How to translate this query to Kibana GUI

Hi all,

I am struggling with a table view that only shows interfaces that are utilized 70% or more.
I received something like below as guidance but have no clue how to capture this in the Kibana GUI interface. I can't find the Bucket Filter, Selector , Path etc to enforce this.

curl -XPOST "<>/_search" -H 'Content-Type: application/json' -d'
{
"size": 0,
"query": {
"bool": {
"must": [
{
"match": {
"element_class": "MetricFamily.Interface"
}
},
{
"match": {
"name": "Utilization"
}
}
]
}
},
"aggs": {
"interfaces": {
"terms": {
"field": "ci_name.keyword"
},
"aggs": {
"average": {
"avg": {
"field": "value"
}
},
"bucket_filter": {
"bucket_selector": {
"buckets_path": {
"averageUtilization": "average"
},
"script": "params.averageUtilization >= 70"
}
}
}
}
}
}'

Unfortunately, I don't believe this is currently possible until we support bucket selectors in Kibana. See https://github.com/elastic/kibana/issues/11167.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.