Graylog on/off state line chart












0















I have a process the report on/off state to the graylog.
Is there a way to chart it?



Process sends message when it starts/stops. I can mend value(s) it send.
Chart would show let say line=1 on start till the next stop,
Then zero on stop until next start, aka step.
I can manage just spikes at message arrival, but not line between events.



Is it possible?










share|improve this question





























    0















    I have a process the report on/off state to the graylog.
    Is there a way to chart it?



    Process sends message when it starts/stops. I can mend value(s) it send.
    Chart would show let say line=1 on start till the next stop,
    Then zero on stop until next start, aka step.
    I can manage just spikes at message arrival, but not line between events.



    Is it possible?










    share|improve this question



























      0












      0








      0








      I have a process the report on/off state to the graylog.
      Is there a way to chart it?



      Process sends message when it starts/stops. I can mend value(s) it send.
      Chart would show let say line=1 on start till the next stop,
      Then zero on stop until next start, aka step.
      I can manage just spikes at message arrival, but not line between events.



      Is it possible?










      share|improve this question
















      I have a process the report on/off state to the graylog.
      Is there a way to chart it?



      Process sends message when it starts/stops. I can mend value(s) it send.
      Chart would show let say line=1 on start till the next stop,
      Then zero on stop until next start, aka step.
      I can manage just spikes at message arrival, but not line between events.



      Is it possible?







      graylog






      share|improve this question















      share|improve this question













      share|improve this question




      share|improve this question








      edited Nov 14 '18 at 21:08







      VladimirS

















      asked Nov 14 '18 at 20:58









      VladimirSVladimirS

      291412




      291412
























          1 Answer
          1






          active

          oldest

          votes


















          0














          You would need to translate the on/off values of your field to numeric values. The best way to do this is to use a pipeline for the messages, that checks if the field value equals "on" or "off" and writes a 1 or 0 to a new numeric field. You can chart this field then.



          You can find more information about pipelines here: http://docs.graylog.org/en/2.4/pages/pipelines/pipelines.html






          share|improve this answer
























          • I read the documentation, but I could not figure out, pipeline allows to modify the messages, I need to modify the chart how it represent. The number is not problem. Let says I want to display bars of active threads in my application. This is number already. So when I create 10 threads i sent msg t=10. Then 1 hour later I add 4 threads and sent t=14, On a chart it would be just 2 events, and if I apply pipeline it still would be 2 events. How I get a horizontal bar 10 until it changes to 14...

            – VladimirS
            Nov 15 '18 at 14:50











          Your Answer






          StackExchange.ifUsing("editor", function () {
          StackExchange.using("externalEditor", function () {
          StackExchange.using("snippets", function () {
          StackExchange.snippets.init();
          });
          });
          }, "code-snippets");

          StackExchange.ready(function() {
          var channelOptions = {
          tags: "".split(" "),
          id: "1"
          };
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function() {
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled) {
          StackExchange.using("snippets", function() {
          createEditor();
          });
          }
          else {
          createEditor();
          }
          });

          function createEditor() {
          StackExchange.prepareEditor({
          heartbeatType: 'answer',
          autoActivateHeartbeat: false,
          convertImagesToLinks: true,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: 10,
          bindNavPrevention: true,
          postfix: "",
          imageUploader: {
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          },
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          });


          }
          });














          draft saved

          draft discarded


















          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53308606%2fgraylog-on-off-state-line-chart%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown

























          1 Answer
          1






          active

          oldest

          votes








          1 Answer
          1






          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes









          0














          You would need to translate the on/off values of your field to numeric values. The best way to do this is to use a pipeline for the messages, that checks if the field value equals "on" or "off" and writes a 1 or 0 to a new numeric field. You can chart this field then.



          You can find more information about pipelines here: http://docs.graylog.org/en/2.4/pages/pipelines/pipelines.html






          share|improve this answer
























          • I read the documentation, but I could not figure out, pipeline allows to modify the messages, I need to modify the chart how it represent. The number is not problem. Let says I want to display bars of active threads in my application. This is number already. So when I create 10 threads i sent msg t=10. Then 1 hour later I add 4 threads and sent t=14, On a chart it would be just 2 events, and if I apply pipeline it still would be 2 events. How I get a horizontal bar 10 until it changes to 14...

