# Filtering buckets from aggs

**URL:** https://discuss.elastic.co/t/filtering-buckets-from-aggs/74750
**Category:** Elasticsearch
**Created:** [February 11, 2017, 10:02am UTC](https://discuss.elastic.co/t/filtering-buckets-from-aggs/74750 "2017-02-11T10:02:25Z")
**Posts on this page:** 12
**Page:** 1

<div class="post-metadata">

### Author: ![daaakeee](https://avatars.discourse-cdn.com/v4/letter/d/dbc845/32.png) [@daaakeee](https://discuss.elastic.co/u/daaakeee)
#### Post date: [February 11, 2017, 10:02am UTC](https://discuss.elastic.co/t/filtering-buckets-from-aggs/74750/1 "2017-02-11T10:02:25Z")

</div>

Hi, I am trying to exclude all buckets that are contained in another buckets 'term' field. For example

````auto
              {
                "key": "1",
                "doc_count": 2
              },
              {
                "key": "12",
                "doc_count": 2
              },
              {
                "key": "123",
                "doc_count": 2
              },
              {
                "key": "1234",
                "doc_count": 2
              },
              {
                "key": "12345",
                "doc_count": 1
              },
}``

I want the output to be 

``` "buckets":[ {
            "key" : "12345"
            "doc_count" : 1
}]
``
as it contains all other buckets. How can I do this using aggs or filters?
````

---

<div class="post-metadata">

### Author: ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [February 11, 2017, 11:00am UTC](https://discuss.elastic.co/t/filtering-buckets-from-aggs/74750/4 "2017-02-11T11:00:36Z")

</div>

Please be patient. The forum is manned by volunteers and it is now weekend. Also please do not address specific individuals unless they have already responded to your query.

---

<div class="post-metadata">

### Author: ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [February 11, 2017, 11:05am UTC](https://discuss.elastic.co/t/filtering-buckets-from-aggs/74750/5 "2017-02-11T11:05:03Z")

</div>

Please be patient. The forum is manned by volunteers and it is now weekend. Also please do not address specific individuals unless they have already responded to your query.

---

<div class="post-metadata">

### Author: ![daaakeee](https://avatars.discourse-cdn.com/v4/letter/d/dbc845/32.png) [@daaakeee](https://discuss.elastic.co/u/daaakeee)
#### Post date: [February 11, 2017, 11:08am UTC](https://discuss.elastic.co/t/filtering-buckets-from-aggs/74750/6 "2017-02-11T11:08:38Z")

</div>

okay, sorry, I am new to this service;D

---

<div class="post-metadata">

### Author: ![daaakeee](https://avatars.discourse-cdn.com/v4/letter/d/dbc845/32.png) [@daaakeee](https://discuss.elastic.co/u/daaakeee)
#### Post date: [February 11, 2017, 11:09am UTC](https://discuss.elastic.co/t/filtering-buckets-from-aggs/74750/7 "2017-02-11T11:09:27Z")

</div>

can u help me?😃

---

<div class="post-metadata">

### Author: ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [February 11, 2017, 11:13am UTC](https://discuss.elastic.co/t/filtering-buckets-from-aggs/74750/8 "2017-02-11T11:13:05Z")

</div>

No, unfortunately not. I am on my mobile and the poor connection caused me to post twice.

---

<div class="post-metadata">

### Author: ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [February 11, 2017, 3:22pm UTC](https://discuss.elastic.co/t/filtering-buckets-from-aggs/74750/9 "2017-02-11T15:22:13Z")

</div>

These all seem to be unrelated terms. How do you determine that one bucket is contained in another? What exactly is it you are trying to achieve?

---

<div class="post-metadata">

### Author: ![daaakeee](https://avatars.discourse-cdn.com/v4/letter/d/dbc845/32.png) [@daaakeee](https://discuss.elastic.co/u/daaakeee)
#### Post date: [February 11, 2017, 3:54pm UTC](https://discuss.elastic.co/t/filtering-buckets-from-aggs/74750/10 "2017-02-11T15:54:00Z")

</div>

I am trying to filter these buckets into one, so that the bucket which is contained by another not showed in final result, is it possible?

---

<div class="post-metadata">

### Author: ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [February 11, 2017, 4:14pm UTC](https://discuss.elastic.co/t/filtering-buckets-from-aggs/74750/11 "2017-02-11T16:14:46Z")

</div>

I still do not understand what you are trying to achieve, so will probably not be able to help.

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [February 12, 2017, 2:17am UTC](https://discuss.elastic.co/t/filtering-buckets-from-aggs/74750/12 "2017-02-12T02:17:35Z")

</div>

I don't think that is possible as ES treats them all as separate buckets.

---

<div class="post-metadata">

### Author: ![daaakeee](https://avatars.discourse-cdn.com/v4/letter/d/dbc845/32.png) [@daaakeee](https://discuss.elastic.co/u/daaakeee)
#### Post date: [February 12, 2017, 9:42am UTC](https://discuss.elastic.co/t/filtering-buckets-from-aggs/74750/13 "2017-02-12T09:42:04Z")

</div>

Hi, thank you for your reply.. How do you think, can ES filter from query if we consider that the inputs are not buckets, but just documents? So that, from the filter query we receive the document that is not contained by other document? @warkolm

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 12, 2017, 9:42am UTC](https://discuss.elastic.co/t/filtering-buckets-from-aggs/74750/14 "2017-03-12T09:42:11Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
