get only last value

[carioka88]

In my dashboard, I would like to show the last status value of my hosts creating a term pie panel.
For example, in the last hour, a host has been checked 3 times,
The first time I get:
HOST STATUS TIMESTAMP
host1 Warning 12:15
host2 OK 12:20
The second time,
host1 Critical 12:30
host2 OK 12:35
The last time,
host1 OK 12:45
host2 Critical 12:50

With Kibana, my term pie panel shows 3 portions on it:
1-Warning, 2-Critical and 3-OK

What I would like to get, is the last value: OK for host1 and Critical for host2.
If this possible with Kibana? Is there any filter or way to only get the last value depending on the timestamp?

Thank you

[rashidkpc]

Unfortunately this is not currently possible. You could sort of accomplish this will elasticsearch's top_hits aggregation, but we don't currently support it in Kibana. There is a ticket (#2024) to implement a table view using top_hits, but I'm not sure a pie would be useful here as each slice would only contain a single value?

[carioka88]

Could it be possible if I create a scripted dashboard and make use of top_hits aggregation?

[rashidkpc]

scripted dashboards don't allow you to create custom aggs

[carioka88]

it's good to know.
Thank you!

[rashidkpc]

Dupe of #678