For mostly historical reasons the series agg function in TSVB doesn't support any chained functions that come after. You might be able to find a workaround using TSVB bucket scripting, but if that isn't working then you may be better served by Vega. You can find a new Vega-Lite in Kibana tutorial here
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.