elasticsearch aggregation group by null key

Question

here is the data in my elasticsearch server:

{"system": "aaa"},
{"system": "bbb"},
{"system": null}

I want to get the statistics for system. then I did the query:

{
    "aggs" : {
        "myAggrs" : {
            "terms" : { "field" : "system" }
        } 
}

it gives me the result:

    {
       "key": "aaa",
       "doc_count": 1
    },
    {
       "key": "bbb",
       "doc_count": 1
    }

but the "key" : null is not included in the result, how can I get it? here is my expect result:

{
   "key": "aaa",
   "doc_count": 1
},
{
   "key": "bbb",
   "doc_count": 1
},
{
   "key": null,
   "doc_count": 1
}

Andrei Stefan · Accepted Answer · 2015-06-17 10:52:20Z

11

I don't think you can do this with terms. Try with another aggregation:

{
  "aggs": {
    "myAggrs": {
      "terms": {
        "field": "system"
      }
    },
    "missing_system": {
      "missing": {
        "field": "system"
      }
    }
  }
}

And the result will be:

   "aggregations": {
      "myAggrs": {
         "doc_count_error_upper_bound": 0,
         "sum_other_doc_count": 0,
         "buckets": [
            {
               "key": "aaa",
               "doc_count": 1
            },
            {
               "key": "bbb",
               "doc_count": 1
            }
         ]
      },
      "missing_system": {
         "doc_count": 1
      }
   }

answered Jun 17, 2015 at 10:52

Andrei Stefan

52.5k6 gold badges102 silver badges92 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

elasticsearch aggregation group by null key

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related