Query to Check if a Value has Changed


(Jar Jarder) #1

Good day,

I want to run a query on an index to see if a value has changed for a certain field after a certain date.

For example, my document looks like this:

{
"@timestamp" : "2016-09-22T00:02:02.297Z",
"result" : "successful",
"test_class" : "A"
}

I want to get which test_class started to have a result == failure after a certain timestamp, given that test_class used to have result == successful before that said timestamp.

Is this query possible using kibana filters?

Background: I have an automated test that stores its results in elasticsearch. I want to know which tests started to fail after a certain change was done.

Thanks


(system) #2