elasticsearch: use aggregated value for filtering -
I am using nested mapping (bottom), which represents "work" and "request" The nested element to create progress in that direction.
I am trying to find all the functions which have not progressed, i.e. all documents, for which "max" aggregation on Nested Objects is empty. It requires to be able to filter on the results of any aggregation - and this is where I am caught somewhere.
I can order through the results. But I can not find any way to filter what is such a potential?
Mapping:
mapping = {properties: {'prefix' = & gt; {Type: "string", store: true, index: "not_analyzed"}, 'last_marker' = & gt; {Type: "string", store: true, index: "not_analyzed"}, 'start_time' = & gt; {Type: "date", store: true, index: "not_analyzed"}, 'end_time' = & gt; {Type: "date", store: true, index: "not_analyzed"}, 'obj_count' = & gt; {Type: "long", store: true, index: "not_analyzed"}, 'request' => {Type: 'nested', include_in_parent: true, 'properties' = & gt; {'Start_time' = & gt; {Type: "date", store: true, index: "not_analyzed"}, 'end_time' = & gt; {Type: "date", store: true, index: "not_analyzed"}, 'amz_req_id' = & gt; {Type: "string", store: true, index: "not_analyzed"}, 'last_marker' = & gt; {Order: "string", store: true, index: "not_analyzed"}}}}}
order for aggregation query (and is looking for filter ...):
"size": {"pending_profix": {"Terms": {"field": "prefix", "order": {"max_date": "asc"}, "size ": 20000}," Eggs ": {" max_date ": {" max ": {" field ":" request.end_time "}}}}}}
This is similar to the section in SQL words. This is not possible in the current flexibility release.
Upcoming 2.0 In Ilij, with new start went pipeline aggregation, this should be possible.
More:
Comments
Post a Comment