Find hosts that do not have any documents matching a query

Is it possible to create a dashboard that lists all unique hosts that do not have any documents matching a particular query? Thanks for any tips you might have!

You can add to your dashboard (and many other Kibana apps) a filter with any custom Elasticsearch DSL Query. You can actually later reverse the query or disable it if you want. Then in the dashboard itself, you can create a lens visualization as a data table with the aggregation you need.

1 Like

Thank you!

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.