Kibana User Guide. Visualization. Part 5

A fifth of the translation of official data visualization documentation in Kibana.

Link to original material: Kibana User Guide [6.6] »Visualize

Link to Part 1: Kibana User Guide. Visualization. Part 1
Link to Part 2: Kibana User Guide. Visualization. Part 2
Link to Part 3: Kibana User Guide. Visualization. Part 3
Link to Part 4: Kibana User Guide. Visualization. Part 4

Content:

1. Tag clouds
2. Heatmap chart

Tag clouds

Visualization of the tag cloud displays a visual display of text data, typically using arbitrary forms to represent text. Tags are usually single words, the importance of each tag is displayed in font size or color.
The font size of each word is determined by the aggregation of metrics. The following aggregations are available for this scheme.
Metric Aggregations:

Count Count aggregation returns a net count of the elements in the selected index template.
Average This aggregation returns the average value over a numerical field. Select a field from the drop-down list.
Sum. Returns the total amount of a number field. Select a field from the drop-down list.
Min. Returns the minimum value by a numeric field. Select a field from the drop-down list.
Max Returns the maximum value by a numeric field. Select a field from the drop-down list.
Unique Count. Cardinal aggregation returns the number of unique values ​​in a field. Select a field from the drop-down list.
Standard Deviation.Aggregation of general statistics returns the standard deviation of data in a numeric field. Select a field from the drop-down list.
Top hit. Aggregation of top values ​​returns one or more top values ​​from a special field in your document. Select a field from the drop-down list, type of sorting of documents, number of values ​​to be returned.
Percentiles. Percentage aggregation divides the values ​​of a number field into specified ranges. Select a field from the drop-down list, then define one or more areas in the Percentiles fields . Click X to remove the percent field. Click + Add to add a percentage field.
Percentile Rank.Percentage aggregation returns the percentage ranking for the selected number field. Select a field from the drop-down list, then specify one or more values ​​of the percentage rank in the Values fields . Click X to delete the value field. Click + Add to add a value field.

Aggregations of the parent data sources:
For each aggregation of the parent information source, you must determine the metric for which the aggregation is calculated. This may be one of the existing metrics or a new one. You can also invest in these aggregations (for example, to get a third derivative).

Derivative. Derivative aggregation counts the derivative of certain metrics.
Cumulative sum. The cumulative aggregation aggregates the cumulative sum of certain metrics in the parent histogram.
Moving Average. Moving average aggregation will insert a window through the data and write the average value of this window.
Serial Diff. Sequential differentiation is a method where values ​​in a time series are subtracted from themselves in another time period or delay.

Aggregations of a related source:
As in the case of aggregations of parent sources, you need to specify the metric by which the aggregation of a related source will be calculated. In addition, you need to provide for segment aggregation, which will determine on which segments the aggregation will start.

Average bucket The segment average calculates the average of certain metrics in the aggregation of related sources.
Sum Bucket Calculates the sum of the values ​​of a specific metric in the aggregation of a related source.
Min Bucket Returns the minimum value of a specific metric in an aggregation of a related source.
Max bucket Returns the maximum value of a specific metric in an aggregation of a related source.

You can create aggregation by clicking on the + Add Metrics button .
Enter a string in the Custom Label field to change the signature.
Segment aggregations determine what information will be retrieved from your data.
Before you select segment aggregation, select the Split Tags option .
You can specify the following segment aggregations to render a tag cloud:

Terms. Aggregating values ​​allows you to define the top or bottom n elements of a given field to display, sorted by quantity or user metric.

You can click on the Advanced link to display more options for your metrics or segment aggregation:

JSON Input. A text box where you can add specific properties in JSON format to merge with a specific aggregation, as in the following example:

{ "script" : "doc['grade'].value * 1.2" }

Note. In Elasticsearch 1.4.3 and later, this functionality needs Groovy dynamic scripting enabled .
Select the Options tab to change the following aspects of the diagram:

Text Scale. You can choose linear, logarithmic or quadratic scales for the scale of the text. A logarithmic scale is used to display data that varies exponentially or quadratically to order the display of data with variables, which vary greatly.
Orientation. You can choose the orientation of your text in the tag cloud. There are several options: single, 90 degree rotation, scatter.
Font Size. Allows you to set the minimum and maximum font size for use with this visualization.

Heatmap chart

A heatmap is a graphical representation of data where individual values ​​are contained in a matrix and represented by colors. The color of each matrix position is determined by the aggregation of metrics. The following aggregations are available for this scheme:
Metric aggregations:

Count Count aggregation returns a net count of the elements in the selected index template.
Average This aggregation returns the average value over a numerical field. Select a field from the drop-down list.
Sum. Returns the total amount of a number field. Select a field from the drop-down list.
Min. Returns the minimum value by a numeric field. Select a field from the drop-down list.
Max Returns the maximum value by a numeric field. Select a field from the drop-down list.
Unique Count. Cardinal aggregation returns the number of unique values ​​in a field. Select a field from the drop-down list.
Standard Deviation.Aggregation of general statistics returns the standard deviation of data in a numeric field. Select a field from the drop-down list.
Top hit. Aggregation of top values ​​returns one or more top values ​​from a special field in your document. Select a field from the drop-down list, type of sorting of documents, number of values ​​to be returned.
Percentiles. Percentage aggregation divides the values ​​of a number field into specified ranges. Select a field from the drop-down list, then define one or more areas in the Percentiles fields . Click X to remove the percent field. Click + Add to add a percentage field.
Percentile Rank.Percentage aggregation returns the percentage ranking for the selected number field. Select a field from the drop-down list, then specify one or more values ​​of the percentage rank in the Values fields . Click X to delete the value field. Click + Add to add a value field.

