How to combine a filter AND and a nested aggregation?

Elastic Stack Elasticsearch
1

Hi,

I'm having a lot of trouble using the Java API to get an average aggregation over a nested field. This is the query I'm sending:

{ "aggregations" : { "nested" : { "nested" : { "path" : "hops" }, "aggregations" : { "aggregationFilter" : { "filter" : { "bool" : { "must" : { "term" : { "hops.adapterName" : "myadapter" } } } } }, "average0" : { "avg" : { "field" : "serverProcessingTime" } }, "average1" : { "avg" : { "field" : "roundTripTime" } }, "average2" : { "avg" : { "field" : "bytesReceived" } } } } } }

And this the result I get:

{ "hits": { "total": 2, "hits": [], "max_score": 0 }, "_shards": { "total": 1, "failed": 0, "successful": 1 }, "timed_out": false, "took": 182, "aggregations": { "nested": { "aggregationFilter": { "doc_count": 1 }, "average0": { "value": 35 }, "doc_count": 2, "average2": { "value": null }, "average1": { "value": 100 } } } }

It looks like the filter was applied (doc_count = 1), but the results of that weren't applied to the average aggregation (doc_count = 2). I think I need to structure the query slightly differently, but can't figure out how, spent a lot of time with trial and error on this, and no success.

Hoping the community can offer advice.

Many thanks

2

Try to put your filter part in the query part and not inside the aggregation.
Read about scoping here: https://www.elastic.co/guide/en/elasticsearch/guide/current/_scoping_aggregations.html
Cheers, Ramy

3

Thanks, I tried using a query and it works!

{ "query" : { "nested" : { "filter" : { "bool" : { "must" : { "term" : { "hops.adapterName" : "myadapter" } } } }, "path" : "hops" } }, "aggregations" : { "nested" : { "nested" : { "path" : "hops" }, "aggregations" : { "average0" : { "avg" : { "field" : "serverProcessingTime" } }, "average1" : { "avg" : { "field" : "roundTripTime" } }, "average2" : { "avg" : { "field" : "bytesReceived" } } } } } }