Visualize
可视化
You can use the Visualize page to design data visualizations. You can save these visualizations, use them individually, or combine visualizations into a dashboard. A visualization can be based on one of the following data source types:
你可以使用可视化页面来设计数据可视化结果。你可以爆粗这些结果，独自使用它们，或者把它们在仪表盘里比较。一个可视化结果可以基于下面数据源类型的一种。
- A new interactive search
- 一个新的页面搜索
- A saved search
- 一个保存的搜索
- An existing saved visualization
- 一个已经存在的保存的可视化结果
Visualizations are based on the aggregation feature introduced in Elasticsearch 1.x.
可视化是基于ES1.x版本以后的聚合特性。
Creating a New Visualization
To start the New Visualization wizard, click on the Visualize tab at the top left of the page. If you are already creating a visualization, you can click the New Visualization button 
in the toolbar to the right of the search bar. The wizard guides you through the following steps:
方法，点击页面左上方的Visualize标签。如果你准备好创建一个可视化结果了，你可以点击搜索条右边的New Visualization按钮。你可以通过下面的向导来进行：
Step 1: Choose the Visualization Type 选择类型
Choose a visualization type when you start the New Visualization wizard:开始新的可视化向导，选择类型：
| 面积图 | Use area charts to visualize the total contribution of several different series. 使用面积图来可视化各种不同类型的总作用 |
| 数据表 | Use data tables to display the raw data of a composed aggregation. You can display the data table for several other visualizations by clicking at the bottom of the visualization. 使用数据表来展示组合聚集的原始数据。你可以通过点击可视化结果的底部，为一些其他可视化展示数据表。 |
| 线图 | Use line charts to compare different series. 用来比较不同的类型 |
| 降价窗口 | Use the Markdown widget to display free-form information or instructions about your dashboard. 使用降价窗口，来展现自由形态的数据，或你的仪表盘的命令。 |
| 度量标准 | Use the metric visualization to display a single number on your dashboard. 在你的仪表盘上，可视化和展现单一的数据 |
| 饼图 | Use pie charts to display each source’s contribution to a total. 展示总计中，每个资源的贡献。 |
| 地图 | Use tile maps to associate the results of an aggregation with geographic points. 联合地理点聚集的结果 |
| 垂直条状图 | Use vertical bar charts as a general-purpose chart. 作为总体目标表 |
You can also load a saved visualization that you created earlier. The saved visualization selector includes a text field to filter by visualization name and a link to the Object Editor, accessible through Settings > Edit Saved Objects, to manage your saved visualizations.
你也可以加载以前创建的可视化结果。它的选择器包括一个文本字段来通过可视化结果的名字和Object Editor的链接过滤，可以通过Settings > Edit Saved Objects管理保存的结果。
If your new visualization is a Markdown widget, selecting that type takes you to a text entry field where you enter the text to display in the widget. For all other types of visualization, selecting the type takes you to data source selection.
如果你的新可视化结果是降价窗口（Markdown widget），选择那种类型把你带到一个文本输入字段，在那里，你可以输入字段在窗口展现。对于其它字段的可视化，选择类型把你带到数据资源的选择。
Step 2: Choose a Data Source 选择一个数据资源
You can choose a new or saved search to serve as the data source for your visualization. Searches are associated with an index or a set of indexes. When you select new search on a system with multiple indices configured, select an index pattern from the drop-down to bring up the visualization editor.
可以新加的或已有的数据资源作为你的可视化结果。搜索过程需要一个索引或一些列索引。当你选择系统上参考许多指数的新索引，从下拉列表选择一个索引模式，产生新的可视化编辑器。
When you create a visualization from a saved search and save the visualization, the search is tied to the visualization. When you make changes to the search that is linked to the visualization, the visualization updates automatically.
当你从一个保存的搜索来创建可视化结果，并保存可视化结果，搜索将被链接到可视化结果。当你的搜索修改了可视化结果时，可视化结果也会自动更新。
Step 3: The Visualization Editor 可视化编辑器
The visualization editor enables you to configure and edit visualizations. The visualization editor has the following main elements:
可视化编辑器保证你能够编辑可视化结果，它有以下的主要元素：
- Toolbar 工具条
- Aggregation Builder 聚合生成器
- Preview Canvas 预览画面
Automatically Refreshing the Page
自动刷新页面
You can configure a refresh interval to automatically refresh the page with the latest index data. This periodically resubmits the search query.
