# Showing only non-cleared events in a visualization

**URL:** <https://discuss.elastic.co/t/showing-only-non-cleared-events-in-a-visualization/316138>\
**Category:** Elasticsearch\
**Tags:** vega, kql-kibana-query-language\
**Created:** [October 8, 2022, 9:27pm UTC](https://discuss.elastic.co/t/showing-only-non-cleared-events-in-a-visualization/316138 "2022-10-08T21:27:53Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![DirtyRaven](https://avatars.discourse-cdn.com/v4/letter/d/97f17d/32.png) [@DirtyRaven](https://discuss.elastic.co/u/DirtyRaven)\
**Post date:** [October 8, 2022, 9:27pm UTC](https://discuss.elastic.co/t/showing-only-non-cleared-events-in-a-visualization/316138/1 "2022-10-08T21:27:53Z")

</div>

I would like to make a visualization that only displays memory, CPU, and file system events.

The trick is, I would like the visualization to only display these events if they are still over the threshold, but hosts where the memory, CPU, or file system has returned under their configured threshold will not be displayed.

Is this something I can accomplish with elastic using the included web features, or does this require Vega code to accomplish.

Any guidance or documentation recommendations would be awesome! Thanks in advance!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 5, 2022, 9:28pm UTC](https://discuss.elastic.co/t/showing-only-non-cleared-events-in-a-visualization/316138/2 "2022-11-05T21:28:03Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.