2015-08-26 14:20:35 -04:00
|
|
|
[[search-aggregations-pipeline-extended-stats-bucket-aggregation]]
|
|
|
|
=== Extended Stats Bucket Aggregation
|
|
|
|
|
|
|
|
A sibling pipeline aggregation which calculates a variety of stats across all bucket of a specified metric in a sibling aggregation.
|
|
|
|
The specified metric must be numeric and the sibling aggregation must be a multi-bucket aggregation.
|
|
|
|
|
|
|
|
This aggregation provides a few more statistics (sum of squares, standard deviation, etc) compared to the `stats_bucket` aggregation.
|
|
|
|
|
|
|
|
==== Syntax
|
|
|
|
|
|
|
|
A `extended_stats_bucket` aggregation looks like this in isolation:
|
|
|
|
|
|
|
|
[source,js]
|
|
|
|
--------------------------------------------------
|
|
|
|
{
|
|
|
|
"extended_stats_bucket": {
|
|
|
|
"buckets_path": "the_sum"
|
|
|
|
}
|
|
|
|
}
|
|
|
|
--------------------------------------------------
|
2017-05-01 13:30:51 -04:00
|
|
|
// NOTCONSOLE
|
2015-08-26 14:20:35 -04:00
|
|
|
|
2019-04-30 10:19:09 -04:00
|
|
|
[[extended-stats-bucket-params]]
|
2015-08-26 14:20:35 -04:00
|
|
|
.`extended_stats_bucket` Parameters
|
2019-04-30 10:19:09 -04:00
|
|
|
[options="header"]
|
2015-08-26 14:20:35 -04:00
|
|
|
|===
|
|
|
|
|Parameter Name |Description |Required |Default Value
|
|
|
|
|`buckets_path` |The path to the buckets we wish to calculate stats for (see <<buckets-path-syntax>> for more
|
|
|
|
details) |Required |
|
|
|
|
|`gap_policy` |The policy to apply when gaps are found in the data (see <<gap-policy>> for more
|
|
|
|
details)|Optional | `skip`
|
|
|
|
|`format` |format to apply to the output value of this aggregation |Optional | `null`
|
|
|
|
|`sigma` |The number of standard deviations above/below the mean to display |Optional | 2
|
|
|
|
|===
|
|
|
|
|
2017-05-09 15:18:43 -04:00
|
|
|
The following snippet calculates the extended stats for monthly `sales` bucket:
|
2015-08-26 14:20:35 -04:00
|
|
|
|
2019-09-05 10:11:25 -04:00
|
|
|
[source,console]
|
2015-08-26 14:20:35 -04:00
|
|
|
--------------------------------------------------
|
2016-08-12 18:42:19 -04:00
|
|
|
POST /sales/_search
|
2015-08-26 14:20:35 -04:00
|
|
|
{
|
2016-08-12 18:42:19 -04:00
|
|
|
"size": 0,
|
2015-08-26 14:20:35 -04:00
|
|
|
"aggs" : {
|
|
|
|
"sales_per_month" : {
|
|
|
|
"date_histogram" : {
|
|
|
|
"field" : "date",
|
[7.x Backport] Force selection of calendar or fixed intervals (#41906)
The date_histogram accepts an interval which can be either a calendar
interval (DST-aware, leap seconds, arbitrary length of months, etc) or
fixed interval (strict multiples of SI units). Unfortunately this is inferred
by first trying to parse as a calendar interval, then falling back to fixed
if that fails.
This leads to confusing arrangement where `1d` == calendar, but
`2d` == fixed. And if you want a day of fixed time, you have to
specify `24h` (e.g. the next smallest unit). This arrangement is very
error-prone for users.
This PR adds `calendar_interval` and `fixed_interval` parameters to any
code that uses intervals (date_histogram, rollup, composite, datafeed, etc).
Calendar only accepts calendar intervals, fixed accepts any combination of
units (meaning `1d` can be used to specify `24h` in fixed time), and both
are mutually exclusive.
The old interval behavior is deprecated and will throw a deprecation warning.
