# Aggregate query scenario while updating field to multi field type

**URL:** <https://discuss.elastic.co/t/aggregate-query-scenario-while-updating-field-to-multi-field-type/59023>\
**Category:** Elasticsearch\
**Created:** [August 26, 2016, 9:43am UTC](https://discuss.elastic.co/t/aggregate-query-scenario-while-updating-field-to-multi-field-type/59023 "2016-08-26T09:43:03Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![nrmohta](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nrmohta/32/120038_2.png) [@nrmohta](https://discuss.elastic.co/u/nrmohta)\
**Post date:** [August 26, 2016, 9:43am UTC](https://discuss.elastic.co/t/aggregate-query-scenario-while-updating-field-to-multi-field-type/59023/1 "2016-08-26T09:43:03Z")

</div>

Scenario  
We have below 2 indexes  
-\> index1 has field HOST  
-\> index2 has 2 fields HOST & HOST.raw

Requirement:  
I want to perform aggregate query on HOST such that for index1 it should consider field HOST and for index2 it should consider field HOST.raw  
Basically if HOST.raw is present then consider it else take HOST

Presently we are using below query which considers only HOST field.(not HOST.raw if available in index)  
"aggregations" : {  
"HOST" : {  
"terms" : {  
"field" : "HOST",  
"size" : 500,  
"order" : {  
"\_count" : "asc"  
}  
}  
}  
}

Is there any way I can accomodate my requirement by modifying query ?

---

<div class="post-metadata">

**Author:** ![ywelsch](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ywelsch/32/7751_2.png) [@ywelsch](https://discuss.elastic.co/u/ywelsch)\
**Post date:** [August 26, 2016, 10:23am UTC](https://discuss.elastic.co/t/aggregate-query-scenario-while-updating-field-to-multi-field-type/59023/2 "2016-08-26T10:23:36Z")

</div>

It is only possible with a [scripted terms aggregation](https://www.elastic.co/guide/en/elasticsearch/reference/2.3/search-aggregations-bucket-terms-aggregation.html#search-aggregations-bucket-terms-aggregation-script). That will give you poor performance though.

Relevant to this topic:

> <https://github.com/elastic/elasticsearch/issues/17511>

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 5, 2017, 10:24pm UTC](https://discuss.elastic.co/t/aggregate-query-scenario-while-updating-field-to-multi-field-type/59023/3 "2017-07-05T22:24:57Z")

</div>