CODEWITHSUNDEEP
elasticsearchkibana
isaac.hazan
isaac.hazan

Reputation: 3874

Kibana Histogram unexpected line curve with cumulative value

Kibana cannot do a the Histogram of the cumulative value of a field as describe at: https://github.com/elasticsearch/kibana/issues/740

To overcome that I created a separate index where I calculate myself the total and saved it to Elasticsearch.

The mapping looks as follows:

curl -XPOST localhost:9200/first_install -d '{
    "settings" : {
        "number_of_shards" : 5
    },
    "mappings" : {
        "fi" : {
            "properties" : {
                "evtTime" : { "type" : "date", "index": "not_analyzed", "format": "dd/MMM/yyyy:HH:mm:ss" },
                "cumulativeValue" : { "type" : "integer", "index": "not_analyzed" }
            }
        }
    }
}'

The values are saved properly but unexpectedly Kibana does not draw the line i would expect, instead it joins between point that do not exist.

Following is the Kibana sreenshot:

enter image description here

The line curve should always be increasing since my data set is always increasing, that i can prove by the following events as seen by kibana itself:

enter image description here

Could it be related to the data formatting I did?

Thx in advance.

Upvotes: 3

Views: 1949

Answers (1)

Rick Hoving
Rick Hoving

Reputation: 3575

You have your setting set to total and the interval to 30m.
What Kibana does, it looks for the value in your selection (table) with the lowest timestamp 819.
Then it tooks for all values which occurred between the first time-stamp and 30 minutes later.
These values are all summed up total and plotted on your graph.
This goes on untill the last value is obtained.

To summarize, Kibana plots the total cumulative value (so actually a cumulative of a cumulative) of all the items within 30 minutes.

Upvotes: 1

Related Questions