Elasticsearch：过滤头文件为每一个独特的ID

Question

我写的elasticsearch查询下面的情形：

- field1 field2 
- 2015  20 
- 2015  14 
- 2014  39 
- 2013  76 
- 2013  2 
- 2013  55 

我想找到的field2总和为每一个独特field1这样field2对于field1最大。 例如在这种情况下，我想要value = 20 + 39 + 76。

什么是将返回此值的elasticsearch查询？

Answer 1

我不认为这是可能的elasticsearch 1.x与一个单一的查询。 在2.0中，我们可能会有这样一个功能，如减速器（请参阅：https://github.com/elastic/elasticsearch/issues/8110）。

你可以让你的任务（由FIELD1分组的场2最大值）这样的第一部分：

DELETE /test_index 

PUT /test_index 
{ 
    "settings": { 
     "number_of_shards": 1 
    } 
} 

POST /test_index/_bulk 
{"index":{"_index":"test_index","_type":"doc","_id":1}} 
{"field1":2015,"field2":20} 
{"index":{"_index":"test_index","_type":"doc","_id":2}} 
{"field1":2015,"field2":14} 
{"index":{"_index":"test_index","_type":"doc","_id":3}} 
{"field1":2014,"field2":39} 
{"index":{"_index":"test_index","_type":"doc","_id":4}} 
{"field1":2013,"field2":76} 
{"index":{"_index":"test_index","_type":"doc","_id":5}} 
{"field1":2013,"field2":2} 
{"index":{"_index":"test_index","_type":"doc","_id":6}} 
{"field1":2013,"field2":55} 

POST /test_index/_search 
{ 
    "size": 0, 
    "aggs": { 
    "field1_group": { 
     "terms": { 
     "field": "field1", 
     "size": 0, 
     "order": { 
      "maksior": "asc" 
     } 
     }, 
     "aggs": { 
     "maksior": { 
      "max": { 
      "field": "field2" 
      } 
     } 
     } 
    } 
    } 
} 

，这将给你：

{ 
    "took": 1, 
    "timed_out": false, 
    "_shards": { 
     "total": 1, 
     "successful": 1, 
     "failed": 0 
    }, 
    "hits": { 
     "total": 6, 
     "max_score": 0, 
     "hits": [] 
    }, 
    "aggregations": { 
     "field1_group": { 
     "doc_count_error_upper_bound": 0, 
     "sum_other_doc_count": 0, 
     "buckets": [ 
      { 
       "key": 2015, 
       "doc_count": 2, 
       "maksior": { 
        "value": 20 
       } 
      }, 
      { 
       "key": 2014, 
       "doc_count": 1, 
       "maksior": { 
        "value": 39 
       } 
      }, 
      { 
       "key": 2013, 
       "doc_count": 3, 
       "maksior": { 
        "value": 76 
       } 
      } 
     ] 
     } 
    } 
} 

然后你可以遍历结果并在客户端进行总结。