Elasticsearch DSL：聚合

Question

下面顯示的是我的數據類型（表的種類）的結構。

Aircraft | Duration 
A320  | 0.95 
A320  | 0.55 
A321  | 16.50 
A321  | 3.9 

在這個數據，我想執行的時間一小區（），隨後是GROUPBY操作以獲取輸出如下：

Aircraft | Duration | Count 
A320  | 1  | 2 
A321  | 17  | 1 
A321  | 4  | 1 

Answer 1

我自己基於對以下映射類型（編輯Duration作爲字符串）：

curl -XPUT localhost:9200/tests -d ' 
{ 
    "mappings": { 
    "test1": { 
     "properties": { 
     "Aircraft": { 
      "type": "string" 
     }, 
     "Duration": { 
      "type": "string" 
     } 
     } 
    } 
    } 
}' 

並創建了四個與上面的數據表匹配的文檔。

curl -XPOST localhost:9200/tests/_bulk -d ' 
{"index": {"_type": "test1", "_id": 1}} 
{"Aircraft": "A320", "Duration": "0.95"} 
{"index": {"_type": "test1", "_id": 2}} 
{"Aircraft": "A320", "Duration": "0.55"} 
{"index": {"_type": "test1", "_id": 3}} 
{"Aircraft": "A321", "Duration": "16.50"} 
{"index": {"_type": "test1", "_id": 4}} 
{"Aircraft": "A321", "Duration": "3.9"} 
' 

聚集查詢將返回你所期望應該是這樣的結果：

curl -XPOST localhost:9200/tests/_search -d ' 
{ 
    "size": 0, 
    "query": { 
    "filtered": { 
     "filter": { 
     "terms": { 
      "Aircraft": [ 
      "a320", 
      "b737" 
      ] 
     } 
     } 
    } 
    }, 
    "aggs": { 
    "aircrafts": { 
     "terms": { 
     "field": "Aircraft" 
     }, 
     "aggs": { 
     "duration": { 
      "terms": { 
      "script": "Math.ceil(doc['Duration'].value as double)" 
      } 
     } 
     } 
    } 
    } 
}' 

該查詢的輸出是這樣的：

注意：請確保在您的elasticsearch.yml文件中啓用腳本，方法是加入

script.disable_dynamic: false