Elasticsearch 嵌套基数聚合

Question

我有一个嵌套模式的映射，我正在尝试对嵌套字段进行聚合并按 docid 计数排序。

select name, count(distinct docid) as uniqueid from table
group by name
order by uniqueid desc 

以上是我正在尝试做的。

{
   "size": 0,
   "aggs": {
      "samples": {
         "nested": {
            "path": "sample"
         },
         "aggs": {
            "sample": {
               "terms": {
                  "field": "sample.name",
        "order": {
                     "DocCounts": "desc"
                  }
               },
               "aggs": {
                  "DocCounts": {
                     "cardinality": {
                        "field": "docid"              
                     }
                  }
               }
            }
         }
      }
   }
}

但结果我没有得到预期的输出

结果:

"buckets": [
               {
                  "key": "xxxxx",
                  "doc_count": 173256,
                  "DocCounts": {
                     "value": 0
                  }
               },
               {
                  "key": "yyyyy",
                  "doc_count": 63,
                  "DocCounts": {
                     "value": 0
                  }
               }
]

我收到了 DocCounts = 0 .这不是预期的。我的查询出了什么问题。

Answer 1

我想你最后一次嵌套 aggregation太多了。尝试摆脱它:

{
  "size": 0,
  "aggs": {
    "samples": {
      "nested": {
        "path": "sample"
      },
      "aggs": {
        "sample": {
          "terms": {
            "field": "sample.name",
            "order": {
              "DocCounts": "desc"
            }
          },
          "DocCounts": {
            "cardinality": {
              "field": "docid"
            }
          }
        }
      }
    }
  }
}