Often times we upgrade the agents and want to validate if we are receiving data from a particular host into the Kibana dashboard . Is there a simple quick query that can show data for last 1 hour .
I tried something like
tag.host = "host1" or tag.host ="host2"or tag.host ="host3" etc but what if I had 100 hosts ? Is there a query that can show like tag.host in "list of hosts" ? Any other easier ways ?
Thanks
Hi @MelasticSan, you probably want to ask this question in Elastic Observability where they may be able to help you a little more quickly, but this sounds like a good use case for aggregations: Aggregation-based | Kibana Guide [8.13] | Elastic
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.