Hello all.
I have a request -
{
"size": 0,
"_source": {
"excludes": []
},
"aggs": {
"2": {
"terms": {
"field": "netflow.dst_addr",
"size": 100,
"order": {
"_count": "desc"
}
},
"aggs": {
"3": {
"terms": {
"field": "netflow.src_addr",
"size": 100,
"order": {
"_count": "desc"
}
}
}
}
}
},
"stored_fields": [
""
],
"script_fields": {},
"docvalue_fields": [
"@timestamp",
"netflow.first_switched",
"netflow.last_switched"
],
"query": {
"bool": {
"must": [
{
"query_string": {
"analyze_wildcard": True,
"query": "",
"default_field": "*"
}
},
{
"range": {
"@timestamp": {
"gte": 1513752674812,
"lte": 1529477474812,
"format": "epoch_millis"
}
}
}
],
"filter": [],
"should": [],
"must_not": []
}
}
}
Now, I want to scroll the whole data so that I achieve some unique counts of a search term.
I have tried the regular scroll but it gives me the whole data and not what I have requested.
Does anyone know how to achieve it?