First thanks for your help. I do have the following question. I do have data incoming every 10 secondes as :
name : srv1
value : 30
name : srv3
value : 15
name : srv2
value : 20
I’ve used the top hit with size = 3, than the aggregate SUM. So far everything is fine.
However, If one server do not send anymore data (ex : srv1) I do have twice either srv3 or srv2 value leading to a false average.
Any idea how to by-pass this issue ?
Dynamic size limit ? Enforce distinct values before top hit ?