# Elasticsearch / nested values (Kibana behind) **URL:** \ **Category:** Elasticsearch\ **Created:** [November 21, 2013, 6:28pm UTC](https://discuss.elastic.co/t/elasticsearch-nested-values-kibana-behind/14522 "2013-11-21T18:28:36Z")\ **Posts on this page:** 13\ **Page:** 1
**Author:** ![tmanta7](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tmanta7/32/1953_2.png) [@tmanta7](https://discuss.elastic.co/u/tmanta7)\ **Post date:** [November 21, 2013, 6:28pm UTC](https://discuss.elastic.co/t/elasticsearch-nested-values-kibana-behind/14522/1 "2013-11-21T18:28:36Z")
Hello guys, I'm working to integrate nested values in Kibana but I'm facing an issue with the data selected. To detail my issue, here is my structure: { "mappings" : { ``` "fkv" : { "properties" : { "kv" : { "type" : "nested", "include_in_parent" : false, "properties" : { "name" : {"type" : "string"}, "value" : {"type" : "string"} } } } } ``` } } I'm trying with Kibana to search through KV nested type. With a module I'm generating the following request: { "facets": { "terms": { "terms": { "field": "kv.key:state", "size": 10, "order": "count", "exclude": [] }, "facet\_filter": { "fquery": { "query": { "filtered": { "query": { "nested": { "path": "kv", "query": { "bool": { "should": [ { "query\_string": { "query": "\*" } } ] } } } }, "filter": { "bool": { "must": [ { "match\_all": {} }, { "bool": { "must": [ { "match\_all": {} } ] } } ] } } } } } } } }, "size": 0 } I'm matching some fields but unfortunately I have just 'missing fields'. I don't know how to solve this problem ☹ Thanks for your help PS: I someone is interested in my JS code I could provide the source -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![tmanta7](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tmanta7/32/1953_2.png) [@tmanta7](https://discuss.elastic.co/u/tmanta7)\ **Post date:** [November 22, 2013, 4:31pm UTC](https://discuss.elastic.co/t/elasticsearch-nested-values-kibana-behind/14522/2 "2013-11-22T16:31:57Z")
For information, the reply from ES: { "took": 7, "timed\_out": false, "\_shards": { "total": 5, "successful": 5, "failed": 0 }, "hits": { "total": 3, "max\_score": 1, "hits": }, "facets": { "terms": { "\_type": "terms", "missing": 3, "total": 0, "other": 0, "terms": } } } Le jeudi 21 novembre 2013 19:28:36 UTC+1, [tma...@gmail.com](mailto:tma...@gmail.com) a écrit : > Hello guys, > > I'm working to integrate nested values in Kibana but I'm facing an issue > with the data selected. > > To detail my issue, here is my structure: > > { > > "mappings" : { > > ``` > "fkv" : { > > "properties" : { > > "kv" : { > > "type" : "nested", > > "include_in_parent" : false, > > "properties" : { > > "name" : {"type" : "string"}, > > "value" : {"type" : "string"} > > } > > } > > } > > } > > ``` > > } > > } > > I'm trying with Kibana to search through KV nested type. With a module I'm > generating the following request: > > { > "facets": { > "terms": { > "terms": { > "field": "kv.key:state", > "size": 10, > "order": "count", > "exclude": > }, > "facet\_filter": { > "fquery": { > "query": { > "filtered": { > "query": { > "nested": { > "path": "kv", > "query": { > "bool": { > "should": [ > { > "query\_string": { > "query": "\*" > } > } > ] > } > } > } > }, > "filter": { > "bool": { > "must": [ > { > "match\_all": {} > }, > { > "bool": { > "must": [ > { > "match\_all": {} > } > ] > } > } > ] > } > } > } > } > } > } > } > }, > "size": 0 > } > > I'm matching some fields but unfortunately I have just 'missing fields'. I > don't know how to solve this problem ☹ > > Thanks for your help > > PS: I someone is interested in my JS code I could provide the source -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![tmanta7](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tmanta7/32/1953_2.png) [@tmanta7](https://discuss.elastic.co/u/tmanta7)\ **Post date:** [November 26, 2013, 6:52pm UTC](https://discuss.elastic.co/t/elasticsearch-nested-values-kibana-behind/14522/3 "2013-11-26T18:52:50Z")
