Is there a simple way that i dont seem to find how i can can add more columns of information to a datatable visualization.
I have created a search filter to find locked out accounts that lists them under Discover.
Then i go to Visualize, add a datatable visualization.
Defaults to: Metric -> Count
I then split rows as bucket type, aggregation to Terms: username.
This works fine, i see the three users.
Now i want to add two more columns.
First i begin with datetime:
I add a subbucket - split rows, sub aggregation - terms - field: timestamp
BUT.. then when i add another subbucket with same config but field computer.
The table filters off the row that dont have the field computer.
Cant it add the column but leave blank value?
So it seem to filter out.. i just want to add information.
Kibana pro's? Anyone?