How to subtract field value from constant and display in Timelion?



I am using ELK GA 5.0.0. I have a timelion visualization like below;


This plots max value of my field my_info_a. But what I want is, I want to subtract this number from 100, and then display max of that value. Is this possible?

Thank you.

(Joe Fleming) #2

Using .subtract(100).abs() is mostly equivalent. It falls apart if you're dealing with values over 100 though.

Timeline works by chaining operations together, so subtracting by a number is pretty simple, but I don't know the expression language well enough to subtract the value from a number.

(system) #3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.