For a given folderName and Doc_name, we need to check what are the values of Doc_IDs

Elastic Stack Kibana
1

For a given folderName and Doc_name, we need to check what are the values of Doc_IDs.
Eg. There are 3 Doc_Ids (-1, 922554842, 922555415) for the foldername=6537134057912042024 and Doc_Name= ka28en4592.zip.
Now we need to show the data which has only one type of Doc_Id i.e -1.
Kindly note that, Doc ID -1 can occur multiple times. However, if there is any other Doc_ID present along with -1, we need to ignore this record from table.

Please suggest, which type of visulaization/conditions we can use to implement this requirement.

PFA screenshot of Data. According to this requirement, we need to return only one row which is highlighted.

image
image758×385 26.2 KB

2

If I understand correctly, you want to aggregate your index by two fields and then filter results with a cardinality higher than 1. This is not possible with Lens, so you would need to create a custom visualization to get full control over the query and data rendering.