Enhance tile panel to show connections/routes

[webmstr]

With a geo_point, you can mark a single spot. There are lots of records that have "source" and "destination" geo_points, and it could be fun to chart them.

Something like this:

http://upload.wikimedia.org/wikipedia/commons/2/20/AA_route_map.PNG

[rashidkpc]

Can you provide an elasticsearch aggregation that would accomplish this?

[webmstr]

So that connections could be weighted by use, this query will return src, dest, and count. It's the generated by kibana4:

{
  "size": 0,
  "query": {
    "filtered": {
      "query": {
        "query_string": {
          "analyze_wildcard": true,
          "query": "_exists_:cisco.acl.src AND _exists_:cisco.acl.dest"
        }
      },
      "filter": {
        "bool": {
          "must": [
            {
              "range": {
                "@timestamp": {
                  "gte": 1429838793043,
                  "lte": 1429843426156
                }
              }
            }
          ],
          "must_not": []
        }
      }
    }
  },
  "aggs": {
    "2": {
      "terms": {
        "field": "cisco.acl.src.ip",
        "size": 50,
        "order": {
          "_count": "desc"
        }
      },
      "aggs": {
        "3": {
          "terms": {
            "field": "cisco.acl.dest.ip",
            "size": 50,
            "order": {
              "_count": "desc"
            }
          }
        }
      }
    }
  }
}

[rashidkpc]

Its an interesting idea and perhaps worth exploring

[thomasneirynck]

We are working on a new implementation of map visualizations and are not planning to add any new features to the existing implementation. We will take this suggestion under consideration for the new app.

[nreese]

closed by #41504