elasticsearch - Query to find the average number of entries for the given hour range -


i have below-given query should find average number of entries given hour range, i.e. 15:00 16:00.

this query not working properly. how can indicate hour range (without date) , find average number of entries per range?

post /myindex/_search {   "size": 0,   "query": {     "bool": {       "filter": [         {"term": {"eventid": "11"}},         {"term": {"eventtype": "type1"}}       ]     }   },   "aggs": {     "range": {         "date_range": {             "field": "datetime",             "ranges": [                 {                     "from": "16:00-1h/h",                    "to": "16:00/h"                  }             ]         }     }   } } 

should use moving average? how?

i tried this, appreciate if can me finish query. don't know if "value_count" : { "field" : "eventhour"} correct way count number of entries. how can add range of hours in query?:

    post /myindex/_search     {       "size": 0,       "query": {         "bool": {           "filter": [             {"term": {"eventid": "11"}},             {"term": {"eventtype": "type1"}}, {           "script": {             "script": "doc.date.date.gethourofday() >= min && doc.date.date.gethourofday() <= max",             "params": {               "min": 15,               "max": 16             }           }         }           ]         }       },       "aggs": {         "hourly_intensity": {           "date_histogram": {             "field": "datetime",             "interval": "hour"           },           "aggs": {             "count_of_events": {               "value_count" : { "field" : "eventhour"}             }           }         },         "hourly_avg_count": {           "avg_bucket": {             "buckets_path": "hourly_intensity>count_of_events"            }         }       }     } 

i found solution myself:

   post /myindex/_search     {       "size": 0,       "query": {         "bool": {           "filter": [             {"term": {"eventid": "11"}},             {"term": {"eventtype": "type1"}},             {"term": {"eventhour": 15}}           ]         }       },       "aggs": {         "hourly_intensity": {           "date_histogram": {             "field": "datetime",             "interval": "hour"           },           "aggs": {             "count_of_events": {               "value_count" : { "field" : "eventhour"}             }           }         },         "avg_num_events_per_hour": {           "avg_bucket": {             "buckets_path": "hourly_intensity>count_of_events"            }         }       } } 

Comments

Popular posts from this blog

ios - MKAnnotationView layer is not of expected type: MKLayer -

ZeroMQ on Windows, with Qt Creator -

unity3d - Unity SceneManager.LoadScene quits application -