WARNING: Version 4.0 of Kibana has passed its EOL date.
This documentation is no longer being maintained and may be removed. If you are running this version, we strongly advise you to upgrade. For the latest information, see the current release documentation.
Data Tableedit
- Count
- The count aggregation returns a raw count of the elements in the selected index pattern.
- Average
- This aggregation returns the average of a numeric field. Select a field from the drop-down.
- Sum
- The sum aggregation returns the total sum of a numeric field. Select a field from the drop-down.
- Min
- The min aggregation returns the minimum value of a numeric field. Select a field from the drop-down.
- Max
- The max aggregation returns the maximum value of a numeric field. Select a field from the drop-down.
- Unique Count
- The cardinality aggregation returns the number of unique values in a field. Select a field from the drop-down.
- Standard Deviation
- The extended stats aggregation returns the standard deviation of data in a numeric field. Select a field from the drop-down.
- Percentile
- The percentile aggregation returns the percentile rank of values in a numeric field. Select a field from the drop-down, then specify a range in the Percentiles fields. Click the X to remove a percentile field. Click + Add Percent to add a percentile field.
You can add an aggregation by clicking the + Add Aggregation button.
The rows of the data table are called buckets. You can define buckets to split the table into rows or to split the table into additional tables.
Each bucket type supports the following aggregations:
- Date Histogram
- A date histogram is built from a numeric field and organized by date. You can specify a time frame for the intervals in seconds, minutes, hours, days, weeks, months, or years.
- Histogram
- A standard histogram is built from a numeric field. Specify an integer interval for this field. Select the Show empty buckets checkbox to include empty intervals in the histogram.
- Range
- With a range aggregation, you can specify ranges of values for a numeric field. Click Add Range to add a set of range endpoints. Click the red (x) symbol to remove a range.
- Terms
- A terms aggregation enables you to specify the top or bottom n elements of a given field to display, ordered by count or a custom metric.
- Filters
- You can specify a set of filters for the data. You can specify a filter as a query string or in JSON format, just as in the Discover search bar. Click Add Filter to add another filter.
- Significant Terms
- Displays the results of the experimental significant terms aggregation. The value of the Size parameter defines the number of entries this aggregation returns.
- Geohash
- The geohash aggregation displays points based on the geohash coordinates.
Once you’ve specified a bucket type aggregation, you can define sub-aggregations to refine the visualization. Click + Add Sub Aggregation to define a sub-aggregation, then choose Split Rows or Split Table, then select a sub-aggregation from the list of types.
You can use the up or down arrows to the right of the aggregation’s type to change the aggregation’s priority.
You can click the Advanced link to display more customization options for your metrics or bucket aggregation:
- Exclude Pattern
- Specify a pattern in this field to exclude from the results.
- Exclude Pattern Flags
- A standard set of Java flags for the exclusion pattern.
- Include Pattern
- Specify a pattern in this field to include in the results.
- Include Pattern Flags
- A standard set of Java flags for the inclusion pattern.
- JSON Input
- A text field where you can add specific JSON-formatted properties to merge with the aggregation definition, as in the following example:
{ "script" : "doc['grade'].value * 1.2" }
In Elasticsearch releases 1.4.3 and later, this functionality requires you to enable dynamic Groovy scripting.
The availability of these options varies depending on the aggregation you choose.
Select view options to change the following aspects of the table:
- Per Page
- This field controls the pagination of the table. The default value is ten rows per page.
Checkboxes are available to enable and disable the following behaviors:
- Show metrics for every bucket/level
- Check this box to display the intermediate results for each bucket aggregation.
- Show partial rows
- Check this box to display a row even when there is no result.
Enabling these behaviors may have a substantial effect on performance.