I have a bunch of documents saved in elasticsearch and they have the below field.
conjunctions: [and, and, and, ..]
The field is saved as conjunctions and conjunctions.keyword and according to the index pattern page in Kibana, only conjunctions.keyword can be used in aggregation.
I'm trying to use Kibana to visualize the most commonly occurring words in that field (in the whole index). I can't get it to actually count the occurrences. It seems to be counting the number of documents instead that have each word instead. So if I have 2 documents that each contain 1000 occurrences of and , the chart Kibana generates shows and: 2 .
Is this because of the keyword datatype? If not, what is happening?