Kibana User Guide [4.2] » Visualize

Visualize

可视化

You can use the Visualize page
to design data visualizations. You can save these visualizations, use them individually, or combine visualizations into a dashboard.
A visualization can be based on one of the following data source types:

你可以使用可视化页面来设计数据可视化结果。你可以爆粗这些结果，独自使用它们，或者把它们在仪表盘里比较。一个可视化结果可以基于下面数据源类型的一种。

A new interactive search

一个新的页面搜索

A saved search

一个保存的搜索

An existing saved visualization

一个已经存在的保存的可视化结果

Visualizations are based on the aggregation feature
introduced in Elasticsearch 1.x.

可视化是基于ES1.x版本以后的聚合特性。

Creating
a New Visualization

创建一个新的可视化结果

To start the New Visualization wizard, click on the Visualize tab
at the top left of the page. If you are already creating a visualization, you can click the New
Visualization button

in
the toolbar to the right of the search bar. The wizard guides you through the following steps:

方法，点击页面左上方的Visualize标签。如果你准备好创建一个可视化结果了，你可以点击搜索条右边的New
Visualization按钮。你可以通过下面的向导来进行：

Step
1: Choose the Visualization Type 选择类型

Choose a visualization type when you start the New Visualization wizard:开始新的可视化向导，选择类型：

Area chart 面积图	Use area charts to visualize the total contribution of several different series. 使用面积图来可视化各种不同类型的总作用
Data table 数据表	Use data tables to display the raw data of a composed aggregation. You can display the data table for several other visualizations by clicking at the bottom of the visualization. 使用数据表来展示组合聚集的原始数据。你可以通过点击可视化结果的底部，为一些其他可视化展示数据表。
Line chart 线图	Use line charts to compare different series. 用来比较不同的类型
Markdown widget 降价窗口	Use the Markdown widget to display free-form information or instructions about your dashboard. 使用降价窗口，来展现自由形态的数据，或你的仪表盘的命令。
Metric 度量标准	Use the metric visualization to display a single number on your dashboard. 在你的仪表盘上，可视化和展现单一的数据
Pie chart 饼图	Use pie charts to display each source’s contribution to a total. 展示总计中，每个资源的贡献。
Tile map 地图	Use tile maps to associate the results of an aggregation with geographic points. 联合地理点聚集的结果
Vertical bar chart 垂直条状图	Use vertical bar charts as a general-purpose chart. 作为总体目标表

You can also load a saved visualization that you created earlier. The saved visualization selector includes a text field to filter by visualization name and a link to the Object Editor, accessible through Settings
> Edit Saved Objects, to manage your saved visualizations.

你也可以加载以前创建的可视化结果。它的选择器包括一个文本字段来通过可视化结果的名字和Object Editor的链接过滤，可以通过Settings
> Edit Saved Objects管理保存的结果。

If your new visualization is a Markdown widget, selecting that type takes you to a text entry field where you enter the text to display in the widget. For all other types of visualization, selecting the type takes you to data source selection.

如果你的新可视化结果是降价窗口（Markdown widget），选择那种类型把你带到一个文本输入字段，在那里，你可以输入字段在窗口展现。对于其它字段的可视化，选择类型把你带到数据资源的选择。

Step
2: Choose a Data Source 选择一个数据资源

You can choose a new or saved search to serve as the data source for your visualization. Searches are associated with an index or a set of indexes. When you select new
search on a system with multiple indices configured, select an index pattern from the drop-down to bring up the visualization editor.

可以新加的或已有的数据资源作为你的可视化结果。搜索过程需要一个索引或一些列索引。当你选择系统上参考许多指数的新索引，从下拉列表选择一个索引模式，产生新的可视化编辑器。

When you create a visualization from a saved search and save the visualization, the search is tied to the visualization. When you make changes to the search that is linked to the visualization, the visualization updates automatically.

