Kibana and groovy scripting -

-

i looking way calculate ratio on kibana. after many researches found way : using "json input" feature in visualisation.

i have informations in index, 2 types of documents (boots , reboots). i looking script count number of documents type boots, same reboots type divide second first. sounds easy, not find way after researches, , not used groovy enough yet myself.

i found many ways manipulate documents values (doc['mydocname'].values etc), nothing type.

thanks in advance.

edit : tried this

{ "aggs" : {     "boots_count" : { "value_count" : { "_type" : "boots" } } }

} supposed count number of fields (here field _type) in index. when put "json input" in visualisation, results in error :

error: request elasticsearch failed: {"error":"searchphaseexecutionexception[failed execute phase [query], shards failed; shardfailures {[bbxj0o6trxa_ocybfycgjq][informationbe][0]: searchparseexception[[informationbe][0]: from[-1],size[0]: parse failure [failed parse source [{\"size\":0,\"aggs\":{\"2\":{\"terms\":{\"field\":\"@siteposte\",\"size\":5,\"order\":{\"1\":\"desc\"}},\"aggs\":{\"1\":{\"avg\":{\"script\":\"0\",\"lang\":\"expression\",\"ratio\":{\"boots_count\":{\"value_count\":{\"_type\":\"boots\"}}}}}}}}

i wrong. ?

edit2 : in other hand, trying scripted fields, using lucene expression :

doc['_type:boots'].count / doc['_type:reboots'].count

but doesnt work more, pretty confident "doc['_type:boots']" part, guess problem on "xxx.count" part.

after many attempts, understand better , better how works. default scripted fields scope on document, not on whole index, cant count action of whole values of index documents in it. looking workaround, i'll post it if find interesting.

i solved problem :

i added scripted field, if type of document boots, scripted field = 1, else 0. created search boots , reboots documents (filter _type:boots _type:reboots) , calculated average of scripted field in metric.

everything works !


Comments

Post a Comment

Popular posts from this blog

qt - Using float or double for own QML classes -

-
i've created components , helper methods using c++ , qt used in qml gui. of methods calculate gui elements (size, transformations, scene graph items creation). target arm 32 bit using opengl / eglfs render output. opengl using float , qml using real (defined double ). what should use in c++ do not lose precision? if use qreal ( double ) shouldn't lose precision. if git grep float in qtbase.git , can find out bit more: dist/changes-5.2.0-**************************************************************************** dist/changes-5.2.0-* important behavior changes * dist/changes-5.2.0-**************************************************************************** dist/changes-5.2.0- dist/changes-5.2.0- - qt compiled qreal typedef'ed double on dist/changes-5.2.0: platforms. qreal float on arm chipsets before. guarantees more dist/changes-5.2.0- consistent behavior between platforms qt supports, binary dist/chan...
Read more

Create Outlook appointment via C# .Net -

-
i need create outlook appointment using microsoft.office.interop.outlook , while can work locally on own workstation , works if run web application via server's browser, not work when connect server externally. hence, think might permission issue. i changed application pool identity " localsystem " don't access denied error. unfortunately, doesn't work. the app behaves if appointment created, appointment doesn't appear in outlook. here include file on top of aspx.cs page using outlook = microsoft.office.interop.outlook; here code using pop appointment. outlook.application apptapp = new outlook.application(); outlook.appointmentitem appt = apptapp.createitem(outlook.olitemtype.olappointmentitem) outlook.appointmentitem; appt.subject = txtfirstname.text + " " + txtlastname.text; appt.body = txtcomment.text; appt.alldayevent = false; appt.start = datetime.parse(txtreminderdate.text + " 8:00 am"); appt.end = datetime.p...
Read more

ios - Swift Array Resetting Itself -

-
i have 2 arrays: pointhistory , datehistory . have nstimer , , when timer runs out, action called. in action appending int pointhistory , , current date string datehistory . here timer action: func timeraction() { let steppervalue = int(stepper.value) employee.numberofpoints = steppervalue networking.saveemployee(employee, completion: { (error) -> void in if error != nil { let alert = uialertcontroller(title: "error", message: "there error updating \(self.employee.name)'s points", preferredstyle: .alert) let alertaction = uialertaction(title: "ok", style: .cancel, handler: nil) alert.addaction(alertaction) self.presentviewcontroller(alert, animated: true, completion: nil) } }) var dateformatter = nsdateformatter() dateformatter.dateformat = "mm-dd-yyyy" dateformatter.timezone = nstimezone.localtimezone() var date = nsdate() var ...
Read more