How to retrieve unique count of a field using Kibana + Elastic Search

by

For Kibana 4 go to this answer

This is easy to do with a terms panel:

Adding a terms panel to Kibana

If you want to select the count of distinct IP that are in your logs, you should specify in the field clientip, you should put a big enough number in length (otherwise, it will join different IP under the same group) and specify in the style table. After adding the panel, you will have a table with IP, and the count of that IP:

Table with IP and count

More Related Contents:

  1. Calculating time between events
  2. Join query in ElasticSearch
  3. How to create multiple indexes in logstash.conf file?
  4. Change default mapping of string to “not analyzed” in Elasticsearch
  5. How to parse json in logstash /grok from a text file line?
  6. Logstash: Merge two logs into one output document
  7. Shards and replicas in Elasticsearch
  8. How to setup ElasticSearch index structure with multiple entity bindings
  9. ES keeps returning every document
  10. Elasticsearch: Failed to connect to localhost port 9200 – Connection refused
  11. Aggregation + sorting +pagination in elastic search
  12. Make elasticsearch only return certain fields?
  13. Remove duplicate documents from a search in Elasticsearch
  14. How to integrate ElasticSearch with MySQL?
  15. Elasticsearch searchable synthetic fields
  16. Find distinct values, not distinct counts in elasticsearch
  17. Save Spark Dataframe into Elasticsearch – Can’t handle type exception
  18. elasticsearch match vs term query
  19. Elasticsearch difference between MUST and SHOULD bool query
  20. How to change Elasticsearch max memory size
  21. Can We Retrieve Previous _source Docs with Elastic Search Versions
  22. What is the maximum Elasticsearch document size?
  23. Elasticsearch, Tire, and Nested queries / associations with ActiveRecord
  24. How to iterate through a nested array in elasticsearch with filter script?
  25. elasticsearch – querying multiple indexes is possible?
  26. ElasticSearch – Get only matching nested objects with All Top level fields in search response
  27. multiple inputs on logstash jdbc
  28. ElasticSearch: aggregation on _score field?
  29. Elasticsearch error: cluster_block_exception [FORBIDDEN/12/index read-only / allow delete (api)], flood stage disk watermark exceeded
  30. What is the ElasticSearch equivalent for an SQL subquery?

Leave a Comment