Filtered Aggregations over __time Interval

Hey guys,

I asked this earlier about secondary timestamps, but with the capability offered by theta sketches I’m wondering if there is a recommended approach for filtered aggregators over a __time interval. Would you use the Time Format Extraction Function and turn the interval into OR buckets, write a javascript extraction function, or am I missing some other possibility?



Hi Michael, what is the use case you are trying to solve?

Writing a pseudo-funnel using the thetasketches. Each step is a theta intersection with the intersection of all of the previous steps. Trying to build all the theta sketches using filtered aggregations in the same style as the example in the docs.