Aggregation-based

edit

Aggregation-based visualizations are the core Kibana panels, and are not optimized for a specific use case.

Types of aggregation-based visualizations

edit

Kibana supports the following types of aggregation-based visualizations.

Area

Displays data points, connected by a line, where the area between the line and axes are shaded. Use area charts to compare two or more categories over time, and display the magnitude of trends.

Area chart

Data table

Displays your aggregation results in a tabular format. Use data tables to display server configuration details, track counts, min, or max values for a specific field, and monitor the status of key services.

Data table

Gauge

Displays your data along a scale that changes color according to where your data falls on the expected scale. Use the gauge to show how metric values relate to reference threshold values, or determine how a specified field is performing versus how it is expected to perform.

Gauge

Goal

Displays how your metric progresses toward a fixed goal. Use the goal to display an easy to read visual of the status of your goal progression.

Goal

Heat map

Displays graphical representations of data where the individual values are represented by colors. Use heat maps when your data set includes categorical data. For example, use a heat map to see the flights of origin countries compared to destination countries using the sample flight data.

Heat map

Horizontal Bar

Displays bars side-by-side where each bar represents a category. Use bar charts to compare data across a large number of categories, display data that includes categories with negative values, and easily identify the categories that represent the highest and lowest values. Kibana also supports vertical bar charts.

Bar chart

Line

Displays data points that are connected by a line. Use line charts to visualize a sequence of values, discover trends over time, and forecast future values.

Line chart

Metric

Displays a single numeric value for an aggregation. Use the metric visualization when you have a numeric value that is powerful enough to tell a story about your data.

Metric

Pie

Displays slices that represent a data category, where the slice size is proportional to the quantity it represents. Use pie charts to show comparisons between multiple categories, illustrate the dominance of one category over others, and show percentage or proportional data.

Pie chart

Tag cloud

Graphical representations of how frequently a word appears in the source text. Use tag clouds to easily produce a summary of large documents and create visual art for a specific topic.

Tag cloud

Create an aggregation-based visualization panel

edit

Choose the type of visualization you want to create, then use the editor to configure the options.

  1. From the dashboard, click Create panel, then click Aggregation based on the New visualization window.

    1. Click the type of visualization you want to create.
    2. Select the data source you want to visualize.

      There is no performance impact on the data source you select. For example, Discover saved searches perform the same as data views.

  2. From the editor, add the aggregations you want to visualize, then click Update.

    For the Date Histogram to use an auto interval, the date field must match the primary time field of the index pattern.

  3. To change the order, drag the aggregations along the editor.

    Option to change the order of aggregations

  4. To customize the series colors, click the series in the legend, then select the color you want to use.

    Color picker

Try it: Create an aggregation-based bar chart

edit

You collected data from your web server, and you want to visualize and analyze the data on a dashboard. To create a dashboard panel of the data, create a bar chart that displays the top five log traffic sources for every three hours.

Add the data and create the dashboard
edit

Add the sample web logs data that you’ll use to create the bar chart, then create the dashboard.

  1. From the Home page, click Try our sample data.
  2. From Sample web logs, click Add data.
  3. Open the main menu, then click Dashboard.
  4. On the Dashboards page, click Create dashboard.
Open and set up the aggregation-based bar chart
edit

Open the bar chart visualization builder and change the time range.

  1. On the dashboard, click Create panel.
  2. On the New visualization window, click Aggregation based > Vertical bar.
  3. On the Choose a source window, click kibana_sample_data_logs.
  4. Change the time filter> to Last 7 days.
Create the bar chart
edit

To create the bar chart, add a bucket aggregation, then add the terms sub-aggregation to display the top values.

  1. Add a Buckets aggregation.

    1. Click Add, then select X-axis.
    2. From the Aggregation dropdown, select Date Histogram.
    3. Click Update.

      Bar chart with sample logs data

  2. To show the top five log traffic sources, add a sub-bucket aggregation.

    1. Click Add, then select Split series.

      Aggregation-based panels support a maximum of three Split series.

    2. From the Sub aggregation dropdown, select Terms.
    3. From the Field dropdown, select geo.src.
    4. Click Update.

      Bar chart with sample logs data

Save the panel
edit

Save and add the visualization panel to the dashboard.

  1. From the toolbar, click Save.
  2. Enter the Title and optional Description.
  3. From the Tags drop down, select any applicable tags.
  4. Select Add to Dashboard after saving.
  5. Click Save and return.