Describe the feature:
i'm using this in a timelion:
.es(index=logstash-*, metric=avg:logstash_delay,timefield=logstash_time,split=host:60)
But timelion only sorts the field by number of events and that makes the graph use different colors for each host. Even trying to use .color, it is always swapping colors by reordering and messing the expected output.
The same thing show here:
.es(index=logstash-*,split=error_level:6).color(red:orange:yellow:green:cyan:grey)
it is always sorting the error level and changing the colors. I want the critical to be red, errors, orange, yellow warnings, green info, cyan verbose and grey debug. Even if i change the color order to match what i need, the next page reload will put the colors again wrong.
So the solution to this is to add a extra parameter, the "sort" field, where we can sort by number of events (count, decreasing ) but also sort the bottom (count, increasing), name (name, increasing), max,min, sum, avg, etc
This way, the order will be what we need or at least, be able to change to a constant order (name sort) and allow one to use a custom color layout
I found this, that may help, specially the .orderby()
https://github.com/rashidkpc/timelion-extras
I hope it will be merged in main kibana
+1 I don't understand why the timeseries visual builder has this feature and timelion is lacking it. Would be great to have it! Thanks for your great work in all regards!
Most helpful comment
I found this, that may help, specially the .orderby()
https://github.com/rashidkpc/timelion-extras
I hope it will be merged in main kibana