Hi all,
I want to ask a little weird question.
I have a different message from multiple machines. Is there possible to plot a bar chart which show value 1 when the message is exist and value 0 when the message is not exist (Do not want the total count of messages). The 1 and 0 data then stack up in the bar chart. For example if i have 2 machine and messages are exist in both machine, it will stack up like blue and yellow bar in the uploaded photo. If message only exist in blue machine it will only shown the blue bar.
interesting. ES doesn't support presence/absence out of the box.
You might want to look at a bucket script: https://www.elastic.co/guide/en/elasticsearch/reference/current/search-aggregations-pipeline-bucket-script-aggregation.html. You could write that logic in painless, so it might be possible with that, YMMV. You can use these custom scripts in TSVB,
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.