# Filtering a nested cardinality aggregation

**URL:** <https://discuss.elastic.co/t/filtering-a-nested-cardinality-aggregation/86385>\
**Category:** Elasticsearch\
**Created:** [May 19, 2017, 9:03am UTC](https://discuss.elastic.co/t/filtering-a-nested-cardinality-aggregation/86385 "2017-05-19T09:03:50Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![John\_Schoonover](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/john_schoonover/32/135347_2.png) [@John\_Schoonover](https://discuss.elastic.co/u/John_Schoonover)\
**Post date:** [May 19, 2017, 9:03am UTC](https://discuss.elastic.co/t/filtering-a-nested-cardinality-aggregation/86385/1 "2017-05-19T09:03:50Z")

</div>

I'm looking to have nested aggregation queries against documents to eventually reveal cardinality against a particular field which will result in either '1' or '2'.

I'd like to filter out the '1' so that only those aggregation results with value:2 remain. Is this possible?

---

<div class="post-metadata">

**Author:** ![John\_Schoonover](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/john_schoonover/32/135347_2.png) [@John\_Schoonover](https://discuss.elastic.co/u/John_Schoonover)\
**Post date:** [May 19, 2017, 9:04am UTC](https://discuss.elastic.co/t/filtering-a-nested-cardinality-aggregation/86385/2 "2017-05-19T09:04:53Z")

</div>

```
GET collectd/_search
{
  "size":0,
  "query": {
    "match_all": {}
  },
  "aggs": {
    "hostname": {
      "significant_terms": {
        "field": "host.keyword"
      }, "aggs": {
        "interfaceName": {
          "significant_terms": {
            "field": "type_instance.keyword"
          }, "aggs": {
            "interfaceState": {
              "cardinality": {
                "field": "upstate"
              }
            }
          }
        }
      }
    }
  }
}
```

---

<div class="post-metadata">

**Author:** ![John\_Schoonover](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/john_schoonover/32/135347_2.png) [@John\_Schoonover](https://discuss.elastic.co/u/John_Schoonover)\
**Post date:** [May 25, 2017, 6:50am UTC](https://discuss.elastic.co/t/filtering-a-nested-cardinality-aggregation/86385/3 "2017-05-25T06:50:47Z")

</div>

Bump

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 22, 2017, 6:50am UTC](https://discuss.elastic.co/t/filtering-a-nested-cardinality-aggregation/86385/4 "2017-06-22T06:50:47Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.