Aggregation with OR filter

Elastic Stack Elasticsearch
1

I have an index of jBPM usertasks. Each usertask has id, actualOwner and actualOwner.keyword, potentialOwners and potentialOwners.keyword, and processId fields.

I need this aggregation: count of usertasks per process for some user. User task belongs to user if it's actualOwner or potentialOwner is that user. And in some statuses.

Seems that is very easy query, but I cannot write it. I try this:

POST jbpm-tasks/_search?size=1000
{
  "query": {
    "bool": {
      "should": [
        { 
          "term": {
            "actualOwner.keyword": {
              "value": "vasya"
            }
          }
        },
        {
          "term": {
            "potentialOwners.keyword": {
              "value": "vasya"
            }
          }
        }
      ],
      "must": [
        {
          "terms": {
            "status.keyword": [
              "Created",
              "Reserved",
              "InProgress",
              "Ready"
            ]
          }
        }
      ]
    }
  },
  "aggs": {
    "byProcesses": {
      "terms": { "field": "processId.keyword", "size": 1000000 } 
    }
  }
}

Query as I understand does not filter, it calculate score only. So, for this query really not matter user login, for vasya and. for example, fedya request returns same aggregation results (with different scores for tasks, but it is not interesting for now).

I not understand how write filter aggregation for multiple filter with OR and AND formula. In all examples always one field...

How to write this query properly?

2
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.