I have a bunch of documents saved in elasticsearch and they have the below field.
conjunctions: [and, and, and, ..]
The field is saved as
conjunctions.keyword and according to the index pattern page in Kibana, only
conjunctions.keyword can be used in aggregation.
I'm trying to use Kibana to visualize the most commonly occurring words in that field (in the whole index). I can't get it to actually count the occurrences. It seems to be counting the number of documents instead that have each word instead. So if I have 2 documents that each contain 1000 occurrences of
and , the chart Kibana generates shows
and: 2 .
Is this because of the keyword datatype? If not, what is happening?