# Bucket selector Kibana Data table visualization

**URL:** <https://discuss.elastic.co/t/bucket-selector-kibana-data-table-visualization/275573>\
**Category:** Kibana\
**Created:** [June 10, 2021, 1:00pm UTC](https://discuss.elastic.co/t/bucket-selector-kibana-data-table-visualization/275573 "2021-06-10T13:00:31Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![theDor](https://avatars.discourse-cdn.com/v4/letter/t/b4bc9f/32.png) [@theDor](https://discuss.elastic.co/u/theDor)\
**Post date:** [June 10, 2021, 1:00pm UTC](https://discuss.elastic.co/t/bucket-selector-kibana-data-table-visualization/275573/1 "2021-06-10T13:00:32Z")

</div>

Hello to every one,  
I have a simple data table visualization that using the sum metric on a field and displaying the results in a data table.  
Now my goal is to display only results that the sum is greater than X value. I didn't found any solution to this at the Kibana level, but I've managed to do that in elastic query with bucket selector and script, but from quick searching online I've figured out that bucket selector is not a feature in Kibana visualization at all.

Can someone provide me better option for my use case? Thank you very much!

---

<div class="post-metadata">

**Author:** ![linya](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/linya/32/87447_2.png) [@linya](https://discuss.elastic.co/u/linya)\
**Post date:** [June 11, 2021, 8:53pm UTC](https://discuss.elastic.co/t/bucket-selector-kibana-data-table-visualization/275573/2 "2021-06-11T20:53:05Z")

</div>

It is the case that Kibana visualizations currently don't support bucket selector aggregations. There are a couple of options you may be interested in (IMO the first one is simpler):

1. Use the [Transform](https://www.elastic.co/guide/en/elasticsearch/reference/current/transform-overview.html) feature to aggregate the source index into a reporting-friendly index that can be displayed in either Data Tables or Lens.

In the following example, a sample index containing `user` and `value` fields groups using the `user` field as terms and sums `value` to create a new `sum_of_value` field; this new `sum_of_value` field can then be filtered on for display purposes in visualization.

 ![transform-raw-data](https://us1.discourse-cdn.com/elastic/original/3X/e/e/ee28d5441f581d980d3eca698b87c513d7c5fe20.png)

1. Create a custom data table visualization using [Vega](https://vega.github.io/vega/examples/) and the bucket selector aggregation.

