Hi Team,
{
"query": {
"bool": {
"filter": [
{
"bool": {
"should":{
"range": {
"@timestamp": {
"gte": "now-15m"
}
}
}
}
},
{
"bool": {
"should": [
{
"match_phrase": {
"ResponseCode": "005"
}
},
{
"match_phrase": {
"ResponseCode": "008"
}
},
{
"match_phrase": {
"ResponseCode": "081"
}
},
{
"match_phrase": {
"ResponseCode": "091"
}
},
{
"match_phrase": {
"ResponseCode": "096"
}
},
{
"match_phrase": {
"ResponseCode": "900"
}
},
{
"match_phrase": {
"ResponseCode": "009"
}
},
{
"match_phrase": {
"ResponseCode": "0068"
}
},
{
"match_phrase": {
"ResponseCode": "153"
}
}
]
}
}
]
}
},
"aggs": {
"types_count": {
"value_count": {
"field": "ResponseCode.keyword"
}
}
}
}
This query give me the total count of those who has this values(which i specified) in response code
I want those count result who has this set of response code value which i specified plus all the response code. In other words can i get two different count values one for specific set of values and other one is all the values