Kibana Aggregation/Search Documents

Elastic Stack Kibana
1

Hi,
I want to list the members which are active. It is possible that member's new status is inactive but previously it was active. How can I create data table with such visualisation so that I will not see member whose recent status is inactive?

Example.

{
"name":"member1",
 "status":"active"
}
{
"name":"member2",
"status":"active"
}
{
"name":"member1",
"status":"inactive"
}

Now in datatable I only want to show member2 as his status is active and member1 is inactive.
Any help will be useful.

2

Hi,

can you have multiple documents that state that member one is active like:

{ id: 0, name: 'member1', status: 'active'}
{ id: 1, name: 'member1', status: 'active'}
{ id: 2, name: 'member1', status: 'inactive'}
{ id: 3, name: 'member1', status: 'active'}

or you have at max 2 document per member name?

Does the status can be come active again?
And final question: does the current status depends on time? like the last status in a specified time range is the current one?

3

@markov00 Yes, I can have multiple documents for any member based on the time when he comes active or be inactive and the status of the member can be changed or he can be active again.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.