Thank you for your answer. I used the aggregate filter in the logstash configuration file to extract the values, that way I didn't need the subqueries.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.