Get the timestamp when the max value is reached

I do collect data about usage from some logs, I was able to build a timelion visualization with this command:

.es(index=xxx,metric='max:peak_qty',timefield='ts',q='xxx')

where xxx is a value that I provide.

No issues with that, but I would like to build a table visualization with aggregation max along with the timestamp when it max happened, I am filtering by day, let's say March 1st the max value was X at 15:02:00.000 but I got March 1st 2018, 00:00:00.000
Is it possible?

Why not just use a data table visualization? Is this what you're looking for?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.