Sum Aggregation using multiple fields

Elastic Stack Elasticsearch
1

Hi team!

I am indexing the following sample data:

travel index

Flight price - 550
Hotel price - 220
Meals - 120

(Total Expense - 890)

  1. If I query for travel index with total expense < 1000, it should return results as the total expense < 1000
  2. If I query for travel index with total expense > 1000, it should not return results as the total expense < 1000

Is there a way to query to get the sum of all the fields and then apply the filter say in this case <1000?

I see nested aggregations but not sure if it can be done across multiple fields

2

Welcome!

What does a typical json document looks like?

3

{“city”:”Chicago”,
“Traveldate”:”12dec2022”,
“Flightprice”: “350”,
“Hotelprice”: “200”,
“Meals”: “120”
}

4

And why not doing this at index time?

{
  "city":"Chicago",
  "Traveldate":"12dec2022",
  "Flightprice": 350,
  "Hotelprice": 200,
  "Meals": 120,
  "Total": 670
}
5

So create a new field called total expense in the document? How do I do the summation during indexing?

6

The best thing is to do that in your application. Should not be hard.
But you can also use an ingest pipeline if the first solution does not work for you.