I am new to ELK and creating dashboards with ELK for nginx access logs. I found its pretty useful on creating nice visualizations. On my requirements one more datatable is pending, the requirement is given below (I am using the deafault logstash-* index).
Each NGINX access log provides the URLs been hit by user. I need to create a datatable containing only the URLs which took maximum response time more than one second with the count of URLs. So the table should contain 2 columns.
- Total count of URLs
Workarounds: I can sort out URLs based on max response time. But te list contains URLs for which reponse time is less than 1 sec too. I want to filter out the URLs with max response time more than 1 sec.
I tried the details given in below link and it didnt help out: https://www.elastic.co/guide/en/beats/packetbeat/current/kibana-queries-filters.html#_range_queries
Please help me out to solve it