elasticsearch,Kibana" />
elasticsearch,kibana,Sql,Kibana Canvas essql数据表查询，在给定几个条件的情况下选择最近的记录
我需要一些帮助来创建一个查询，以便使用Kibana Canvas数据表填充员工状态板。ES索引（prox reader-*）接收来自徽章读取器的日志，该读取器在员工签到或签到时发送事件。这个想法是状态板应该只显示当前在场的员工名单。我的目标是以这样的方式结束：Kibana Canvas essql数据表查询，在给定几个条件的情况下选择最近的记录,sql,
elasticsearch,kibana,Sql,
| Employee | Time In |
--------------------------------
| Bob | 8:00 AM |
| Alice | 8:03 AM |
| Jim | 8:06 AM |
| Employee | Time |
--------------------------------
| Bob | 8:00 AM |
| Alice | 8:03 AM |
| Jim | 8:06 AM |
| Jim | 10:06 AM |
| Bob | 11:15 AM |
filters
| essql
query="SELECT
full_name AS Employee,
(\"@timestamp\" - INTERVAL 5 HOUR) AS Time
FROM \"prox-reader-*\"
WHERE \"reader\" LIKE 'Entry Door Reader'
AND \"event\" LIKE '8'
"
| mapColumn "Time" fn={getCell "Time" | formatdate format="hh:mm A"}
| table perPage=15
| render
| Employee | Time In |
--------------------------------
| Bob | 8:00 AM |
| Alice | 8:03 AM |
| Jim | 8:06 AM |
| Employee | Time |
--------------------------------
| Bob | 8:00 AM |
| Alice | 8:03 AM |
| Jim | 8:06 AM |
| Jim | 10:06 AM |
| Bob | 11:15 AM |