Find hosts that do not have any documents matching a query

Elastic Stack Kibana
1

Is it possible to create a dashboard that lists all unique hosts that do not have any documents matching a particular query? Thanks for any tips you might have!

2

You can add to your dashboard (and many other Kibana apps) a filter with any custom Elasticsearch DSL Query. You can actually later reverse the query or disable it if you want. Then in the dashboard itself, you can create a lens visualization as a data table with the aggregation you need.

image
image1564×840 57.4 KB

3

Thank you!