# Cannot use terms aggregation to get the field which is injest by enrich processor

**URL:** <https://discuss.elastic.co/t/cannot-use-terms-aggregation-to-get-the-field-which-is-injest-by-enrich-processor/336554>\
**Category:** Elasticsearch\
**Tags:** kql-kibana-query-language\
**Created:** [June 21, 2023, 9:06am UTC](https://discuss.elastic.co/t/cannot-use-terms-aggregation-to-get-the-field-which-is-injest-by-enrich-processor/336554 "2023-06-21T09:06:54Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![JasonREC](https://avatars.discourse-cdn.com/v4/letter/j/858c86/32.png) [@JasonREC](https://discuss.elastic.co/u/JasonREC)\
**Post date:** [June 21, 2023, 9:06am UTC](https://discuss.elastic.co/t/cannot-use-terms-aggregation-to-get-the-field-which-is-injest-by-enrich-processor/336554/1 "2023-06-21T09:06:54Z")

</div>

I am trying to get the db\_tag field which is injested using injestpipeline with enrich processor, but it does not return anything even the field is existed in the doucment.

 ![db_tag](https://us1.discourse-cdn.com/elastic/original/3X/0/3/03b48724234740b1f63b81d654e77696a87894e4.png)

 ![kibana](https://us1.discourse-cdn.com/elastic/original/3X/4/1/41096f4fa100e5e84be4d2dd7d72cb37ee0e7f3d.png)

---

<div class="post-metadata">

**Author:** ![Priscilla\_Parodi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/priscilla_parodi/32/43047_2.png) [@Priscilla\_Parodi](https://discuss.elastic.co/u/Priscilla_Parodi)\
**Post date:** [July 11, 2023, 8:23pm UTC](https://discuss.elastic.co/t/cannot-use-terms-aggregation-to-get-the-field-which-is-injest-by-enrich-processor/336554/2 "2023-07-11T20:23:04Z")

</div>

Hello @JasonREC,

Could you please provide more details? Preferably in text instead of an image. Which version of Elastic are you using? What query did you use? Is there any error message?

You added the KQL tag to your question. Are you using the Kibana Query Language? If so, KQL only filters data and has no role in aggregating, transforming, or sorting data.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 8, 2023, 8:23pm UTC](https://discuss.elastic.co/t/cannot-use-terms-aggregation-to-get-the-field-which-is-injest-by-enrich-processor/336554/3 "2023-08-08T20:23:35Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.