Query elasticsearch with multiple numeric ranges

Question

{
  "query": {
    "filtered": {
      "query": {
        "match": {
          "log_path": "message_notification.log"
        }
      },
      "filter": {
        "numeric_range": {
          "time_taken": {
            "gte": 10
          }
        }
      }
    }
  },
  "aggs": {
    "distinct_user_ids": {
      "cardinality": {
        "field": "user_id"
      }
    }
  }
}

I have to run this query 20 times as i want to know notification times above each of the following thresholds- [10,30,60,120,240,300,600,1200..]. Right now, i am running a loop and making 20 queries for fetching this.

Is there a more sane way to query elasticsearch once and get ranges that fall into these thresholds respectively?

Shrinath · Accepted Answer · 2014-06-30 07:07:16Z

1

What you probably want is a "range aggregation".

Here is the possible query where you can add more range or alter them -

{ "size": 0, "query": { "match": { "log_path": "message_notification.log" } }, "aggs": { "intervals": { "range": { "field": "time_taken", "ranges": [ { "to": 50 }, { "from": 50, "to": 100 }, { "from": 100 } ] }, "aggs": { "distinct_user_ids": { "cardinality": { "field": "user_id" } } } } } }

answered Jun 30, 2014 at 7:07

Shrinath

8,13813 gold badges51 silver badges86 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Query elasticsearch with multiple numeric ranges

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related