Book Image

Mastering Kibana 6.x

Book Image

Mastering Kibana 6.x

Overview of this book

Kibana is one of the popular tools among data enthusiasts for slicing and dicing large datasets and uncovering Business Intelligence (BI) with the help of its rich and powerful visualizations. To begin with, Mastering Kibana 6.x quickly introduces you to the features of Kibana 6.x, before teaching you how to create smart dashboards in no time. You will explore metric analytics and graph exploration, followed by understanding how to quickly customize Kibana dashboards. In addition to this, you will learn advanced analytics such as maps, hits, and list analytics. All this will help you enhance your skills in running and comparing multiple queries and filters, influencing your data visualization skills at scale. With Kibana’s Timelion feature, you can analyze time series data with histograms and stats analytics. By the end of this book, you will have created a speedy machine learning job using X-Pack capabilities.
Table of Contents (21 chapters)
Title Page
Copyright and Credits
Packt Upsell
Contributors
Preface
Index

Picking the right time filter field


We created the index pattern in Kibana to access Elasticsearch index data, and during index pattern creation, we will need to provide the timestamp field using which we can apply time-based filters and manipulations in Kibana. In any document, we can have multiple timestamp fields, so it is quite important to pick the right field.

The following screenshot shows the time filter field name selection screen where we select the field using the drop-down option. The time filter field is basically used to apply a time filter on different options of Kibana such as Visualize, Discover, Timelion, or Dashboard.

For example, consider that we have year-wise population data and different date fields, such as the population capture date, create_at, and update_at field in that data. Now, if we need to filter the data on the basis of population capture year, then we should pick capture date as the default time filter field, as this may help us to apply the time filter directly...