I posted a question recently about cross-tabulation of data, and I thought rather than try and create what is in my head, I'd see if anyone can suggest a different way of presenting the data I need.
So I have a bunch of documents representing messages being sent. Each record has a destination address, and a status to say whether it sent or not.
2016-12-02 01:00:00 firstname.lastname@example.org success 2016-12-02 01:00:00 email@example.com success 2016-12-02 01:00:00 firstname.lastname@example.org fail 2016-12-02 02:00:00 email@example.com fail 2016-12-02 02:00:00 firstname.lastname@example.org success 2016-12-02 02:00:00 email@example.com fail
And what I currently report is a summary of destinations, and how successful sends are:
address sent success% -------------------------- firstname.lastname@example.org 2 50% email@example.com 2 100% firstname.lastname@example.org 2 0%
I don't seem to be able to create such a visualisation in Kibana, so I was wondering if someone else had any suggestions.
The key bit to report on is which ones have the worst success rate, regardless of the total number sent, so some way of showing the "Top 20 Bad Addresses" would probably do.