Search code examples
elasticsearchvisualizationkibanakibana-4metric

Visualizing a single string of text in Kibana


In Kibana, I have an index that looks like as follows

  • type (String)
  • value (String)
  • timestamp (Date)

I would like to have a visualization that shows the most recent value field where the type is equal to "battery", for example.

I would like the visualization to be similar to the "Metric" one, but displaying a string of text instead of a number, of course.

Is this possible with Kibana? If not, how can I get a similar result?


Solution

  • You can use a Data Table visualization.

    In the search query you would specify type: "Battery"

    In the metric section you would specify Max timestamp

    In the Split Rows section you would specify Aggregation=Terms, Field=value, OrderBy=metric:Max timestamp, Order=descending, Size=1

    You will have a result that is a table with 1 row and 2 columns, one of which being a value and the other a timestamp

    If this does not satisfy your needs, you may look into available Kibana plugins that allow new visualizations (see the list of known plugins) or modify one of them to suite your needs.