When I try to use the Significant Terms aggregation on the text in the tweet documents it only gives me the option for "text.keyword" instead of "text" field, which I believe the documentation says I need for Significant Term Aggregation? (i'm unsure about this)?
Here is the index mapping for my index, along with a few example documents.
Please note that my text.keywords field actually displays the entire tweet instead of the specific tokens as well? I'm unsure why this is because according to the documentation, I believe the analyzer is suppose to tokenize the text field by default?
Keyword fields index the number of unique documents for each unique value of that field. They should be used for fields containing structured data such as email addresses, IP addresses, status codes, etc.
In order to do a Significant Terms query on a text field, you'll need to enable fielddata on the mappings. For example:
Once you've done that, go to Management > Index Patterns and refresh the index pattern to make Kibana re-read the mappings. Now the text field should show up in the Significant Terms dropdown.
You may not get any results because there is only a single document in the index, so no words are "significant". Add a few more documents to start getting results.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.