# Derived Unique values from the unique values
**URL:** https://discuss.elastic.co/t/derived-unique-values-from-the-unique-values/53429
**Category:** Elasticsearch
**Created:** [June 21, 2016, 6:59am UTC](https://discuss.elastic.co/t/derived-unique-values-from-the-unique-values/53429 "2016-06-21T06:59:34Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@Ravi\_Shanker\_Reddy](https://discuss.elastic.co/u/Ravi_Shanker_Reddy)
#### Post date: [June 21, 2016, 6:59am UTC](https://discuss.elastic.co/t/derived-unique-values-from-the-unique-values/53429/1 "2016-06-21T06:59:34Z")
I have a csv with a system-ip (String) in 56th field and Errors in the 12th field. When ever my ip struct with an error its writing a error log and I am parsing it to elastic search. Now I want to see which ip is getting which error and how many times.
`{ "size": 0, "aggs" : { "langs" : { "terms" : { "field" : "column56" } } }}`
From this I can get all unique ip. Now I want ito know in that ip how many errors (12th filed) I get and count of that error... Thanks for any help
---
### Author:  [@polyfractal](https://discuss.elastic.co/u/polyfractal)
#### Post date: [June 21, 2016, 4:24pm UTC](https://discuss.elastic.co/t/derived-unique-values-from-the-unique-values/53429/2 "2016-06-21T16:24:51Z")
You can embed another terms aggregation inside the first one, which will give you a list of errors-per-IP (and counts).
```auto
{
"size": 0,
"aggs" : {
"langs" : {
"terms" : { "field" : "column56" },
"aggs": {
"errors": {
"terms" : { "field" : "column12" }
}
}
}
}
}
```
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 5, 2017, 10:41pm UTC](https://discuss.elastic.co/t/derived-unique-values-from-the-unique-values/53429/3 "2017-07-05T22:41:41Z")