Mastering Kibana 6.x
上QQ阅读APP看书,第一时间看更新

Applying the time filter

We can restrict the search result on the basis of a time period by applying the time filter. We can only apply the time filter if our index contains a time-based event and if the field is configured as a time-based field during the Kibana index setup.

The time filter is set to 15 minutes by default and we can use the time picker to change this. Through the Time Picker, we can change the time filter or select a specific time interval. We can do the following to set a time filter:

  1. Click on the Time Picker icon (Clock icon) on the top-right corner of the page. This will open the time selection box.
  2. We have three options for time selection: Quick, Relative, and Absolute.
  3. We can click on any shortcut link in the Quick filter to set the time filter:
  1. In the Relative type, we need to provide the start time through a number of seconds, minutes, hours, days, months, or years. Now, set the end time relative to the current time, which can be past or future:
  1. In the Absolute type, we need to select a start and end date:
  1. We can also set the time interval by clicking on the histogram bar.