Picking up document which contains first recorded timestamp

Hi All,

We are pulling data from servicenow, where all the incident records are been pulled and there are duplicate incidents as well, and all the incidents are tagged with different different created time. We need to pull the first recorded time incident.

Is there a way to achieve or can we write any painless script to achieve this?

Please advice.

For your reference
image

Thanks
Gautham

Hello,

It sounds like you want a top hits agg. If you set the quantity to one it will give you the most recent document by the timestamp you've specified.

Regards,
Aaron

1 Like

@Aaron_Caldwell My scenario is like i would need the first entered time stamp, not the recent one.
Any advice on this please.

Thanks
Gautham