String Occurrences within a String

[Marius_Dragomir]

the way Elasticsearch works doesn't make it suited for this kind of calculation. You could use a scripted field to count the number of substring occurrences, but it's not a recommended method as it will put more strain on your cluster.
Here's an example of a scripted field that somebody used to find substrings:

Scripted field for Matching Substring

Fixed it myself. def logger= doc['path.keyword'].value; if (logger!= null) { int lastSlashIndex = logger.lastIndexOf('/'); int lastUndrIndex = logger.lastIndexOf('_'); if (lastSlashIndex > 0) { return logger.substring(lastSlashIndex+1,lastUndrIndex); } } return "";