Question

我正在创建一个报告来比较数据库中的实际计数和索引记录。

我有三个索引index1，index2和index3

要获取单个索引的计数，我使用以下网址

http://localhost:9200/index1/_count?q=_type:invoice

=> {"count":50,"_shards":{"total":5,"successful":5,"failed":0}}

对于多个指数：

http://localhost:9200/index1,index2/_count?q=_type:invoice

=> {"count":80,"_shards":{"total":5,"successful":5,"failed":0}}

现在计数已加起来，我希望它按索引分组，我如何通过特定字段传递过滤器组得到这样的输出：

{"index1_count":50,"index2_count":50,"approved":10,"rejected":40 ,"_shards":{"total":5,"successful":5,"failed":0}}

Answer 1

您可以使用_search?search_type=count并根据_index字段进行汇总，以区分索引：

GET /index1,index2/_search?search_type=count
{
  "aggs": {
    "by_index": {
      "terms": {
        "field": "_index"
      }
    }
  }
}

结果将是这样的：

"aggregations": {
      "by_index": {
         "doc_count_error_upper_bound": 0,
         "sum_other_doc_count": 0,
         "buckets": [
            {
               "key": "index1",
               "doc_count": 50
            },
            {
               "key": "index2",
               "doc_count": 80
            }
         ]
      }
   }

Elasticsearch计算多个索引

1 个答案: