我有来自日志的数据,如下所示:
{
"_index": "XXXXX",
"_type": "XXXXX",
"_id": "XXXXX",
"_score": null,
"_source": {
......
"@timestamp": "2016-07-14T08:57:07.971Z",
"ServerId": "4dc8-b7fa-8bcf319",
"PacketsTotal": 173,
"PacketsSuccess": 173,
"PacketsFailed": 0,
"FramesTotal": 4148,
"FramesSuccess": 4145,
"FramesFailed": 3,
"DurationSeconds": 56
},
"fields": {
"StartTime": [
...
],
"@timestamp": [
...
],
"EndTime": [
...
],
"CreateDate": [
...
],
"LastUpdateDate": [
...
]
},
"sort": [
...
]
}
现在我想创建一个饼图,可视化数据包和帧,其中图表的切片将是PacketsSuccess,PacketsFailed,FramesSuccess,FramesSuccess。这可行吗?如果是的话,怎么样?
非常感谢。
答案 0 :(得分:1)
目前看来,Kibana并不像那样工作,因为它希望从单个领域的桶中创建馅饼。不过,我提出了这个问题:https://github.com/elastic/kibana/issues/8143