            – VladimirS
            Nov 15 '18 at 14:50
















          0














          You would need to translate the on/off values of your field to numeric values. The best way to do this is to use a pipeline for the messages, that checks if the field value equals "on" or "off" and writes a 1 or 0 to a new numeric field. You can chart this field then.



          You can find more information about pipelines here: http://docs.graylog.org/en/2.4/pages/pipelines/pipelines.html






          share|improve this answer
























          • I read the documentation, but I could not figure out, pipeline allows to modify the messages, I need to modify the chart how it represent. The number is not problem. Let says I want to display bars of active threads in my application. This is number already. So when I create 10 threads i sent msg t=10. Then 1 hour later I add 4 threads and sent t=14, On a chart it would be just 2 events, and if I apply pipeline it still would be 2 events. How I get a horizontal bar 10 until it changes to 14...

            – VladimirS
            Nov 15 '18 at 14:50














          0












          0








          0







          You would need to translate the on/off values of your field to numeric values. The best way to do this is to use a pipeline for the messages, that checks if the field value equals "on" or "off" and writes a 1 or 0 to a new numeric field. You can chart this field then.



          You can find more information about pipelines here: http://docs.graylog.org/en/2.4/pages/pipelines/pipelines.html






          share|improve this answer













          You would need to translate the on/off values of your field to numeric values. The best way to do this is to use a pipeline for the messages, that checks if the field value equals "on" or "off" and writes a 1 or 0 to a new numeric field. You can chart this field then.



          You can find more information about pipelines here: http://docs.graylog.org/en/2.4/pages/pipelines/pipelines.html







          share|improve this answer












          share|improve this answer



          share|improve this answer










          answered Nov 15 '18 at 9:02









          dnsdns

          1




          1













          • I read the documentation, but I could not figure out, pipeline allows to modify the messages, I need to modify the chart how it represent. The number is not problem. Let says I want to display bars of active threads in my application. This is number already. So when I create 10 threads i sent msg t=10. Then 1 hour later I add 4 threads and sent t=14, On a chart it would be just 2 events, and if I apply pipeline it still would be 2 events. How I get a horizontal bar 10 until it changes to 14...

            – VladimirS
            Nov 15 '18 at 14:50



















          • I read the documentation, but I could not figure out, pipeline allows to modify the messages, I need to modify the chart how it represent. The number is not problem. Let says I want to display bars of active threads in my application. This is number already. So when I create 10 threads i sent msg t=10. Then 1 hour later I add 4 threads and sent t=14, On a chart it would be just 2 events, and if I apply pipeline it still would be 2 events. How I get a horizontal bar 10 until it changes to 14...

            – VladimirS
            Nov 15 '18 at 14:50

















          I read the documentation, but I could not figure out, pipeline allows to modify the messages, I need to modify the chart how it represent. The number is not problem. Let says I want to display bars of active threads in my application. This is number already. So when I create 10 threads i sent msg t=10. Then 1 hour later I add 4 threads and sent t=14, On a chart it would be just 2 events, and if I apply pipeline it still would be 2 events. How I get a horizontal bar 10 until it changes to 14...

          – VladimirS
          Nov 15 '18 at 14:50





          I read the documentation, but I could not figure out, pipeline allows to modify the messages, I need to modify the chart how it represent. The number is not problem. Let says I want to display bars of active threads in my application. This is number already. So when I create 10 threads i sent msg t=10. Then 1 hour later I add 4 threads and sent t=14, On a chart it would be just 2 events, and if I apply pipeline it still would be 2 events. How I get a horizontal bar 10 until it changes to 14...

          – VladimirS
          Nov 15 '18 at 14:50


















          draft saved

          draft discarded




















































          Thanks for contributing an answer to Stack Overflow!


          • Please be sure to answer the question. Provide details and share your research!

          But avoid



          • Asking for help, clarification, or responding to other answers.

          • Making statements based on opinion; back them up with references or personal experience.


          To learn more, see our tips on writing great answers.




          draft saved


          draft discarded














          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53308606%2fgraylog-on-off-state-line-chart%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown





















































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown

































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown







          這個網誌中的熱門文章

          Post-Redirect-Get with Spring WebFlux and Thymeleaf

          Xamarin.form Move up view when keyboard appear

          JBPM : POST request for execute process go wrong