Group By Elk Stack?

Hello Community,

we are using elk Stack. I was wondering where is the best way to use aggregation- in Logstash or in elasticsearch? Or is it possible do it this in Kibana ?


So Kibana lets you perform aggregations in elasticsearch by sending your aggregation requests. Logstash is for ingesting the data.

Did you mean a particular aggregation?

Our docs here should help -


1 Like

Hi Thank you for replay.

my goal is :

SELECT COUNT(CustomerID), Country
FROM Customers
GROUP BY Country;

that I can filter like how many same countries have the same log.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.