Hi Team,
I have used exclude condition in the terms aggregation and then trying to use the composite aggregation buckets to build the combinations of the values. But am getting exceptions ( "type": "parsing_exception").
Query as below,
GET my_index-*/_search
{
"aggs" : {
"abc": { "terms": {"field": "st_no.keyword" } },
"alert" : { "terms" : { "field" : "filename.keyword", "exclude" : ["abcd", "efgh"] }},
"status": { "terms": { "field": "status.keyword", "exclude" : ["closed", "removed"] } },
"costars": {
"composite" : {
"sources" : [
{ "abc": { "terms": {"field": "st_no.keyword" } } },
{ "alert": { "terms": { "field": "filename.keyword" } } },
{ "status": { "terms": { "field": "status.keyword" } } }
]
}
}
}
Could someone please help me to achieve this and correct me if am doing anything wrong!
Thanks
Siva.P