Aggregations can be provided at ingestion time as part of the ingestion spec as a way of summarizing data before it enters Apache Druid. Aggregations can also be specified as part of many queries at query time.

Available aggregations are:

count computes the count of Druid rows that match the filters.

Please note the count aggregator counts the number of Druid rows, which does not always reflect the number of raw events ingested. This is because Druid can be configured to roll up data at ingestion time. To count the number of ingested rows of data, include a count aggregator at ingestion time, and a longSum aggregator at query time.

Sum aggregators

longSum aggregator

computes the sum of values as a 64-bit, signed integer

  1. { "type" : "longSum", "name" : <output_name>, "fieldName" : <metric_name> }

name – output name for the summed value fieldName – name of the metric column to sum over

doubleSum aggregator

Computes and stores the sum of values as 64-bit floating point value. Similar to longSum

  1. { "type" : "doubleSum", "name" : <output_name>, "fieldName" : <metric_name> }

floatSum aggregator

Computes and stores the sum of values as 32-bit floating point value. Similar to longSum and doubleSum

  1. { "type" : "floatSum", "name" : <output_name>, "fieldName" : <metric_name> }

Min / Max aggregators

doubleMin aggregator

doubleMin computes the minimum of all metric values and Double.POSITIVE_INFINITY

  1. { "type" : "doubleMin", "name" : <output_name>, "fieldName" : <metric_name> }

doubleMax aggregator

doubleMax computes the maximum of all metric values and Double.NEGATIVE_INFINITY

  1. { "type" : "doubleMax", "name" : <output_name>, "fieldName" : <metric_name> }

floatMin aggregator

floatMin computes the minimum of all metric values and Float.POSITIVE_INFINITY

    floatMax aggregator

    floatMax computes the maximum of all metric values and Float.NEGATIVE_INFINITY

    1. { "type" : "floatMax", "name" : <output_name>, "fieldName" : <metric_name> }

    longMin aggregator

    longMin computes the minimum of all metric values and Long.MAX_VALUE

    1. { "type" : "longMin", "name" : <output_name>, "fieldName" : <metric_name> }

    longMax aggregator

    longMax computes the maximum of all metric values and Long.MIN_VALUE

    Computes and returns the arithmetic mean of a column’s values as a 64-bit floating point value. doubleMean is a query time aggregator only. It is not available for indexing.

    To accomplish mean aggregation on ingestion, refer to the from the DataSketches extension.

    1. { "type" : "doubleMean", "name" : <output_name>, "fieldName" : <metric_name> }

    First / Last aggregator

    (Double/Float/Long) First and Last aggregator cannot be used in ingestion spec, and should only be specified as part of queries.

    Note that queries with first/last aggregators on a segment created with rollup enabled will return the rolled up value, and not the last value within the raw ingested data.

    doubleFirst aggregator

    doubleFirst computes the metric value with the minimum timestamp or 0 in default mode or null in SQL compatible mode if no row exist

    1. {
    2.   "type" : "doubleFirst",
    3.   "name" : <output_name>,
    5. }

    doubleLast aggregator

    doubleLast computes the metric value with the maximum timestamp or 0 in default mode or null in SQL compatible mode if no row exist

    1. {
    2.   "type" : "doubleLast",
    3.   "name" : <output_name>,
    4.   "fieldName" : <metric_name>
    5. }

    floatFirst aggregator

    1. {
    2.   "type" : "floatFirst",
    3.   "name" : <output_name>,
    4.   "fieldName" : <metric_name>
    5. }

    floatLast aggregator

    floatLast computes the metric value with the maximum timestamp or 0 in default mode or null in SQL compatible mode if no row exist

    1. {
    2.   "type" : "floatLast",
    3.   "name" : <output_name>,
    4.   "fieldName" : <metric_name>
    5. }

    longFirst aggregator

    longFirst computes the metric value with the minimum timestamp or 0 in default mode or null in SQL compatible mode if no row exist

    1. {
    2.   "type" : "longFirst",
    3.   "name" : <output_name>,
    4.   "fieldName" : <metric_name>
    5. }

    longLast aggregator

    longLast computes the metric value with the maximum timestamp or 0 in default mode or null in SQL compatible mode if no row exist

