# Terms aggregation on \_all field in Kibana?

**URL:** <https://discuss.elastic.co/t/terms-aggregation-on--all-field-in-kibana/64389>\
**Category:** Kibana\
**Created:** [October 30, 2016, 10:01pm UTC](https://discuss.elastic.co/t/terms-aggregation-on--all-field-in-kibana/64389 "2016-10-30T22:01:11Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Patrick\_Lam](https://avatars.discourse-cdn.com/v4/letter/p/ed8c4c/32.png) [@Patrick\_Lam](https://discuss.elastic.co/u/Patrick_Lam)\
**Post date:** [October 30, 2016, 10:01pm UTC](https://discuss.elastic.co/t/terms-aggregation-on--all-field-in-kibana/64389/1 "2016-10-30T22:01:11Z")

</div>

Perhaps I'm missing something, but from my understanding, the default search field for text for Kibana (in the search box) is essentially the \_all field. However, I can't seem to do a terms or significant terms aggregation on the \_all field in the visualizations for keyword suggestions. Is there a way to enable terms aggregations for the \_all field? Or alternatively change the default search field for the search box?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [October 30, 2016, 10:04pm UTC](https://discuss.elastic.co/t/terms-aggregation-on--all-field-in-kibana/64389/2 "2016-10-30T22:04:55Z")

</div>

`_all` is an analysed field, you don't want to agg on that.

What are you trying to achieve?

---

<div class="post-metadata">

**Author:** ![Patrick\_Lam](https://avatars.discourse-cdn.com/v4/letter/p/ed8c4c/32.png) [@Patrick\_Lam](https://discuss.elastic.co/u/Patrick_Lam)\
**Post date:** [October 30, 2016, 10:22pm UTC](https://discuss.elastic.co/t/terms-aggregation-on--all-field-in-kibana/64389/3 "2016-10-30T22:22:22Z")

</div>

I just want to see the most common (or uniquely common) keywords in my text fields. I'm aware of the memory demands it takes on analyzed fields, but I think it's not an uncommon usage, especially if you keep the number of buckets to a reasonable size.

For example, the ES documentation on significant terms aggregations does suggest aggregations on free text fields as a potential use case.

[https://www.elastic.co/guide/en/elasticsearch/reference/current/search-aggregations-bucket-significantterms-aggregation.html#\_use\_on\_free\_text\_fields](https://www.elastic.co/guide/en/elasticsearch/reference/current/search-aggregations-bucket-significantterms-aggregation.html#_use_on_free_text_fields)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:35pm UTC](https://discuss.elastic.co/t/terms-aggregation-on--all-field-in-kibana/64389/4 "2017-07-06T13:35:06Z")

</div>


