Aggregation value inside array of array elasticsearch

Question

i have json structure like this:

[{
    'id': 1,
    'result': [{
        "score": 0.0,
        "result_rules": [{
                "rule_id": "sr-1",
            },
            {
                "rule_id": "sr-2",
            }
        ]
    }]
},
{
    'id': 2,
    'result': [{
        "score": 0.0,
        "result_rules": [{
                "rule_id": "sr-1",
            },
            {
                "rule_id": "sr-4",
            }
        ]
    }]
}]

i want to count rule_id, so the result would be:

[
    {
        'rule_id': 'sr-1',
        'doc_count': 2
    },
    {
        'rule_id': 'sr-2',
        'doc_count': 1
    },
    {
        'rule_id': 'sr-4',
        'doc_count': 1
    }
]

i've tried something like this, but it's showing empty aggregation

{
    "aggs":{
        "group_by_rule_id":{
            "terms":{
                "field": "result.result_rules.rule_id.keyword"
            }
        }
    }
}

anand · Accepted Answer · 2020-01-20 06:30:45Z

1

For aggregation on nested structure you would have to use nested aggregation.

See the example on ES DOC.

answered Jan 20, 2020 at 6:30

anand

3792 silver badges8 bronze badges

Sign up to request clarification or add additional context in comments.

5 Comments

Mamen Over a year ago

thank you the query is success but i want to add some filter for example result.result_rules.status:true, how do i perform it? @anand

anand Over a year ago

you can combine the nested aggregation with filter see the example: elastic.co/guide/en/elasticsearch/reference/current/…

Mamen Over a year ago

i've got an error named_object_not_found_exception: unable to parse BaseAggregationBuilder with name

Mamen Over a year ago

the query looks like this myjson.com/d3o7m and the error is :unable to parse BaseAggregationBuilder with name [group_by_rule_id]: parser not found

Mamen Over a year ago

i've fixed it, misplaced second aggs did that error

Collectives™ on Stack Overflow

Aggregation value inside array of array elasticsearch

1 Answer 1

5 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

5 Comments

Your Answer

Sign up or log in

Post as a guest

Related