# Hello, help me!

**URL:** <https://discuss.elastic.co/t/hello-help-me/212724>\
**Category:** Kibana\
**Created:** [December 21, 2019, 3:57am UTC](https://discuss.elastic.co/t/hello-help-me/212724 "2019-12-21T03:57:40Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Long\_Ta](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/long_ta/32/59773_2.png) [@Long\_Ta](https://discuss.elastic.co/u/Long_Ta)\
**Post date:** [December 21, 2019, 3:57am UTC](https://discuss.elastic.co/t/hello-help-me/212724/1 "2019-12-21T03:57:40Z")

</div>

hello everyone  
I a new kibana, please help me  
{  
"\_index": "pos\_user",  
"\_type": "\_doc",  
"\_id": "19cca049-b5c0-4dde-8387-edeafdf9303b",  
"\_version": 1,  
"\_score": null,  
"\_source": {  
"id": "19cca049-b5c0-4dde-8387-edeafdf9303b",  
"username": "vuimobi",  
"sponsername": "victor2233",  
"email": "[vuimobi@yopmail.com](mailto:vuimobi@yopmail.com)",  
"first\_name": "",  
"last\_name": "",  
"country": "VN",  
"available\_balances\_internal": 0,  
"available\_balances\_external": 0.6289,  
"gross\_sales": 0,  
"total\_members": 0,  
"total\_invested": 0,  
"created\_at": "2019-11-03T14:15:20.368Z",  
"transactions": [  
{  
"id": "361febd0-0afa-4a3d-b9c9-dfa1615b5800",  
"tx\_id": "",  
"address": "0x6BeD2Ff860f5159911d44b082A0B80A3D46eb265",  
"coin": "ETH",  
"t\_type": "withdrawal",  
"t\_status": "completed",  
"amount": 0.00666178,  
"estimated\_usd": 1,  
"wallet\_type": "",  
"created\_at": "2019-11-24T05:22:16.087Z"  
},  
{  
"id": "311e1332-e799-4857-92ce-cc1a00e21bc9",  
"tx\_id": "",  
"address": "0xa9B830EFadF0095E47FD1Ce49f7E5857BAE59C3A",  
"coin": "ETH",  
"t\_type": "withdrawal",  
"t\_status": "completed",  
"amount": 0.0054038,  
"estimated\_usd": 1,  
"wallet\_type": "",  
"created\_at": "2019-11-04T13:40:28.467Z"  
},  
{  
"id": "bd532d68-832d-44af-a715-eabc928e7ed9",  
"tx\_id": "",  
"address": "0x61cb0DDE7936697c5E98EC360d72dAF409c75a04",  
"coin": "ETH",  
"t\_type": "withdrawal",  
"t\_status": "completed",  
"amount": 0.00552105,  
"estimated\_usd": 1,  
"wallet\_type": "",  
"created\_at": "2019-11-03T14:28:05.643Z"  
},  
{  
"id": "2c3b087b-2a7d-4907-858c-340d375e90a9",  
"tx\_id": "c43b2e40561efc49e0c547a99f5c7c704b71f99d8e43fc12840ac2431fa2af60",  
"address": "0xaf4D50Cd3E308C6519E577A075Fc00AdCfcA2a5C",  
"coin": "ETH",  
"t\_type": "deposit",  
"t\_status": "completed",  
"amount": 0.02,  
"estimated\_usd": 3.6289,  
"wallet\_type": "",  
"created\_at": "2019-11-03T14:17:31.594Z"  
}  
],  
"commission\_histories": ,  
"profit\_histories": ,  
"outside\_transfers": ,  
"inside\_transfers": ,  
"user\_packages":   
},  
"fields": {  
"created\_at": [  
"2019-11-03T14:15:20.368Z"  
],  
"transactions.created\_at": [  
"2019-11-03T14:17:31.594Z",  
"2019-11-03T14:28:05.643Z",  
"2019-11-04T13:40:28.467Z",  
"2019-11-24T05:22:16.087Z"  
]  
},  
"highlight": {  
"email": [  
"@kibana-highlighted-field@vuimobi@/kibana-highlighted-field@@@kibana-highlighted-field@yopmail.com@/kibana-highlighted-field@"  
]  
},  
"sort": [  
1572790520368  
]  
}

I would like filter field "transactions" and type is "t\_type": "withdrawal",  
and sum all "estimated\_usd": 1,  
Thank very much!

---

<div class="post-metadata">

**Author:** ![Yoav\_Ben\_Moha](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yoav_ben_moha/32/46202_2.png) [@Yoav\_Ben\_Moha](https://discuss.elastic.co/u/Yoav_Ben_Moha)\
**Post date:** [December 21, 2019, 6:20pm UTC](https://discuss.elastic.co/t/hello-help-me/212724/2 "2019-12-21T18:20:42Z")

</div>

Hi,  
Try the following -

Go to --\> Visualizations --\> --\> Create new Visualizations  
Choose --\> data table --\> choose your index

On Metrics --\> Aggregation : choose SUM  
---\> Field : estimated\_usd

on the search query (or filter query ) enter : "t\_type": "withdrawal

Thanks  
Yoav

---

<div class="post-metadata">

**Author:** ![Long\_Ta](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/long_ta/32/59773_2.png) [@Long\_Ta](https://discuss.elastic.co/u/Long_Ta)\
**Post date:** [December 23, 2019, 3:00am UTC](https://discuss.elastic.co/t/hello-help-me/212724/3 "2019-12-23T03:00:02Z")

</div>

Yes, because I tried that way, but it calculated the sum of t\_type:"withdrawal" and t\_type: "deposit", the result was incorrect.  
thanks!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [January 20, 2020, 3:00am UTC](https://discuss.elastic.co/t/hello-help-me/212724/4 "2020-01-20T03:00:11Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.