Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[7.3] [DOCS] Clarify TSVB support rollups (#54417) #54621

Merged
merged 1 commit into from
Jan 13, 2020
Merged

[7.3] [DOCS] Clarify TSVB support rollups (#54417) #54621

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
35 changes: 17 additions & 18 deletions docs/visualize/visualize_rollup_data.asciidoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,41 +4,40 @@

beta[]

You can visualize your rolled up data in a variety of charts, tables, maps, and
more. Most visualizations support rolled up data, with the exception of
Timelion, TSVB, and Vega visualizations.
You can visualize your rolled up data in a variety of charts, tables, maps, and
more. Most visualizations support rolled up data, with the exception of
Timelion and Vega visualizations.

To get started, go to *Management > Kibana > Index patterns.*
If a rollup index is detected in the cluster, *Create index pattern*
includes an item for creating a rollup index pattern.
To get started, go to *Management > Kibana > Index patterns.*
If a rollup index is detected in the cluster, *Create index pattern*
includes an item for creating a rollup index pattern.

[role="screenshot"]
image::images/management_create_rollup_menu.png[Create index pattern menu]

You can match an index pattern to only rolled up data, or mix both rolled up
and raw data to visualize all data together. An index pattern can match only one
rolled up index, not multiple. There is no restriction on the number of standard
indices that an index pattern can match. When matching multiple indices,
use a comma to separate the names, with no space after the comma.
and raw data to visualize all data together. An index pattern can match only one
rolled up index, not multiple. There is no restriction on the number of standard
indices that an index pattern can match. When matching multiple indices,
use a comma to separate the names, with no space after the comma.

Keep the following in mind when creating a visualization from rolled up data:

* The data in a rollup index only has summarized metrics for specific fields.
You can’t search any other field from the original raw data.
* Data is summarized into time buckets that might be split into sub buckets for
numeric field values or terms. You can ask for a time aggregation that takes
several time buckets and combines them to lower granularity. For example,
* The data in a rollup index only has summarized metrics for specific fields.
You can’t search any other field from the original raw data.
* Data is summarized into time buckets that might be split into sub buckets for
numeric field values or terms. You can ask for a time aggregation that takes
several time buckets and combines them to lower granularity. For example,
if the rollup job was aggregated by hours, you can ask for buckets of days.

The following visualization of rolled up data shows the date histogram
The following visualization of rolled up data shows the date histogram
interval multiple and the limited metrics aggregations.

[role="screenshot"]
image::images/management_rollups_visualization.png[][Rollups in visualizations]

Dashboards can have a mixture of rollup visualizations and regular visualizations,
Dashboards can have a mixture of rollup visualizations and regular visualizations,
as shown in the following figure. Note that not all queries and filters support rollups.

[role="screenshot"]
image::images/management_rolled_dashboard.png[][Rollups in dashboards]