Elasticsearch multiple queries

Question

i would like to get distinct ip's for example today and where campaigne="2" in sql: select distinct ip from test where timestamp >= "2016-01-16" ... AND fk_campaign_id = "2";

this works but json validator outputs "Duplicate key, names should be unique."

{  
   "size":0,
   "aggs":{  
      "distinct_ip":{  
         "cardinality":{  
            "field":"ip"
         }
      }
   },
   "query":{  
      "range":{  
         "timestamp":{  
            "gte":"2016-01-16T00:00:00",
            "lt":"2016-01-17T00:00:00"
         }
      }
   },
   "query":{  
      "match":{  
         "fk_campaign_id":"2"
      }
   }
}

But if i try to build this query in php, var_dump($params) returns me back json only with one "query", may be because of Duplicate key???

{  
   "size":0,
   "aggs":{  
      "distinct_ip":{  
         "cardinality":{  
            "field":"ip"
         }
      }
   },

part with range is not here?!?!?

   "query":{  
      "match":{  
         "fk_campaign_id":"2"
      }
   }
}

Thanks in advance.

ChintanShah25 · Accepted Answer · 2016-01-16 21:29:59Z

1

In your json query is a duplicate key. You need to use bool query whenever you have multiple conditions. since you have AND condition you need to use must clause. This is the right syntax

{
  "query": {
    "bool": {
      "must": [
        {
          "range": {
            "timestamp": {
              "gte": "2016-01-16T00:00:00",
              "lt": "2016-01-17T00:00:00"
            }
          }
        },
        {
          "match": {
            "fk_campaign_id": "2"
          }
        }
      ]
    }
  },
  "size": 0,
  "aggs": {
    "distinct_ip": {
      "cardinality": {
        "field": "ip"
      }
    }
  }
}

Hope this helps!

answered Jan 16, 2016 at 21:29

ChintanShah25

12.7k3 gold badges45 silver badges44 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

petrolis Over a year ago

Could you recommend any literature for Elasticsearch? Tanks

ChintanShah25 Over a year ago

One of the most important thing about ES is its data structure i.e inverted index, its analysis process, its internals, that link also has links to other papers. This is a good starting point IMO.

Collectives™ on Stack Overflow

Elasticsearch multiple queries

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related