I have an existing index datalog.gl_sep20 and I want to transform to a new index based on some fields and do a sum aggregation based on "count" field. This is how I do it: curl -X PUT "localhost:9200/_transform/transform_job?pretty" -d' { "source": { "index": "datalog.gl_sep20" }, "dest" …

[image] kaijun: Is the missing_bucket only available for version 7.10.0? Yes, missing_bucket requires >=7.10.0, however you can use a script (>=7.7.0), e.g. "script": { "source": "if (doc['domain'].value == null) {return "unknown_domain";}return doc['domain'].value;", …

Transform: Sum doesn't add up

Elastic Stack Elasticsearch

Hendrik_Muhs (Hendrik Muhs) November 25, 2020, 1:38pm 15

It stumbles upon the data point that has no doc value. Instead of checking for null I suggest if(doc['domain'].size()==0)

Topic		Replies	Views
Understanding continous transforms syncing Elasticsearch transforms	5	4685	November 19, 2020
Transform doesn't recognize all the documents Elasticsearch	10	1862	July 26, 2020
Error building transform on the destination index of previous transform Elasticsearch transforms	7	1276	March 18, 2021
Problem creating transforms Elasticsearch elastic-stack-machine-learning	13	1841	January 3, 2020
Transform for predefined fields Elasticsearch	9	268	August 8, 2022

Transform: Sum doesn't add up

Related topics