Visualization types in Elasticsearch - Practice Problems & Coding Challenges

Challenge - 5 Problems

❓ Predict Output

intermediate

What is the output of this Elasticsearch aggregation visualization query?

Given the following Elasticsearch aggregation query for a bar chart visualization, what will be the count of documents in the bucket for the term "status:200"?

Elasticsearch

{
  "size": 0,
  "aggs": {
    "status_codes": {
      "terms": {
        "field": "status",
        "size": 3
      }
    }
  }
}

A The bucket for status:200 will contain the count of all documents with status 200.

B The bucket for status:200 will contain the count of all documents with status 404.

C The bucket for status:200 will be empty because terms aggregation does not support numeric fields.

D The bucket for status:200 will contain the total count of all documents regardless of status.

💡 Hint

Terms aggregation groups documents by unique values of a field.

Terms aggregation groups documents by unique values of the specified field. Here, it groups by the 'status' field, so the bucket for 'status:200' contains all documents with status 200.

🧠 Conceptual

intermediate

What type of visualization is best for showing trends over time in Elasticsearch?

You want to visualize the number of sales per day over the last month using Elasticsearch aggregations. Which visualization type is most appropriate?

A Gauge showing total sales count.

B Data table listing all sales documents.

C Pie chart showing sales distribution by product category.

D Line chart showing sales count per day over time.

💡 Hint

Trends over time are best shown with continuous time-based charts.

Line charts are ideal for showing trends over time because they plot data points sequentially along a time axis.

🔧 Debug

advanced

Why does this Elasticsearch pie chart show only one slice?

You created a pie chart visualization with a terms aggregation on the field 'category'. However, the pie chart shows only one slice labeled 'Other'. What is the most likely cause?

Elasticsearch

{
  "size": 0,
  "aggs": {
    "categories": {
      "terms": {
        "field": "category",
        "size": 5,
        "min_doc_count": 10
      }
    }
  }
}

A There are no documents with category values having at least 10 documents, so all are grouped into 'Other'.

B The field 'category' is missing from all documents, so only 'Other' appears.

C The size parameter is too large, causing aggregation to fail and show only 'Other'.

D Pie charts cannot display terms aggregations with min_doc_count set.

💡 Hint

min_doc_count filters out buckets with fewer documents.

The min_doc_count:10 means only terms with at least 10 documents appear as separate slices. If none meet this, all are grouped into 'Other'.

🧠 Conceptual

advanced

Which Elasticsearch visualization type is best for showing hierarchical data?

You want to visualize data that has multiple levels, such as country > state > city. Which visualization type is best suited for this?

A Data table with flat rows for each city.

B Sunburst chart showing nested levels of location.

C Bar chart showing total counts per country only.

D Gauge showing total number of cities.

💡 Hint

Hierarchical data needs nested visualization.

Sunburst charts display hierarchical data as concentric rings, making it easy to see nested relationships.

📝 Syntax

expert

What error does this Elasticsearch aggregation query produce?

Examine the following aggregation query and identify the error it will cause.

Elasticsearch

{
  "size": 0,
  "aggs": {
    "sales_over_time": {
      "date_histogram": {
        "field": "sale_date",
        "calendar_interval": "1d"
      }
    }
  }
}

A No error; the query runs successfully and returns daily buckets.

B TypeError: 'date_histogram' requires a numeric field, but 'sale_date' is a date.

C Deprecation warning: 'interval' is deprecated; use 'calendar_interval' or 'fixed_interval' instead.

D RuntimeError: 'size' cannot be zero in aggregation queries.

💡 Hint

Elasticsearch changed the 'interval' parameter in date_histogram.

The 'interval' parameter in date_histogram is deprecated in recent Elasticsearch versions. It must be replaced with 'calendar_interval' or 'fixed_interval'.