How to perform a distinct count query in Elasticsearch

Question

I have an index with a host field. I am trying to retrieve the count of documents by distinct host name.

IE:

Host1: 
    Count: 72
Host2:
    Count: 33
Host3:
    Count: 153

Each document has a host field and it is a string. I assume I need to do something involving terms and cardinality, but I can't quite nail the syntax.

You need to use the Terms Aggregation. Possible Duplicate of stackoverflow.com/questions/25465215/… — Aaron M. Eshbach
– Aaron M. Eshbach, Commented Jan 16, 2018 at 21:44

kgf3JfUtW · Accepted Answer · 2018-01-16 22:10:20Z

1

How to get all possible values for field host?

curl -XGET  http://localhost:9200/articles/_search?pretty -d '
{
    "aggs" : {
        "whatever_you_like_here" : {
            "terms" : { "field" : "host", "size":10000 }
        }
    },
    "size" : 0
}'

Note

The result will contain a doc_count for each unique value
"size":10000 Get at most 10000 unique values. Default is 10.
"size":0 By default, "hits" contains 10 documents. We don't need them.
By default, the buckets are ordered by the doc_count in decreasing order.

Reference: bucket terms aggregation

answered Jan 16, 2018 at 22:10

kgf3JfUtW

15.2k12 gold badges63 silver badges92 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

How to perform a distinct count query in Elasticsearch

1 Answer 1

How to get all possible values for field `host`?

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

How to get all possible values for field host?

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related

How to get all possible values for field `host`?