Getting records where there are no repetitions


(89berner) #1

Hi, Im uploading my nginx logs to elasticsearch and want to do a query
where I only get users that have unique urls that don't repeat so for
example

body._ip=A has body._http_url=web1
body._ip=A has body._http_url=web2
body._ip=A has body._http_url=web1

body._ip=B has body._http_url=web5
body._ip=B has body._http_url=web6

if those are my documents, I want to get just body._ip=B because its the
only ip that does not repeat a website

is this possible with ES ? I have about 60 million records at any given
time so I need something efficient

thanks!!

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/7f30f4c9-c818-4042-87ad-9da0599ba7e6%40googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.


(system) #2