I'm trying to display the average CPU temperature of a set of devices, but I need to remove the zeros, as they (obviously because devices are not in the freezer ) mean that the temperature sensor is just malfunctioning. I'm trying to do this with a Lucene query, but I cannot make it work with the NOT operator.
I've been investigating a bit on this and on Lucene queries in general, and I could not find much, apart from some hints that NOT conditions cannot be used in Lucene without other positive operators, but I'm surprised because removing certain values from a calculation seems like a pretty basic need, right?
This is my query right now. It's giving a syntax error (if I remove the "NOT", it works fine):
.es(index=device_monitoring*, timefield=dt_EventTimestamp, metric=avg:vl_CPU_Temperature, q=NOT vl_CPU_Temperature:0)
Thanks a lot in advance for your insight!