How to exhibit last record for each different possibility in a field?

[b3owu1f (Carlos)]

Greetings,

I need help to find a way to exhibit the following type of data, filtering Locomotive id field to not repeat, showing only the last available record for each different Locomotive id in a given period of time.

Thank you in advance for any help and directions.

Kibana Version: 5.6.15

[tsullivan (Tim Sullivan)]

What about splitting the rows by the Locomotive ID terms, and having a metric column for the max of @timestamp?

In Kibana 7.5:

[b3owu1f (Carlos)]

That worked really well, it sorted perfectly. Thank you!
I still need some fields from the search to show up in the visualization. I don't need any extra rules on them, they just need to show up along in the current results. Is that possible?

Thank you in advance for all the help.

[tsullivan (Tim Sullivan)]

Hi, you can show field additional field values in 2 ways:

1. Using the "Top Hits" metric aggregation: click the Add button in the Metrics panel and you can choose fields for a column of values of that field

2. You can sub-aggregate the terms aggregations of name by clicking the Add button in the Buckets panel