Local visualization time, independently from global dashboard time

[cff3]

Dear all,

I'm looking for two enhancements in Kibana4, both concerning "local" visualization time.

a) we want to set specific time (range, interval) for each visualization, independently from global dashboard time. Furthermore we want to specify not only one but multiple local time ranges for a visualization. These ranges should be selectable in the UI. Select one should show the time range on this visualization (only on this one). Example for ranges: Last 24 hours, Last 7 days, Last month.

b) we would like to fetch one search for multiple timeranges and show the results on one visualisation. For example to compare the values of the last 24 hours with the values from the week before.

Is this already possible and I don't see the obvious? If not, are there any plans to support something like this?

Thanks and regards
Christoph

[rashidkpc]

Not currently possible, but something we'd like todo. Part of the issue is that we need to divorce the aggregation scope from the query scope, and then re-inject everything but the time filter.

[cff3]

Hi,

thanks for the reply. We did something similar in Kibana 3. Maybe it could serve as a starting idea

We added a panel "Time" to the editor which allows the user to provide two sort of time specifications.

a) The first one serves to specify time ranges. It is also possible to specify that the ranges should be selectable in the UI

b) the second set of options allows the user to define comparisions by providing a time shift. In practice, this options turned out to be a bit too limiting. Sometimes it would be good to compare with more complex quries. For example to compare the last 24 hours to the average of the same weekday of the last three weeks. This is not possible with our solution. But it is at least a starting point.

[jakauppila]

+1

[sgmccli]

+1

[gairom]

+1

[vgross]

+1

[ghost]

+1

[fuzzyami]

+1

[avivl]

👍

[oryband]

👍

[bolshoy]

+1

[doodyparizada]

+1

[fuzzyami]

@cff3 - can you please specify the Kibana3 version that was used in the screenshots above? I'm not seeing that 'Time' panel in my Kibana 3.1.3 .

[cff3]

Dear Ami,

Unfortunately I took the screenshots from a local Kibana installation. The feature was never part of an official release

Von unterwegs gesendet

Am 25.10.2015 um 11:49 schrieb Ami Blonder [email protected]:

@cff3 - can you please specify the Kibana3 version that was used in the screenshots above? I'm not seeing that 'Time' panel in my Kibana 3.1.3 .

—
Reply to this email directly or view it on GitHub.

[liorama]

👍

[fuzzyami]

@cff3 thanks!

[sma530]

+1

[cessien]

+1

[duanguoxue]

+1

[djschny]

+1

[wkruse]

Create a new index pattern that is similar to the index pattern you're using with the other visualizations on the dashboard. But when you create this pattern make sure to leave "Index contains time-based events " unchecked. This will create an index pattern that is not associated to any time field (so the time filter will not be applied). Then when you create a new visualization, you can paste a json object with a range filter for the time period in the query bar. That will lock the visualization to a specific time range. When you add this new visualization to the dashboard it will ignore the global time filter.

A trick from @simianhacker

[aadiwarden]

+1

[howya]

• 1

[mrvincenzo]

+1

[woniuxia]

+1

[Eniqmatic]

+1

[gaby]

This issue has been open for 4 years...

+1

[jpressac]

+1

[ryanpagel]

+1 this would be really useful.

[flavianh]

+1

[thommiller]

Is this coming any time soon?

[lhoffbeck]

+1 I could really use this too. Any updates?

[stacey-gammon]

It's being worked on, though no ETA atm.

Related: #32371

[Smashmint]

+1

[rgmz]

+1

[piellick]

+10 :-D

[benjaminvanrenterghem]

This is still not a thing?

[gaby]

4 years... Still waiting for this simple feature, having a simple free SSO, lack of community dashboards, lack of tv/kiosk mode. 😅😬

[benjaminvanrenterghem]

Well, it is understandable that dashboards have a timeframe and you can set a fixed time there but it's rather annoying to have multiple dashboards / having to switch TF all the time for that reason

[zout]

+1

[stacey-gammon]

@cchaos - now that embeddables is getting closer, is it possible to start to work through some design mocks for this feature? Main concerns are:

• How will the user know that the time range is different
• Will we require the dashboard creator to add a few preconfigured times in edit mode, that are available in view mode, or will we implement a version where the time range can be manually set to anything in view mode and edit mode?
  • This is actually important because if we want the former, we have to wait for phase 2 of embeddables. If we can get away with the latter, we can do this on top of phase 1.

cc @AlonaNadler @lizozom

[simon-k]

Omg. this feature is essential. A bit dissapointed going from Splunk to ELK.

[AlonaNadler]

@simon-k there is a way to use the last bucket today when using the Visual Builder visualization, that way when you looking at for example at the last 7 days time range you can see a metric on the dashboard on the last day looking at it reports only the last bucket.

Sounds like this feature is very important to you, would you be willing to share how are you planning to use it?

[esfandani]

+1

[stacey-gammon]

Per panel time range is implemented as part of #43153

I've split out the part of this issue that was not covered in the above implementation here: #43300

Please comment or +1 the new issue if the above per panel time range implementation is not sufficient for your needs, so we can get an idea of how important having the time range "short cuts" are.

Thanks!