One search in discover being used for different visualisation

[skshandilya69 (Sandeep Shandilya)]

I have many nodes, and each node sends an event that happens repeatedly every 12 hours. all nodes do not send this at the same time.
I need one saved search which is very generic, I want to visualise this through various aggregations and filters. need help with visualisations that filter using node UUID as unique count. ( I do not want repeats of the same event )
I want to use the "data table" to display nodes, with Eg. release channel, or with company name etc ...

[Marco_Liberati]

Hi @skshandilya69

have you considered use a saved query? That can be reused within Lens editor.

[skshandilya69 (Sandeep Shandilya)]

will give this a shot

[skshandilya69 (Sandeep Shandilya)]

I am on version 2.8, so we have no Kibana Lens, difficult to upgrade. I am already using saved searches, I don't think this old version supports saved queries?

[Marco_Liberati]

Sorry, version 2.8 of the ELK stack? Are you sure?