Content Comparison

...

Configuration
search on onap* not log*
change "index name or pattern" to onap* and select a "time filter field name" to @timestamp

after create | discoveronap | split rows | aggregatiuon=terms | field=source.keyword | size=100, play

http://k8s:30253/app/kibana#/discover?_g=()&_a=(columns:!(_source),index:'onap*',interval:auto,query:(query_string:(analyze_wildcard:!t,query:'*')),sort:!('@timestamp',desc))

...