为什么聚合脚本在 elasticsearch 中不起作用？

Question

我在 elasticsearch 中遇到了一些问题。

我想要两个聚合值的除法值。

此查询有效。

{
"query": {
    "bool": {
        "adjust_pure_negative": true,
        "boost": 1.0
    }
},
"aggregations": {
    "sumPageview": {
        "sum": {
            "field": "pageview",
            "missing": 0
        }
    },
    "sumVisit": {
        "sum": {
            "field": "visit",
            "missing": 0
        }
    }
}

但是这个查询不起作用。

{
"query": {
    "bool": {
        "adjust_pure_negative": true,
        "boost": 1.0
    }
},
"aggregations": {
    "sumPageview": {
        "sum": {
            "field": "pageview",
            "missing": 0
        }
    },
    "sumVisit": {
        "sum": {
            "field": "visit",
            "missing": 0
        }
    },
    "totalPageviewPerVisit": {
        "bucket_script": {
            "buckets_path": {
                "sumPageview": "sumPageview",
                "sumVisit": "sumVisit"
            },
            "script": {
                "source": "params.sumPageview / params.sumVisit",
                "lang": "painless"
            },
            "gap_policy": "skip"
        }
    }
}

我认为这个原因是总和值不在桶中。

这个理由对吗？请帮助我。

Answer 1

Sum aggregation is a single-value metrics aggregation that sums up numeric values that are extracted from the aggregated documents.

Bucket script aggregation is a parent pipeline aggregation that executes a script that can perform per bucket computations on specified metrics in the parent multi-bucket aggregation.

因为sum聚合，不创建任何bucket，所以不能在上面使用bucket脚本聚合

添加包含索引数据、搜索查询和搜索结果的工作示例

索引数据：

{
  "user_id":1,
  "pageview": 1,
  "visit": 2
}
{
  "user_id":2,
  "pageview": 2,
  "visit": 3
}
{
  "user_id":3,
  "pageview": 3,
  "visit": 4
}

搜索查询：

{
  "size": 0,
  "aggs": {
    "all": {
      "terms": {
        "field": "user_id"
      },
      "aggs": {
        "sum_1": {
          "sum": {
            "field": "pageview"
          }
        },
        "sum_2": {
          "sum": {
            "field": "visit"
          }
        },
        "division": {
          "bucket_script": {
            "buckets_path": {
              "my_var1": "sum_1",
              "my_var2": "sum_2"
            },
            "script": "params.my_var1 / params.my_var2"
          }
        }
      }
    }
  }
}

搜索结果：

"aggregations": {
    "all": {
      "doc_count_error_upper_bound": 0,
      "sum_other_doc_count": 0,
      "buckets": [
        {
          "key": 1,
          "doc_count": 1,
          "sum_2": {
            "value": 2.0
          },
          "sum_1": {
            "value": 1.0
          },
          "division": {
            "value": 0.5
          }
        },
        {
          "key": 2,
          "doc_count": 1,
          "sum_2": {
            "value": 3.0
          },
          "sum_1": {
            "value": 2.0
          },
          "division": {
            "value": 0.6666666666666666
          }
        },
        {
          "key": 3,
          "doc_count": 1,
          "sum_2": {
            "value": 4.0
          },
          "sum_1": {
            "value": 3.0
          },
          "division": {
            "value": 0.75
          }
        }
      ]
    }

为什么聚合脚本在 elasticsearch 中不起作用？

why aggregation script is not working in elasticsearch?

elasticsearch

elasticsearch-aggregation