6

In Kibana, I have an index that looks like as follows

  • type (String)
  • value (String)
  • timestamp (Date)

I would like to have a visualization that shows the most recent value field where the type is equal to "battery", for example.

I would like the visualization to be similar to the "Metric" one, but displaying a string of text instead of a number, of course.

Is this possible with Kibana? If not, how can I get a similar result?

2

1 Answer 1

4

You can use a Data Table visualization.

In the search query you would specify type: "Battery"

In the metric section you would specify Max timestamp

In the Split Rows section you would specify Aggregation=Terms, Field=value, OrderBy=metric:Max timestamp, Order=descending, Size=1

You will have a result that is a table with 1 row and 2 columns, one of which being a value and the other a timestamp

If this does not satisfy your needs, you may look into available Kibana plugins that allow new visualizations (see the list of known plugins) or modify one of them to suite your needs.

3
  • Thanks for your answer, this doesn't exactly look like I wanted, but it's better than nothing. Is there any way I could hide the date on the Date Table visualization? Commented Aug 9, 2016 at 9:57
  • I was asking the same question from Elasticsearch team in the past. At that point of time the answer was "no". However, Kibana team was working on allowing custom visualizations. Google now tells me that it's possible to create custom kibana visualizations using plugins (example - logz.io/blog/kibana-visualizations), even though I haven't tried it myself
    – oldbam
    Commented Aug 9, 2016 at 10:05
  • updated answer with a link to known kibana visualization plugins
    – oldbam
    Commented Aug 9, 2016 at 10:11

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.