Pliz help 😢 Le jeudi 21 novembre 2013 19:28:36 UTC+1, [tma...@gmail.com](mailto:tma...@gmail.com) a écrit : > Hello guys, > > I'm working to integrate nested values in Kibana but I'm facing an issue > with the data selected. > > To detail my issue, here is my structure: > > { > > "mappings" : { > > ``` > "fkv" : { > > "properties" : { > > "kv" : { > > "type" : "nested", > > "include_in_parent" : false, > > "properties" : { > > "name" : {"type" : "string"}, > > "value" : {"type" : "string"} > > } > > } > > } > > } > > ``` > > } > > } > > I'm trying with Kibana to search through KV nested type. With a module I'm > generating the following request: > > { > "facets": { > "terms": { > "terms": { > "field": "kv.key:state", > "size": 10, > "order": "count", > "exclude": > }, > "facet\_filter": { > "fquery": { > "query": { > "filtered": { > "query": { > "nested": { > "path": "kv", > "query": { > "bool": { > "should": [ > { > "query\_string": { > "query": "\*" > } > } > ] > } > } > } > }, > "filter": { > "bool": { > "must": [ > { > "match\_all": {} > }, > { > "bool": { > "must": [ > { > "match\_all": {} > } > ] > } > } > ] > } > } > } > } > } > } > } > }, > "size": 0 > } > > I'm matching some fields but unfortunately I have just 'missing fields'. I > don't know how to solve this problem ☹ > > Thanks for your help > > PS: I someone is interested in my JS code I could provide the source -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/876ae86c-918e-469f-808f-5c966fa48bc9%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/876ae86c-918e-469f-808f-5c966fa48bc9%40googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [November 26, 2013, 7:52pm UTC](https://discuss.elastic.co/t/elasticsearch-nested-values-kibana-behind/14522/4 "2013-11-26T19:52:26Z")
What is that? "field": "kv.key:state" Never seen such an expression. -- David 😉 Twitter : @dadoonet / @elasticsearchfr / @scrutmydocs Le 26 nov. 2013 à 19:52, [tmanta7@gmail.com](mailto:tmanta7@gmail.com) a écrit : Pliz help 😢 Le jeudi 21 novembre 2013 19:28:36 UTC+1, [tma...@gmail.com](mailto:tma...@gmail.com) a écrit : > Hello guys, > > I'm working to integrate nested values in Kibana but I'm facing an issue with the data selected. > > To detail my issue, here is my structure: > > { > "mappings" : { > "fkv" : { > "properties" : { > "kv" : { > "type" : "nested", > "include\_in\_parent" : false, > "properties" : { > "name" : {"type" : "string"}, > "value" : {"type" : "string"} > } > } > } > } > } > } > > I'm trying with Kibana to search through KV nested type. With a module I'm generating the following request: > > { > "facets": { > "terms": { > "terms": { > "field": "kv.key:state", > "size": 10, > "order": "count", > "exclude": > }, > "facet\_filter": { > "fquery": { > "query": { > "filtered": { > "query": { > "nested": { > "path": "kv", > "query": { > "bool": { > "should": [ > { > "query\_string": { > "query": "\*" > } > } > ] > } > } > } > }, > "filter": { > "bool": { > "must": [ > { > "match\_all": {} > }, > { > "bool": { > "must": [ > { > "match\_all": {} > } > ] > } > } > ] > } > } > } > } > } > } > } > }, > "size": 0 > } > > I'm matching some fields but unfortunately I have just 'missing fields'. I don't know how to solve this problem ☹ > > Thanks for your help > > PS: I someone is interested in my JS code I could provide the source -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/876ae86c-918e-469f-808f-5c966fa48bc9%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/876ae86c-918e-469f-808f-5c966fa48bc9%40googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/FB99671F-77FE-4AA3-861E-85962494D4BD%40pilato.fr](https://groups.google.com/d/msgid/elasticsearch/FB99671F-77FE-4AA3-861E-85962494D4BD%40pilato.fr). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![tmanta7](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tmanta7/32/1953_2.png) [@tmanta7](https://discuss.elastic.co/u/tmanta7)\ **Post date:** [November 28, 2013, 7:42am UTC](https://discuss.elastic.co/t/elasticsearch-nested-values-kibana-behind/14522/5 "2013-11-28T07:42:24Z")
