Timelion Exercise

  • Access Kibana user interface with browser: http://domain-name:5601/
  • Select Timelion on the left hand navigation bar
  • Switch to full screen using the icon on the chart
  • In the formula area type: .es(*)
  • Select time range of last 5 years
  • Select play button to update the presentation to present a typical time-series chart
  • Zoom-in to more active time period of the chart before next steps
  • In the formula area extend the expression to .es(*).derivative()
  • Select '1h' for the time interval from drop-down list
  • And select the play button again - variation for number of events on hourly basis will be presented
  • Modify the formula: .es(*), .es(*,offset=-1h) to compare count of events to previous hour and select play button
  • Add some custom color to the time series: .es(*), .es(*,offset=-1h).color(yellow) and select play button
  • Convert line to bars: .es(*), .es(*,offset=-1h).bars().color(yellow) and select play button again
  • Add secondary data source to correlate number of events in log files to population of Israel: .es(*).bars(), .wbi(country=ISR).divide(100000)
  • Adding another metric to the chart: .es(), .es(metric=max:memory).divide(100)
  • You are getting the rough idea of a potential...

results matching ""

    No results matching ""