How to exhibit last record for each different possibility in a field?


I need help to find a way to exhibit the following type of data, filtering Locomotive id field to not repeat, showing only the last available record for each different Locomotive id in a given period of time.

Thank you in advance for any help and directions.

Kibana Version: 5.6.15

What about splitting the rows by the Locomotive ID terms, and having a metric column for the max of @timestamp?

In Kibana 7.5:

That worked really well, it sorted perfectly. Thank you!
I still need some fields from the search to show up in the visualization. I don't need any extra rules on them, they just need to show up along in the current results. Is that possible?

Thank you in advance for all the help.

Hi, you can show field additional field values in 2 ways:

  1. Using the "Top Hits" metric aggregation: click the Add button in the Metrics panel and you can choose fields for a column of values of that field

  2. You can sub-aggregate the terms aggregations of name by clicking the Add button in the Buckets panel

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.