Using invert Iclusion of a saved Query

Elastic Stack Kibana
1

Hello there,

i have an Problem by solving my use case.

I created and saved a query. This query is filtering values of a String field.
Then i was creating a visualization with a Invert inclusion reference to this query.
This is working still fine till now.

But if i'm adding some more values of the field to the saved query,
the chances won't influcene to the connected Visualization.

How can i solve this Problem?

Is there a was to use the invert inclusion targeted on an ID or s.th. else of the saved query?

I hope i descibed my use-case cleary.

thanks for spending time helping me by solving the Problem!
greets
dzoni

2

But if i'm adding some more values of the field to the saved query,
the chances won't influcene to the connected Visualization.

A saved query does not link the query to the visualiation. This means if the saved query changes, the visualization will not be updated with the changes to the saved query.

Use a saved search to link a search to a visualization. The visualization will stay in sync with any changes to saved search

1 Like
3

Hello Nathan_Reese,

first i tried it with the saved search. But with this i cant use the Invert inclusion function.
When i link the saved search in two different visualization i cant use in one visualization this function.

Then i have to do two saved searches, and then i have to Change Always both.

But i want to have one saved query/search used in both visualizations. and if i Change the saved query/search both visialization will update, one like normal and the other with the inverted inclussion.

Do anyone have an idea???

Greets

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.