# ML jobs- aggregations

**URL:** <https://discuss.elastic.co/t/ml-jobs-aggregations/185820>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-machine-learning\
**Created:** [June 14, 2019, 9:28am UTC](https://discuss.elastic.co/t/ml-jobs-aggregations/185820 "2019-06-14T09:28:45Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Bharath\_Kumar\_R](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bharath_kumar_r/32/45474_2.png) [@Bharath\_Kumar\_R](https://discuss.elastic.co/u/Bharath_Kumar_R)\
**Post date:** [June 14, 2019, 9:28am UTC](https://discuss.elastic.co/t/ml-jobs-aggregations/185820/1 "2019-06-14T09:28:45Z")

</div>

Hey, Im unable to understand how the several aggregation techniques we use for ML jobs. Is there any blog which explains how these aggregation techniques work or can anyone explain about it?  
thanks in advance

---

<div class="post-metadata">

**Author:** ![richcollier](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/richcollier/32/115035_2.png) [@richcollier](https://discuss.elastic.co/u/richcollier)\
**Post date:** [June 14, 2019, 10:19am UTC](https://discuss.elastic.co/t/ml-jobs-aggregations/185820/2 "2019-06-14T10:19:41Z")

</div>

Docs: [https://www.elastic.co/guide/en/elastic-stack-overview/current/ml-configuring-aggregation.html](https://www.elastic.co/guide/en/elastic-stack-overview/current/ml-configuring-aggregation.html)

Blog: [https://www.elastic.co/blog/custom-elasticsearch-aggregations-for-machine-learning-jobs](https://www.elastic.co/blog/custom-elasticsearch-aggregations-for-machine-learning-jobs)

---

<div class="post-metadata">

**Author:** ![Bharath\_Kumar\_R](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bharath_kumar_r/32/45474_2.png) [@Bharath\_Kumar\_R](https://discuss.elastic.co/u/Bharath_Kumar_R)\
**Post date:** [June 14, 2019, 11:45am UTC](https://discuss.elastic.co/t/ml-jobs-aggregations/185820/3 "2019-06-14T11:45:31Z")

</div>

Can you explain the difference between low\_count and low\_sum aggregations?

---

<div class="post-metadata">

**Author:** ![richcollier](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/richcollier/32/115035_2.png) [@richcollier](https://discuss.elastic.co/u/richcollier)\
**Post date:** [June 14, 2019, 12:55pm UTC](https://discuss.elastic.co/t/ml-jobs-aggregations/185820/4 "2019-06-14T12:55:18Z")

</div>

`count` - counts elasticsearch documents from the query to the index over time (every `bucket_span`)  
`sum` - calculates the sum of a particular field within the documents over time (every `bucket_span`)

`low_` and `high_` variants allow you to control the reporting of anomalies only on the low-side or the high-side.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 12, 2019, 12:55pm UTC](https://discuss.elastic.co/t/ml-jobs-aggregations/185820/5 "2019-07-12T12:55:19Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.