Thanks for your help David. Ok so I simplified my expression: { "facets": { "terms": { "terms": { "field": "kv.value", "size": 10, "order": "count", "exclude": }, "facet\_filter": { "fquery": { "query": { "filtered": { "query": { "nested": { "path": "kv", "query": { "bool": { "must" : [ { "text" : { "kv.key" : "state"} }, { "text" : { "kv.value" : "designed"} } ] ``` } } } } } } } } } ``` }, "size": 0 } But it still doesn't work. The query part works but when I'm trying to use facets I have missing elements 😕 I don't have any clue to improve it even in devouring the documentation Le jeudi 21 novembre 2013 19:28:36 UTC+1, [tma...@gmail.com](mailto:tma...@gmail.com) a écrit : > Hello guys, > > I'm working to integrate nested values in Kibana but I'm facing an issue > with the data selected. > > To detail my issue, here is my structure: > > { > > "mappings" : { > > ``` > "fkv" : { > > "properties" : { > > "kv" : { > > "type" : "nested", > > "include_in_parent" : false, > > "properties" : { > > "name" : {"type" : "string"}, > > "value" : {"type" : "string"} > > } > > } > > } > > } > > ``` > > } > > } > > I'm trying with Kibana to search through KV nested type. With a module I'm > generating the following request: > > { > "facets": { > "terms": { > "terms": { > "field": "kv.key:state", > "size": 10, > "order": "count", > "exclude": > }, > "facet\_filter": { > "fquery": { > "query": { > "filtered": { > "query": { > "nested": { > "path": "kv", > "query": { > "bool": { > "should": [ > { > "query\_string": { > "query": "\*" > } > } > ] > } > } > } > }, > "filter": { > "bool": { > "must": [ > { > "match\_all": {} > }, > { > "bool": { > "must": [ > { > "match\_all": {} > } > ] > } > } > ] > } > } > } > } > } > } > } > }, > "size": 0 > } > > I'm matching some fields but unfortunately I have just 'missing fields'. I > don't know how to solve this problem ☹ > > Thanks for your help > > PS: I someone is interested in my JS code I could provide the source -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/8d2800b2-ee7b-4843-b1f3-6b39581606f0%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/8d2800b2-ee7b-4843-b1f3-6b39581606f0%40googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [November 28, 2013, 8:25am UTC](https://discuss.elastic.co/t/elasticsearch-nested-values-kibana-behind/14522/6 "2013-11-28T08:25:22Z")
kv is a nested doc. I guess you should use this: [http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/search-facets.html#\_all\_nested\_matching\_root\_documents](http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/search-facets.html#_all_nested_matching_root_documents) -- David Pilato | Technical Advocate | [Elasticsearch.com](http://Elasticsearch.com) @dadoonet | @elasticsearchfr Le 28 novembre 2013 at 08:42:27, [tmanta7@gmail.com](mailto:tmanta7@gmail.com) ([tmanta7@gmail.com](mailto:tmanta7@gmail.com)) a écrit: Thanks for your help David. Ok so I simplified my expression: { "facets": { "terms": { "terms": { "field": "kv.value", "size": 10, "order": "count", "exclude": [] }, "facet\_filter": { "fquery": { "query": { "filtered": { "query": { "nested": { "path": "kv", "query": { "bool": { "must" : [ { "text" : { "kv.key" : "state"} }, { "text" : { "kv.value" : "designed"} } ] ``` } } } } } } } } } ``` }, "size": 0 } But it still doesn't work. The query part works but when I'm trying to use facets I have missing elements 😕 I don't have any clue to improve it even in devouring the documentation Le jeudi 21 novembre 2013 19:28:36 UTC+1, [tma...@gmail.com](mailto:tma...