Thank you for your reply.
For people looking for a starting point, zammad creates these indexes;
zammad_production_stats_store
zammad_production_knowledge_base_translation
zammad_production_organization
zammad_production_ticket
zammad_production_knowledge_base_category_translation
zammad_production_user
zammad_production_knowledge_base_answer_translation
zammad_production_cti_log
probably the most useful starting point is this configuration;
also keep in mind, grafana currently removed the advanced query editor; Elasticsearch: Reintroduce raw query editor · Issue #3163 · grafana/grafana · GitHub which makes some more advanced queries difficult to accomplish.
If i’ve found some useful queries i’ll share them here.