Using multi-term aggregation on rollup jobs

Elastic Stack Elasticsearch
1

Hi,

Can I use multi-term aggregation on rollup jobs?

My goal is to save disk space on older data, which has 6 fields (say, Field1 to Field6). After the rollup, I would like to query for the presence of records with the same 4 fields (Field1 to Field4), and the value_count of Field5 and Field6.

I thought I would have to use multi-term aggregation on Field1 to Field4 - can this be done?

Also, I guess the query results would only tell me how many unique values there are in Field5 and Field6, not the values and their corresponding count, right?

Thank you.

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.