Hi Mark,
Thanks again. It would be nice if Kibana would support this some how. At this point I think data fusion is one of the best options.
In addition to this I do wonder why the query below gives an to many buckets error as it limited to 10000 which is equal to the max.
{
"aggs": {
"2": {
"terms": {
"field": "name",
"order": {
"_count": "desc"
},
"size": 10000,
"min_doc_count": 2
}
}
}
}