Add bucket_selector aggregation to visualizations

[erajabi]

Kibana: 6.2.3:

Elastic Search: 6.2.1:

OS: Windows 10:

Browser: Chrome 65.0.3325.181:

I want to use bucket_selector in Kibana to filter the results of aggregation functions. However I cannot find it in the interface:

Steps to reproduce:

1. In Kibana Dev tools, I use the following code to filter aggregations and it works using the dev tools:

"sum_hours_bucket_filter": {
       "bucket_selector": {
         "buckets_path": {
           "totalHours": "sumH"
         },
         "script": "params.totalHours > 1000"
       }
     }

2. I don't know how to use this code in the visualization section

Describe the feature:
Like Having feature in SQL, I think it is important to have filtering in aggregations.

[moishy90]

Is there a way around the lack of this feature for now?

[Sjaak01]

Would very much like this function as well.

I use Kibana to monitor a lot of equipment an being able to show only SUM of value > xxx would make it a lot easier to single out equipment exceeding thresholds.

Would like to see this function available to graphs, tables etc.

[amritpatra]

I was really trying to bucket_selector for my Kibana Dashboard and learned it hard way that the feature is not available for visualization. Please implement this feature.

[guylando]

+1

[gcsabbagh]

+1

[jtebbens]

+1

[greenupnetwork]

Great idea

[yinrong]

+1

[hwelcher]

+1

[connosco]

Need it in Kibana! 💃

[douniwan5788]

Kibana 7.4.2 , still wating...

[BernalCarlos]

+1

I had to resort to some kind of work around:
https://discuss.elastic.co/t/exclude-records-by-an-existing-value-in-a-group/217849/2

[RagulPandiyan]

+1

[AmandaBSobrinho]

+1

[adamquan]

+1

[matanrabi]

+1

[IMZCC]

+1
Kibana 7.11 , still wating...

[MateuszMagdon]

+1

[ghudgins]

We are planning on implementing the core of this in #86190 and general support for Elasticsearch DSL in #59439

[elasticmachine]

Pinging @elastic/kibana-app-services (Team:AppServicesSv)

[SaraAlshamsi]

+1

[desean1625]

+1

[gueri-fr]

+1

[smnschneider]

+1

[brodrigz]

Kibana 8.12 still waiting...

It's crazy to think that you basically cannot process data at all in all visualizations but TSVB...

Whenever I want to make a complex gauge or table I know TSVB has got me covered, but If its not a temporal data/ doesn't use time as axis, then most of the times i have to do pre-processing on my backeend or resort to vega..

[mbondyra]

This is now possible using ES|QL on Lens visualizations (starting 8.14). To create one, head to discover and choose ES|QL from the data view picker. The example code I used is (only shows the buckets with more than 7000 bytes in total):

FROM kibana_sample_data_logs
| STATS total_bytes = SUM(bytes) BY geo.dest
| WHERE total_bytes > 7000 

You can then save the visualization to a dashboard.