Kibana Query for missing values

Hello,

We have values stored in Elastcisearch with different values for one key like below...
computer_name:1
computer_name:2
computer_name:3
etc
These values are coming from different client machines. Is there anyway i can visualize from KIBANA what values are missing today vs yesterday?

example:
Yesterday->
computer_name:1
computer_name:2
computer_name:3

Today->
computer_name:1
computer_name:3

Expected out put :- computer_name:2

Hi @anoopmk007,

Such calculations across multiple documents are unfortunately not supported in Kibana. I would recommend to perform that calculation at index time using logstash (e.g. by combining the elasticsearch filter and the ruby filter.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.