Elasticsearch array value count aggregation

Question

Sample documents:

{
    "id": "62655",
    "attributes": [
        {
            "name": "genre",
            "value": "comedy"
        },
        {
            "name": "year",
            "value": "2016"
        }
    ]
}

{
    "id": "62656",
    "attributes": [
        {
            "name": "genre",
            "value": "horror"
        },
        {
            "name": "year",
            "value": "2016"
        }
    ]
}

{
    "id": "62657",
    "attributes": [
        {
            "name": "language",
            "value": "english"
        },
        {
            "name": "year",
            "value": "2015"
        }
    ]
}

Expected Output:

{
    "hits" : {
        "total": 3,
        "hits": []
    },
    "aggregations": {
        "attribCount": {
            "language": 1,
            "genre": 2,
            "year": 3
        },
        "attribVals": {
            "language": {
                "english": 1
            },
            "genre": {
                "comedy": 1,
                "horror": 1
            },
            "year": {
                "2016": 2,
                "2015": 1
            }
        }
    }
}

My Query:

I could get the "attribCount" aggregation using below query. But I don't know how to get each attribute value count.

{
    "query": {
        "filtered": {
            "query": {
                "match_all": {}
            }
        }
    },
    "aggs": {
        "attribCount": {
            "terms": {
                "field": "attributes.name",
                "size": 0
            }
        }
    },
    "size": 0
}

When I aggregate using attributes.value, it gives overall count. But I need it listed under the name value as given in expected output.

@blackmamba i already looked at it. its not clear how to accomplish my requirement. When i give path as "attributes" i get exception. when i give "attributes.name", it get count as 0 — Sriram
– Sriram, Commented Sep 20, 2016 at 10:01
@blackmamba i just structure the data in code as an array and let elastic make the mapping automatically based on data — Sriram
– Sriram, Commented Sep 20, 2016 at 10:12
you'll have to make them both as nested type, predefined it before populating data. — blackmamba
– blackmamba, Commented Sep 20, 2016 at 10:20

blackmamba · Accepted Answer · 2016-09-20 11:08:47Z

5

As you say the attribute field is nested. Try this, this will work

{
  "size": 0,
  "aggs": {
    "count": {
      "nested": {
        "path": "attributes"
      },
      "aggs": {
        "attribCount": {
          "terms": {
            "field": "attributes.name"
          }
        },
        "attribVal": {
          "terms": {
            "field": "attributes.name"
          },
          "aggs": {
            "attribval2": {
              "terms": {
                "field": "attributes.value"
              }
            }
          }
        }
      }
    }
  }
}

answered Sep 20, 2016 at 11:08

blackmamba

5563 silver badges11 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Sriram Over a year ago

Just came across stackoverflow.com/a/31052532/1179958 this answer, which is exactly what I was looking for and when i was here to tell you that, you have answered it exactly :)

Collectives™ on Stack Overflow

Elasticsearch array value count aggregation

1 Answer 1

1 Comment

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Linked

Related