I'm quite new to Elastic & Kibana. I've used Splunk in the past and I was wondering if someone could point me in the right direction to do something as below
Let's say we have an indexed field called users. There are 1000+ users.
There is another field called response; which can be anywhere from 0 to 999;
Would it be possible to create a graph/table which only shows the users that have a percentage for a specific response over value X?
We have user no 1234;
In the last day, the response percentages for that user is as below
Would it be possible to create a table/visualisation that will show that user if it exceeds the threshold of response 1 to be over 80% ? If that's the case, would it be possible to create such table, that would be split by users and to show that type of data for all the available users?
If such thing is not possible using a visualisation, would it be possible to do it using a watcher?