Elasticsearch / OpenSearch-数组中的共同值的交集

Question

给定的

a = [1,2,3,4]

以及

b = [1,3]
c = [5,6]
d = [1,6]

如何在Elasticsearch中使用a的确切数量a ？

我希望：

b -> 2
c -> 0
d -> 1

Answer 1

让您考虑以下是您的Elasticsearch文档，

{
  "b": [1,3],
  "c": [5,6],
  "d": [1,6]
}

您的 elasticsearch Query 将看起来如下：

在这里，您需要使用第一个术语聚合，并且需要应用SUM_BUCKET聚合。

{
  "size": 0,
  "aggs": {
    "b_count": {
      "terms": {
        "field": "b",
        "size": 10,
        "include": [1,2,3,4]
      }
    },
    "c_count": {
      "terms": {
        "field": "c",
        "size": 10,
        "include": [1,2,3,4]
      }
    },
    "d_count": {
      "terms": {
        "field": "d",
        "size": 10,
        "include": [1,2,3,4]
      }
    },
    "b_sum": {
      "sum_bucket": {
        "buckets_path": "b_count>_count"
      }
    },
    "c_sum": {
      "sum_bucket": {
        "buckets_path": "c_count>_count"
      }
    },
    "d_sum": {
      "sum_bucket": {
        "buckets_path": "d_count>_count"
      }
    }
  }
}

示例响应：

您可以使用b_sum，c_sum和d_sum的值。

"aggregations" : {
    "b_count" : {
      "doc_count_error_upper_bound" : 0,
      "sum_other_doc_count" : 0,
      "buckets" : [
        {
          "key" : 1,
          "doc_count" : 1
        },
        {
          "key" : 3,
          "doc_count" : 1
        }
      ]
    },
    "d_count" : {
      "doc_count_error_upper_bound" : 0,
      "sum_other_doc_count" : 0,
      "buckets" : [
        {
          "key" : 1,
          "doc_count" : 1
        }
      ]
    },
    "c_count" : {
      "doc_count_error_upper_bound" : 0,
      "sum_other_doc_count" : 0,
      "buckets" : [ ]
    },
    "b_sum" : {
      "value" : 2.0
    },
    "c_sum" : {
      "value" : 0.0
    },
    "d_sum" : {
      "value" : 1.0
    }
  }