stats-aggregation.asciidoc 3.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139
  1. [[search-aggregations-metrics-stats-aggregation]]
  2. === Stats aggregation
  3. ++++
  4. <titleabbrev>Stats</titleabbrev>
  5. ++++
  6. A `multi-value` metrics aggregation that computes stats over numeric values extracted from the aggregated documents. These values can be extracted either from specific numeric fields in the documents, or be generated by a provided script.
  7. The stats that are returned consist of: `min`, `max`, `sum`, `count` and `avg`.
  8. Assuming the data consists of documents representing exams grades (between 0 and 100) of students
  9. [source,console]
  10. --------------------------------------------------
  11. POST /exams/_search?size=0
  12. {
  13. "aggs": {
  14. "grades_stats": { "stats": { "field": "grade" } }
  15. }
  16. }
  17. --------------------------------------------------
  18. // TEST[setup:exams]
  19. The above aggregation computes the grades statistics over all documents. The aggregation type is `stats` and the `field` setting defines the numeric field of the documents the stats will be computed on. The above will return the following:
  20. [source,console-result]
  21. --------------------------------------------------
  22. {
  23. ...
  24. "aggregations": {
  25. "grades_stats": {
  26. "count": 2,
  27. "min": 50.0,
  28. "max": 100.0,
  29. "avg": 75.0,
  30. "sum": 150.0
  31. }
  32. }
  33. }
  34. --------------------------------------------------
  35. // TESTRESPONSE[s/\.\.\./"took": $body.took,"timed_out": false,"_shards": $body._shards,"hits": $body.hits,/]
  36. The name of the aggregation (`grades_stats` above) also serves as the key by which the aggregation result can be retrieved from the returned response.
  37. ==== Script
  38. Computing the grades stats based on a script:
  39. [source,console]
  40. --------------------------------------------------
  41. POST /exams/_search?size=0
  42. {
  43. "aggs": {
  44. "grades_stats": {
  45. "stats": {
  46. "script": {
  47. "lang": "painless",
  48. "source": "doc['grade'].value"
  49. }
  50. }
  51. }
  52. }
  53. }
  54. --------------------------------------------------
  55. // TEST[setup:exams]
  56. This will interpret the `script` parameter as an `inline` script with the `painless` script language and no script parameters. To use a stored script use the following syntax:
  57. [source,console]
  58. --------------------------------------------------
  59. POST /exams/_search?size=0
  60. {
  61. "aggs": {
  62. "grades_stats": {
  63. "stats": {
  64. "script": {
  65. "id": "my_script",
  66. "params": {
  67. "field": "grade"
  68. }
  69. }
  70. }
  71. }
  72. }
  73. }
  74. --------------------------------------------------
  75. // TEST[setup:exams,stored_example_script]
  76. ===== Value Script
  77. It turned out that the exam was way above the level of the students and a grade correction needs to be applied. We can use a value script to get the new stats:
  78. [source,console]
  79. --------------------------------------------------
  80. POST /exams/_search?size=0
  81. {
  82. "aggs": {
  83. "grades_stats": {
  84. "stats": {
  85. "field": "grade",
  86. "script": {
  87. "lang": "painless",
  88. "source": "_value * params.correction",
  89. "params": {
  90. "correction": 1.2
  91. }
  92. }
  93. }
  94. }
  95. }
  96. }
  97. --------------------------------------------------
  98. // TEST[setup:exams]
  99. ==== Missing value
  100. The `missing` parameter defines how documents that are missing a value should be treated.
  101. By default they will be ignored but it is also possible to treat them as if they
  102. had a value.
  103. [source,console]
  104. --------------------------------------------------
  105. POST /exams/_search?size=0
  106. {
  107. "aggs": {
  108. "grades_stats": {
  109. "stats": {
  110. "field": "grade",
  111. "missing": 0 <1>
  112. }
  113. }
  114. }
  115. }
  116. --------------------------------------------------
  117. // TEST[setup:exams]
  118. <1> Documents without a value in the `grade` field will fall into the same bucket as documents that have the value `0`.