Visual Builder: bucket aggregation based on multiple terms

Elastic Stack Kibana
1

Hi,

I need to have a bucket aggregation based on two disctinct terms; both terms are string so I could create a new field (maybe at insertion time) as concat of the two fields I need to aggregate.
But, also for learning purposes, I think it could be done using a group by of type Filter, right? In that case, could you please show me the right query to use, supposing the fileds name are f1 and f2?

Thanks,
Alberto

2

Hi Alberto,

Currently, you can't use filters in TSVB to do what you're trying to do. You can either create a new concatenated field at ingest time (as you mentioned), or you can create a scripted field to dynamically create this concatenated field.

Hope this helps,
CJ