在Elasticsearch中汇总嵌套文档

Arel 发表于 Dev

阿雷尔

我正在做一个查询，返回一堆文件。这些文档中的一个字段是称为的一系列字典hourly_values。我想返回该字典数组中的秒数字段的总和，但是我无法弄清楚如何进入该数组并求和每个字典中所有秒键的值。

这是存储在elasticsearch中并从简单查询返回的内容：

{
  "took": 21,
  "timed_out": false,
  "_shards": {
    "total": 5,
    "successful": 5,
    "failed": 0
  },
  "hits": {
    "total": 1,
    "max_score": 1,
    "hits": [
      {
        "_index": "searchdb",
        "_type": "profile",
        "_id": "915",
        "_score": 1,
        "_source": {
          "id": 915,
          "market": "Chicago",
          "latitude": "41.1234",
          "longitude": "-87.5678",
          "structure_type": "Digital Display",
          "zip": 60654,
          "city": "Chicago",
          "player_id": 1234,
          "geo_location": {
            "lat": 41.1234,
            "lon": -87.5678
          },
          "hourly_values": [
            {
              "datetime": "2015-11-18T20:02:04Z",
              "seconds": 800
            },
            {
              "datetime": "2015-11-18T21:08:29Z",
              "seconds": 800
            },
            {
              "datetime": "2015-11-18T21:37:29Z",
              "seconds": 6400
            }
          ]
        }
      }
    ]
  }
}

这是我要构建的查询：

{
    "size":0,
    "aggregations": {
        "seconds_agg": {
            "geo_distance": {
                "field": "geo_location",
                "origin":"41.893371,-87.628329",
                "unit":"km",
                "ranges":[
                    {
                        "from":0,
                        "to":20
                    }
                ]
            },
            "aggregations":{
                "ring_seconds_sum": {
                    "sum":{
                        "hourly_values":{
                            something goes here    
                        }       
                    }
                }
            }
        }
    }
}

我不知道要在something goes here查询部分中输入什么。有任何想法吗？

斯隆·阿伦斯（Sloan Ahrens）

尝试以下操作（我将其更改"to":20为"to":200与您发布的文档相匹配）：

POST /test_index/_search
{
   "size": 0,
   "aggregations": {
      "seconds_agg": {
         "geo_distance": {
            "field": "geo_location",
            "origin": "41.893371,-87.628329",
            "unit": "km",
            "ranges": [
               {
                  "from": 0,
                  "to": 200
               }
            ]
         },
         "aggregations": {
            "ring_seconds_sum": {
               "sum": {
                  "field": "hourly_values.seconds"
               }
            }
         }
      }
   }
}