@gmail.com) a écrit : Hello guys, I'm working to integrate nested values in Kibana but I'm facing an issue with the data selected. To detail my issue, here is my structure: { "mappings" : { "fkv" : { "properties" : { "kv" : { "type" : "nested", "include\_in\_parent" : false, "properties" : { "name" : {"type" : "string"}, "value" : {"type" : "string"} } } } } } } I'm trying with Kibana to search through KV nested type. With a module I'm generating the following request: { "facets": { "terms": { "terms": { "field": "kv.key:state", "size": 10, "order": "count", "exclude": [] }, "facet\_filter": { "fquery": { "query": { "filtered": { "query": { "nested": { "path": "kv", "query": { "bool": { "should": [ { "query\_string": { "query": "\*" } } ] } } } }, "filter": { "bool": { "must": [ { "match\_all": {} }, { "bool": { "must": [ { "match\_all": {} } ] } } ] } } } } } } } }, "size": 0 } I'm matching some fields but unfortunately I have just 'missing fields'. I don't know how to solve this problem ☹ Thanks for your help ## PS: I someone is interested in my JS code I could provide the source You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/8d2800b2-ee7b-4843-b1f3-6b39581606f0%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/8d2800b2-ee7b-4843-b1f3-6b39581606f0%40googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/etPan.5296fdf2.7724c67e.3e14%40MacBook-Air-de-David.local](https://groups.google.com/d/msgid/elasticsearch/etPan.5296fdf2.7724c67e.3e14%40MacBook-Air-de-David.local). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![tmanta7](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tmanta7/32/1953_2.png) [@tmanta7](https://discuss.elastic.co/u/tmanta7)\ **Post date:** [November 28, 2013, 9:51am UTC](https://discuss.elastic.co/t/elasticsearch-nested-values-kibana-behind/14522/7 "2013-11-28T09:51:02Z")
Ok I'm really near of the solution I feel it 🙂 { "facets": { "terms": { "terms\_stats": { "key\_field" : "kv.value", "value\_field" : "???" }, "nested": "kv", "facet\_filter": { "fquery": { "query": { "filtered": { "query": { "nested": { "path": "kv", "query": { "bool": { "must" : [ { "text" : { "kv.key" : "state"} }, { "text" : { "kv.value" : "designed"} } ] ``` } } } } } } } } } ``` }, "size": 0 } But I just want to modify the value field to not count my kv.value but only the number of occurences returned by my filter! Is there any function for that? Thanks for your help! Le jeudi 21 novembre 2013 19:28:36 UTC+1, [tma...@gmail.com](mailto:tma...@gmail.com) a écrit : > Hello guys, > > I'm working to integrate nested values in Kibana but I'm facing an issue > with the data selected. > > To detail my issue, here is my structure: > > { > > "mappings" : { > > ``` > "fkv" : { > > "properties" : { > > "kv" : { > > "type" : "nested", > > "include_in_parent" : false, > > "properties" : { > > "name" : {"type" : "string"}, > > "value" : {"type" : "string"} > > } > > } > > } > > } > > ``` > > } > > } > > I'm trying with Kibana to search through KV nested type. With a module I'm > generating the following request: > > { > "facets": { > "terms": { > "terms": { > "field": "kv.key:state", > "size": 10, > "order": "count", > "exclude": > }, > "facet\_filter": { > "fquery": { > "query": { > "filtered": { > "query": { > "nested": { > "path": "kv", > "query": { > "bool": { > "should": [ > { > "query\_string": { > "query": "\*" > } > } > ] > } > } > } > }, > "filter": { > "bool": { > "must": [ > { > "match\_all": {} > }, > { > "bool": { > "must": [ > { > "match\_all": {} > } > ] > } > } > ] > } > } > } > } > } > } > } > }, > "size": 0 > } > > I'm matching some fields but unfortunately I have just 'missing fields'. I > don't know how to solve this problem ☹ > > Thanks for your help > > PS: I someone is interested in my JS code I could provide the source -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/39cbd500-6075-4de0-96cc-24c5f6d7f089%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/39cbd500-6075-4de0-96cc-24c5f6d7f089%40googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [November 28, 2013, 10:12am UTC](https://discuss.elastic.co/t/elasticsearch-nested-values-kibana-behind/14522/8 "2013-11-28T10:12:52Z")
