遇到个需求,需要使用到es的聚合功能:
直接上代码:
GET /xxx_log_202302/search
{
"size": 0,
"query": {
"match_all": {}
},
"aggs": {
"result": {
"terms": {
"script": {
"source": "doc['subtypeid'].value +'分隔符'+ doc['字段2'].value "
}
}
}
}
}
结果如下: