Showing only non-cleared events in a visualization

I would like to make a visualization that only displays memory, CPU, and file system events.

The trick is, I would like the visualization to only display these events if they are still over the threshold, but hosts where the memory, CPU, or file system has returned under their configured threshold will not be displayed.

Is this something I can accomplish with elastic using the included web features, or does this require Vega code to accomplish.

Any guidance or documentation recommendations would be awesome! Thanks in advance!

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.