Filtering records in kibana based on conditions

Elastic Stack Kibana
1

Hi, Can some one please help in the below scenario.
I have the data 1000 records with each record is having 10 fields.
I want to display the table with number of output fields.
one out put field calculation is :
field 3 = 12 or 13 or 14 and filed 4 = 1 or 2
I am using sum bucket metric aggregation and filters, It is not giving correct results in the combination.
when i use field 3 = 12 or 13 or 14 in one filter and by adding another filter for field 4=1 or 2
it is giving the total records for each filter instead of evaluating the whole condition

image

2

Hello @anji

Could you provide a sample document and show the calculation you wish to perform? It sounds to me like you wish to perform a calculation with two fields as inputs but I'm not sure if you wish to perform any calculations between documents.

Thanks,
Matt

3

Hi Matthew,
Thanks for looking in to the issue.

The sample data is
Callid State period accepted
1 2 3 yes
2 3 2 no
3 1 4 no
4 2 3 yes
5 3 2 yes
6 4 3 no

I want find the count of the records with state =2 or 3 and period =2 or 3 in the metric aggregation.

4

You can add a filter to the visualization itself via the query bar in the visualization editor -

Screen Shot 2020-04-24 at 10.38.57 AM
Screen Shot 2020-04-24 at 10.38.57 AM788×390 23.7 KB

5

Hi Matthew,

it is one of the field in data table. if i apply in search bar it will apply for all the metrics in the table which is not fulfill my equirement.

Even in search bar it is not giving correct result with and and or condition in one query

6

I think you need to write the filter in such a way as to provide the desired result when run on all the documents

7

Hi Matthew,
Even in search bar it is not giving correct result with and and or condition in one query

is there a way to filter with both or & and operations on two fields in one query to give the correct results

8

what query did you try and how did the result fail?

9

Hi Matthew,
I want the result with the condition (state :2 or sate :3) and (period :2 or period :3)

while i entering in kibana it is taking as below
state :2 or state:3 and period: 2 or period : 3

10

try (state :2 or state:3) and (period: 2 or period : 3)

11

Thanks Matthew it is working now

1 Like
12

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.