Vega is a declarative language for describing visualizations, and [Kibana supports](https://www.elastic.co/blog/getting-started-with-vega-visualizations-in-kibana) Vega visualizations using data from custom Elasticsearch queries. A data table output would look something as follows; there is no native table element in Vega so one would leverage rectangle and text objects instead; the example code is [here](https://vega.github.io/editor/#/url/vega/N4IgJAzgxgFgpgWwIYgFwhgF0wBwqgegIDc4BzJAOjIEtMYBXAI0poHsDp5kTykSArJQBWENgDsQAGhAATONABONHJnaT0AQQAETJBBpRtspJiTazTADZxtDA+LIW4AD0zak42dsVwo75EUAawhpEAB3Gll6NAAWAAZ4mXgaMiw0ACZEmRwkWVkaRzQBGRMzNABtUHEkBDg0EEUkcLDiJCsGBUrQezhFBs1W9s7MgA4AXykeiD6GgCEhjvrUAQFJ6dn0AGFFkdRYgGZ1kF7+9AARXeWATgBGY9OGgFErtFH7qZOZs5AAMVeVkdPo90ABxAG3a4Pb4NAASANGAHZxgBdY41OoNSw2MJiBiKKDLCqNZogFEyTBNcQQABmbEUCG6IEwAE8cMsQHSGQwrCgZPoGjSaHArLIAPoY+oyVw4H4AcjqlMMcpAx1Z7IakS8bBaMjEikwaFAQpFsgajxk9PkP30hK8hTIqsteEqjR1EoYCCYs3JnOFotCqGJj19AqDIBZYpwbAMagkZLVbI5XIQPL5IDDEajMbo6jCMp+ZU9lEj0dj6m0ACptFltABqbQCeJO0Dq5P01O8sKZlzZ8sSMW3fMuWUNW6JFvMpOCjtp7uBkC9su5gcZYej9BZZuJjXoFNz-kLyNWQpwPsryTSkeF0zF0s5uPibQAWm0twEk7bM+5XcPDV7J7iGey6PuuN6YMWS4Puog4vjWH47u2P7pj2YqAcB0GrmBDRFgglBQf24hihkcEZAhaKfJKDSRhAnqBCyuJsPihKuti9S+pSni0h2TJfugSBkGQvgUJgUogEJTE4EwDHhiGiENAJQl8KJYQmgGrptEsZLOoGxJQEx4iGqGulZkgLg0BAYr6QwhkJmivrQO0XRBtUtQci4YR8SAeheGEshsMghSugAqjCMgALJwEqUDaSSjgcpE0QwJOVHoAxFLTugPlmqUAVIEFqCgGUKDoGxqn+ma6CPJMcVkByKRpIaqL8i4zlVCA9LCrZpVsDguJQE5-5+XlBU0u0MwyLy3pWIGY0zXAMhCVEaBzRNzKGCEK3jXAxydXA3UgDYNKGnqA04mlw2BRoq0LYdSDTbN22LcolU3RSG2PfNzUgAYZA1DNTKpREYpsDSNIzCdJw4GUCVRPQ2gENoowpW5mphAw0OmLDSUI9oBwo5i6DhGuMgYzDmpwzAuMHPW2iJfDiPI+iqNE-jpOYypm6VgAFPTVOIwcACUtN87jTOUSzwOiW46McxyvOU2LwsNgrOMCxkgsEwlYrS5gxGy+T6CqwzSPK9oxv83jGu0xb1Oa8zhNS64ets1DhsgLbjNm57VtmxkPOiwL9sS47yXs+7DVYLjxXc3KNF0UgigsnKgsVPEKIlmKZkWVZBlNSH9U687BtYw03OR+4iMx3HYq0Qg9Ep2nGeRtnlnWYZ3sV9HphILH8f14nyep+nmet7nNmYILBBrg7hdqJgOLh6XRtd1XPd97XCdJ43I8t+Zbd58L1bxJQ5EyIEm0uVOu6NH4kM0ooAVGnIPdYvdOI1ft+nyM-+2iWcoAPKFR+qkf6moQZgwhk6CMz9HLnRgTINSlUvizEtJAqKsDQHtAaMlcYNU+aYL+tgom0CK6ELAegXBepKRsCCMsUAmk9g-VEiKawIwaq9SQFAOgMkGHDGWPcPB8l0C+H8KpR+jJgHFTftYeon9xDf3oSAP+mxAHkOIREGeMheE-TOhydKfpTTmjCh1dBhpgG-QoRgVU+DKbqKsGjGqZCLFYIcZQ6BEAaF0Ofowjkni4CsK0hw3I3DWQ+P4WgQReDPheV1uIp+UjX6lXfnI6UCi2A-2ASogBzJi7AKQcY2YNUgGgEsRo8IRcZY1R0XA-R5UjFVRMaDcGGCXFELcRgSpTUhHCNyTLRBEjn7SOSbI6BX8MlKOyc-OJ+SKoNF8dAkpID2ngN1vrapsC9HUXqaKQp-Q0EtPMaU1xOCuk2KETEzKfTIbjMyaAKZwCZl8K0ugUKRSZBLLKR0ipcSNltKsTAHWdAP6IIkJgAA6nAVI6RgELKymwXZPTLk3ziWkxRv9DKqOueEl5IBNAIDzos+xqznbrO0cSyhQKF6pM5GCyF0KjkgDhd5BFZoeloiAA).

 ![Screen Shot 2021-06-11 at 4.45.22 PM](https://us1.discourse-cdn.com/elastic/original/3X/b/6/b6ecde6ff0e587da1fb5f9e6fde3ae9b34d37201.png)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 9, 2021, 8:53pm UTC](https://discuss.elastic.co/t/bucket-selector-kibana-data-table-visualization/275573/3 "2021-07-09T20:53:13Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.