Rollup search + aggregation total count

(Ruben de Alba) #1

Hi all,

I have a rollup job defined that groups by the following fields: server, user, method (it also handles different metrics not relevant for this question)

I know that I cannot use some aggregations types in the rollup searches (like cardinality), but... since I can aggregate by user:

GET rollup_index/_rollup_search
  "aggs": {
    "daily": {
      "date_histogram": {
        "field": "timestamp",
        "interval": "24h"
      "aggs": {
        "users": {
          "terms": {
                "field": "user",
                "size": 5000                

and I only need the count of users, it doesn't make any sense that I have to retrieve the list of all users to get the total count.

So, is there any way so I can just get the total count?

Thanks in advance.

(system) closed #2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.