Graylog2 / Graylog2/graylog2-server

Filter aggregation result by result

Open
#7,742 0 comments 0 reactions 0 assignees View on GitHub
feature search
Dominant language
Java
Stars
8.1k
Forks
1.1k
Avg merge
1d 20h
Merged PRs (30d)
217

Description

## What?
It would be helpful to filter the displayed data by the result they have.
For example:
- We have a web server access log file.
- We want an aggregation showing the IP address and their time on our web server. (took_ms)
- To make the visualization a bit clearer we only want to display if the aggregated took_ms is
greater then say 3000ms. The rest we do not want to display.

Right now there is no way to filter out irrelevant data.

## Why?
If you display hundreds of IPs in your visualization the graphs can be quite small and cluttered with
a lot of small value ips which in sum might matter but not them alone. So the user would like to
filter these results.

## Your Environment

* Graylog Version:
* Elasticsearch Version:
* MongoDB Version:
* Operating System:
* Browser version:

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.