我们正在为某个日期范围执行 3 级聚合,我们需要获取按“DateTime”间隔分组的不同“HitCount”值分组的不同“网站”名称。在这里,直方图聚合允许我们获取基于间隔的文档,但是日期的“key_as_string”总是从上午 12 点开始考虑,而不是查询中提供的日期范围时间。根据间隔时间段值,一天(从开始时间的上午 12 点开始的 24 小时)被划分并给出聚合输出。
For e.g. we have given the from time as "2015-11-10T11:00:00" and To time as "2015-11-13T11:00:00" with interval of 8 hrs
Following is the query used:
{
"size": 0,
"query": {
"filtered": {
"filter": {
"bool": {
"must": [
{
"range": {
"DateTime": {
"from": "2015-11-10T11:00:00",
"to": "2015-11-13T11:00:00"
}
}
}
]
}
}
}
},
"aggs": {
"Website": {
"terms": {
"field": "Website",
"size": 0,
"order": {
"_count": "desc"
}
}, …Run Code Online (Sandbox Code Playgroud)