elasticsearch aggregations on substring

Question

I have a field indexed as String in elasticsearch 5
For example 20090219 , 20100416 etc

I can make a aggregation this data, But I want to aggregate on substring. that is on
2009,2010

I don't want to convert to date. I want to get first 4 characters and get the count. This is my current code.Very new to Elasticsearch

$params['body']["aggs"]["Year"]["terms"]["field"] = "PublicationDate.keyword";
$params['body']["aggs"]["Year"]["terms"]["size"]  = 10;
$params['body']["aggs"]["Year"]["terms"]["order"]["_count"] = "desc";

avr · Accepted Answer · 2017-04-11 08:29:19Z

3

You can use elasticsearch script feature to achieve this.

GET my-index/_search
{
    "aggs" : {
        "my-agg" : {
            "terms" : {
                "script": {
                  "inline": "doc['PublicationDate.keyword'].getValue().substring(0,4)"
                }, 
                "size": 10, 
                "order" : { "_count" : "desc" }
            }
        }
    }
}

I don't know equivalent php script for above command, but believe you will able to make it work in php.

answered Apr 11, 2017 at 8:29

avr

4,9231 gold badge21 silver badges30 bronze badges

Sign up to request clarification or add additional context in comments.

4 Comments

sawan mehta Over a year ago

this code gives this error

Fielddata is disabled on text fields by default. Set fielddata=true on [PublicationDate.keyword] in order to load fielddata in memory by uninverting the inverted index. Note that this can however use significant memory.

avr Over a year ago

Make sure you are using PublicationDate.keyword field for aggregations which will have mapping of type keyword.

sawan mehta Over a year ago

I did not understand, can you please elaborate

avr Over a year ago

You need define mapping for PublicationDate.keyword as keyword type. btw can you share current mapping for PublicationDate.keyword field?

sawan mehta · Accepted Answer · 2017-04-11 09:24:45Z

1

this did the task

$params['body']["aggs"]["PublicationYear"]["terms"]["script"] = "_value.substring(0,4)";

answered Apr 11, 2017 at 9:24

sawan mehta

511 silver badge7 bronze badges

Collectives™ on Stack Overflow

elasticsearch aggregations on substring

2 Answers 2

4 Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

4 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related