# Last value of a series kibana

**URL:** https://discuss.elastic.co/t/last-value-of-a-series-kibana/184282
**Category:** Kibana
**Created:** [June 5, 2019, 6:15am UTC](https://discuss.elastic.co/t/last-value-of-a-series-kibana/184282 "2019-06-05T06:15:33Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![francisaugusto](https://avatars.discourse-cdn.com/v4/letter/f/c37758/32.png) [@francisaugusto](https://discuss.elastic.co/u/francisaugusto)
#### Post date: [June 5, 2019, 6:15am UTC](https://discuss.elastic.co/t/last-value-of-a-series-kibana/184282/1 "2019-06-05T06:15:33Z")

</div>

Hi there,

I am creating a table that counts apache accesses. I like to have the count number on the table so that I have an idea of which clients are sending most requests.  
If I add @timestamp to the table, then I don't get a proper count - obviously, as the rows from the same origin will no longer be the same.

But is there a way to show the last @timestamp for that client on the table?

Best,

Francis

---

<div class="post-metadata">

### Author: ![markov00](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/markov00/32/33316_2.png) [@markov00](https://discuss.elastic.co/u/markov00)
#### Post date: [June 27, 2019, 10:44am UTC](https://discuss.elastic.co/t/last-value-of-a-series-kibana/184282/2 "2019-06-27T10:44:26Z")

</div>

Hi @francisaugusto  
Can I ask you if you can provide an example of what the table should looks like?  
Are you trying to aggregate apache access by client (ip or another ID), sorting them by count and also displaying the last timestamp for each client? something like

| client ip | count | last seen |
| --- | --- | --- |
| 10.0.0.2 | 100 | 2019-03-04 00:00:01:000 |
| 10.0.0.7 | 88 | 2019-02-04 00:00:01:000 |
| 10.0.0.4 | 52 | 2019-02-04 00:00:01:000 |
| 10.0.0.6 | 23 | 2019-06-04 00:00:01:000 |

If this is your request I think you can use a `Data Table` visualization with two metrics: count and top hits like in the following screenshot. The Bucket is a `Terms` aggregation on `client ips`, with the sorting based on the `count` metric.  
Than I've added a second metric to display the `Top Hits` of the `timestamp` field

 ![50](https://us1.discourse-cdn.com/elastic/original/3X/8/9/896e1cc5c458d7fe70d0c7e5ffe430acea4828ec.png)

---

<div class="post-metadata">

### Author: ![francisaugusto](https://avatars.discourse-cdn.com/v4/letter/f/c37758/32.png) [@francisaugusto](https://discuss.elastic.co/u/francisaugusto)
#### Post date: [June 27, 2019, 1:19pm UTC](https://discuss.elastic.co/t/last-value-of-a-series-kibana/184282/3 "2019-06-27T13:19:46Z")

</div>

@markov00 Thanks a lot! That's exactly what I was hoping to implement.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 25, 2019, 1:19pm UTC](https://discuss.elastic.co/t/last-value-of-a-series-kibana/184282/4 "2019-07-25T13:19:55Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.