I am new to ELK stack, I want to implement a logic to find the count of daily success transactions on the basis of a field status(if status = "S" it is success).
I have implemented this logic by creating an scripted field (if status = S then set scripted field = 1) and then in the visualization , I have created a sum metric and I have got the count of daily success.
My question is, Is there a workaround to handle the complete logic in visualization rather than calculating at each field because calculating at field level may impact the performance?
If I correctly understood, you want some directions on how to create a filtered visualization.
It is not necessary to define the scripted field for this kind of visualizations. Remove it.
In any visualization, you can use the count metric.
It will count the documents matching your filter, which you can add in the upper part of the dashboard.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.