Missing data when using unique count and creating an aggregation in Kibana
jaspernygaard
I have a behavior in Kibana, I can't explain. The following is a simple bar chart, counting unique users, filtered by application and a role, and ensuring certain fields exist on the logs:
This graph shows that I have approx. 170 users which have the role 'Landmand'. If I split the bar by the term 'fields.Role', I would expect a identical chart, since I already applied a filter specifying 'fields.Role:Landmand' in the search. However I see this.
This suddenly limits the unique count to approx. 150 users. I've tried with different fields and it seems to have the same behavior - as soon as I split the bar, I seem to limit the data somehow.
Any information is greatly appreciated.
Pigueiras
It happens because it uses the cardinality aggregation to do the unique count. As it is explained in the link, the count is approximate and it has a % of error. Just do a quick test, try to copy the request and try with a different precision threshold to see the difference.
To set a custom precision_threshold you can use the advanced section and put a custom JSON Input to the aggregation:
If you go to the Request section, you can actually see that the threshold has been added to the cardinality aggregation.
Collected from the Internet
Please contact [email protected] to delete if infringement.
edited at
- Prev: C# method: is there a parameter name to insert 'derived classname' generically?
- Next: How to search a GitHub fork for code using the GitHub Search API?
Related
TOP Ranking
- 1
Can't pre-populate phone number and message body in SMS link on iPhones when SMS app is not running in the background
- 2
pump.io port in URL
- 3
How to import an asset in swift using Bundle.main.path() in a react-native native module
- 4
Loopback Error: connect ECONNREFUSED 127.0.0.1:3306 (MAMP)
- 5
Failed to listen on localhost:8000 (reason: Cannot assign requested address)
- 6
Spring Boot JPA PostgreSQL Web App - Internal Authentication Error
- 7
Is this docker-for-mac password dialog legit?
- 8
Double spacing in rmarkdown pdf
- 9
ngClass error (Can't bind ngClass since it isn't a known property of div) in Angular 11.0.3
- 10
Vector input in shiny R and then use it
- 11
Assembly definition can't resolve namespaces from external packages
- 12
Bootstrap 5 Static Modal Still Closes when I Click Outside
- 13
Can a 32-bit antivirus program protect you from 64-bit threats
- 14
Using Response.Redirect with Friendly URLS in ASP.NET
- 15
BigQuery - concatenate ignoring NULL
- 16
How to how increase/decrease compared to adjacent cell
- 17
AirflowException: Celery command failed - The recorded hostname does not match this instance's hostname
- 18
@RefreshScope annotated Bean registered through BeanDefinitionRegistryPostProcessor not getting refreshed on Cloud Config changes
- 19
MTKView Displaying Wide Gamut P3 Colorspace
- 20
Displaying attached image with post how to i get it to display
- 21
Python connect to firebird docker database
Comments