Question about filters - different data displayed

Elastic Stack Kibana
1

Hi

I have an index that has documents with different status. "A", "B", "C", "D"

If i have a metric to count the total of documents, and i add a filter as "status.keyword in "A", "B", it gives me 10 documents, which is correct.

However, if i dont add that filter, but i add as metric "Sum bucket" and i use the aggregation "filters", with the filter status.keyword: "A" or status.keyword:"B", then, it gives me 15 documents, which is incorrect

I was expecting this to return the same value, but it is not. Any idea on why is that happening? Maybe i dont understand how "filters" aggregation works

Thanks

2

This sounds weird. Does it give the same wrong answer if you use Count instead of Sum Bucket?
Also, what version of Kibana are you using. I tried on 6.7.0.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.