# Aggregation: order by on count of filtered field

**URL:** https://discuss.elastic.co/t/aggregation-order-by-on-count-of-filtered-field/151167
**Category:** Elasticsearch
**Created:** [October 5, 2018, 7:27am UTC](https://discuss.elastic.co/t/aggregation-order-by-on-count-of-filtered-field/151167 "2018-10-05T07:27:55Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![ErSumit](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ersumit/32/88708_2.png) [@ErSumit](https://discuss.elastic.co/u/ErSumit)
#### Post date: [October 5, 2018, 7:27am UTC](https://discuss.elastic.co/t/aggregation-order-by-on-count-of-filtered-field/151167/1 "2018-10-05T07:27:56Z")

</div>

How can I get result ordered by based on count of filtered field. Here I have filtered transactionID for Error Codes and I want result set in desc order of count of errors.

Query:

GET index-name/\_search  
{  
"aggs" : {  
"TransID" : {  
"terms" : {  
"field" : "transID.keyword"  
, "order": {  
"\_key": "desc"  
}  
},  
"aggs" : {  
"ErrorCode" : {  
"filter" : { "term" : { "ErrorCode.keyword": "Error-2345" }}  
}  
}  
}  
}  
}

In response I get aggregations randomly, (not in order by values)  
I want result set to be sorted in desc order for doc\_count of errorCode

"aggregations": {

```
"TransID": { 

  "doc_count_error_upper_bound": 0, 

  "sum_other_doc_count": 11401660, 

  "buckets": [ 

    { 

      "key": "transactionID-***", 

      "doc_count": 168, 

      "ErrorCode": { 

        "doc_count": 2 

      } 

    }, 

    { 

      "key": "transactionID-***", 

      "doc_count": 246, 

      "ErrorCode": { 

        "doc_count": 20 

      } 

    }, 

    { 

      "key": "transactionID-***", 

      "doc_count": 145, 

      "ErrorCode": { 

        "doc_count": 0 

      } 

    }, 

    { 

      "key": "transactionID-***", 

      "doc_count": 83, 

      "ErrorCode": { 

        "doc_count": 0 

      } 

    }, 

    { 

      "key": "transactionID-***", 

      "doc_count": 103, 

      "ErrorCode": { 

        "doc_count": 0 

      } 

    }, 

    { 

      "key": "transactionID-***", 

      "doc_count": 104, 

      "ErrorCode": { 

        "doc_count": 0 

      } 

    }, 

    { 

      "key": "transactionID-***", 

      "doc_count": 134, 

      "ErrorCode": { 

        "doc_count": 0 

      } 

    }, 

    { 

      "key": "transactionID-***", 

      "doc_count": 214, 

      "ErrorCode": { 

        "doc_count": 0 

      } 

    }, 

    { 

      "key": "transactionID-***", 

      "doc_count": 115, 

      "ErrorCode": { 

        "doc_count": 0 

      } 

    }, 

    { 

      "key": "transactionID-***", 

      "doc_count": 115, 

      "ErrorCode": { 

        "doc_count": 0 

      } 

    } 

  ] 

} 

```

}

}

Thanks

---

<div class="post-metadata">

### Author: ![ErSumit](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ersumit/32/88708_2.png) [@ErSumit](https://discuss.elastic.co/u/ErSumit)
#### Post date: [October 8, 2018, 8:38am UTC](https://discuss.elastic.co/t/aggregation-order-by-on-count-of-filtered-field/151167/2 "2018-10-08T08:38:47Z")

</div>

Awaiting for any assistance....

---

<div class="post-metadata">

### Author: ![Marius\_Dragomir](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marius_dragomir/32/42087_2.png) [@Marius\_Dragomir](https://discuss.elastic.co/u/Marius_Dragomir)
#### Post date: [October 10, 2018, 10:24am UTC](https://discuss.elastic.co/t/aggregation-order-by-on-count-of-filtered-field/151167/3 "2018-10-10T10:24:41Z")

</div>

Hello,  
This is an Elasticsearch questions, so you should ask in that forum sub-section about query building.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [November 7, 2018, 10:32am UTC](https://discuss.elastic.co/t/aggregation-order-by-on-count-of-filtered-field/151167/4 "2018-11-07T10:32:31Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