In that case you could probably use a filter facets? [http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/search-facets-filter-facet.html#search-facets-filter-facet](http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/search-facets-filter-facet.html#search-facets-filter-facet) -- David Pilato | Technical Advocate | [Elasticsearch.com](http://Elasticsearch.com) @dadoonet | @elasticsearchfr Le 28 novembre 2013 at 10:51:05, [tmanta7@gmail.com](mailto:tmanta7@gmail.com) ([tmanta7@gmail.com](mailto:tmanta7@gmail.com)) a écrit: Ok I'm really near of the solution I feel it 🙂 { "facets": { "terms": { "terms\_stats": { "key\_field" : "kv.value", "value\_field" : "???" }, "nested": "kv", "facet\_filter": { "fquery": { "query": { "filtered": { "query": { "nested": { "path": "kv", "query": { "bool": { "must" : [ { "text" : { "kv.key" : "state"} }, { "text" : { "kv.value" : "designed"} } ] ``` } } } } } } } } } ``` }, "size": 0 } But I just want to modify the value field to not count my kv.value but only the number of occurences returned by my filter! Is there any function for that? Thanks for your help! Le jeudi 21 novembre 2013 19:28:36 UTC+1, [tma...@gmail.com](mailto:tma...@gmail.com) a écrit : Hello guys, I'm working to integrate nested values in Kibana but I'm facing an issue with the data selected. To detail my issue, here is my structure: { "mappings" : { "fkv" : { "properties" : { "kv" : { "type" : "nested", "include\_in\_parent" : false, "properties" : { "name" : {"type" : "string"}, "value" : {"type" : "string"} } } } } } } I'm trying with Kibana to search through KV nested type. With a module I'm generating the following request: { "facets": { "terms": { "terms": { "field": "kv.key:state", "size": 10, "order": "count", "exclude": [] }, "facet\_filter": { "fquery": { "query": { "filtered": { "query": { "nested": { "path": "kv", "query": { "bool": { "should": [ { "query\_string": { "query": "\*" } } ] } } } }, "filter": { "bool": { "must": [ { "match\_all": {} }, { "bool": { "must": [ { "match\_all": {} } ] } } ] } } } } } } } }, "size": 0 } I'm matching some fields but unfortunately I have just 'missing fields'. I don't know how to solve this problem ☹ Thanks for your help ## PS: I someone is interested in my JS code I could provide the source You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/39cbd500-6075-4de0-96cc-24c5f6d7f089%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/39cbd500-6075-4de0-96cc-24c5f6d7f089%40googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/etPan.52971724.649bb77c.3e14%40MacBook-Air-de-David.local](https://groups.google.com/d/msgid/elasticsearch/etPan.52971724.649bb77c.3e14%40MacBook-Air-de-David.local). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![tmanta7](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tmanta7/32/1953_2.png) [@tmanta7](https://discuss.elastic.co/u/tmanta7)\ **Post date:** [November 28, 2013, 10:37am UTC](https://discuss.elastic.co/t/elasticsearch-nested-values-kibana-behind/14522/9 "2013-11-28T10:37:59Z")
Ok I understand. So for my need, I will have to combine the use of facet filter and filter facets: { "facets": { "my\_filter": { "filter": { "term" : { "kv.key" : "state" } }, "nested": "kv", "facet\_filter": { "fquery": { "query": { "filtered": { "query": { "nested": { "path": "kv", "query": { "bool": { "must" : [ { "text" : { "kv.key" : "state"} }, { "text" : { "kv.value" : "designed"} } ] ``` } } } } } } } } } ``` But it still does not work. I don't understand how to combine that... Le jeudi 21 novembre 2013 19:28:36 UTC+1, [tma...@gmail.com](mailto:tma...