How can i contact multiple events by a field

Elastic Stack Elasticsearch
1

i have a field named ID ，maybe 3 or 4 events use the same ID for example a field named Result ，it contain four result leave ，cancel ，success ， error， now events [ID:5728][Result:leave],
[ID:5728][Result:success],[ID:5729][Result:leave],[ID:5729][Result:cancel] then when i statistics ，if result have success ,use success as result , if result have cancel but not success ,use cancel as result , if only have leave , use leave as result, and i want to make a pie to statistical percentage

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.