# \[SOLVED\] Exclude some values in elasticsearch

**URL:** <https://discuss.elastic.co/t/solved-exclude-some-values-in-elasticsearch/54015>\
**Category:** Elasticsearch\
**Created:** [June 27, 2016, 9:02am UTC](https://discuss.elastic.co/t/solved-exclude-some-values-in-elasticsearch/54015 "2016-06-27T09:02:16Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Alex\_Lum](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alex_lum/32/84472_2.png) [@Alex\_Lum](https://discuss.elastic.co/u/Alex_Lum)\
**Post date:** [June 27, 2016, 9:02am UTC](https://discuss.elastic.co/t/solved-exclude-some-values-in-elasticsearch/54015/1 "2016-06-27T09:02:16Z")

</div>

Hello,  
I 've a graph who sum all received byte on my fortigate, but sometimes, i've got double or triple logs, so it makes my graph unreadable.  
can i ignore or remove some values.

example : all sum of value that exceed 1 000 000 are ignored.

Thanks.

---

<div class="post-metadata">

**Author:** ![nik9000](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nik9000/32/44947_2.png) [@nik9000](https://discuss.elastic.co/u/nik9000)\
**Post date:** [June 27, 2016, 1:18pm UTC](https://discuss.elastic.co/t/solved-exclude-some-values-in-elasticsearch/54015/2 "2016-06-27T13:18:03Z")

</div>

You can either throw those out in the application consuming the data, or, possibly, you can throw them out using a [pipeline aggregation](https://www.elastic.co/guide/en/elasticsearch/reference/current/search-aggregations-pipeline.html).

---

<div class="post-metadata">

**Author:** ![Alex\_Lum](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/alex_lum/32/84472_2.png) [@Alex\_Lum](https://discuss.elastic.co/u/Alex_Lum)\
**Post date:** [June 27, 2016, 1:59pm UTC](https://discuss.elastic.co/t/solved-exclude-some-values-in-elasticsearch/54015/3 "2016-06-27T13:59:49Z")

</div>

thanks a lot.  
solved.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 5, 2017, 10:40pm UTC](https://discuss.elastic.co/t/solved-exclude-some-values-in-elasticsearch/54015/4 "2017-07-05T22:40:12Z")

</div>