你可以确定一个刷新间隔来自动刷新页面，显示最新的信息。这会周期性地重发搜索请求。
When a refresh interval is set, it is displayed to the left of the Time Filter in the menu bar.
当一个刷新间隔被设置后，它在菜单栏中Time Filter的左侧被展现。
To set the refresh interval:
怎样设置刷新间隔
- Click the Time Filter
in the upper right corner of the menu bar. 点按钮 - Click the Refresh Interval tab. 点刷新间隔标签
- Choose a refresh interval from the list. 从列表中选择一个刷新时间
To automatically refresh the data, click the 
Auto-refresh button and select an autorefresh interval:
为了周期性刷新数据，点击Auto-refresh按钮选择一个自动刷新间隔：
When auto-refresh is enabled, Kibana’s top bar displays a pause button and the auto-refresh interval: 
. Click the Pause button to pause auto-refresh.
当自动刷新设置好后，Kibana的顶部条看起来像这样 ，点击Pause按钮来终端自动刷新。
Toolbar 工具栏
The toolbar has a search field for interactive data searches, as well as controls to manage saving and loading visualizations. For visualizations based on saved searches, the search bar is grayed out. To edit the search, replacing the saved search with the edited version, double-click the search field.
工具栏有对每个交互数据搜索的搜索域，也控制保存和加载可视化。对于已经保存搜素的可视化，搜索条是灰色的。为了编辑搜索，用编辑的版本代替已经保存的版本，双击搜索域。
The toolbar at the right of the search box has buttons for creating new visualizations, saving the current visualization, loading an existing visualization, sharing or embedding the visualization, and refreshing the data for the current visualization.
搜索栏右边的工具栏，有按钮来创建新的可视化，保存现有的可视化，加载已有的可视化，分享和嵌入可视化，为当前的可视化刷新数据。
Aggregation Builder 聚合生成器
Use the aggregation builder on the left of the page to configure the metric and bucket aggregations used in your visualization. Buckets are analogous to SQL GROUP BY statements. For more information on aggregations, see the main Elasticsearch
使用页面左边的聚合生成器，来配置你可视化中的metric 和 bucket聚集。 Buckets 和SQL相似，按表现分组。对于更多关于聚合的信息，可以查看：Elasticsearch。
aggregations reference. 聚合参考
Bar, line, or area chart visualizations use metrics for the y-axis and buckets are used for the x-axis, segment bar colors, and row/column splits. For pie charts, use the metric for the slice size and the bucket for the number of slices.
条，线或域表的可视化为了Y轴使用metrics。而buckets用于X轴，元素条颜色，条/柱分裂。对于饼图，使用metric作为切片大小，bucket作为切片的数量。
Choose the metric aggregation for your visualization’s Y axis, such as count, average, sum, min, max, orcardinality (unique count). Use bucket aggregations for the visualization’s X axis, color slices, and row/column splits. Common bucket aggregations include date histogram, range, terms, filters, and significant terms.
选择度量聚集作为你可视化的Y轴，例如 count, average, sum, min, max, 或cardinality （单独计数）。使用bucket聚集作为你可视化的X轴，颜色分片，行/柱分割。一般的 bucket 聚集包括date histogram, range, terms, filters, 和 significant terms。
You can set the order in which buckets execute. In Elasticsearch, the first aggregation determines the data set for any subsequent aggregations. The following example involves a date bar chart of Web page hits for the top 5 file extensions.
你可以为buckets 执行设置顺序。在ES中，第一个聚合为任何附属的聚合决定了数据集。在后来的例子中，包含一个Web页面的日期条，它符合排名前五的文件扩展。
To use the same extension across all hits, set this order:
为了在这里使用同样的扩展，你可以看下面：
- Color: Terms aggregation of extensions 颜色：条件聚集的扩展
- X-Axis: Date bar chart of
@timestamp X轴：@timestamp的日期条表
Elasticsearch collects the records for the top 5 extensions, then creates a date bar chart for each extension.