    1. {
    2.   "type" : "longLast",
    3.   "name" : <output_name>,
    4.   "fieldName" : <metric_name>,
    5. }

    stringFirst aggregator

    stringFirst computes the metric value with the minimum timestamp or null if no row exist

    1. {
    2.   "type" : "stringFirst",
    3.   "name" : <output_name>,
    4.   "fieldName" : <metric_name>,
    5.   "maxStringBytes" : <integer> # (optional, defaults to 1024)
    6. }

    stringLast aggregator

    stringLast computes the metric value with the maximum timestamp or null if no row exist

    ANY aggregator

    (Double/Float/Long/String) ANY aggregator cannot be used in ingestion spec, and should only be specified as part of queries.

    Returns any value including null. This aggregator can simplify and optimize the performance by returning the first encountered value (including null)

    doubleAny aggregator

    doubleAny returns any double metric value

    1. {
    2.   "type" : "doubleAny",
    3.   "name" : <output_name>,
    4.   "fieldName" : <metric_name>

    floatAny aggregator

    floatAny returns any float metric value

    1. {
    2.   "type" : "floatAny",
    3.   "fieldName" : <metric_name>
    4. }

    longAny aggregator

    longAny returns any long metric value

    1. {
    2.   "type" : "longAny",
    3.   "name" : <output_name>,
    4.   "fieldName" : <metric_name>,
    5. }

    stringAny aggregator

    stringAny returns any string metric value

    1. {
    2.   "type" : "stringAny",
    3.   "name" : <output_name>,
    4.   "fieldName" : <metric_name>,
    5.   "maxStringBytes" : <integer> # (optional, defaults to 1024),
    6. }

    Computes an arbitrary JavaScript function over a set of columns (both metrics and dimensions are allowed). Your JavaScript functions are expected to return floating-point values.

    1. { "type": "javascript",
    2.   "name": "<output_name>",
    3.   "fieldNames"  : [ <column1>, <column2>, ... ],
    4.   "fnAggregate" : "function(current, column1, column2, ...) {
    5.                      <updates partial aggregate (current) based on the current row values>
    6.                      return <updated partial aggregate>
    7.                    }",
    8.   "fnCombine"   : "function(partialA, partialB) { return <combined partial results>; }",
    9.   "fnReset"     : "function()                   { return <initial value>; }"
    10. }

    Example

    1. {
    2.   "type": "javascript",
    3.   "name": "sum(log(x)*y) + 10",
    4.   "fieldNames": ["x", "y"],
    5.   "fnAggregate" : "function(current, a, b)      { return current + (Math.log(a) * b); }",
    6.   "fnCombine"   : "function(partialA, partialB) { return partialA + partialB; }",
    7.   "fnReset"     : "function()                   { return 10; }"
    8. }

    Count distinct

    Apache DataSketches Theta Sketch

    The DataSketches Theta Sketch extension-provided aggregator gives distinct count estimates with support for set union, intersection, and difference post-aggregators, using Theta sketches from the library.

    Apache DataSketches HLL Sketch

    The extension-provided aggregator gives distinct count estimates using the HyperLogLog algorithm.

    Compared to the Theta sketch, the HLL sketch does not support set operations and has slightly slower update and merge speed, but requires significantly less space.

    Cardinality, hyperUnique

    The aggregators are older aggregator implementations available by default in Druid that also provide distinct count estimates using the HyperLogLog algorithm. The newer DataSketches Theta and HLL extension-provided aggregators described above have superior accuracy and performance and are recommended instead.

    The DataSketches team has published a comparison study between Druid’s original HLL algorithm and the DataSketches HLL algorithm. Based on the demonstrated advantages of the DataSketches implementation, we are recommending using them in preference to Druid’s original HLL-based aggregators. However, to ensure backwards compatibility, we will continue to support the classic aggregators.

    Multi-column handling

    Note the DataSketches Theta and HLL aggregators currently only support single-column inputs. If you were previously using the Cardinality aggregator with multiple-column inputs, equivalent operations using Theta or HLL sketches are described below:

    • Multi-column byValue Cardinality can be replaced with a union of Theta sketches on the individual input columns
    • Multi-column byRow Cardinality can be replaced with a Theta or HLL sketch on a single virtual column that combines the individual input columns.

