Question

我在Elasticsearch中拥有1200个条目的小数据，这些条目会自动输入到文档类型的映射字段中。浮动进入浮动，双进入。当对'stats'的数据进行'aggs'时，例如：

GET /statsd-2015.09.28/timer_data/_search
{
    "query" : {
        "filtered" : {
            "query" : { "match_all" : {}},
                "filter" : {
                    "range" : { "ns" : { "lte" : "gunicorn" }}
                }
            }
        },
        "aggs" : {
            "value_val" : { "stats" : { "field" : "u'count_90'" } }
        }
}

我在返回时得到null：

...  
"aggregations": {
      "value_val": {
         "count": 0,
         "min": null,
         "max": null,
         "avg": null,
         "sum": null
      }
   }
...

这是我的字段映射：

{"statsd-2015.09.28":{"mappings":{"timer":{"properties":{"@timestamp":{"type":"string"},"act":{"type":"string"},"grp":{"type":"string"},"ns":{"type":"string"},"tgt":{"type":"string"},"val":{"type":"float"}}},"gauge":{"properties":{"@timestamp":{"type":"string"},"act":{"type":"string"},"grp":{"type":"string"},"ns":{"type":"string"},"tgt":{"type":"string"},"val":{"type":"float"}}},"counter":{"properties":{"@timestamp":{"type":"string"},"act":{"type":"string"},"grp":{"type":"string"},"ns":{"type":"string"},"tgt":{"type":"string"},"val":{"type":"float"}}},"timer_data":{"properties":{"@timestamp":{"type":"double"},"act":{"type":"string"},"count":{"type":"float"},"count_90":{"type":"float"},"count_ps":{"type":"float"},"grp":{"type":"string"},"lower":{"type":"float"},"mean":{"type":"float"},"mean_90":{"type":"float"},"median":{"type":"float"},"ns":{"type":"string"},"std":{"type":"float"},"sum":{"type":"float"},"sum_90":{"type":"float"},"sum_squares":{"type":"float"},"sum_squares_90":{"type":"float"},"tgt":{"type":"string"},"upper":{"type":"float"},"upper_90":{"type":"float"}}}}}}

我想问的是，为什么我的输出不合适？我怎么能得到它？

Answer 1

GET /statsd-2015.09.28/timer_data/_search
{
    "query" : {
        "filtered" : {
            "query" : { "match_all" : {}},
                "filter" : {
                    "range" : { "ns" : { "lte" : "gunicorn" }}
                }
            }
        },
        "aggs" : {
            "value_val" : { "stats" : { "field" : "count_90" } }
        }
}

我是新手，但我意识到字段名称不是我使用的名称。在此之后，一切都变得清晰。

elasticsearch在统计信息聚合上返回null

1 个答案: