Is it possible to add filters to aggregations?

[nnikushkin]

Hello!

I am testing Enhanced Table (one with aggregation)

I want for this set of data:

DELETE prices

PUT prices
{
  "mappings": {
    "properties": {
      "name": {
        "type": "keyword"
      },
      "group": {
        "type": "keyword"
      },
      "date": {
        "type": "date"
      },
      "alive": {
        "type": "boolean"
      }
    }
  }
}

POST prices/_doc
{
  "date": "2025-01-01",
  "name": "aaa_01",
  "group": "aaa",
  "alive": true
}

POST prices/_doc
{
  "date": "2025-01-01",
  "name": "aaa_02",
  "group": "aaa",
  "alive": false
}

POST prices/_doc
{
  "date": "2025-01-01",
  "name": "bbb_01",
  "group": "bbb",
  "alive": false
}

POST prices/_doc
{
  "date": "2025-01-02",
  "name": "aaa_01",
  "group": "aaa",
  "alive": true
}

POST prices/_doc
{
  "date": "2025-01-02",
  "name": "aaa_02",
  "group": "aaa",
  "alive": false
}

POST prices/_doc
{
  "date": "2025-01-02",
  "name": "bbb_01",
  "group": "bbb",
  "alive": true
}

build a table like this:

I partially achieved what I wanted by using "terms" aggregation for rows and "date histogram" aggregation for columns, however, I could not overcome these issues:

1. How to build the "total" column that actually count metric, however, only the latest day is taken? I tried to put the latest state to the separate index, so I could specify via KQL "_index: latest_prices_state" to filter values in the column, however, could not find where I can do this in the plugin. Is it possible?
2. How to apply KQL to "date histogram" aggregation? I tried JSON input under "Advanced" section, however, it supports only aggregation fields but does not support queries. Is there a way how I can achieve this?

My current workaround is specifying "alive: true" in global search KQL panel and drop the "total" column

Hope that you could give a hint here

Thank you!

[fbaligand]

Well, I'm very sorry but I see no way to do what you try to achieve.

[nnikushkin]

Thank you for your reply and confirming that it is not possible!