@gmail.com) a écrit : > Hello guys, > > I'm working to integrate nested values in Kibana but I'm facing an issue > with the data selected. > > To detail my issue, here is my structure: > > { > > "mappings" : { > > ``` > "fkv" : { > > "properties" : { > > "kv" : { > > "type" : "nested", > > "include_in_parent" : false, > > "properties" : { > > "name" : {"type" : "string"}, > > "value" : {"type" : "string"} > > } > > } > > } > > } > > ``` > > } > > } > > I'm trying with Kibana to search through KV nested type. With a module I'm > generating the following request: > > { > "facets": { > "terms": { > "terms": { > "field": "kv.key:state", > "size": 10, > "order": "count", > "exclude": > }, > "facet\_filter": { > "fquery": { > "query": { > "filtered": { > "query": { > "nested": { > "path": "kv", > "query": { > "bool": { > "should": [ > { > "query\_string": { > "query": "\*" > } > } > ] > } > } > } > }, > "filter": { > "bool": { > "must": [ > { > "match\_all": {} > }, > { > "bool": { > "must": [ > { > "match\_all": {} > } > ] > } > } > ] > } > } > } > } > } > } > } > }, > "size": 0 > } > > I'm matching some fields but unfortunately I have just 'missing fields'. I > don't know how to solve this problem ☹ > > Thanks for your help > > PS: I someone is interested in my JS code I could provide the source -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/f72b9b24-71b5-4339-8ac1-6d0b656dc0e6%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/f72b9b24-71b5-4339-8ac1-6d0b656dc0e6%40googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [November 28, 2013, 9:32pm UTC](https://discuss.elastic.co/t/elasticsearch-nested-values-kibana-behind/14522/10 "2013-11-28T21:32:42Z")
Yes probably your solution is here. It could help a lot if you recreate a full test case and gist it. Something similar to: [https://gist.github.com/dadoonet/7698308](https://gist.github.com/dadoonet/7698308) -- David Pilato | Technical Advocate | [Elasticsearch.com](http://Elasticsearch.com) @dadoonet | @elasticsearchfr Le 28 novembre 2013 at 11:38:03, [tmanta7@gmail.com](mailto:tmanta7@gmail.com) ([tmanta7@gmail.com](mailto:tmanta7@gmail.com)) a écrit: Ok I understand. So for my need, I will have to combine the use of facet filter and filter facets: { "facets": { "my\_filter": { "filter": { "term" : { "kv.key" : "state" } }, "nested": "kv", "facet\_filter": { "fquery": { "query": { "filtered": { "query": { "nested": { "path": "kv", "query": { "bool": { "must" : [ { "text" : { "kv.key" : "state"} }, { "text" : { "kv.value" : "designed"} } ] ``` } } } } } } } } } ``` But it still does not work. I don't understand how to combine that... Le jeudi 21 novembre 2013 19:28:36 UTC+1, [tma...@gmail.com](mailto:tma...@gmail.com) a écrit : Hello guys, I'm working to integrate nested values in Kibana but I'm facing an issue with the data selected. To detail my issue, here is my structure: { "mappings" : { "fkv" : { "properties" : { "kv" : { "type" : "nested", "include\_in\_parent" : false, "properties" : { "name" : {"type" : "string"}, "value" : {"type" : "string"} } } } } } } I'm trying with Kibana to search through KV nested type. With a module I'm generating the following request: { "facets": { "terms": { "terms": { "field": "kv.key:state", "size": 10, "order": "count", "exclude": [] }, "facet\_filter": { "fquery": { "query": { "filtered": { "query": { "nested": { "path": "kv", "query": { "bool": { "should": [ { "query\_string": { "query": "\*" } } ] } } } }, "filter": { "bool": { "must": [ { "match\_all": {} }, { "bool": { "must": [ { "match\_all": {} } ] } } ] } } } } } } } }, "size": 0 } I'm matching some fields but unfortunately I have just 'missing fields'. I don't know how to solve this problem ☹ Thanks for your help ## PS: I someone is interested in my JS code I could provide the source You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/f72b9b24-71b5-4339-8ac1-6d0b656dc0e6%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/f72b9b24-71b5-4339-8ac1-6d0b656dc0e6%40googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/etPan.5297b67a.5fb8370b.3e14%40MacBook-Air-de-David.local](https://groups.google.com/d/msgid/elasticsearch/etPan.5297b67a.5fb8370b.3e14%40MacBook-Air-de-David.local). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![G\_Sanchez](https://avatars.discourse-cdn.com/v4/letter/g/e95f7d/32.png) [@G\_Sanchez](https://discuss.elastic.co/u/G_Sanchez)\ **Post date:** [December 4, 2013, 10:19am UTC](https://discuss.elastic.co/t/elasticsearch-nested-values-kibana-behind/14522/11 "2013-12-04T10:19:47Z")
