Elasticsearch, composite and sub(?) aggregations

Question

我使用composite来滚动整个数据。(就像分页)

假设汽车销售数据，

每天，我想计算每个汽车品牌售出的汽车数量

{
day1: {
honda: 3,
bmw: 5
},
day2: {
honda: 4,
audi: 1,
tesla:5
}
}

我正在做下面的事情，但是它不起作用

GET _search
{
"size": 0,
"aggs": {
"my_buckets": {
"composite": {
"sources": [
{
"date": {
"date_histogram": {
"field": "created_at",
"calendar_interval": "1d"
},
"aggs": {
"car_brand": {
"terms": {
"field": "car_brands"
}
}
}
}
}
]
}
}
}
}

显示错误信息

{
"error" : {
"root_cause" : [
{
"type" : "x_content_parse_exception",
"reason" : "[14:17] [composite] failed to parse field [sources]"
}
],
"type" : "x_content_parse_exception",
"reason" : "[14:17] [composite] failed to parse field [sources]",
"caused_by" : {
"type" : "illegal_state_exception",
"reason" : "expected value but got [FIELD_NAME]"
}
},
"status" : 400
}

Answer 1

复合aggs不能直接接受子aggs。与

GET _search
{
"size": 0,
"aggs": {
"my_buckets": {
"composite": {
"sources": [
{
"date": {
"date_histogram": {
"field": "created_at",
"calendar_interval": "1d"
}
}
},
{
"car_brand": {
"terms": {
"field": "car_brands"
}
}
}
]
}
}
}
}

。

Answer 2

试试这个

GET _search
{
"size": 0,
"aggs": {
"my_buckets": {
"composite": {
"sources": [
{
"date": {
"date_histogram": {
"field": "created_at",
"calendar_interval": "1d"
}
}
}
]
},
"aggs": {
"car_brand": {
"terms": {
"field": "car_brands"
}
}
}
}
}
}

https://github.com/elastic/elasticsearch/edit/8.10/docs/reference/aggregations/bucket/composite-aggregation.asciidoc