记录一下，周一再接着写。es多值分组查询计数

本文链接：https://blog.csdn.net/luman1991/article/details/79681206

String query = "{\n" +
        "    \"query\": {\n" +
        "        \"match_all\": {\n" +
        "           \n" +
        "        }\n" +
        "    },\n" +
        "    \"aggs\": {\n" +
        "        \"name\": {\n" +
        "            \"terms\": {\n" +
        "                \"field\": \"name\"\n" +
        "            },\n" +
        "            \"aggs\": {\n" +
        "                \"attr\": {\n" +
        "                    \"terms\": {\n" +
        "                        \"field\": \"url\"\n" +
        "                    },\n" +
        "                    \"aggs\": {\n" +
        "                        \"terms_count\": {\n" +
        "                            \"terms\": {\n" +
        "                                \"field\": \"url\"\n" +
        "                            }\n" +
        "                        }\n" +
        "                    }\n" +
        "                }\n" +
        "            }\n" +
        "        }\n" +
        "    }\n" +
        "}";

============================================================

更改后：

 @Test
    public void testGetValueCountAggregation() throws IOException {

        String query = "{\n" +
                "    \"query\": {\n" +
                "        \"match_all\": {\n" +
                "           \n" +
                "        }\n" +
                "    },\n" +
                "    \"aggs\": {\n" +
                "        \"terms_name\": {\n" +
                "            \"terms\": {\n" +
                "                \"field\": \"name\"\n" +
                "            },\n" +
                "            \"aggs\": {\n" +
                "                \"terms_attr\": {\n" +
                "                    \"terms\": {\n" +
                "                        \"field\": \"url\"\n" +
                "                    },\n" +
                "                    \"aggs\": {\n" +
                "                        \"hour_sum\": {\n" +
                "                            \"date_histogram\": {\n" +
                "                                \"field\": \"occur_time\",\n" +
                "                                \"interval\": \"hour\",\n" +
                "                                \"format\": \"yyyy-MM-dd HH\",\n" +
                "                                \"min_doc_count\": 1\n" +
                "                            }\n" +
                "                        }\n" +
                "                    }\n" +
                "                }\n" +
                "            }\n" +
                "        }\n" +
                "    }\n" +
                "}";
        Search search = new Search.Builder(query)
                .addIndex("event")
                .addType("event_log")
                .build();
        SearchResult result = client.execute(search);
        assertTrue(result.getErrorMessage(), result.isSucceeded());

        TermsAggregation terms_name = result.getAggregations().getTermsAggregation("terms_name");

        List<TermsAggregation.Entry> nameBuckets = terms_name.getBuckets();

        for (int i = 0; i < nameBuckets.size(); i++) {
            TermsAggregation.Entry entry = nameBuckets.get(i);
            TermsAggregation termsAttr = entry.getTermsAggregation("terms_attr");
            List<TermsAggregation.Entry> attrBuckets = termsAttr.getBuckets();
            attrBuckets.forEach(t -> {
                TermsAggregation hourSum = t.getTermsAggregation("hour_sum");
                List<TermsAggregation.Entry> hourSumBuckets = hourSum.getBuckets();
                hourSumBuckets.forEach(h -> {
//                    System.out.println(entry.getKey() + ":" + t.getKey() + ":" + h.getKey() + ":" + h.getCount());
                    System.out.println(new Date(Long.parseLong(h.getKey())) + ":" + h.getCount());
                });

            });
        }
    }