Vector styling

When styling a vector layer, you can customize your data by property, such as size and color. For each property, you can specify whether to use a constant or data driven value for the style.

Use static styling to specificy a constant value for a style property.

This image shows an example of static styling using the Kibana sample web logs data set. The kibana_sample_data_logs layer uses static styling for all properties.

Use data driven styling to symbolize features by property values. To enable data driven styling for a style property, change the selected value from Fixed or Solid to By value.

This image shows an example of data driven styling using the Kibana sample web logs data set. The kibana_sample_data_logs layer uses data driven styling for fill color and symbol size style properties.

Quantitative data driven styling symbolizes features from a range of numeric property values.

Property values are fit from the domain range to the style range on a linear scale. For example, let’s symbolize Kibana sample web log documents by size. The sample web logs bytes field ranges from 0 to 18,000. This is the domain range. The smallest feature has a symbol radius of 1, and the largest feature has a symbol radius of 24. This is the style range. The bytes property value for each feature will fit on a linear scale from the range of 0 to 18,000 to the style range of 1 to 24.

To ensure symbols are consistent as you pan, zoom, and filter the map, quantitative data driven styling uses extended_stats aggregation to retrieve statistical metadata. Extended_stats is not available for numeric property values from the metric aggregations count, sum, and unique count.

To configure extended_stats, click the gear icon . Set Sigma to a smaller value to minimize outliers by moving the range minimum and maximum closer to the average. Clear the Calculate range from indices checkbox to turn off the extended_stats aggregation request. The gear icon is not available for numeric property values from the metric aggregations count, sum, and unique count.

When the property value is undefined for a feature:

When the symbol range minimum and maximum are the same and there is no range:

Qualitative data driven styling symbolizes properties, such as strings and IP addresses, by category.

Qualitative data driven styling is available for the following styling properties:

To ensure symbols are consistent as you pan, zoom, and filter the map, qualitative data driven styling uses a terms aggregation. The term aggregation retrieves the top categories for the property. Feature values within the top categories are assigned a unique style. Feature values outside of the top categories are grouped into the Other category. A feature is assigned the Other category when the property value is undefined.

To configure the terms aggregation, click the gear icon . Clear the Get categories from indice checkbox to turn off the terms aggregation request.

This image shows an example of quantitative data driven styling using the Kibana sample web logs data set. The machine.os.keyword property determines the color of each symbol based on category.

Class styling symbolizes features by class and requires multiple layers. Use layer filtering to define the class for each layer, and static styling to symbolize each class.

This image shows an example of class styling using the Kibana sample web logs data set.