ES收集前五扩展的记录，然后为每个扩展创建一个日期条。
To chart the top 5 extensions for each hour, use the following order:
为了给每小时前五的扩展制表，可以使用下面的顺序：
- X-Axis: Date bar chart of
@timestamp(with 1 hour interval) @timestamp的日期条表（一小时间隔） - Color: Terms aggregation of extensions 颜色：条件聚集的扩展
For these requests, Elasticsearch creates a date bar chart from all the records, then groups the top five extensions inside each bucket, which in this example is a one-hour interval.
对于这些要求，ES从每个记录创建了一个日期条线图，然后，在每个中，bucket给前五的扩展分组，在这个例子中的间隔是一小时。
Remember, each subsequent bucket slices the data from the previous bucket.
记住，每个后来的bucket把先前的bucket分片。
To render the visualization on the preview canvas, click the green Apply Changes button at the top right of the Aggregation Builder.
为了给出预览画布的可视化，点击绿色的应用按钮。
You can learn more about aggregation and how altering the order of aggregations affects your visualizations here.
关于聚集和改变影响你可视化显示聚集顺序的信息，看这里：here
Working with Filters
When you create a filter anywhere in Kibana, the filter conditions display in a green oval under the search text entry box:
当你再Kibana的任何地方创建一个过滤器后，这个过滤器的状态将在搜索输入框下的绿色椭圆体内展现：
Hovering on the filter oval displays the following icons:
绿色椭圆体上的按钮：
-
Enable Filter
- Click this icon to disable the filter without removing it. You can enable the filter again later by clicking the icon again. Disabled filters display a striped shaded color, green for inclusion filters and red for exclusion filters.
-
点这个图表，就可以在不溢出过滤器的情况下，使其不再工作。再次点这个按钮，你可以使过滤器再次工作。未工作的过滤器展现为条状阴影颜色，绿色是包含型过滤器，红色是排除性过滤器。
Pin Filter - Click this icon to pin a filter. Pinned filters persist across Kibana tabs. You can pin filters from the Visualize tab, click on the Discover or Dashboard tabs, and those filters remain in place. NOTE: If you have a pinned filter and you’re not seeing any query results, that your current tab’s index pattern is one that the filter applies to.
-
点这个按钮来别住一个过滤器。别针型过滤器广泛存在与Kibana的标签页。你可以把过滤器别到可视化的标签，点击
Discover
或
Dashboard标签，然后这些标签还在工作，注意：如果你有一个别针型过滤器，而且你没有看到任何请求结果，那么，你当前标签的索引模式是这种过滤器应用的一种模式。
Toggle Filter - Click this icon to toggle a filter. By default, filters are inclusion filters, and display in green. Only elements that match the filter are displayed. To change this to an exclusion filters, displaying only elements that don’t match, toggle the filter. Exclusion filters display in red.
-
点这个按钮，可以切换过滤器。一般情况下，过滤器是包括型过滤器，而且颜色是绿色的。只有符合过滤规则的结果被展示。为了把它转化成排除性过滤器，只展示不符合的结果，需要切换过滤器。排除型过滤器的颜色是红色的。
Remove Filter - Click this icon to remove a filter entirely.
-
点这个按钮可以移除一个过滤器。
使过滤器生效
别针过滤器
切换过滤器
移除过滤器
To apply any of the filter actions to all the filters currently in place, click the 
Global Filter Actionsbutton and select an action.
想要为当前工作的过滤器应用任何上面的行为，可以点击Global Filter Actions按钮，选择一种行为。
Preview Canvas 预览页面
The preview canvas displays a preview of the visualization you’ve defined in the aggregation builder. To refresh the visualization preview, clicking the Refresh button 
on the toolbar.
预览页面展现了你在聚合生成器中，已经定义可视化的预览。为了刷新可视化的预览，可以点击工具栏的Refresh按钮。
备注：
材料来自elastic官网。
地址：
https://www.elastic.co/guide/en/kibana/current/visualize.html
9246
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
