[Question]: Extracting records/data from selection about kibana-vega-vis

[nyurik]

I am not exactly sure what you mean by selection. Vega can visualize whatever data you can get from the Elasticsearch query(s). So if you can get the data you need, you can draw it as a matrix. As of 6.4, it is possible to use kibanaAddFilter() and similar to control the dashboard's context, so you can make your Vega graph modify the dashboard based on user's actions.

[gshively11]

I think kibanaAddFilter() is what I'm looking for, I'll dig into that, but let me try to clarify in case you have other advice:

https://vega.github.io/vega-lite/examples/interactive_splom.html

If you you shift+click+drag on one of the scatterplots in that example, you can select a subset of the data (enabled by the "selection" feature in vega). What I need is to get the records inside that selection, preferably in Kibana table visualization.

If kibanaAddFilter lets me update a dashboard's context with a filter/query that only selects the records in the selection subset, then that should work great. Am I understanding that correctly?

[nyurik]

@gshively11 pretty close - just note that the example you linked to is a Vega-Lite, not Vega. VL is compiled into Vega, so you could see how VL does the selection, and how you can change it to add custom event processing with add filter.

[bgeVam]

I think kibanaAddFilter() is what I'm looking for, I'll dig into that, but let me try to clarify in case you have other advice:

https://vega.github.io/vega-lite/examples/interactive_splom.html

If you you shift+click+drag on one of the scatterplots in that example, you can select a subset of the data (enabled by the "selection" feature in vega). What I need is to get the records inside that selection, preferably in Kibana table visualization.

If kibanaAddFilter lets me update a dashboard's context with a filter/query that only selects the records in the selection subset, then that should work great. Am I understanding that correctly?

Did you try that, and share an example or some thoughts? Much appreciated!