I'd like to keep the columns the way they are, but exclude all the file name with size 0.
Yes, try entering this in the search bar above the visualization editor (where it currently has *
in it):
{ "range": { "file_meta.file_size": { "gt": 0 } } }
This performs an Elasticsearch range query. You can read more about it over here: https://www.elastic.co/guide/en/elasticsearch/reference/current/query-dsl-range-query.html
Thank you. Is there a way to include that query in the aggregation? (meaning without having to enter that in the search bar?
Ah..i figured it out..i can build the visualization based on the saved search using the range you provided above.