After you create and index one or more more object groups, use the ChaosSearch Refinery® to create index views. Index views are a virtual pane into the indexed data for one or more object groups; they allow you to define how to explore and query that data with the ChaosSearch Analytics Kibana interface or through interfaces like the Elastic API.
Index views have powerful data controls, allowing you to transform column types when needed to refine the end-user visualizations and analytics.
You can define index windows to set ranges for limiting the analytics windows for visualization, you can also set various rules such as case-sensitivity for querying. For the details about creating index views, see Refinery Index Views.
To create a view, navigate to the Refinery tab and click Create View.
You must select one or more object groups, refine the list of indexes if needed, and if desired, specify and index window to limit visualization ranges for the view. then click next. In the Schema Transformation window, you can review the data model/schema for the indexed structure and if needed, transform them by clicking the gear icon.
An advantage of the ChaosSearch views is that you can use virtual transformations to change or refine the type of the data within the view, without the overhead of re-indexing the data. For example, you can change the data type for a field named
client_ip from a string type to a string treated as an IP. This type change can assist visualization tools to properly manage and render the data.
The transformation is applied within the view to improve querying against the
client_ip field. The transformation feature includes a number of predefined common transformation types.
Updated about 1 month ago
Run queries, create dashboards, and gain insight from your log files and data.