Aggregations are operations that can be performed on table data that has already been grouped by time interval. Operations include counting records in a group, identifying the minimum or maximum value in a group, or calculating the sum of field values in a group. When you create an aggregation, a new column appears in the table displaying the results of the operation.
Having already grouped your table data by a selected time interval, select Aggregation from the toolbar. The Operations Over Columns window appears.
- The Column Name field is calculated automatically based upon the aggregation and arguments you choose. However, you can edit this value if you prefer.
- Select the Aggregation dropdown list to select the type of aggregation you will perform on the selected argument. To get more information about an aggregation type, click the info icon.
- Click New Argument to select the arguments on which you want to perform the aggregation.
Example: How to perform an aggregation using the count operation
- Go to Data search and open the demo.ecommerce.data table.
- Group the data by status code and bytes transferred for every 2 hours.
- Select Aggregation from the toolbar, then select the Count aggregation and do not add any arguments.
- Click Aggregate Function. A new column called count is added to the results table. This is the count of all records in each grouping.
See Aggregation operations for more information on the operations you can use when performing an aggregation.