Structure of Kibanas "Micro Analysis" query

Kindly enough, the queries being used in Kibana are mostly shown via the
information icon "i". But unfortunately there´s no query shown for the
"micro analyses" of specific fields and I wonder about their structure

Let me explain:

For example the micro analysis for the field user.screen_name would show me
10 users with the highest doc_count and I would query them this way:

"query": { "match_all": {} },
"aggs": {
"user_list": {
"terms": {
"field": "user.screen_name",
"size": 10

"size": 0

But this obviously only works because the screen_name is a single string
without any more terms in the field. For another field, such as,
which probably consists of more than just one term (first name, last name),
the query above wouldn´t work anymore.

Somewhere else I saw the suggestion to redindex the documents and set the
mapping to: "": "not_analysed" which leads to the effect, that the
entire field gets handled as one single term.

But this is not what I want and as Kibana successfully queries its micro
analysis on fields, which indeed are mapped with an analyser, I´d like to
find out, how the query would look like.

Thanks for your help on this! :slight_smile:

You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to
To view this discussion on the web visit
For more options, visit