Here's the query I'm running:
{
"size": 0,
"query": {
"range": {
"timestamp": {
"gte": "2018-11-28",
"lte": "2018-11-28"
}
}
},
"aggs": {
"hits_per_minute": {
"date_histogram": {
"field": "timestamp",
"interval": "minute"
},
"aggs": {
"total_hits": {
"sum": {
"field": "hits_count"
}
}
}
},
"max_transactions_per_minute": {
"max_bucket": {
"buckets_path": "hits_per_minute>total_hits"
}
}
}
}
(If anybody needs to know, the docs in question contain fields that show the total hits for our API endpoints over the course of a minute, with one doc per minute from each instance.)
The max bucket works just fine and gives me the results I want. Is there a way to skip the rest of the results, though? I don't need to actually see the total hits for each minute, just the maximum.