stats-aggregation.asciidoc 4.0 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141
  1. [[search-aggregations-metrics-stats-aggregation]]
  2. === Stats Aggregation
  3. A `multi-value` metrics aggregation that computes stats over numeric values extracted from the aggregated documents. These values can be extracted either from specific numeric fields in the documents, or be generated by a provided script.
  4. The stats that are returned consist of: `min`, `max`, `sum`, `count` and `avg`.
  5. Assuming the data consists of documents representing exams grades (between 0 and 100) of students
  6. [source,js]
  7. --------------------------------------------------
  8. POST /exams/_search?size=0
  9. {
  10. "aggs" : {
  11. "grades_stats" : { "stats" : { "field" : "grade" } }
  12. }
  13. }
  14. --------------------------------------------------
  15. // CONSOLE
  16. // TEST[setup:exams]
  17. The above aggregation computes the grades statistics over all documents. The aggregation type is `stats` and the `field` setting defines the numeric field of the documents the stats will be computed on. The above will return the following:
  18. [source,js]
  19. --------------------------------------------------
  20. {
  21. ...
  22. "aggregations": {
  23. "grades_stats": {
  24. "count": 2,
  25. "min": 50.0,
  26. "max": 100.0,
  27. "avg": 75.0,
  28. "sum": 150.0
  29. }
  30. }
  31. }
  32. --------------------------------------------------
  33. // TESTRESPONSE[s/\.\.\./"took": $body.took,"timed_out": false,"_shards": $body._shards,"hits": $body.hits,/]
  34. The name of the aggregation (`grades_stats` above) also serves as the key by which the aggregation result can be retrieved from the returned response.
  35. ==== Script
  36. Computing the grades stats based on a script:
  37. [source,js]
  38. --------------------------------------------------
  39. POST /exams/_search?size=0
  40. {
  41. "aggs" : {
  42. "grades_stats" : {
  43. "stats" : {
  44. "script" : {
  45. "lang": "painless",
  46. "source": "doc['grade'].value"
  47. }
  48. }
  49. }
  50. }
  51. }
  52. --------------------------------------------------
  53. // CONSOLE
  54. // TEST[setup:exams]
  55. This will interpret the `script` parameter as an `inline` script with the `painless` script language and no script parameters. To use a stored script use the following syntax:
  56. [source,js]
  57. --------------------------------------------------
  58. POST /exams/_search?size=0
  59. {
  60. "aggs" : {
  61. "grades_stats" : {
  62. "stats" : {
  63. "script" : {
  64. "id": "my_script",
  65. "params" : {
  66. "field" : "grade"
  67. }
  68. }
  69. }
  70. }
  71. }
  72. }
  73. --------------------------------------------------
  74. // CONSOLE
  75. // TEST[setup:exams,stored_example_script]
  76. ===== Value Script
  77. It turned out that the exam was way above the level of the students and a grade correction needs to be applied. We can use a value script to get the new stats:
  78. [source,js]
  79. --------------------------------------------------
  80. POST /exams/_search?size=0
  81. {
  82. "aggs" : {
  83. "grades_stats" : {
  84. "stats" : {
  85. "field" : "grade",
  86. "script" : {
  87. "lang": "painless",
  88. "source": "_value * params.correction",
  89. "params" : {
  90. "correction" : 1.2
  91. }
  92. }
  93. }
  94. }
  95. }
  96. }
  97. --------------------------------------------------
  98. // CONSOLE
  99. // TEST[setup:exams]
  100. ==== Missing value
  101. The `missing` parameter defines how documents that are missing a value should be treated.
  102. By default they will be ignored but it is also possible to treat them as if they
  103. had a value.
  104. [source,js]
  105. --------------------------------------------------
  106. POST /exams/_search?size=0
  107. {
  108. "aggs" : {
  109. "grades_stats" : {
  110. "stats" : {
  111. "field" : "grade",
  112. "missing": 0 <1>
  113. }
  114. }
  115. }
  116. }
  117. --------------------------------------------------
  118. // CONSOLE
  119. // TEST[setup:exams]
  120. <1> Documents without a value in the `grade` field will fall into the same bucket as documents that have the value `0`.