Tables are, and have been, a go-to method for displaying information in a readable and easy-to-understand way. Using the Time Series Visual Builder (TSVB) in Kibana, we can take this a step further by creating table visualizations that capitalize on time-series data and display the latest values of fields groups in the familiar, data table format. In this hands-on lab, we will leverage the TSVB to create data table visualizations with time series data.
Learning Objectives
Successfully complete this lab by achieving the following learning objectives:
- Create and Save the Top Clients Visualization
- Create a new table visualization with the TSVB.
- Group by the top 10 of
clientip
and label it as Client. - Calculate the number of events and label it as Requests.
- Calculate the sum of
bytes
, label it as Data, and format it as a bytes number. - Configure the visualization to show the entire time range.
- Save the visualization as "Top Clients".
- Create and Save the Top Operating Systems Visualization
- Create a new table visualization with the TSVB.
- Group by the top 10 of
machine.os.keyword
and label it as OS. - Calculate the number of events and label it as Requests.
- Calculate the cardinality of
clientip
and label it as Clients. - Configure the visualization to show the entire time range.
- Save the visualization as "Top Operating Systems".
- Create and Save the Top Request Paths Visualization
- Create a new table visualization with the TSVB.
- Group by the top 10 of
request.keyword
and label it as Request Path. - Calculate the number of events and label it as Requests.
- Calculate the cardinality of
clientip
and label it as Clients. - Calculate the sum of
bytes
, label it as Data, and format it as a bytes number. - Configure the visualization to show the entire time range.
- Save the visualization as "Top Request Paths".