter commented 9 years ago

I've seen it discussed before and was hoping it'd be present in the 1.5 release. It would be nice to be able to plot a single value (no aggregation) over time for creating line charts.

The corresponding ES query would look something like this:

{"fields":["signal"],"sort":[{"ts":{"order":"desc"}}],"size":200,"query":{"match_all":{}}}

and the GUI that would be required to support this would need to get the field to plot and the number of points from now into the past.

What are your thoughts??

ajrasch commented 9 years ago

+1 for scatter plot, it's a very useful way to identify outliers...

On Fri, Apr 10, 2015 at 8:20 AM Tim Molter notifications@github.com wrote:

I've seen it discussed before and was hoping it'd be present in the 1.5 release. It would be nice to be able to plot a single value (no aggregation) over time for creating line charts.

The corresponding ES query would look something like this:

{"fields":["signal"],"sort":[{"ts":{"order":"desc"}}],"size":200,"query":{"match_all":{}}}

and the GUI that would be required to support this would need to get the field to plot and the number of points from now into the past.

What are your thoughts??

— Reply to this email directly or view it on GitHub https://github.com/elastic/kibana/issues/3572.

rashidkpc commented 9 years ago

Plotting every event is really not feasible in datasets with millions of events. While you could limit it, we really don't want to do that. The way to handle this really is to use aggregations and instead of plotting the actual number, plot the average. If you're looking for outliers you could plot the average, the min and the max of the field.

timmolter commented 9 years ago

@rashidkpc

While you could limit it, we really don't want to do that.

All plots in Kibana are limited in some way, so I don't buy this argument. All dashboards have a time filter and the ES queries are designed to return a condensed result set.

A scatter plot is useful, and it seems to me like an obviously missing feature. Some examples would be to show the temperature of a sensor over time, the RPM of a motor over time, or the stock price over time. For data like this you want to see the exact values and just plotting the last N values by limiting it with the size parameter in the ES search allows you to limit the set nicely.

kjsingh commented 7 years ago

This is also useful for sparse data where events happen once a day or less.

mkuzminski commented 6 years ago

Please add, desperately need to graph actual values

rakeshkonda commented 6 years ago

Is this implemented?

mkuzminski commented 6 years ago

No

On Mon, Aug 14, 2017 at 4:26 PM Rakesh Konda notifications@github.com wrote:

Is this implemented?

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/elastic/kibana/issues/3572#issuecomment-322314336, or mute the thread https://github.com/notifications/unsubscribe-auth/ABsXLHX6Pg2GWVZ3fNfM9WmthRn0lkdkks5sYLtqgaJpZM4D-DbE .