Kibana -

Elastic Stack Kibana
1

empty this post

2

Without knowing your index mappings, I can't provide an exact JSON query, but you probably want to do a Terms Aggregation which will group the results into buckets, one for each unique value of the field.

Here's an example seach that may be close to what you need:

GET /_search
{
    "aggs" : {
        "customerId" : {
            "terms" : {
                "field" : "customerId",
                "order" : { "max_score" : "desc" }
            },
            "aggs" : {
                "max_score" : { "max" : { "field" : "score" } }
            }
        }
    }
}
3

empty this post

4

I think that request is showing up empty because no index matches the _pindrop* pattern. Can you provide the mappings of this request: GET /pindrop*/_mapping? (without the underscore before pindrop)

5

empty this post

6

Looks like your attachment didn't make it. Can you post it directly in the reply on the forum?