Set aggregation and how to visualize in Kibana

[onTop (Abhishek Tripathi)]

Hi,
I have a unique requirement. Let's say I have 2 fields in my document.

1. Build Version
2. Defects

If X and Y are 2 build versions, I want to visualize defects that are common to X and Y and defects that are unique to X and Y. Is it possible to get even closer to what I want to achieve without repetition of values in the rows?

[thomasneirynck]

hi @onTop,

I think you can probably do a count per defect, for your first use-case. "Defects that are common to X and Y".

In the data-table visualization:

• Add a terms-aggregation by Defect ("split row)"
• Add another terms-aggregation ("split row"))
  • will create term-agg for build-version X
  • will create term-agg for build-version Y

That will give you a table with 4 columns:

• defect-identifier
• build-versionX identifier
• build-versionY identifier
• count

The issue here is of course that you might have 0-counts.

• You can filter these out be setting the min_doc_count to 1 in the advanced->JSON-input setting. (E.g. https://www.elastic.co/guide/en/elasticsearch/reference/current/search-aggregations-bucket-terms-aggregation.html#_minimum_document_count_4 and Custom search)
• Another ways it to just order by count-descending.

For the other use-case, defects that are only unique to one or the other, I'm not sure if you can out of the box. I would open an ER. https://github.com/elastic/kibana/issues/new