# Combine term and terms in visualization

**URL:** <https://discuss.elastic.co/t/combine-term-and-terms-in-visualization/119499>\
**Category:** Kibana\
**Created:** [February 12, 2018, 3:30pm UTC](https://discuss.elastic.co/t/combine-term-and-terms-in-visualization/119499 "2018-02-12T15:30:27Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Radostina\_Radi](https://avatars.discourse-cdn.com/v4/letter/r/85f322/32.png) [@Radostina\_Radi](https://discuss.elastic.co/u/Radostina_Radi)\
**Post date:** [February 12, 2018, 3:30pm UTC](https://discuss.elastic.co/t/combine-term-and-terms-in-visualization/119499/1 "2018-02-12T15:30:27Z")

</div>

Hello, I want to create visualization for specific field 'dataType'. When a search is performed, this field can be in query as array (terms) or as a string (term). How can I combine these both in one visualization? For example, user searches for 'pdf' or 'word' (terms), then field will be query.bool.must terms.dataType.keyword. User searches for 'pdf' only, then field in vizualization will be query.bool.must term.dataType.keyword. I want to combine these two, so that in the pie chart I will have pdf : 2 , word : 1. Thank you very much.

---

<div class="post-metadata">

**Author:** ![Brandon\_Kobel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/brandon_kobel/32/14829_2.png) [@Brandon\_Kobel](https://discuss.elastic.co/u/Brandon_Kobel)\
**Post date:** [February 12, 2018, 5:10pm UTC](https://discuss.elastic.co/t/combine-term-and-terms-in-visualization/119499/2 "2018-02-12T17:10:11Z")

</div>

Have you tried used the Filter aggregations in Kibana to do something similar to:

 ![36%20PM](https://us1.discourse-cdn.com/elastic/original/3X/4/1/412c688faee566f643cd93fa9e4e9e538c2a7f74.png)

---

<div class="post-metadata">

**Author:** ![Radostina\_Radi](https://avatars.discourse-cdn.com/v4/letter/r/85f322/32.png) [@Radostina\_Radi](https://discuss.elastic.co/u/Radostina_Radi)\
**Post date:** [February 16, 2018, 10:12am UTC](https://discuss.elastic.co/t/combine-term-and-terms-in-visualization/119499/3 "2018-02-16T10:12:40Z")

</div>

![ClassInfTypeTerm](https://us1.discourse-cdn.com/elastic/original/3X/c/8/c8330af79c47247c7a860875bfb8075863121a09.png) ![ClassInfTypeTerms](https://us1.discourse-cdn.com/elastic/original/3X/d/1/d1a2b7ab7b68bcf744adb7b7b9c9b226487d1155.png)

Hello Brandon,

Thank you very much for your response. This is the situation: I have these two visualizations. I want to group them in one visualization, that will show 34 REG, 2 STAT, 3 RULING. I don't know how to do that.  
'classInfType' is a metadata field in documents, and user can use it to refine the search results. I want to make a report for the most popular entries user has used, so I need to combine these two visualizations to get the final result.  
Thanks.

Best regards,  
Radostina

---

<div class="post-metadata">

**Author:** ![Brandon\_Kobel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/brandon_kobel/32/14829_2.png) [@Brandon\_Kobel](https://discuss.elastic.co/u/Brandon_Kobel)\
**Post date:** [February 16, 2018, 2:19pm UTC](https://discuss.elastic.co/t/combine-term-and-terms-in-visualization/119499/4 "2018-02-16T14:19:52Z")

</div>

Gotcha, so you'd like to do a terms aggregation on the values from multiple fields. Elasticsearch supports two methods of doing so: [https://www.elastic.co/guide/en/elasticsearch/reference/current/search-aggregations-bucket-terms-aggregation.html#\_multi\_field\_terms\_aggregation](https://www.elastic.co/guide/en/elasticsearch/reference/current/search-aggregations-bucket-terms-aggregation.html#_multi_field_terms_aggregation)

You can create a [Kibana scripted field](https://www.elastic.co/guide/en/kibana/current/scripted-fields.html) that correlates to the "Script" option in the aforementioned Elasticsearch documentation, or you can derive a second column using the `copy_to` in the mapping (which will be faster to query).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 16, 2018, 2:20pm UTC](https://discuss.elastic.co/t/combine-term-and-terms-in-visualization/119499/5 "2018-03-16T14:20:25Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