It is also mutually exclusive with the two new parameters. In the future the
old dual-purpose interval will be removed.
The change applies to both REST and java clients.
2019-05-20 12:07:29 -04:00
|
|
|
"calendar_interval" : "month"
|
2015-08-26 14:20:35 -04:00
|
|
|
},
|
|
|
|
"aggs": {
|
|
|
|
"sales": {
|
|
|
|
"sum": {
|
|
|
|
"field": "price"
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
},
|
|
|
|
"stats_monthly_sales": {
|
|
|
|
"extended_stats_bucket": {
|
2016-08-12 18:42:19 -04:00
|
|
|
"buckets_path": "sales_per_month>sales" <1>
|
2015-08-26 14:20:35 -04:00
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
--------------------------------------------------
|
2016-08-12 18:42:19 -04:00
|
|
|
// TEST[setup:sales]
|
|
|
|
|
2015-08-26 14:20:35 -04:00
|
|
|
<1> `bucket_paths` instructs this `extended_stats_bucket` aggregation that we want the calculate stats for the `sales` aggregation in the
|
|
|
|
`sales_per_month` date histogram.
|
|
|
|
|
|
|
|
And the following may be the response:
|
|
|
|
|
|
|
|
[source,js]
|
|
|
|
--------------------------------------------------
|
|
|
|
{
|
2016-08-12 18:42:19 -04:00
|
|
|
"took": 11,
|
|
|
|
"timed_out": false,
|
|
|
|
"_shards": ...,
|
|
|
|
"hits": ...,
|
2015-08-26 14:20:35 -04:00
|
|
|
"aggregations": {
|
|
|
|
"sales_per_month": {
|
|
|
|
"buckets": [
|
|
|
|
{
|
|
|
|
"key_as_string": "2015/01/01 00:00:00",
|
|
|
|
"key": 1420070400000,
|
|
|
|
"doc_count": 3,
|
|
|
|
"sales": {
|
2016-08-12 18:42:19 -04:00
|
|
|
"value": 550.0
|
2015-08-26 14:20:35 -04:00
|
|
|
}
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"key_as_string": "2015/02/01 00:00:00",
|
|
|
|
"key": 1422748800000,
|
|
|
|
"doc_count": 2,
|
|
|
|
"sales": {
|
2016-08-12 18:42:19 -04:00
|
|
|
"value": 60.0
|
2015-08-26 14:20:35 -04:00
|
|
|
}
|
|
|
|
},
|
|
|
|
{
|
|
|
|
"key_as_string": "2015/03/01 00:00:00",
|
|
|
|
"key": 1425168000000,
|
|
|
|
"doc_count": 2,
|
|
|
|
"sales": {
|
2016-08-12 18:42:19 -04:00
|
|
|
"value": 375.0
|
2015-08-26 14:20:35 -04:00
|
|
|
}
|
|
|
|
}
|
|
|
|
]
|
|
|
|
},
|
|
|
|
"stats_monthly_sales": {
|
|
|
|
"count": 3,
|
2016-08-12 18:42:19 -04:00
|
|
|
"min": 60.0,
|
|
|
|
"max": 550.0,
|
|
|
|
"avg": 328.3333333333333,
|
|
|
|
"sum": 985.0,
|
|
|
|
"sum_of_squares": 446725.0,
|
|
|
|
"variance": 41105.55555555556,
|
|
|
|
"std_deviation": 202.74505063146563,
|
2015-08-26 14:20:35 -04:00
|
|
|
"std_deviation_bounds": {
|
2016-08-12 18:42:19 -04:00
|
|
|
"upper": 733.8234345962646,
|
|
|
|
"lower": -77.15676792959795
|
2015-08-26 14:20:35 -04:00
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
--------------------------------------------------
|
2016-08-12 18:42:19 -04:00
|
|
|
// TESTRESPONSE[s/"took": 11/"took": $body.took/]
|
|
|
|
// TESTRESPONSE[s/"_shards": \.\.\./"_shards": $body._shards/]
|
|
|
|
// TESTRESPONSE[s/"hits": \.\.\./"hits": $body.hits/]
|