I'm trying to intercept Kibana query to ES. I need for the Dashboards only to use a subset of documents as it's DATA. This can't be achieved as a dashboard filter.
How can this be achieved? Do I need to intercept the query? how do I only use a subset of the index data for the Kibana visualizations?