    Histograms and quantiles

    DataSketches Quantiles Sketch

    The extension-provided aggregator provides quantile estimates and histogram approximations using the numeric quantiles DoublesSketch from the datasketches library.

    We recommend this aggregator in general for quantiles/histogram use cases, as it provides formal error bounds and has distribution-independent accuracy.

    Moments Sketch (Experimental)

    The Moments Sketch extension-provided aggregator is an experimental aggregator that provides quantile estimates using the .

    The Moments Sketch aggregator is provided as an experimental option. It is optimized for merging speed and it can have higher aggregation performance compared to the DataSketches quantiles aggregator. However, the accuracy of the Moments Sketch is distribution-dependent, so users will need to empirically verify that the aggregator is suitable for their input data.

    As a general guideline for experimentation, the Moments Sketch paper points out that this algorithm works better on inputs with high entropy. In particular, the algorithm is not a good fit when the input data consists of a small number of clustered discrete values.

    Fixed Buckets Histogram

    Druid also provides a simple histogram implementation that uses a fixed range and fixed number of buckets with support for quantile estimation, backed by an array of bucket count values.

    The fixed buckets histogram can perform well when the distribution of the input data allows a small number of buckets to be used.

    We do not recommend the fixed buckets histogram for general use, as its usefulness is extremely data dependent. However, it is made available for users that have already identified use cases where a fixed buckets histogram is suitable.

    Approximate Histogram (deprecated)

    The Approximate Histogram extension-provided aggregator also provides quantile estimates and histogram approximations, based on .

    The algorithm used by this deprecated aggregator is highly distribution-dependent and its output is subject to serious distortions when the input does not fit within the algorithm’s limitations.

    A study published by the DataSketches team demonstrates some of the known failure modes of this algorithm:

    • The algorithm’s quantile calculations can fail to provide results for a large range of rank values (all ranks less than 0.89 in the example used in the study), returning all zeroes instead.
    • The algorithm can completely fail to record spikes in the tail ends of the distribution
    • In general, the histogram produced by the algorithm can deviate significantly from the true histogram, with no bounds on the errors.

    It is not possible to determine a priori how well this aggregator will behave for a given input stream, nor does the aggregator provide any indication that serious distortions are present in the output.

    For these reasons, we have deprecated this aggregator and recommend using the DataSketches Quantiles aggregator instead for new and existing use cases, although we will continue to support Approximate Histogram for backwards compatibility.

    Miscellaneous Aggregations

    A filtered aggregator wraps any given aggregator, but only aggregates the values for which the given dimension filter matches.

    This makes it possible to compute the results of a filtered and an unfiltered aggregation simultaneously, without having to issue multiple queries, and use both results as part of post-aggregations.

    Note: If only the filtered results are required, consider putting the filter on the query itself, which will be much faster since it does not require scanning all the data.

    1. {
    2.   "type" : "filtered",
    3.   "filter" : {
    4.     "type" : "selector",
    5.     "dimension" : <dimension>,
    6.     "value" : <dimension value>
    7.   },
    8.   "aggregator" : <aggregation>
    9. }

    Grouping Aggregator

    A grouping aggregator can only be used as part of GroupBy queries which have a subtotal spec. It returns a number for each output row that lets you infer whether a particular dimension is included in the sub-grouping used for that row. You can pass a non-empty list of dimensions to this aggregator which must be a subset of dimensions that you are grouping on. E.g if the aggregator has ["dim1", "dim2"] as input dimensions and [["dim1", "dim2"], ["dim1"], ["dim2"], []] as subtotals, following can be the possible output of the aggregator

    As illustrated in above example, output number can be thought of as an unsigned n bit number where n is the number of dimensions passed to the aggregator. The bit at position X is set in this number to 0 if a dimension at position X in input to aggregators is included in the sub-grouping. Otherwise, this bit is set to 1.

    1. { "type" : "grouping", "name" : <output_name>, "groupings" : [<dimension>] }