terms_stats facet

[sakalajuraj]

Is it possible (or will it be) to do statistics using terms_stats via certain module? It should be nice to count for example transmitted data per IP address.

[MasseGuillaume]

yes it possible

in http://demo.kibana.org/#/dashboard/elasticsearch/Logstash%20Search
click the histogram settings (top right wrench)
select pannel tab
mode total
value field: bytes

[sakalajuraj]

You are writing about date_histogram facet. In this facet you use timestamp in key_field and you are not able define for example source ip address. I speak about doing other statistics per IP address. Imagine, you are making statistics over squid logs and you want to know top ten IP address sorted by total transmitted bytes in some time window. You need to use terms_stats. Kibana 3 brings module terms, but there is no possibility to define terms_stat facet.

[sakalajuraj]

Is there anybody interested in such module?
I think it is realy easy for experienced programmer to create this module. I tried doing some hacks in terms module and I was successful. I have created new module derived from terms module with some intuitive changes. It works, but I am not profi programmer so I am not sure with my changes.

[rashidkpc]

I'd probably want to implement it within the the terms panel as a seperate mode

[sakalajuraj]

It could be really great. And could you please take a look on it in the nearest future. It should be really simple task for you and this feature will significantly increase opportunities for this nice piece of software. I love kibana and I think this is only one thing I miss (for now).

[pedro-andrade]

+1 It would be really cool to have this in the terms panel.

[bobrik]

@sakalajuraj +1 for this. Could you submit pull request?

[sakalajuraj]

I am working on it. It will be separate mode in terms panel.

[rashidkpc]

#652