# Sum with aggregation

**URL:** <https://discuss.elastic.co/t/sum-with-aggregation/151403>\
**Category:** Kibana\
**Created:** [October 8, 2018, 8:48am UTC](https://discuss.elastic.co/t/sum-with-aggregation/151403 "2018-10-08T08:48:33Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![RAMIAFARA\_Voriasy](https://avatars.discourse-cdn.com/v4/letter/r/d6d6ee/32.png) [@RAMIAFARA\_Voriasy](https://discuss.elastic.co/u/RAMIAFARA_Voriasy)\
**Post date:** [October 8, 2018, 8:48am UTC](https://discuss.elastic.co/t/sum-with-aggregation/151403/1 "2018-10-08T08:48:33Z")

</div>

Hi, I'd like to create a line graph with kibana  
here is my log csv :  
2018-07-06 10:32:52;Q34QRM;ICaYoB;MSC\_MTC;Y1;X1  
2018-07-06 10:32:52;uRtEg6;ICaYoB;MSC\_MTSMS;Y1;X2  
2018-07-06 10:32:52;YCKCRq;ICaYoB;MSC\_MOSMS;Y1;X3  
2018-07-06 10:32:52;F12r6L;ACaYoA;MSC\_MTC;Y2;X4  
2018-07-06 10:32:52;ulOEpY;ACaYoA;MSC\_MTSMS;Y2;X5  
2018-07-06 10:32:53;tP04qj;ACaYoA;MSC\_MOSMS;Y2;X6

Y : nb data in and X: nb data out  
I'd like to get something like :  
data\_in = Y1+Y2 not Y1+Y1+Y1+Y2+Y2+Y2  
data\_out = X1+X2+X3+....+Xn

---

<div class="post-metadata">

**Author:** ![jen-huang](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jen-huang/32/74327_2.png) [@jen-huang](https://discuss.elastic.co/u/jen-huang)\
**Post date:** [October 11, 2018, 9:44am UTC](https://discuss.elastic.co/t/sum-with-aggregation/151403/2 "2018-10-11T09:44:38Z")

</div>

This is easily done with Kibana visualizations using sum aggregations after getting your data indexed into Elasticsearch. Here's an example of 2 sum metrics on one line graph over time:

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/2/0/208c9f08f6a36c86b5a655723f486af134f7d3c7.png)

---

<div class="post-metadata">

**Author:** ![RAMIAFARA\_Voriasy](https://avatars.discourse-cdn.com/v4/letter/r/d6d6ee/32.png) [@RAMIAFARA\_Voriasy](https://discuss.elastic.co/u/RAMIAFARA_Voriasy)\
**Post date:** [October 12, 2018, 5:36am UTC](https://discuss.elastic.co/t/sum-with-aggregation/151403/3 "2018-10-12T05:36:00Z")

</div>

thanks,  
I'd like to sum and make a request like a "group by" in SQL

---

<div class="post-metadata">

**Author:** ![RAMIAFARA\_Voriasy](https://avatars.discourse-cdn.com/v4/letter/r/d6d6ee/32.png) [@RAMIAFARA\_Voriasy](https://discuss.elastic.co/u/RAMIAFARA_Voriasy)\
**Post date:** [October 12, 2018, 5:39am UTC](https://discuss.elastic.co/t/sum-with-aggregation/151403/4 "2018-10-12T05:39:09Z")

</div>

e.g:  
x;a  
y;b  
x;c  
y;d  
z;e  
sum nb\_in = x+y+z  
sum nb\_out = a+b+c+d+e

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 9, 2018, 5:39am UTC](https://discuss.elastic.co/t/sum-with-aggregation/151403/5 "2018-11-09T05:39:14Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.