Visual Builder - "count" field definition


#1

Hi, I have created in Visual Builder chart. I am using "count" agg. "Count" should show "the last value in that case".

What is definition of last value in that case? Is it the value from last event? What if in the same time, I will receive two events? Will it sum it up?

Thanks for clarification.


(Jon Budzenski) #2

The count aggregation will tell you the number of documents in that bucket. For example if you receive 5 events count will be 5.

If you need something like the last value added to a bucket you'll want to use the top hits agg, sorted by timestamp for example.


#3

This is how it works in Kibana charts but not in Visual Builder.

For example here

If I switxh to metric, the count is zero, not 10. I have already asked about that here Visual Builder - time range for count?

But my question now is about defenition of "Count" aggregation.


(Jon Budzenski) #4

Ah I understand now. The last value for the metric will be the right most point on the time series chart. It will be last bucket created, with the bucket time range is dependent on the interval.

If you want it to be 10 you can use a cumulative sum aggregation


(system) #5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.