Extract CPU user pct along with its time using Query DSL

Hi Every one
I am having metricbeat data I need to extract system.cpu.user.pct along with time using query DSL.

I have checked and got how to extract the CPU user pct but now I want the time for each CPU user pct value too.

Kindly provide me help the query i used for getting cpu.user.pct is below:-

"query": {
"bool": {
"must": [
{
"range": {
"system.cpu.user.pct": {
"gte": 0.0
}
}
},
{
"range": {
"@timestamp": {
"gte": "now-1h",
"lte": "now"
}
}
}
]
}
}

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.