Kibana Data table size limit

Elastic Stack Kibana
1

I'm trying to limit number of records aggregated by Data table visualization to 500 first results.
I've updated kibanaSavedObjectMeta.searchSourceJSON of my saved visualization object as follows:

{
  "index": "logstash-*",
  "size": 500,
  "query": {
    "query_string": {
      "query": "*",
      "analyze_wildcard": true
    }
  },
  "filter": []
}

i.e. added "size": 500 parameter, but it doesn't work at all. Is there any way to do it? I need to apply limit before_aggregation, not after like SQL limit keyword does.

2

What do your aggregations look like for the definition of that visualization? You can do the limit as part of the first aggregation by setting the order to descending and setting the limit to 500.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.