-
Notifications
You must be signed in to change notification settings - Fork 24.3k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
ES|QL: Support aggregation commands on histogram fields #103060
Comments
Pinging @elastic/es-ql (Team:QL) |
Pinging @elastic/elasticsearch-esql (:Query Languages/ES|QL) |
Do you have any examples of things? I can guess, but it'd be nice to have an example of the kinds of STATS you expect. One problem with the STATS here is that ESQL allows a lot more slicing that _search does so it'd be easier to put the query into a state where it wouldn't have the data. I'm kind of imagining something like |
@nik9000 AVG, SUM, MIN, MAX, Pxx. I'm not sure if I follow your example? |
Pinging @elastic/es-analytics-geo (Team:Analytics) |
I think first of all we'll have to support histogram field type (read and output at least). After that, we can start defining the behavior for the single agg functions, starting from
I guess the ESQL usage will be something like:
where Wondering if it makes sense to allow |
Pinging @elastic/es-analytical-engine (Team:Analytics) |
I suggest we wait to implement histogram support until we encode the algorithm in the field (see #108208). This will let us choose the appropriate sketch for percentiles against the histogram, at a minimum, and may influence the implementation of other aggregations. |
Description
Currently, running an ES|QL aggregation command on a histogram field results in an error. Aggregations should be supported on histogram fields, similar to how _search supports aggregations on histogram fields.
Use cases
In APM we use histograms to store latency distribution data (in
transaction.duration.histogram
). The aggregations we currently run on this field are: avg, pxx, sum, value_count.The text was updated successfully, but these errors were encountered: