Plot with filter

[ventrca]

Hi,

I'm trying to create a simple visualization:
it's a chart line but where I want to consider in the aggregation only the logs that have to equal fields (that in this case are keyword).

I'm able to create the ES query but I need to plot it.

{
  "query": { 
    "bool": { 
      "must": [
        { "exists": { "field":"A"}},
        { "script" : {
          "script" : "doc['A.keyword'].value != doc['B.keyword'].value"
          }
        }
      ]
    }
  }
}

Thank you

[Stacey_Gammon]

Try putting that query in the Edit Query DSL portion of the Add filter dialog:

[ventrca]

Thank you for the quick answer,
this works very well, but what if I want a visualization where in the same graph I there are two lines, one with the filtered values, and one with all the values?

[ventrca]

@Stacey_Gammon there's no way to do this?

[Stacey_Gammon]

Might be able to do something in timelion, the expression language allows for a lot of flexibility and it's for time series data. Perhaps worth exploring!