Hi David, Excuse me but I did not understand your example... you have to put this one: [Test for case in ML: https://groups.google.com/d/msgid/elasticsearch/e122daa5-66dd-4875-b33d-8e6029668424%40googlegroups.com · GitHub](https://gist.github.com/dadoonet/7698308) in a "script":[...] field ? thx G.Sanchez Le jeudi 28 novembre 2013 22:32:42 UTC+1, David Pilato a écrit : > Yes probably your solution is here. > > It could help a lot if you recreate a full test case and gist it. > > Something similar to: [Test for case in ML: https://groups.google.com/d/msgid/elasticsearch/e122daa5-66dd-4875-b33d-8e6029668424%40googlegroups.com · GitHub](https://gist.github.com/dadoonet/7698308) > > -- > _David Pilato_ | _Technical Advocate_ | _[Elasticsearch.com](http://Elasticsearch.com)_ > @dadoonet [https://twitter.com/dadoonet](https://twitter.com/dadoonet) | @elasticsearchfr[https://twitter.com/elasticsearchfr](https://twitter.com/elasticsearchfr) > > Le 28 novembre 2013 at 11:38:03, [tma...@gmail.com](mailto:tma...@gmail.com) \ ( > [tma...@gmail.com](mailto:tma...@gmail.com) \) a écrit: > > Ok I understand. So for my need, I will have to combine the use of facet > filter and filter facets: > > { > "facets": { > "my\_filter": { > "filter": { > "term" : { "kv.key" : "state" } > }, > "nested": "kv", > "facet\_filter": { > "fquery": { > "query": { > "filtered": { > "query": { > "nested": { > "path": "kv", > "query": { > "bool": { > "must" : [ { "text" : > { "kv.key" : "state"} > }, > { "text" : > { "kv.value" : "designed"} > } > ] > > ``` > } > } > } > } > } > } > } > } > } > > ``` > > But it still does not work. I don't understand how to combine that... > > Le jeudi 21 novembre 2013 19:28:36 UTC+1, [tma...@gmail.com](mailto:tma...@gmail.com) a écrit : > > > Hello guys, > > > > I'm working to integrate nested values in Kibana but I'm facing an issue > > with the data selected. > > > > To detail my issue, here is my structure: > > > > { > > > > "mappings" : { > > > > ``` > > "fkv" : { > > > > "properties" : { > > > > "kv" : { > > > > "type" : "nested", > > > > "include_in_parent" : false, > > > > "properties" : { > > > > "name" : {"type" : "string"}, > > > > "value" : {"type" : "string"} > > > > } > > > > } > > > > } > > > > } > > > > ``` > > > > } > > > > } > > > > I'm trying with Kibana to search through KV nested type. With a module > > I'm generating the following request: > > > > { > > "facets": { > > "terms": { > > "terms": { > > "field": "kv.key:state", > > "size": 10, > > "order": "count", > > "exclude": > > }, > > "facet\_filter": { > > "fquery": { > > "query": { > > "filtered": { > > "query": { > > "nested": { > > "path": "kv", > > "query": { > > "bool": { > > "should": [ > > { > > "query\_string": { > > "query": "\*" > > } > > } > > ] > > } > > } > > } > > }, > > "filter": { > > "bool": { > > "must": [ > > { > > "match\_all": {} > > }, > > { > > "bool": { > > "must": [ > > { > > "match\_all": {} > > } > > ] > > } > > } > > ] > > } > > } > > } > > } > > } > > } > > } > > }, > > "size": 0 > > } > > > > I'm matching some fields but unfortunately I have just 'missing fields'. > > I don't know how to solve this problem ☹ > > > > Thanks for your help > > > > PS: I someone is interested in my JS code I could provide the source > > -- > You received this message because you are subscribed to the Google Groups > "elasticsearch" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com) \. > To view this discussion on the web visit > [https://groups.google.com/d/msgid/elasticsearch/f72b9b24-71b5-4339-8ac1-6d0b656dc0e6%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/f72b9b24-71b5-4339-8ac1-6d0b656dc0e6%40googlegroups.com) > . > For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/3d0e409b-1328-4f25-a7c8-9037f6b09266%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/3d0e409b-1328-4f25-a7c8-9037f6b09266%40googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [December 4, 2013, 10:23am UTC](https://discuss.elastic.co/t/elasticsearch-nested-values-kibana-behind/14522/12 "2013-12-04T10:23:00Z")
