# Get aggregation result used by a Kibana visualization from ElasticSearch

**URL:** <https://discuss.elastic.co/t/get-aggregation-result-used-by-a-kibana-visualization-from-elasticsearch/27643>\
**Category:** Elasticsearch\
**Created:** [August 19, 2015, 6:39am UTC](https://discuss.elastic.co/t/get-aggregation-result-used-by-a-kibana-visualization-from-elasticsearch/27643 "2015-08-19T06:39:40Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![91pavan](https://avatars.discourse-cdn.com/v4/letter/9/b487fb/32.png) [@91pavan](https://discuss.elastic.co/u/91pavan)\
**Post date:** [August 19, 2015, 6:39am UTC](https://discuss.elastic.co/t/get-aggregation-result-used-by-a-kibana-visualization-from-elasticsearch/27643/1 "2015-08-19T06:39:40Z")

</div>

Hi. I have a Kibana visualization doing some nested aggregation. I want to get the raw data which Kibana uses to graph this visualization.

Here's the visState:

```
{
  "type": "histogram",
  "params": {
    "shareYAxis": true,
    "addTooltip": true,
    "addLegend": true,
    "mode": "grouped",
    "defaultYExtents": false
  },
  "aggs": [
    {
      "id": "1",
      "type": "avg",
      "schema": "metric",
      "params": {
        "field": "throughput"
      }
    },
    {
      "id": "2",
      "type": "terms",
      "schema": "segment",
      "params": {
        "field": "packetSize",
        "size": 50,
        "order": "asc",
        "orderBy": "1"
      }
    },
    {
      "id": "3",
      "type": "filters",
      "schema": "group",
      "params": {
        "filters": [
          {
            "input": {
              "query": {
                "query_string": {
                  "query": "loss:\"0\" AND bestOrWorst:\"worst\"",
                  "analyze_wildcard": true
                }
              }
            }
          },
          {
            "input": {
              "query": {
                "query_string": {
                  "query": "loss:\"0\" AND bestOrWorst:\"best\"",
                  "analyze_wildcard": true
                }
              }
            }
          },
          {
            "input": {
              "query": {
                "query_string": {
                  "query": "loss:\"0.01\" AND bestOrWorst:\"worst\"",
                  "analyze_wildcard": true
                }
              }
            }
          },
          {
            "input": {
              "query": {
                "query_string": {
                  "query": "loss:\"0.01\" AND bestOrWorst:\"best\"",
                  "analyze_wildcard": true
                }
              }
            }
          }
        ]
      }
    }
  ],
  "listeners": {}
}

```

Here's the kibanaSavedObjectMeta.searchSourceJSON:

```
{
  "index": "logstash-*",
  "query": {
    "query_string": {
      "query": "*",
      "analyze_wildcard": true
    }
  },
  "filter": []
}

```

I tried querying this from ES, but keep getting all sort of errors.  
Query: [http://pastebin.com/RChEDLuU](http://pastebin.com/RChEDLuU)

Any help, please? Much appreciated.

---

<div class="post-metadata">

**Author:** ![colings86](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/colings86/32/44960_2.png) [@colings86](https://discuss.elastic.co/u/colings86)\
**Post date:** [August 19, 2015, 8:23am UTC](https://discuss.elastic.co/t/get-aggregation-result-used-by-a-kibana-visualization-from-elasticsearch/27643/2 "2015-08-19T08:23:04Z")

</div>

What error(s) are you getting?

Also, why are you adding `"size": 100000` to the request? This is probably the source of your issue as deep pagination is not a good idea as described in this section of the 'Elasticsearch: The Definitive Guide' book: [https://www.elastic.co/guide/en/elasticsearch/guide/current/pagination.html](https://www.elastic.co/guide/en/elasticsearch/guide/current/pagination.html)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 5, 2017, 11:55pm UTC](https://discuss.elastic.co/t/get-aggregation-result-used-by-a-kibana-visualization-from-elasticsearch/27643/3 "2017-07-05T23:55:05Z")

</div>