Using aggregation based filter DSL

Elastic Stack Elasticsearch
1

Hey there all,

I have an event index where I have several fields of interest:

  • Device id
  • Device type
  • Event type
  • Event sub-type (every type has up to 4 sub-types, some only 1)

My initial goal was to build a data table in Kibana which would look like this:

|--device_id--|--device type--|--event type--|--event sub-type--|--count--|

Which I did successfully. Now, use case is that to be able to filter this data based on count field that I have created using aggregations in data table. Is it possible to use Query DSL based filter which will be able to filter based on this aggregation?

Please, let me know if this question is mainly Kibana related. Then, I will move my question there.
Thanks!

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.