I created index pattern and it has 4 fields(timestamp,Id,Type,Count). Need to get the most recent(based on the timestamp)rows with unique Type. Sample data: |timestamp|ID|Type|Count| |1/10/2022|1|A|12| |1/11/2022|2|A|13| |1/12/2022|3|A|2| |1/13/2022|3|C|4| |1/14/2022|1|C|8| |1/15/2022|5|B|9| …

Discuss the Elastic Stack

Get most recent distinct rows as kibana table

Elastic Stack Kibana

Tomo_M (Tomohiro Mitani) June 8, 2022, 8:24am 2

Hi,

Here is an example.

Use Terms aggregation with Max sub-aggregation on timestamp field for split rows Buckets.

Use Tophit Aggregation sort by timestamp.

2 Likes

Group by kibana Query

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.