Using Logstash I have JSON docs that gets stored into Elastic Search every minute with the most current timestamp, and with c1 being the count of rows returned by a SQL Query.
"c1" => 0,
"@version" => "1",
"@timestamp" => "2015-10-22T19:10:00.258Z",
"type" => "testuser1-counts",
"username" => "testuser1"
Using Kibana and the following Query string, i'm able to fetch all the JSON docs persisted into Elastic search associated with the type testuser1-counts.
However what Query string can I use in Kibana to fetch the one JSON doc with the latest timestamp, that way I have access to the latest c1 count?