Step 3. Define Views

Use Refinery views to filter and prepare indexed data for visualization.

After you create and index one or more more object groups, use the ChaosSearch Refinery® to create views. Views are a virtual pane into the indexed data for one or more object groups; they allow you to define how to explore and query that data with the ChaosSearch Analytics Kibana interface or through interfaces like the Elastic API.

Refinery views have powerful data controls, allowing you to virtually transform the indexed data fields and materialize fields into the columns that will drive the end-user visualizations and analytics.

You can define index windows for views to limit analysis to a recent window of time, such as the last 7 days, for visualization. You can also set various rules such as caching results or case-sensitivity for querying. For the details about creating views, see Refinery Views.

To create a view, navigate to the Refinery tab and click Create View.

12631263

Select one or more object groups to associate their indexed data with the view. You can also refine the list of indexes to include if needed, and the optional index window for analysis, then click Next. In the Schema Transformation window, you can review the data model/schema for the indexed fields and if needed, transform them virtually (that is, without changing the indexed data stored on disk) by clicking the gear icon.

858858

An advantage of the ChaosSearch views is that you can use virtual transformations to change or refine the type of the data within the view, without the overhead of re-indexing the data. For example, you can change the data type for a field named client_ip from a string type to a string treated as an IP. This type change can assist visualization tools to properly manage and render the data.

889889

The transformation is applied within the view to improve querying against the client_ip field. The transformation feature includes a number of predefined transformation types.


What’s Next

Run queries, create dashboards, and gain insight from your log files and data.

Did this page help you?