curl - 按日期和类别分组 Elasticsearch 查询

我在elasticsearch中有一个索引，并已导入json文件以下:

{"index" : {"_id": "1"}}
{"Name": "apple","Type": "fruit","Rate": "64","Date": "2016-01-24"}
{"index" : {"_id": "2"}}`enter code here`
{"Name": "grape","Type": "fruit","Rate": "100","Date": "2016-01-21"}
{"index" : {"_id": "3"}}
{"Name": "banana","Type": "fruit","Rate": "72","Date": "2016-01-14"}
{"index" : {"_id": "4"}}
{"Name": "orange","Type": "fruit","Rate": "82","Date": "2016-01-13"}
{"index" : {"_id": "5"}}
{"Name": "mango","Type": "fruit","Rate": "53","Date": "2016-02-16"}
{"index" : {"_id": "6"}}
{"Name": "grapes","Type": "fruit","Rate": "56","Date": "2016-02-18"}
{"index" : {"_id": "7"}}
{"Name": "blueberry","Type": "fruit","Rate": "96","Date": "2016-02-25"}
{"index" : {"_id": "8"}}
{"Name": "watermelon","Type": "fruit","Rate": "124","Date": "2016-02-12"}
{"index" : {"_id": "9"}}
{"Name": "papaya","Type": "fruit","Rate": "75","Date": "2016-03-09"}
{"index" : {"_id": "10"}}
{"Name": "carrot","Type": "vegetable","Rate": "25","Date": "2016-01-21"}
{"index" : {"_id": "11"}}
{"Name": "ladyfinger","Type": "vegetable","Rate": "89","Date": "2016-01-26"}
{"index" : {"_id": "12"}}
{"Name": "potato","Type": "vegetable","Rate": "36","Date": "2016-02-14"}
{"index" : {"_id": "13"}}
{"Name": "tomato","Type": "vegetable","Rate": "45","Date": "2016-02-07"}
{"index" : {"_id": "14"}}
{"Name": "spinach","Type": "vegetable","Rate": "25","Date": "2016-02-24"}
{"index" : {"_id": "15"}}
{"Name": "raddish","Type": "vegetable","Rate": "21","Date": "2016-02-13"}
{"index" : {"_id": "16"}}
{"Name": "pumpkin","Type": "vegetable","Rate": "78","Date": "2016-03-10"}
{"index" : {"_id": "17"}}
{"Name": "lemon","Type": "vegetable","Rate": "98","Date": "2016-03-11"}

现在我想获取每个月每种类型的计数，直到现在我可以通过下面的elasticsearch查询按类别找到总计数:

{
  "size": 0,
  "aggs": {
    "group_by_Type": {
      "terms": {
        "field": "Type"
      }
    }
  }
}

我希望按月划分此计数。请帮忙

最佳答案

好的开始!现在，您只需要使用将date_histogram设置为interval的 month aggregation，然后将当前的terms聚合移动为date_histogram聚合的子聚合，基本上是这样的:

{
  "size": 0,
  "aggs": {
    "group_by_month": {
      "date_histogram": {
        "field": "Date",
        "interval": "month"
      },
      "aggs": {
        "group_by_Type": {
          "terms": {
            "field": "Type"
          }
        }
      }
    }
  }
}

更新

如果您只想关注某个时间段，则可以添加查询以限制文档集聚合:

{
  "size": 0,
  "query": {
      "range": {
          "Date": {
              "gte": "2016-01-01T00:00:00.000Z",
              "lt": "2016-02-01T00:00:00.000Z"
          }
      }
  },
  "aggs": {
    "group_by_month": {
      "date_histogram": {
        "field": "Date",
        "interval": "month"
      },
      "aggs": {
        "group_by_Type": {
          "terms": {
            "field": "Type"
          }
        }
      }
    }
  }
}