hi guys, my numeric data is coming aggregating , so i am using aggregation "sum of serial difference of values" to take delta...how do i put this delta in KQL filter in search box... example value1 : 20 value 2: 50 delta : 30 need KQL syntax to get results detla 30

KQL syntax for serial difference/delta filter

Muhammad_Faisal (abc123) March 3, 2021, 8:33pm 3

thanks..then how do we put a filter in watcher JSON to get only those docs where "delta" is greater than particular value...

for example ,
value 1: 50, doc:1
value2 : 50, doc:2
value 3: 100, doc : 3 - delta : 50 ,

need to set a filter in watcher alert when delta is greater than 0

Topic		Replies	Views
Difference between two aggregations Kibana painless	11	1720	March 28, 2022
How to put the value of {{ctx.payload.aggregations.bucketAgg.buckets}} into Watcher body Kibana	1	416	June 18, 2020
Kibana Watcher Advanced query is not working as expected Kibana	5	525	November 27, 2020
Need help with {{ctx.payload.aggregations.bucketAgg.buckets.key : null}} in watcher hence wont trigger email action Kibana	2	525	June 27, 2020
Difference between two aggregations in Kibana. Error Kibana	4	893	July 7, 2020