Data table visualization: filter out rows that don't contain a certain value

Elastic Stack Kibana
1

Hello all!
I am trying to create a data table that will show information for a group of machines organized by serial number that shows only the data for the machines that have Error in their error column and shows the most recent "row" available for that serial number. For example, if I have

serial: 000 Error: -- Time: Aug 1
serial: 000 Error: -- Time: Aug 2
serial: 111 Error: -- Time: Aug 1
serial: 111 Error: Error Time: Aug 2
serial: 222 Error: Error Time: Aug 1
serial: 222 Error: -- Time: Aug 2
serial: 333 Error: Error Time: Aug 1
serial: 333 Error: Error Time: Aug 2
serial: 444 Error: -- Time: Aug 1
serial: 444 Error: Error Time: Aug 2

Then all I want to show in my table is
serial: 111 Error: Error Time: Aug 2
serial: 333 Error: Error Time: Aug 2
serial: 444 Error: Error Time: Aug 2

The rest of the serial numbers are eliminated because they do not have error in the most recent row available for that serial number. So far, I have used the Top Hit aggregation and split rows by serial number to get the most recent row for each serial number but I do not know how to filter out the rows that do not have Error in the error column. Any help would be greatly appreciated!

2

Have you tried using a filter? That should work.

3

Thank you very much for the answer! It worked for me.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.