当你从一个保存的搜索来创建可视化结果，并保存可视化结果，搜索将被链接到可视化结果。当你的搜索修改了可视化结果时，可视化结果也会自动更新。

Step
3: The Visualization Editor 可视化编辑器

The visualization editor enables you to configure and edit visualizations. The visualization editor has the following main elements:

可视化编辑器保证你能够编辑可视化结果，它有以下的主要元素：

Toolbar 工具条

Aggregation
Builder 聚合生成器

Preview
Canvas 预览画面

Automatically Refreshing the Page

自动刷新页面

You can configure a refresh interval to automatically refresh the page with the latest index data. This periodically resubmits the search query.

你可以确定一个刷新间隔来自动刷新页面，显示最新的信息。这会周期性地重发搜索请求。

When a refresh interval is set, it is displayed to the left of the Time Filter in the menu bar.

当一个刷新间隔被设置后，它在菜单栏中Time
Filter的左侧被展现。

To set the refresh interval:

怎样设置刷新间隔

Click the Time
Filter

in
the upper right corner of the menu bar. 点按钮

Click the Refresh
Interval tab. 点刷新间隔标签

Choose a refresh interval from the list. 从列表中选择一个刷新时间

To automatically refresh the data, click the

Auto-refresh button
and select an autorefresh interval:

为了周期性刷新数据，点击Auto-refresh按钮选择一个自动刷新间隔：

When auto-refresh is enabled, Kibana’s top bar displays a pause button and the auto-refresh interval:

.
Click the Pause button
to pause auto-refresh.

当自动刷新设置好后，Kibana的顶部条看起来像这样

，点击Pause按钮来终端自动刷新。


Toolbar
工具栏



The toolbar has a search field for interactive data searches, as well as controls to manage saving and loading visualizations. For visualizations based on saved searches, the search bar is grayed out. To edit the search, replacing the saved search with the
edited version, double-click the search field.

工具栏有对每个交互数据搜索的搜索域，也控制保存和加载可视化。对于已经保存搜素的可视化，搜索条是灰色的。为了编辑搜索，用编辑的版本代替已经保存的版本，双击搜索域。

The toolbar at the right of the search box has buttons for creating new visualizations, saving the current visualization, loading an existing visualization, sharing or embedding the visualization, and refreshing the data for the current visualization.

搜索栏右边的工具栏，有按钮来创建新的可视化，保存现有的可视化，加载已有的可视化，分享和嵌入可视化，为当前的可视化刷新数据。

Aggregation
Builder 聚合生成器



Use the aggregation builder on the left of the page to configure the metric and bucket aggregations
used in your visualization. Buckets are analogous to SQL

GROUP
BY

statements. For more information on aggregations, see the main Elasticsearch

使用页面左边的聚合生成器，来配置你可视化中的metric 和 bucket聚集。 Buckets
和SQL相似，按表现分组。对于更多关于聚合的信息，可以查看：Elasticsearch。

aggregations
reference. 聚合参考

Bar, line, or area chart visualizations use metrics for
the y-axis and buckets are
used for the x-axis, segment bar colors, and row/column splits. For pie charts, use the metric for the slice size and the bucket for the number of slices.

条，线或域表的可视化为了Y轴使用metrics。而buckets用于X轴，元素条颜色，条/柱分裂。对于饼图，使用metric作为切片大小，bucket作为切片的数量。

Choose the metric aggregation for your visualization’s Y axis, such as count, average, sum, min, max,
orcardinality (unique
count). Use bucket aggregations for the visualization’s X axis, color slices, and row/column splits. Common bucket aggregations include date histogram, range, terms, filters, and significant terms.

选择度量聚集作为你可视化的Y轴，例如 count, average, sum, min, max,
或cardinality （单独计数）。使用bucket聚集作为你可视化的X轴，颜色分片，行/柱分割。一般的 bucket
聚集包括date histogram, range, terms, filters, 和 significant terms。

You can set the order in which buckets execute. In Elasticsearch, the first aggregation determines the data set for any subsequent aggregations. The following example involves a date bar chart of Web page hits for the top 5 file extensions.

你可以为buckets 执行设置顺序。在ES中，第一个聚合为任何附属的聚合决定了数据集。在后来的例子中，包含一个Web页面的日期条，它符合排名前五的文件扩展。

To use the same extension across all hits, set this order:

为了在这里使用同样的扩展，你可以看下面：

Color: Terms
aggregation of extensions 颜色：条件聚集的扩展

X-Axis: Date
bar chart of

@timestamp
X轴：@timestamp的日期条表

Elasticsearch collects the records for the top 5 extensions, then creates a date bar chart for each extension.

