Filtering a nested cardinality aggregation

Elastic Stack Elasticsearch
1

I'm looking to have nested aggregation queries against documents to eventually reveal cardinality against a particular field which will result in either '1' or '2'.

I'd like to filter out the '1' so that only those aggregation results with value:2 remain. Is this possible?

2 
GET collectd/_search
{
  "size":0,
  "query": {
    "match_all": {}
  },
  "aggs": {
    "hostname": {
      "significant_terms": {
        "field": "host.keyword"
      }, "aggs": {
        "interfaceName": {
          "significant_terms": {
            "field": "type_instance.keyword"
          }, "aggs": {
            "interfaceState": {
              "cardinality": {
                "field": "upstate"
              }
            }
          }
        }
      }
    }
  }
}
3

Bump

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.