Getting records where there are no repetitions

(89berner) #1

Hi, Im uploading my nginx logs to elasticsearch and want to do a query
where I only get users that have unique urls that don't repeat so for

body._ip=A has body._http_url=web1
body._ip=A has body._http_url=web2
body._ip=A has body._http_url=web1

body._ip=B has body._http_url=web5
body._ip=B has body._http_url=web6

if those are my documents, I want to get just body._ip=B because its the
only ip that does not repeat a website

is this possible with ES ? I have about 60 million records at any given
time so I need something efficient


You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to
To view this discussion on the web visit
For more options, visit

(system) #2