Visualisation based of an aggregated search

Is there a way to base a visualisation on the results of an aggregation? For example: I have data on logins to our wireless network. It is trivial to get a pie chart that shows the proportion of success & failures however this is biased by a large number IOT devices which have . What I want to do is filter out devices based on the number of failures -- to do this I need to perform a agregation search so I have count fields that I can filter on for the the visualisation.

The best way to achieve this is to use tranform to create an aggregation based on device/time may be and count the number of failure and all other metrics your need, then use the index procudced by tranform to create your viz. Otherwise this is a pipeline-bucket-selector that is not supported by Kibana in the viz framework.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.