Replace Characters in Search Results and Group By

[cr_katz]

Hello All,
I extracted a set of url's using Kibana and see that the only difference in the url's is a unique ID. After replacing the unique ID with a '*' , I need to group identical urls and get a count for each group.

Please advise.

Thanks
crkatz

[Joe_Fleming]

Sounds like you have log data you're trying to visualize. Are you simply storing the full URLs, and looking for a count of each one? Are you looking for the counts of the URLs bucketed by time?

If that's the case, all you should have to do is use a count metric on the y-axis (the default), set the x-axis to a date histogram using your index pattern's time field, and do a split series using a terms agg and the field where the URL is stored.