Hi G! 🙂 My gist was just an example of a GIST we can work with. It was not related to the use case described in this thread. It was just another illustration of this page: [http://www.elasticsearch.org/help/](http://www.elasticsearch.org/help/) -- David Pilato | Technical Advocate | [Elasticsearch.com](http://Elasticsearch.com) @dadoonet | @elasticsearchfr Le 4 décembre 2013 at 11:19:54, G.Sanchez ([gs.tribu@gmail.com](mailto:gs.tribu@gmail.com)) a écrit: Hi David, Excuse me but I did not understand your example... you have to put this one: [https://gist.github.com/dadoonet/7698308](https://gist.github.com/dadoonet/7698308) in a "script":[...] field ? thx G.Sanchez Le jeudi 28 novembre 2013 22:32:42 UTC+1, David Pilato a écrit : Yes probably your solution is here. It could help a lot if you recreate a full test case and gist it. Something similar to: [https://gist.github.com/dadoonet/7698308](https://gist.github.com/dadoonet/7698308) -- David Pilato | Technical Advocate | [Elasticsearch.com](http://Elasticsearch.com) @dadoonet | @elasticsearchfr Le 28 novembre 2013 at 11:38:03, [tma...@gmail.com](mailto:tma...@gmail.com) ([tma...@gmail.com](mailto:tma...@gmail.com)) a écrit: Ok I understand. So for my need, I will have to combine the use of facet filter and filter facets: { "facets": { "my\_filter": { "filter": { "term" : { "kv.key" : "state" } }, "nested": "kv", "facet\_filter": { "fquery": { "query": { "filtered": { "query": { "nested": { "path": "kv", "query": { "bool": { "must" : [ { "text" : { "kv.key" : "state"} }, { "text" : { "kv.value" : "designed"} } ] ``` } } } } } } } } } ``` But it still does not work. I don't understand how to combine that... Le jeudi 21 novembre 2013 19:28:36 UTC+1, [tma...@gmail.com](mailto:tma...@gmail.com) a écrit : Hello guys, I'm working to integrate nested values in Kibana but I'm facing an issue with the data selected. To detail my issue, here is my structure: { "mappings" : { "fkv" : { "properties" : { "kv" : { "type" : "nested", "include\_in\_parent" : false, "properties" : { "name" : {"type" : "string"}, "value" : {"type" : "string"} } } } } } } I'm trying with Kibana to search through KV nested type. With a module I'm generating the following request: { "facets": { "terms": { "terms": { "field": "kv.key:state", "size": 10, "order": "count", "exclude": [] }, "facet\_filter": { "fquery": { "query": { "filtered": { "query": { "nested": { "path": "kv", "query": { "bool": { "should": [ { "query\_string": { "query": "\*" } } ] } } } }, "filter": { "bool": { "must": [ { "match\_all": {} }, { "bool": { "must": [ { "match\_all": {} } ] } } ] } } } } } } } }, "size": 0 } I'm matching some fields but unfortunately I have just 'missing fields'. I don't know how to solve this problem ☹ Thanks for your help ## PS: I someone is interested in my JS code I could provide the source ## You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/f72b9b24-71b5-4339-8ac1-6d0b656dc0e6%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/f72b9b24-71b5-4339-8ac1-6d0b656dc0e6%40googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/3d0e409b-1328-4f25-a7c8-9037f6b09266%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/3d0e409b-1328-4f25-a7c8-9037f6b09266%40googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/etPan.529f0284.54e49eb4.bd3d%40MacBook-Air-de-David.local](https://groups.google.com/d/msgid/elasticsearch/etPan.529f0284.54e49eb4.bd3d%40MacBook-Air-de-David.local). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 2:03am UTC](https://discuss.elastic.co/t/elasticsearch-nested-values-kibana-behind/14522/13 "2017-07-06T02:03:26Z")