# Filter based on \> values?

**URL:** https://discuss.elastic.co/t/filter-based-on-values/150625
**Category:** Kibana
**Created:** [October 1, 2018, 11:42pm UTC](https://discuss.elastic.co/t/filter-based-on-values/150625 "2018-10-01T23:42:01Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![Sjaak01](https://avatars.discourse-cdn.com/v4/letter/s/73ab20/32.png) [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)
#### Post date: [October 1, 2018, 11:42pm UTC](https://discuss.elastic.co/t/filter-based-on-values/150625/1 "2018-10-01T23:42:01Z")

</div>

Hi,

I have graph with SUM (total bytes) as metric and router\_name as term. I was wondering whether it is possible to apply a filter or similar and only shows values where the SUM is greater then X so I can automatically filter on routers exceeding a certain amount of traffic.

---

<div class="post-metadata">

### Author: ![thomasneirynck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/thomasneirynck/32/23313_2.png) [@thomasneirynck](https://discuss.elastic.co/u/thomasneirynck)
#### Post date: [October 2, 2018, 2:29pm UTC](https://discuss.elastic.co/t/filter-based-on-values/150625/2 "2018-10-02T14:29:01Z")

</div>

hi @Sjaak01,

this isn't possible in Kibana right now. All filters evaluate properties of a document. What you are trying to do is filter based on the result of an aggregation (on the SUM). This would be similar to filtering with a HAVING-clause in SQL.

Elasticsearch can do such a filter using a bucket selector [https://www.elastic.co/guide/en/elasticsearch/reference/current/search-aggregations-pipeline-bucket-selector-aggregation.html](https://www.elastic.co/guide/en/elasticsearch/reference/current/search-aggregations-pipeline-bucket-selector-aggregation.html).

However, this functionality is not exposed in Kibana. There is an existing enhancement request for this feature: [https://github.com/elastic/kibana/issues/17544](https://github.com/elastic/kibana/issues/17544) so I would encourage you to leave extra comments and questions there.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 30, 2018, 2:29pm UTC](https://discuss.elastic.co/t/filter-based-on-values/150625/3 "2018-10-30T14:29:12Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
