Hello! I looking for information by event_id 2771
And i get result table (example):
I want to group the data and hide the duplicate TargetUser by their count in table. I want this result:
Is it possible? How to make a query for group by count?
Thank you advance
You can try sub-aggregation:
{ "aggs": { "event_id": { "terms": { "field": "event_id" }, "aggs": { "targetUser": { "terms": { "field": "tragetUser" }, "aggs": { "ipAddress": { "terms": { "field": "ipAddress" } } } } } } } }
Thank you. But how i can get column Count with count of TargetUser?
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.