Lucene query unique values


I am working in Kibana Canvas and have a datatable with a Lucene query filter.
Now, I only need a lucene query filter which only shows unique values.
Does somebody know the syntax?

I don't think you can do this using Lucene, but you can do it using ES SQL which is supported in Canvas. I would recommend using that instead.

When I use ES SQL and use specific SQL select distinct I got the message that Distinct is not supported...
How should I do this?

Right, but you can use GROUP BY.

When I use this, it works but with duplicates:

SELECT url.domain, summary.up 
FROM "heartbeat*" 
WHERE url.domain 

When I add GROUP BY, I got a parse error:

Whoops! Expression failed

Expression failed with the message:

[essql] > Unexpected error from Elasticsearch: [verification_exception] Found 1 problem(s) line 1:20: Cannot use non-grouped column [summary.up], expected [url.domain]

This is the SQL code:

SELECT url.domain, summary.up 
FROM "heartbeat*"
WHERE url.domain 
GROUP BY url.domain

The error message is explaining that you need to add summary.up to your GROUP BY: GROUP BY url.domain, summary.up

Ok, tnx.
With doing that, I got still duplicates but that's because summary.up could have 0 or 1.
Because of that, I try to add a time range. I only like to see the information from now - 11 seconds back. This would remove the duplicates because every 10 seconds heartbeat with do his checks.

I tried this:

But it doesn't work how I want it. Have you any suggestions?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.