Normalize aggregation

Normalize aggregation #

A parent pipeline aggregation rescaling a bucket metric into a share or rank — e.g. each bucket’s revenue as a percent of the total (percent_of_sum), a 0..1 position (rescale_0_1), or standard deviations from the mean (z-score).

"share": {
  "normalize": { "buckets_path": "per_type>revenue", "method": "percent_of_sum" }
}

How it works #

In this engine normalize is evaluated in the sibling placement: declare it next to the bucket aggregation and point buckets_path at the series with the full parent>metric form. The engine collects one value per bucket, applies the chosen method across the whole series, and emits a standalone buckets array (keys 0..n−1) with one value per consumed bucket.