Hi, I have a nested field from a survey where a user can select several nations, so it may be empty, contain a single nation or several nations. Basically an array from 0 to n elements from logstash parse.
I can easily select all the docs containing Italy, and using the filters Italy AND Germany or Italy BUT NOT Germany. I have two questions:
- How can I select only docs containing ONLY Italy and not other nations?
- How can I find the most popular combo (say Italy and Germany)?
I want to clarify that it is NOT a single string field, it is an array/nested type. Originally was something like "Nation1;Nation2;Nation3" and was split during logstash import.
Thanks