stats-aggregation.asciidoc 4.1 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143
  1. [[search-aggregations-metrics-stats-aggregation]]
  2. === Stats Aggregation
  3. A `multi-value` metrics aggregation that computes stats over numeric values extracted from the aggregated documents. These values can be extracted either from specific numeric fields in the documents, or be generated by a provided script.
  4. The stats that are returned consist of: `min`, `max`, `sum`, `count` and `avg`.
  5. Assuming the data consists of documents representing exams grades (between 0 and 100) of students
  6. [source,js]
  7. --------------------------------------------------
  8. POST /exams/_search?size=0
  9. {
  10. "aggs" : {
  11. "grades_stats" : { "stats" : { "field" : "grade" } }
  12. }
  13. }
  14. --------------------------------------------------
  15. // CONSOLE
  16. // TEST[setup:exams]
  17. The above aggregation computes the grades statistics over all documents. The aggregation type is `stats` and the `field` setting defines the numeric field of the documents the stats will be computed on. The above will return the following:
  18. [source,js]
  19. --------------------------------------------------
  20. {
  21. ...
  22. "aggregations": {
  23. "grades_stats": {
  24. "count": 2,
  25. "min": 50.0,
  26. "max": 100.0,
  27. "avg": 75.0,
  28. "sum": 150.0
  29. }
  30. }
  31. }
  32. --------------------------------------------------
  33. // TESTRESPONSE[s/\.\.\./"took": $body.took,"timed_out": false,"_shards": $body._shards,"hits": $body.hits,/]
  34. The name of the aggregation (`grades_stats` above) also serves as the key by which the aggregation result can be retrieved from the returned response.
  35. ==== Script
  36. Computing the grades stats based on a script:
  37. [source,js]
  38. --------------------------------------------------
  39. POST /exams/_search?size=0
  40. {
  41. "aggs" : {
  42. "grades_stats" : {
  43. "stats" : {
  44. "script" : {
  45. "lang": "painless",
  46. "inline": "doc['grade'].value"
  47. }
  48. }
  49. }
  50. }
  51. }
  52. --------------------------------------------------
  53. // CONSOLE
  54. // TEST[setup:exams]
  55. This will interpret the `script` parameter as an `inline` script with the `painless` script language and no script parameters. To use a file script use the following syntax:
  56. [source,js]
  57. --------------------------------------------------
  58. POST /exams/_search?size=0
  59. {
  60. "aggs" : {
  61. "grades_stats" : {
  62. "stats" : {
  63. "script" : {
  64. "file": "my_script",
  65. "params" : {
  66. "field" : "grade"
  67. }
  68. }
  69. }
  70. }
  71. }
  72. }
  73. --------------------------------------------------
  74. // CONSOLE
  75. // TEST[setup:exams]
  76. TIP: for indexed scripts replace the `file` parameter with an `id` parameter.
  77. ===== Value Script
  78. It turned out that the exam was way above the level of the students and a grade correction needs to be applied. We can use a value script to get the new stats:
  79. [source,js]
  80. --------------------------------------------------
  81. POST /exams/_search?size=0
  82. {
  83. "aggs" : {
  84. "grades_stats" : {
  85. "stats" : {
  86. "field" : "grade",
  87. "script" : {
  88. "lang": "painless",
  89. "inline": "_value * params.correction",
  90. "params" : {
  91. "correction" : 1.2
  92. }
  93. }
  94. }
  95. }
  96. }
  97. }
  98. --------------------------------------------------
  99. // CONSOLE
  100. // TEST[setup:exams]
  101. ==== Missing value
  102. The `missing` parameter defines how documents that are missing a value should be treated.
  103. By default they will be ignored but it is also possible to treat them as if they
  104. had a value.
  105. [source,js]
  106. --------------------------------------------------
  107. POST /exams/_search?size=0
  108. {
  109. "aggs" : {
  110. "grades_stats" : {
  111. "stats" : {
  112. "field" : "grade",
  113. "missing": 0 <1>
  114. }
  115. }
  116. }
  117. }
  118. --------------------------------------------------
  119. // CONSOLE
  120. // TEST[setup:exams]
  121. <1> Documents without a value in the `grade` field will fall into the same bucket as documents that have the value `0`.