Plot a table based on aggregate key values

Hi and HNY!

I am looking to put this kind of data every 30 minutes to Kibana under 1 index.
data1- {key: 'key1', user: 'A', manager: 'C', cnt1: 2, cnt2:4}
data2- {key: 'key2', user: 'B', manager: 'C', cnt1: 4, cnt2:5}
next 30 minute-
data1- {key: 'key3', user: 'A', manager: 'C', cnt1: 2, cnt2:1}
data2- {key: 'key4', user: 'B', manager: 'C', cnt1: 2, cnt2:1}

I want to plot aggregate table like -

User |Manager | Count1 | Count2
A | C | 4 | 5
B |C | 6 | 6

How I can achieve this? Kibana stack - 7.16.2

Hey! So if your data look like that:

{
  "took": 0,
  "timed_out": false,
  "_shards": {
    "total": 1,
    "successful": 1,
    "skipped": 0,
    "failed": 0
  },
  "hits": {
    "total": {
      "value": 4,
      "relation": "eq"
    },
    "max_score": 1,
    "hits": [
      {
        "_index": "discuss3",
        "_id": "1",
        "_score": 1,
        "_source": {
          "user": "A",
          "manager": "C",
          "cnt1": 2,
          "cnt2": 4,
          "id": 1
        }
      },
      {
        "_index": "discuss3",
        "_id": "2",
        "_score": 1,
        "_source": {
          "user": "B",
          "manager": "C",
          "cnt1": 4,
          "cnt2": 5,
          "id": 2
        }
      },
      {
        "_index": "discuss3",
        "_id": "3",
        "_score": 1,
        "_source": {
          "user": "B",
          "manager": "C",
          "cnt1": 2,
          "cnt2": 1,
          "id": 3
        }
      },
      {
        "_index": "discuss3",
        "_id": "4",
        "_score": 1,
        "_source": {
          "user": "A",
          "manager": "C",
          "cnt1": 2,
          "cnt2": 1,
          "id": 4
        }
      }
    ]
  }
}

then you can accomplish this in lens like that

Thanks a lot for reply.
I need a table to show value for current day. for current day, I know I can add a custom date field and filter the past day values.
I am not sure how I can render past values for each selected day(s)

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.