-
Notifications
You must be signed in to change notification settings - Fork 25.6k
Closed
Labels
:Analytics/AggregationsAggregationsAggregations>enhancementMetaTeam:AnalyticsMeta label for analytical engine team (ESQL/Aggs/Geo)Meta label for analytical engine team (ESQL/Aggs/Geo)
Description
Meta-issue to encompass adding aggregation support for Range fields (date, numeric and IP).
Pre-work todo:
- Document that aggs do not currently work with range fields
Common aggregations:
MinMax- Cardinality - done (Tests for Range Fields on VST.ANY aggregations #44502)
- Value Count - done (Tests for Range Fields on VST.ANY aggregations #44502)
- Histogram - done (Range Field Histogram Aggregation #41545)
- Range
- Missing - done (Tests for Range Fields on VST.ANY aggregations #44502)
- Terms - Doesn't need to support ranges but should gracefully handle rejecting range fields (Tests for Range Fields on VST.ANY aggregations #44502)
Date Specific:
- Date Histogram - in progress Support Range Fields in Histogram and Date Histogram #45395
- Date Auto Histogram - it's complicated, see Range support for Auto-interval Date Histogram #45299
- Date Range
IP Specific:
- IP Range
Considerations
Dealing with ranges opens up some interesting usability issues. For example, min/max could deal with either the start or the end of the range. Similarly, for bucketing aggs like histogram and range, we may need to support "relations" such as contains, intersect, etc.
Related issues:
- Doing a min aggregation on a daterange type #33712
- Histogram aggregation on range fields using lte/lt or gte/gt #23414
- range_histogram and date_range_histogram aggregations to help analyse "session" duration type data #23182 (See for good description of concurrent session problem)
Use Cases:
#37642 - Weighting data across buckets
chrisbeckc1, mayya-sharipova, bloche, foreman3, mguilbert-kp and 1 more
Metadata
Metadata
Assignees
Labels
:Analytics/AggregationsAggregationsAggregations>enhancementMetaTeam:AnalyticsMeta label for analytical engine team (ESQL/Aggs/Geo)Meta label for analytical engine team (ESQL/Aggs/Geo)