Kibana Visualize - How to aggregate data with two string field values?

Elastic Stack Kibana
1

I have data as follows in ElasticSearch. timestamp is a timestamp field and item_status, item_id are string fields.

timestamp                           item_id    item_status
January 24th 2018, 12:06:34.287     1               Processing
January 24th 2018, 12:10:14.310     1               Completed
January 25th 2018, 07:21:30.876     2               Cancelled
January 26th 2018, 09:11:55.775     3               Completed

I want to query this data such that I can get all items that have had both Processing and Completed as their status. In my case, my query result would just be:

item_id
1

How can I do this with Kibana Visualization? I have been doing something similar to How can I make visualization with GROUP BY and https://stackoverflow.com/questions/27467180/run-a-simple-sql-group-by-query-in-kibana-4 but it did not really get me what I wanted.

Thanks in advance!

2

A boolean query using must combined with a. terms aggregation on item_id field should get you what you are looking for.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.