Filter by Count in Datatable

[CraigMc (Craig Mcloughlin)]

I have a simple data table of events with the count of stages.

In my example, a count of '7' indicates that the process has completed all stages.
I want to filter this table for rows with a count <> 7.

I have seen the "min_doc_count" option (https://www.elastic.co/guide/en/elasticsearch/reference/current/search-aggregations-bucket-terms-aggregation.html#_minimum_document_count_4) which is similar to what I want to achieve but not exactly (as this would only identify events which have > 7 but I can not identify anything < 7 using this)

Any one know if I'm able to achieve what I'm after?

Thanks,
C

[nickpeihl]

It's not easily done right now. Here's an answer to a similar question that gives some options.

How to filter visualization based on result of aggregate?

hi @Steven_Ensslen, this is similar to a HAVING clause in SQL. Elasticsearch has something called a "bucket selector": https://www.elastic.co/guide/en/elasticsearch/reference/current/search-aggregations-pipeline-bucket-selector-aggregation.html. This is likely what you'd want to use. This functionality is not available in Kibana though. There's an open ER for that: https://github.com/elastic/kibana/issues/11167. If you think that's in-line with what you need, I would go and upvote that ticke…