I'm using ES+Kibana as timeseries and I'm trying to get a filter applied to the table visualization after the MAX aggregation has been applied.
The problem is that all hosts will have a range of cpu metric values, so if you filter by cpu<5 all hosts will have some entries there.
So ideally I would need to get the max usage, then filter by <5. In case I want to get all hosts that had less than 5% max cpu usage.
Getting the MAX is easy enough in Kibana, what I can't seem to get working is a filter applied to that MAX value.
What would be the best way to get this filter for the MAX value?