How to subtract field value from constant and display in Timelion?


#1

Hi,

I am using ELK GA 5.0.0. I have a timelion visualization like below;

.es(index=myindex-*,q='fielda:data1',metric=max:my_info_a).label("Max")

This plots max value of my field my_info_a. But what I want is, I want to subtract this number from 100, and then display max of that value. Is this possible?

Thank you.


(Joe Fleming) #2

Using .subtract(100).abs() is mostly equivalent. It falls apart if you're dealing with values over 100 though.

Timeline works by chaining operations together, so subtracting by a number is pretty simple, but I don't know the expression language well enough to subtract the value from a number.


(system) #3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.