Suppose we have four fields in a elk index. Example -> id(01), service_name(xyz),duration(61,369).
Duration field is in milliseconds .
Now we have to create a visualization out of it in such a why where duration field have to sort by desc order and out of that there will be a range like top 20% will be worst , 21-70% will be avg and 71-100% will be good and we have to count the service_name falling under these three range.
Pls help me with the steps .