Get List of top occurance for specific condition

I am having an index where data is logged with a success/fail flag for a specific item.
I want to get a unique list of items who has fail and never a success. Usually a success is expected after fail from time perspective

Sample input

Date User Status
Jan 01 user1 Fail
Jan 02 User1 Success
Jan 01 User2 Fail
Jan 02 User2 Fail

Output would be only user2

Hi @nada.nasser

filtering based on aggregations results is not yet possible in Lens.
You can track this issue for such feature progress: [Lens] Allow client-side bucket filtering of numbers by selecting the visible number range · Issue #86190 · elastic/kibana · GitHub

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.