hi ,

i am bit new Elastic search ,while testing on elasticsearch's aggregation
feature ,i am always hitting data too large,i understand that aggregations
are very memory intensive , so is there any way query in ES where one
query's output can be  ingested to aggregation so that number of input to
aggregation is limited . i have used filter and querying before
aggregations .

i have around 60 GB index on 5 shards .

queries i tried:

GET **********/_search
{
  "query": {"term": {
    "file_sha2": {
      "value": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
    }
  }},

  "aggs": {
          "top_filename": {
            "max": {
              "field": "portalid"
            }
          }

  }
}

-------------------------------------------------------

GET ************/_search
{

    "aggs": {
      "top filename": {
        "filter": {"term": {
          "file_sha2": "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"
        }},
        "aggs": {
          "top_filename": {
            "max": {
              "field": "portalid"
            }
          }
        }
      }
    }



}


thanks in advance .

-- 
You received this message because you are subscribed to the Google Groups 
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/elasticsearch/CALOF%3DH5%2BCzGZzhiyzy8ixnY_CcreL_3XaJf9jf4RJTvVH4Jx%3Dg%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to