kibana统计数据展⽰demo
kibana统计数据展⽰demo
数据有了。想做⼀个报表出来，却⼜不知道该怎么做。恰好⼿头有⼀个合适的商业demo，扣过来学习学习借鉴借鉴
再往下：
接下来是每⼀个的实现部分：
主机威胁-统计：
{
"query": {
"bool": {
"must": [
{
"query_string": {
"query": "*",
"analyze_wildcard": true
}
},
{
{
"query_string": {
"analyze_wildcard": true,
"query": "*"
}
},
{
"range": {
"timestamp": {
"gte": 1553011200000,
"lte": 1553097599000,
"format": "epoch_millis"
}
}
花样游泳}
],
"must_not": []
}
},
"size": 0,
"_source": {
"excludes": []
},
"aggs": {
"2": {
"date_histogram": {
"field": "timestamp",
"interval": "30m",
"time_zone": "Asia/Shanghai", "min_doc_count": 1
}
}
},
"version": true,
"highlight": {
"pre_tags": [
"@kibana-highlighted-field@" ],
"post_tags": [
"@/kibana-highlighted-field@" ],
"fields": {
"*": {
我的未来不是梦演讲稿"highlight_query": {
"bool": {
"must": [
{
"query_string": {
"query": "*",
"analyze_wildcard": true, "all_fields": true
}
},
{
"query_string": {
"analyze_wildcard": true, "query": "*",
"all_fields": true
}
},
{
"range": {
"timestamp": {
"gte": 1553011200000, "lte": 1553097599000, "format": "epoch_millis"
"format": "epoch_millis" }
}
}
],
"must_not": []
}
}
}
},
"fragment_size": 2147483647
宿醉怎么办}
偷的成语}
主机威胁-源IP统计
{
"query": {
"bool": {
"must": [
{
"query_string": {
"query": "*",
"analyze_wildcard": true
}
},
{
"query_string": {
"analyze_wildcard": true,
"query": "*"
}
},
{
"range": {
"timestamp": {
"gte": 1553011200000,
"lte": 1553097599000,
"format": "epoch_millis"
}
}
}
],
"must_not": []
}
},
"size": 0,
"_source": {
"excludes": []
},
"aggs": {
"2": {
"terms": {
"field": "src_ip",
"size": 50,
"order": {
"_count": "desc"
}
}
}
},
"version": true,
"highlight": {
"pre_tags": [
"@kibana-highlighted-field@" ],
"post_tags": [
"post_tags": [
"@/kibana-highlighted-field@" ],
"fields": {
"*": {
"highlight_query": {
"bool": {
"must": [
{
"query_string": {
"query": "*",
"analyze_wildcard": true, "all_fields": true
}
},
{
"query_string": {
"analyze_wildcard": true, "query": "*",
"all_fields": true
}
},
{
nessary
"range": {
"timestamp": {
"gte": 1553011200000, "lte": 1553097599000, "format": "epoch_millis" }
}
}
],
"must_not": []
}
}
}
},
"fragment_size": 2147483647
}
}
主机威胁-⽬的IP统计
{
"query": {
"bool": {
"must": [
{
"query_string": {
"query": "*",
"analyze_wildcard": true
}
},
{
"query_string": {地字开头成语
"analyze_wildcard": true,
"query": "*"
}
},
{
"range": {
"timestamp": {
"gte": 1553011200000,
经常打嗝放屁"lte": 1553097599000,
"format": "epoch_millis"
}
}
}
}
],
"must_not": []
}
摇曳近义词},
"size": 0,
"_source": {
"excludes": []
},
"aggs": {
"2": {
"terms": {
"field": "dst_ip",
"size": 50,
"order": {
"_count": "desc"
}
}
}
},
"version": true,
"highlight": {
"pre_tags": [
"@kibana-highlighted-field@" ],
"post_tags": [
"@/kibana-highlighted-field@" ],
"fields": {
"*": {
"highlight_query": {
"bool": {
"must": [
{
"query_string": {
"query": "*",
"analyze_wildcard": true, "all_fields": true
}
},
{
"query_string": {
"analyze_wildcard": true, "query": "*",
"all_fields": true
}
},
{
"range": {
"timestamp": {
"gte": 1553011200000, "lte": 1553097599000, "format": "epoch_millis" }
}
}
],
"must_not": []
}
}
}
},
"fragment_size": 2147483647
}
