Creating visualizations from runtime fields

While building data visualizations or exploring data, you may need to include fields derived from the values of other fields. A runtime field is a very useful feature that allows you to define and enrich the index schema at runtime without altering your source data. In this recipe, we will see how to create runtime fields in Kibana and how to build useful visualizations from them.

Getting ready

To begin creating visualizations for runtime fields, ensure that you have completed the previous recipes in this chapter. We will continue to use the same dataset on Rennes traffic for this guide.

You can find the code snippets for this recipe at the following address: https://github.com/PacktPublishing/Elastic-Stack-8.x-Cookbook/blob/main/Chapter6/snippets.md#creating-visualization-from-runtime-fields.

How to do it...

For Rennes traffic, let’s compare the traffic statuses between weekdays and weekends and between rush hour and...