# Kibana JSON Input Aggregation Query

**URL:** <https://discuss.elastic.co/t/kibana-json-input-aggregation-query/31501>\
**Category:** Kibana\
**Created:** [October 1, 2015, 6:58pm UTC](https://discuss.elastic.co/t/kibana-json-input-aggregation-query/31501 "2015-10-01T18:58:19Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Mark\_Vervuurt](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mark_vervuurt/32/1970_2.png) [@Mark\_Vervuurt](https://discuss.elastic.co/u/Mark_Vervuurt)\
**Post date:** [October 1, 2015, 6:58pm UTC](https://discuss.elastic.co/t/kibana-json-input-aggregation-query/31501/1 "2015-10-01T18:58:20Z")

</div>

Hi Friends,

I have created a Pie Chart in Kibana with JSON Input and it generates the following request. Could somebody explain what this query is doing on the aggregation part?

I seem that have an aggregation 'line\_id' and '\_source.text\_entry.length()'.  
Thanks.

{  
"size": 0,  
"query": {  
"query\_string": {  
"analyze\_wildcard": true,  
"query": "\*"  
}  
},  
"aggs": {  
"2": {  
"terms": {  
"field": "line\_id",  
"size": 10,  
"order": {  
"\_count": "desc"  
},  
"script": "\_source.text\_entry.length()",  
"lang": "groovy"  
}  
}  
}  
}

---

<div class="post-metadata">

**Author:** ![tbragin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tbragin/32/45166_2.png) [@tbragin](https://discuss.elastic.co/u/tbragin)\
**Post date:** [October 6, 2015, 4:58am UTC](https://discuss.elastic.co/t/kibana-json-input-aggregation-query/31501/2 "2015-10-06T04:58:56Z")

</div>

Top 10 [Terms](https://www.elastic.co/guide/en/elasticsearch/reference/current/search-aggregations-bucket-terms-aggregation.html) aggregation on the field "line\_id", passing a script which I assume you defined?

---

<div class="post-metadata">

**Author:** ![Mark\_Vervuurt](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mark_vervuurt/32/1970_2.png) [@Mark\_Vervuurt](https://discuss.elastic.co/u/Mark_Vervuurt)\
**Post date:** [October 12, 2015, 9:55am UTC](https://discuss.elastic.co/t/kibana-json-input-aggregation-query/31501/3 "2015-10-12T09:55:59Z")

</div>

Yes I passed it the script indeed... How does the script influence the top 10 Terms aggregation here above?  
Mark

---

<div class="post-metadata">

**Author:** ![tbragin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tbragin/32/45166_2.png) [@tbragin](https://discuss.elastic.co/u/tbragin)\
**Post date:** [October 13, 2015, 4:09am UTC](https://discuss.elastic.co/t/kibana-json-input-aggregation-query/31501/4 "2015-10-13T04:09:22Z")

</div>

The function of the script is explained in the Elasticsearch documentation for the Terms aggregation:  
[https://www.elastic.co/guide/en/elasticsearch/reference/current/search-aggregations-bucket-terms-aggregation.html#search-aggregations-bucket-terms-aggregation-script](https://www.elastic.co/guide/en/elasticsearch/reference/current/search-aggregations-bucket-terms-aggregation.html#search-aggregations-bucket-terms-aggregation-script)

What are you trying to achieve with this script?

---

<div class="post-metadata">

**Author:** ![Mark\_Vervuurt](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mark_vervuurt/32/1970_2.png) [@Mark\_Vervuurt](https://discuss.elastic.co/u/Mark_Vervuurt)\
**Post date:** [October 14, 2015, 8:46am UTC](https://discuss.elastic.co/t/kibana-json-input-aggregation-query/31501/5 "2015-10-14T08:46:22Z")

</div>

Thanks for your help!

My goal is to explore, I was trying the JSON Input functionality in Kibana. I passed this scripts and it indeed influence my result query. However it is unclear to me how it influence this JSON Aggregation Query.

Maybe you could write this query explicitly and completely? I think it would clarify what the extra statement with the script adds to this aggregation query.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 2:11pm UTC](https://discuss.elastic.co/t/kibana-json-input-aggregation-query/31501/6 "2017-07-06T14:11:22Z")

</div>