过滤Kibana中的可视化指标

时间:2016-11-15 12:11:52

标签: json elasticsearch kibana-4

我正在尝试将过滤器应用于Kibana 4.5.1中的线条可视化。我有一个索引(xscores)有两种不同的类型(sd和sma),这是一个示例:

 {
        "_index": "xscore",
        "_type": "xscore",
        "_id": "AVgAejjHwGMH9TPDlF04",
        "_score": 1,
        "_source": {
           "id": "AVgAejjHwGMH9TPDlF04",
           "value": 0.019607843137254926,
           "timestamp": 1477476480000,
           "minutes": 1,
           "type": "sma"
        }

我试图通过在json框中添加过滤器来显示仅针对sma 的总和以及仅针对sd 平均值。但是我总是得到一个search_phase_execution_exception。这是Kibana发送给elasticsearch的代码:

  {"query": {
"filtered": {
  "query": {
    "query_string": {
      "analyze_wildcard": true,
      "query": "*"
    }
  },
  "filter": {
    "bool": {
      "must": [
        {
          "range": {
            "timestamp": {
              "gte": 1477436400000,
              "lte": 1477522799999,
              "format": "epoch_millis"
            }
          }
        }
      ],
      "must_not": [

      ]
    }
  }
}},"size": 0,"aggs": {
"3": {
  "date_histogram": {
    "field": "timestamp",
    "interval": "30m",
    "time_zone": "Europe\/London",
    "min_doc_count": 1,
    "extended_bounds": {
      "min": 1477436400000,
      "max": 1477522799999
    }
  },
  "aggs": {
    "4": {
      "terms": {
        "field": "type",
        "size": 5,
        "order": {
          "1": "desc"
        }
      },
      "aggs": {
        "1": {
          "avg": {
            "field": "value"
          }
        },
         "2": {
          "sum": {
            "field": "value",
            "filter": {
              "term": {
                "type": "sma"
              }
            }
          }
        }
      }
    }
  }
}}}

问题在于我认为的最后一个方面,但无法弄清楚到底出了什么问题。 在ES中运行相同的查询会返回以下错误:

"shard": 0,
        "index": "xscore",
        "node": "mszD3Y_4T-aGNEkVtt4BCg",
        "reason": {
           "type": "search_parse_exception",
           "reason": "Unexpected token START_OBJECT in [2]."

我在MacOS 10.10上使用ES 2.3和Kibana 4.5。

0 个答案:

没有答案