In Elastic search we store events, I have built data table which aggregates based on event types. I have filter which checks for event.keyword : "job-completed". I am getting the count as 1 or 0 but i want to display as completed / in-progress.
How to achieve this in Kibana ?
Welcome to our community! 
Ideally you would do this before indexing it to Elasticsearch. How are you sending the data to Elasticsearch?
You can do this with a static lookup scripted field as seen below. But keep in mind that scripted fields are processed for every row, every time it is queried. If performance is not an issue you can do it that way. If performance is an issue then it would be best to create that field before or during ingestion.
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.
