# Aggregation Query possible input ES plugin
**URL:** https://discuss.elastic.co/t/aggregation-query-possible-input-es-plugin/28159
**Category:** Logstash
**Created:** [August 27, 2015, 8:10am UTC](https://discuss.elastic.co/t/aggregation-query-possible-input-es-plugin/28159 "2015-08-27T08:10:27Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@Jungmi\_Yoo](https://discuss.elastic.co/u/Jungmi_Yoo)
#### Post date: [August 27, 2015, 8:10am UTC](https://discuss.elastic.co/t/aggregation-query-possible-input-es-plugin/28159/1 "2015-08-27T08:10:27Z")
I really want to know that aggregation is possible in input / output plugin ?
input {
# Read all documents from Elasticsearch matching the given query
elasticsearch {
hosts =\> ["192.168.1.5"]
index =\> "matching\_score\_log"
type =\> "keyword\_score"
port =\> 9200
size =\> 0
docinfo =\> true
scan =\> false
query =\> '{"aggs":{"terms\_keyword":{"terms":{"field":"user\_keyword","size":0},"aggs":{"key\_score":{"terms":{"field":"inquiry\_id","size":0},"aggs":{"key\_score":{"sum":{"field":"inquiry\_score"}}}}}}}}'
}
}
---
### Author:  [@Joo\_Won\_Jung](https://discuss.elastic.co/u/Joo_Won_Jung)
#### Post date: [September 11, 2015, 10:57am UTC](https://discuss.elastic.co/t/aggregation-query-possible-input-es-plugin/28159/2 "2015-09-11T10:57:51Z")
I guess you want ES plugin reads aggregations part of query results.
But, it seems that logstash elasticsearch input plugin only watchs hits.hits array of elasticsearch search API response.
Note: [https://github.com/logstash-plugins/logstash-input-elasticsearch/blob/master/lib/logstash/inputs/elasticsearch.rb#L168](https://github.com/logstash-plugins/logstash-input-elasticsearch/blob/master/lib/logstash/inputs/elasticsearch.rb#L168)
Does anybody know the way to make aggregation result as hitted documents?
---
### Author:  [@Jungmi\_Yoo](https://discuss.elastic.co/u/Jungmi_Yoo)
#### Post date: [April 11, 2016, 12:56pm UTC](https://discuss.elastic.co/t/aggregation-query-possible-input-es-plugin/28159/3 "2016-04-11T12:56:24Z")
Thank you so much.
Finally i made a customized Elasticsearch input plugin. That would be good.
Here is sample config for aggregation query.
input {
# Read all documents from Elasticsearch matching the given query
elasticsearch {
hosts =\> ["${ES\_NODE\_HOST}"]
index =\> "xxx\_matching\_score\_log"
type =\> "keyword\_score"
size =\> 0
scan =\> false
interval =\> 1
query =\> '{"aggs":{"terms\_keyword":{"terms":{"field":"user\_keyword","size":0},"aggs":{"key\_score":{"terms":{"field":"inquiry\_id","size":30},"aggs":{"key\_score":{"sum":{"field":"inquiry\_score"}}}}}}}}'
}
}
output {
elasticsearch {
host =\> "${ES\_NODE\_HOST}"
protocol =\> "http"
index =\> "oas\_matching\_score\_app"
document\_id =\> "%{[@metadata][keyword]}"
}
#stdout { codec =\> rubydebug }
}
---
### Author:  [@mohamadkhan19](https://discuss.elastic.co/u/mohamadkhan19)
#### Post date: [July 20, 2016, 9:07pm UTC](https://discuss.elastic.co/t/aggregation-query-possible-input-es-plugin/28159/4 "2016-07-20T21:07:22Z")
Hi,
I am facing the same issue of extracting aggregation data from the input ES plugin. Seems that you have overcome this issue. Can you please share your customized ES input plugin. Thank you.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 4:47am UTC](https://discuss.elastic.co/t/aggregation-query-possible-input-es-plugin/28159/5 "2017-07-06T04:47:10Z")