# Can not split by number fields in multi metric machine learning jobs

**URL:** <https://discuss.elastic.co/t/can-not-split-by-number-fields-in-multi-metric-machine-learning-jobs/93081>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-machine-learning\
**Created:** [July 13, 2017, 10:17pm UTC](https://discuss.elastic.co/t/can-not-split-by-number-fields-in-multi-metric-machine-learning-jobs/93081 "2017-07-13T22:17:48Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![vb4t](https://avatars.discourse-cdn.com/v4/letter/v/a698b9/32.png) [@vb4t](https://discuss.elastic.co/u/vb4t)\
**Post date:** [July 13, 2017, 10:17pm UTC](https://discuss.elastic.co/t/can-not-split-by-number-fields-in-multi-metric-machine-learning-jobs/93081/1 "2017-07-13T22:17:48Z")

</div>

Hello. I have web server logs which contains numeric field response\_code. But I can not use this field in "Split Data" at machine learning multi metric jobs. In fact no numeric fields are showed here. Is this by design?

---

<div class="post-metadata">

**Author:** ![dkyle](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dkyle/32/59114_2.png) [@dkyle](https://discuss.elastic.co/u/dkyle)\
**Post date:** [July 14, 2017, 10:20am UTC](https://discuss.elastic.co/t/can-not-split-by-number-fields-in-multi-metric-machine-learning-jobs/93081/2 "2017-07-14T10:20:07Z")

</div>

Hi,

When creating a multi metric job numeric fields cannot be used as the split field. This is due to the high cardinality the numeric types meaning the split could result in literally billions of individual metrics.

For multi metric jobs you can split by keyword fields or IP addresses. Do you have the response code or a HTTP status as a `keyword` field? If so you can split by that.

---

<div class="post-metadata">

**Author:** ![vb4t](https://avatars.discourse-cdn.com/v4/letter/v/a698b9/32.png) [@vb4t](https://discuss.elastic.co/u/vb4t)\
**Post date:** [July 14, 2017, 11:56am UTC](https://discuss.elastic.co/t/can-not-split-by-number-fields-in-multi-metric-machine-learning-jobs/93081/3 "2017-07-14T11:56:56Z")

</div>

Hello.

Field response\_code data type is short. It contains only http status codes, so not many different values. If multi metric can not split by numeric field, what is the best practice for fields like http response code? Is it best to store it as keyword or to store it both as keyword and as a numeric data types?

Thanks.

---

<div class="post-metadata">

**Author:** ![sophie\_chang](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sophie_chang/32/18008_2.png) [@sophie\_chang](https://discuss.elastic.co/u/sophie_chang)\
**Post date:** [July 14, 2017, 12:20pm UTC](https://discuss.elastic.co/t/can-not-split-by-number-fields-in-multi-metric-machine-learning-jobs/93081/4 "2017-07-14T12:20:33Z")

</div>

For this field it would be best to store as a keyword.

The driving factor for storing as numeric would be if you wanted to perform an aggregation on the field. In this case, I doubt sum(response\_code) or average(response\_code) could be meaningful.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 11, 2017, 12:20pm UTC](https://discuss.elastic.co/t/can-not-split-by-number-fields-in-multi-metric-machine-learning-jobs/93081/5 "2017-08-11T12:20:52Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.