Visual Builder: bucket aggregation based on multiple terms


I need to have a bucket aggregation based on two disctinct terms; both terms are string so I could create a new field (maybe at insertion time) as concat of the two fields I need to aggregate.
But, also for learning purposes, I think it could be done using a group by of type Filter, right? In that case, could you please show me the right query to use, supposing the fileds name are f1 and f2?


Hi Alberto,

Currently, you can't use filters in TSVB to do what you're trying to do. You can either create a new concatenated field at ingest time (as you mentioned), or you can create a scripted field to dynamically create this concatenated field.

Hope this helps,

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.