限制Elasticsearch中的分组结果

Max*_*101 3 group-by elasticsearch

在我的弹性搜索索引"人"中有以下文件:

{"name": "John", "district": 1},
{"name": "Anne", "district": 1},
{"name": "Mary", "district": 2},
{"name": "Bobby", "district": 2},
{"name": "Nick", "district": 1},
{"name": "Bob", "district": 3},
{"name": "Kenny", "district": 1}
Run Code Online (Sandbox Code Playgroud)

我想获得一个区域为2或1的文档的结果,但最多只有2个.所以,如果以上是我的整个索引,我希望它返回:

{"name": "John", "district": 1},
{"name": "Anne", "district": 1},
{"name": "Mary", "district": 2},
{"name": "Bobby", "district": 2},
Run Code Online (Sandbox Code Playgroud)

是否有可能通过弹性的单个查询来实现这一点?非常感谢您的帮助!

And*_*fan 5

这样的事情应该这样做:

GET /some_index/some_type/_search?search_type=count
{
  "aggs": {
    "district_1_or_2": {
      "filter": {
        "bool": {
          "should": [
            {
              "term": {
                "district": 1
              }
            },
            {
              "term": {
                "district": 2
              }
            }
          ]
        }
      },
      "aggs": {
        "district": {
          "terms": {
            "field": "district",
            "size": 10
          },
          "aggs": {
            "top": {
              "top_hits": {
                "size": 2
              }
            }
          }
        }
      }
    }
  }
}
Run Code Online (Sandbox Code Playgroud)