stats-aggregation.asciidoc 4.0 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136
  1. [[search-aggregations-metrics-stats-aggregation]]
  2. === Stats Aggregation
  3. A `multi-value` metrics aggregation that computes stats over numeric values extracted from the aggregated documents. These values can be extracted either from specific numeric fields in the documents, or be generated by a provided script.
  4. The stats that are returned consist of: `min`, `max`, `sum`, `count` and `avg`.
  5. Assuming the data consists of documents representing exams grades (between 0 and 100) of students
  6. [source,console]
  7. --------------------------------------------------
  8. POST /exams/_search?size=0
  9. {
  10. "aggs" : {
  11. "grades_stats" : { "stats" : { "field" : "grade" } }
  12. }
  13. }
  14. --------------------------------------------------
  15. // TEST[setup:exams]
  16. The above aggregation computes the grades statistics over all documents. The aggregation type is `stats` and the `field` setting defines the numeric field of the documents the stats will be computed on. The above will return the following:
  17. [source,js]
  18. --------------------------------------------------
  19. {
  20. ...
  21. "aggregations": {
  22. "grades_stats": {
  23. "count": 2,
  24. "min": 50.0,
  25. "max": 100.0,
  26. "avg": 75.0,
  27. "sum": 150.0
  28. }
  29. }
  30. }
  31. --------------------------------------------------
  32. // TESTRESPONSE[s/\.\.\./"took": $body.took,"timed_out": false,"_shards": $body._shards,"hits": $body.hits,/]
  33. The name of the aggregation (`grades_stats` above) also serves as the key by which the aggregation result can be retrieved from the returned response.
  34. ==== Script
  35. Computing the grades stats based on a script:
  36. [source,console]
  37. --------------------------------------------------
  38. POST /exams/_search?size=0
  39. {
  40. "aggs" : {
  41. "grades_stats" : {
  42. "stats" : {
  43. "script" : {
  44. "lang": "painless",
  45. "source": "doc['grade'].value"
  46. }
  47. }
  48. }
  49. }
  50. }
  51. --------------------------------------------------
  52. // TEST[setup:exams]
  53. This will interpret the `script` parameter as an `inline` script with the `painless` script language and no script parameters. To use a stored script use the following syntax:
  54. [source,console]
  55. --------------------------------------------------
  56. POST /exams/_search?size=0
  57. {
  58. "aggs" : {
  59. "grades_stats" : {
  60. "stats" : {
  61. "script" : {
  62. "id": "my_script",
  63. "params" : {
  64. "field" : "grade"
  65. }
  66. }
  67. }
  68. }
  69. }
  70. }
  71. --------------------------------------------------
  72. // TEST[setup:exams,stored_example_script]
  73. ===== Value Script
  74. It turned out that the exam was way above the level of the students and a grade correction needs to be applied. We can use a value script to get the new stats:
  75. [source,console]
  76. --------------------------------------------------
  77. POST /exams/_search?size=0
  78. {
  79. "aggs" : {
  80. "grades_stats" : {
  81. "stats" : {
  82. "field" : "grade",
  83. "script" : {
  84. "lang": "painless",
  85. "source": "_value * params.correction",
  86. "params" : {
  87. "correction" : 1.2
  88. }
  89. }
  90. }
  91. }
  92. }
  93. }
  94. --------------------------------------------------
  95. // TEST[setup:exams]
  96. ==== Missing value
  97. The `missing` parameter defines how documents that are missing a value should be treated.
  98. By default they will be ignored but it is also possible to treat them as if they
  99. had a value.
  100. [source,console]
  101. --------------------------------------------------
  102. POST /exams/_search?size=0
  103. {
  104. "aggs" : {
  105. "grades_stats" : {
  106. "stats" : {
  107. "field" : "grade",
  108. "missing": 0 <1>
  109. }
  110. }
  111. }
  112. }
  113. --------------------------------------------------
  114. // TEST[setup:exams]
  115. <1> Documents without a value in the `grade` field will fall into the same bucket as documents that have the value `0`.