# Null aggregation response from logstash elastic search filter while in Kibana its good

**URL:** <https://discuss.elastic.co/t/null-aggregation-response-from-logstash-elastic-search-filter-while-in-kibana-its-good/132511>\
**Category:** Logstash\
**Created:** [May 18, 2018, 3:58pm UTC](https://discuss.elastic.co/t/null-aggregation-response-from-logstash-elastic-search-filter-while-in-kibana-its-good/132511 "2018-05-18T15:58:39Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![UdaySingh\_Ghadage](https://avatars.discourse-cdn.com/v4/letter/u/ecae2f/32.png) [@UdaySingh\_Ghadage](https://discuss.elastic.co/u/UdaySingh_Ghadage)\
**Post date:** [May 18, 2018, 3:58pm UTC](https://discuss.elastic.co/t/null-aggregation-response-from-logstash-elastic-search-filter-while-in-kibana-its-good/132511/1 "2018-05-18T15:58:39Z")

</div>

Hi,  
I am running below query from Kibana (6.0.0) and its showing result but same when I am running through logstash Elastic search filter plug in query dsl template json its not returning any result.

Query.DSL:  
{  
"size": 0,  
"\_source": {  
"excludes": []  
},  
"query" : {  
"match" : {  
"JobId" : "96"  
}  
},  
"aggs" : {  
"1": {  
"top\_hits": {  
"docvalue\_fields": ["Status.keyword"],  
"\_source": {"includes": ["Status","Status.keyword"]},  
"track\_scores":true,  
"size":1,  
"sort": [  
{  
"@timestamp": {  
"order": "desc"  
}  
}  
]  
}  
}

```
		}

```

}

While when i run it though kibana its giving result as below

{  
"took": 1,  
"timed\_out": false,  
"\_shards": {  
"total": 5,  
"successful": 5,  
"skipped": 0,  
"failed": 0  
},  
"hits": {  
"total": 3,  
"max\_score": 0,  
"hits": []  
},  
"aggregations": {  
"1": {  
"hits": {  
"total": 3,  
"max\_score": 1,  
"hits": [  
{  
"\_index": "logstash\_jobs\_inservice-2018.05.18",  
"\_type": "doc",  
"\_id": "naQDc2MBHF2ELB4FKN1D",  
"\_score": 1,  
"\_source": {  
"Status": "Completed"  
},  
"fields": {  
"Status.keyword": [  
"Completed"  
]  
},  
"sort": [  
1526627439510,  
1  
]  
}  
]  
}  
}  
}  
}

Actually I want Status 'Started' or Completed in logstash elastic search Filter plug in. Can you please help on this?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 15, 2018, 3:58pm UTC](https://discuss.elastic.co/t/null-aggregation-response-from-logstash-elastic-search-filter-while-in-kibana-its-good/132511/2 "2018-06-15T15:58:41Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.