ES收集前五扩展的记录，然后为每个扩展创建一个日期条。

To chart the top 5 extensions for each hour, use the following order:

为了给每小时前五的扩展制表，可以使用下面的顺序：

X-Axis: Date
bar chart of

@timestamp

(with
1 hour interval) @timestamp的日期条表（一小时间隔）

Color: Terms
aggregation of extensions 颜色：条件聚集的扩展

For these requests, Elasticsearch creates a date bar chart from all the records, then groups the top five extensions inside each bucket, which in this example is a one-hour interval.

对于这些要求，ES从每个记录创建了一个日期条线图，然后，在每个中，bucket给前五的扩展分组，在这个例子中的间隔是一小时。



Remember, each subsequent bucket slices the data from the previous bucket.

记住，每个后来的bucket把先前的bucket分片。

To render the visualization on the preview
canvas, click the green Apply
Changes button at the top right of the Aggregation Builder.

为了给出预览画布的可视化，点击绿色的应用按钮。

You can learn more about aggregation and how altering the order of aggregations affects your visualizations here.

关于聚集和改变影响你可视化显示聚集顺序的信息，看这里：here

Working
with Filters

When you create a filter anywhere in Kibana, the filter conditions display in a green oval under the search text entry box:

当你再Kibana的任何地方创建一个过滤器后，这个过滤器的状态将在搜索输入框下的绿色椭圆体内展现：



Hovering on the filter oval displays the following icons:

绿色椭圆体上的按钮：



Enable Filter

使过滤器生效
Click this icon to disable the filter without removing it. You can enable the filter again later by clicking the icon again. Disabled filters display a striped shaded color, green for inclusion filters and red for exclusion filters.
点这个图表，就可以在不溢出过滤器的情况下，使其不再工作。再次点这个按钮，你可以使过滤器再次工作。未工作的过滤器展现为条状阴影颜色，绿色是包含型过滤器，红色是排除性过滤器。

Pin Filter

别针过滤器
Click this icon to pin a
filter. Pinned filters persist across Kibana tabs. You can pin filters from theVisualize tab,
click on the Discover or Dashboard tabs,
and those filters remain in place. NOTE: If you have a pinned filter and you’re not seeing any query results, that your current tab’s index pattern is one that the filter applies to.
点这个按钮来别住一个过滤器。别针型过滤器广泛存在与Kibana的标签页。你可以把过滤器别到可视化的标签，点击Discover 或 Dashboard标签，然后这些标签还在工作，注意：如果你有一个别针型过滤器，而且你没有看到任何请求结果，那么，你当前标签的索引模式是这种过滤器应用的一种模式。

Toggle Filter

切换过滤器
Click this icon to toggle a
filter. By default, filters are inclusion filters, and display in green. Only elements that match the filter are displayed. To change this to an exclusion filters, displaying only elements that don’t match,
toggle the filter. Exclusion filters display in red.
点这个按钮，可以切换过滤器。一般情况下，过滤器是包括型过滤器，而且颜色是绿色的。只有符合过滤规则的结果被展示。为了把它转化成排除性过滤器，只展示不符合的结果，需要切换过滤器。排除型过滤器的颜色是红色的。

Remove Filter

移除过滤器
Click this icon to remove a filter entirely.
点这个按钮可以移除一个过滤器。

To apply any of the filter actions to all the filters currently in place, click the

Global
Filter Actionsbutton and select an action.

想要为当前工作的过滤器应用任何上面的行为，可以点击Global
Filter Actions按钮，选择一种行为。


Preview
Canvas 预览页面



The preview canvas displays a preview of the visualization you’ve defined in the aggregation builder. To refresh the visualization preview, clicking the Refresh button

on
the toolbar.

预览页面展现了你在聚合生成器中，已经定义可视化的预览。为了刷新可视化的预览，可以点击工具栏的Refresh按钮。
备注：

材料来自elastic官网。

地址：
https://www.elastic.co/guide/en/kibana/current/visualize.html