If I have a given search:
AND NOT payload.deviceRequestResponseEvent.responseCode:SUCCESS
And I want to find the unique values of a field, example below, not in the search above:
So the values from
payload.deviceRequestResponseEvent.responseCode might be
How do I do this in kibana or in the serach part of kibana
2 steps that should get what you want;
- Setup a filter with those terms
- Use a terms aggregation on that field, with a unique metric
This will likely be best displayed as a table.
I add my search in kibana -> discover
Then I add my filter with field name
but this only allows me to filter on field and there is an operator but this include "is, isnot ...exists"but there is no unique operator.
In the edit filter there is a
edit as query DSL, maybe i can write a script there, tho not familiar with that language.
Maybe you are referring to the create viualisation, which I have created a table in there, which I have worked out how to get the unique values of a field but that is just on the field, I can't apply a search/filter before getting the unique values of a chosen field. tks
You need to create a visualisation, usually in a dashboard. Discover is only for filtering as you have found.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.