We are using an aggregated based kibana table that displays a bunch of users who had poor calls and where the majority of those poor calls took place, etc...(the user is set as the bucket).
For each user, we would like to display the "top" location, call type and connection type used for those poor calls.
I initially thought that we could use the "top hit" aggregation to display the most recurring document for each of those fields but I think it's only displaying the most recent document for each of those fields.
Is there a way to achieve what we want to do?