Filtering on the combination of two condition in bucket aggregation

Elastic Stack Kibana
1

I have the index with the data for multiple groupids with other fields status and description etc.
The posible values for status is error, success, inprogress, new.
Want to display below in datatable

  1. the number of groupids which are having status as success with out error.
  2. the number of groupids which are having status as success with one error
  3. the number of groupids which are having status as success with two error
  4. the number of groupids which are having status as success with three error

The sample data is

Date Callid Status
28/04/2020 08:10 callid1 new
28/04/2020 08:12 callid1 error
28/04/2020 08:15 callid1 success
28/04/2020 08:18 callid2 new
28/04/2020 08:20 callid2 error
28/04/2020 08:30 callid3 inprogress
28/04/2020 08:40 callid3 success
28/04/2020 08:50 callid4 error
28/04/2020 08:51 callid4 error
28/04/2020 08:52 callid4 error
28/04/2020 08:53 callid4 success
2

I think the easiest way to do this would be with ESQL queries in Canvas. https://www.elastic.co/blog/getting-started-with-canvas-in-kibana

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.