Kibana Query for missing values


(Anoop M K) #1

Hello,

We have values stored in Elastcisearch with different values for one key like below...
computer_name:1
computer_name:2
computer_name:3
etc
These values are coming from different client machines. Is there anyway i can visualize from KIBANA what values are missing today vs yesterday?

example:
Yesterday->
computer_name:1
computer_name:2
computer_name:3

Today->
computer_name:1
computer_name:3

Expected out put :- computer_name:2


(Felix Stürmer) #2

Hi @anoopmk007,

Such calculations across multiple documents are unfortunately not supported in Kibana. I would recommend to perform that calculation at index time using logstash (e.g. by combining the elasticsearch filter and the ruby filter.


(system) #3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.