Feature: allow use of multiple linked searches per visualisation

[alex-leonhardt]

Hi,

similar to what's possible with e.g. graphite / grafana, I'd like to create a visualisation that sources its data from 2 (or more?) linked searches so that we can create a combined (line) chart with 2 (or more?) "split lines" ; each would be able to use a different (or the same) linked search.

To give an example - we have logs for serviceA and serviceB, I'd create 2 searches that (using filters) very specifically give back only the data / information I'd be using in the visualisation(s) - hopefully that will also help with ES memory consumption. In a line chart, I'd like to get the data from both saved searches to create 2 (split) lines, one using the search data from serviceA and the other for serviceB.

Does this make sense? Is this currently already possible? I'm thinking of things similar to graphite, riemann, etc. where I can pick just about any "data source" and add it into the "visualisation".

Thanks!
Alex

[mrjameshamilton]

+1

[timroes]

This is catered for in the new visualization saved object format (#21645), and hopefully will be exposed in the new editor. I'll leave this open until we have some proper implementation in the UI for that.

[timroes]

Thanks for your contribution. We are planning to move the concept of Kibana in general to more reusable filters and queries (tracked in #3313). We don't have any plans to extend the linked saved searches feature, and thus I will close this issue for now in favor of the above issue, and having better possibility to reuse filters and thus also allow for applying as many filter sets as you want in the future.