Aggregations of the parent data sources:
For each aggregation of the parent information source, you must determine the metric for which the aggregation is calculated. This may be one of the existing metrics or a new one. You can also invest in these aggregations (for example, to get a third derivative).

Derivative. Derivative aggregation counts the derivative of certain metrics.
Cumulative sum. The cumulative aggregation aggregates the cumulative sum of certain metrics in the parent histogram.
Moving Average. Moving average aggregation will insert a window through the data and write the average value of this window.
Serial Diff. Sequential differentiation is a method where values ​​in a time series are subtracted from themselves in another time period or delay.

Aggregations of a related source:
As in the case of aggregations of parent sources, you need to specify the metric by which the aggregation of a related source will be calculated. In addition, you need to provide for segment aggregation, which will determine on which segments the aggregation will start.

Average bucket The segment average calculates the average of certain metrics in the aggregation of related sources.
Sum Bucket Calculates the sum of the values ​​of a specific metric in the aggregation of a related source.
Min Bucket Returns the minimum value of a specific metric in an aggregation of a related source.
Max bucket Returns the maximum value of a specific metric in an aggregation of a related source.

You can create aggregation by clicking on the + Add Metrics button .
Enter a string in the Custom Label field to change the signature.
Segment aggregations determine what information will be retrieved from your data.

Before you select segment aggregation, specify whether you are separating segments for the X or Y axes within the same diagram or splitting into several diagrams. Separation into several schemes should be performed before any other aggregations. When you split a chart, you can change if the splits are displayed in a row or column by clicking the Rows | The Columns .
The X and Y axes of this diagram support the following aggregations:

Date Histogram. The temporary histogram is built on the basis of a numerical field and is organized by date. You can define time frames for intervals in seconds, minutes, hours, days, weeks, months, or years. You can also define the default interval by selecting Custom as the interval and specifying the number and unit of time in the text box. The default time interval units are: s for seconds, m for minutes, h for hours, d for days, w for weeks, yfor years. Different units support different levels of accuracy, up to one second. Intervals are signed at the beginning of the interval using the date key that is returned from Elasticsearch. For example, the tooltip for the monthly interval will display the first day of the month.
Histogram. The standard histogram is built on the basis of a numerical field. Define an integer interval for this field. Select the Show empty buckets check box to include empty spacing in the histogram.
Range With the help of rank aggregation, you can define the ranks for the values ​​of a number field. Click Add Range to add a set of rank endpoints. Click the red symbol (x) to remove the rank.
Date Range Aggregation of the time rank reports values ​​that are in the specified date range. You can specify date ranges using mathematical date expressions. Click Add Range to add a set of rank endpoints. Click the red symbol (x) to remove the rank.
IPv4 Range. IPv4 rank aggregation allows you to define ranges of IPv4 addresses. Click Add Range to add a set of rank endpoints. Click the red symbol (x) to remove the rank.
Terms. Aggregating values ​​allows you to define the top or bottom n elements of a given field to display, sorted by quantity or user metric.
Filters.You can define a set of filters for data. It is possible to specify the filter as a query string or in JSON format, as well as in the Discover search tab. Click Add Filter to add another filter. Click the label button to open the signature field where you can type a name for display on the visualization.
Significant Terms. Displays the results of experimental aggregation of signed values.

Enter a string in the Custom Label field to change the signature.
You can click on the Advanced link to display more options for your metrics or segment aggregation:

Exclude Pattern. Specify a template in this field to exclude from the results.
Include Pattern. Specify a template in this field to include in the results.
JSON Input. A text box where you can add specific properties in JSON format to merge with a specific aggregation, as in the following example:

{ "script" : "doc['grade'].value * 1.2" }

The availability of these options depends on the aggregation you select.
Select the Options tab to change the following aspects of the scheme:

Show Tooltips. Check the box to enable prompt output.
Highlight. Check the box to enable highlighting of elements with the same captions.
Legend Position. You can choose where the map legend will be located (top, left, right, bottom).
Color Schema. You can select an existing color scheme or go to settings and define your own colors in the legend.
Reverse Color Schema. Checking this box inverts the color scheme.
Color Scale. You can choose between linear, logarithmic and quadratic scales for the color scale.
Scale to Data Bounds.By default, the borders of the Y axis are zero and the maximum value from the data. Check the box to change the upper and lower bounds according to the values ​​of the selected data.
Number of Colors. The number of color segments to create. Minimum 2, maximum 10.
Percentage Mode. Enabling this will show the legend of percentile values.
Custom Range. You can define your own ranges for color segments. For each color segment, you must define the minimum value (inclusive) and the maximum value (exclusively) of the range.
Show Label. Shows signatures with cell values ​​in each cell.
Rotate Allows you to wrap the signature of cell values ​​90 degrees.

Sixth part