so I'm trying to build an area chart in Kibana 6.8 that visualizes the document count of a specific filter.
We have firewall logs and I want an area chart. One area is based on filtering specific source hosts. The other area consists of specific destination hosts. Now I want both of them in one chart, but one of them inverted.
I already found this tutorial https://www.elastic.co/blog/master-time-with-kibanas-new-time-series-visual-builder but the function doesn't seem to work if there is no calculation in the metric.
The aggregation "Calculation" is missing, so I guessed it has to be "Math". But taking the formular "params.test > 0 ? params.test* -1 : null" doesn't work on my end.
Am I doing something wrong here?
Thanks in advance!