Grafana8.2.0 elasticserach histogram work inconsistent with kibana result - elasticsearch

Grafana version: 8.2.0. Start server by docker.
I want to achieve x_axis: point value interval by 500 , y_axis: unique count device id.
Implement with kibana like this.
Use same method in grafana. I got this. Aggregation result is error.
Row data format:
So how can I implement in grafana like kibana visualization?

Related

Grafana and Elasticsearch: How to perform a simple query

Using Grafana 7.2 and Elasticsearch 7.5.1.
I am storing in Elasticsearch a structure that, among other things, indexes an executionTime field in milliseconds:
Using Grafana, how do I filter by that field? So I can get only values with executionTime < 150, for example.
Something like this is not working:
Something like this is not working either:
Any idea?
Found!
As setted in official Grafana documentation, Lucene queries can be used in the query field.

Elasticsearch and Kibana: aggregation to find the name of the most rewarded miner, daily

I created an index from a Storm topology to ElasticSearch (ES). The index map is basically:
index: btc-block
miner: text
reward: double
datetime: date
From those documents I would like to create a histogram of the richest miner, on a daily scale.
I am wondering if I should aggregate first in storm and just use ES and Kibana to store, query and then display the data or if ES and Kibana can handle such requests.
I have been looking at the Transforms, in the index management section, that allows to create new indices from queries and aggregations in continuous modes but I can't succeed to get to the expected result.
Any help will be appreciated.
Sometimes we need to ask a question to find the answer...
I kept looking at the documentation and eventually I could solve the issue by using a sibling pipeline aggregation, in the visualization. In my case, a max bucket aggregation of the sum of reward on Y-axis.
In that case get like 6 records/hour so I guess it's ok to let Kibana and ES work. What if I got lot more data? Would it not be wiser to aggregate in Storm?

Is it possible to write a aggregation query in Dev Tools of Kibana and then store the result?

I have a field in elastic search loaded that has information in it as:
message: Requesting 30 containers
message: Requesting 40 containers
.
.
.
message: Requesting 50 containers
I want to get a total of all containers used in the job. (30+40+50=120, in this case).
Is it more efficient to extract these values in a field in logstash and then use aggregation queries in elasticsearch or given the message above everything is possible in elasticsearch?
Also, if I write a aggregation query in Dev Tools of Kibana, then is it possible to store the result to be used for visualization?
It is better and is the solution to extract the number in logstash and then use it in aggregations
No , You cant use a string in sum aggregation , Everything is never possible
You dont need you write aggregation query in dev tools if you are using kibana , in kibana you can do aggregations without writing queries

ELK stack - Lucene issue with query

I am trying to have this data in Kibana and Grafana.
I have got this query:
type:one AND ManagedBy:two AND (table:three OR table:four) AND NOT status:five
I use this same option - unique count in Kibana and also in Grafana.
Results:
Kibana: 5140
Grafana: 2611
Why? I have got this same timeframe also for "Today".
I see that in Grafana I have results only from "table:three". So something should be wrong with this query.
Any ideas?

How to display values with decimal places in Grafana with elasticsearch datasource?

I am trying to visualize time series data stored in elastic search using grafana.
I have the legend setup to show 2 decimal places but it does not reflect in the UI.
The decimal places show up for other dashboard panels with a tsdb datasource. So this issue is specific to using grafana with elasticsearch. Is there any other configuration setup I am missing here which will help me achieve this?
Just found out that elastic search does not allow displaying values without some sort of aggregation and in my case aggregation is resulting in values getting rounded.
There was a related request which seemed to not get much traction in kibana.
https://github.com/elastic/kibana/issues/3572
In short not feasible as of [2.x] elastic search.

Resources