Graylog2 / Graylog2/graylog2-server

Include option in column values to sum non-displayed term aggregation values

Open
#7,958 0 comments 1 reaction 1 assignee Claimed by @waab76 View on GitHub
feature search to-verify triaged
Dominant language
Java
Stars
8.1k
Forks
1.1k
Avg merge
1d 20h
Merged PRs (30d)
217

Description

## What?

Add the option to show the sum of all non-displayed values for fields in a column

## Why?

Showing the sum of the remaining values not in the top X values is often important for telling an accurate story when summarizing data.

Currently there is a default limit of values displayed in a column, currently 15. It would be visually informative in some instances to include the sum_other_doc_count ([See Opensearch docs for details](https://docs.opensearch.org/latest/aggregations/bucket/terms/#document-count-error)) value in the displayed data using a label like "other".

For example, when visualizing trends based on fields such as a username, providing the option to include the sum of the remaining values will provide a visual cue not just to the top users, but it will also represent overall user activity as it relates to the series.

## Your Environment

* Graylog Version:
* Elasticsearch Version:
* MongoDB Version:
* Operating System:
* Browser version:

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.