求助： ES 聚合查询，使用了 nested，如何再对某个字段排序？

V2EX = way to explore

V2EX 是一个关于分享和探索的地方

For Existing Member Sign In

• 请不要在回答技术问题时复制粘贴 AI 生成的内容

This topic created in 1977 days ago, the information mentioned may be changed or developed.

查询语句如下面所示

{
    "size": 0,
    "aggs": {
        "tags": {
            "nested": {
                "path": "tags"
            },
            "aggs": {
                "key": {
                    "filter": {
                        "term": {
                            "tags.key": "http.url"
                        }
                    },
                    "aggs": {
                        "values": {
                            "terms": {
                                "field": "tags.value",
                                "size": 100
                            },
                            "aggs": {
                                "rev": {
                                    "reverse_nested": {},
                                    "aggs": {
                                        "duration": {
                                            "avg": {
                                                "field": "duration"
                                            }
                                        }
                                    }
                                }
                            }
                        }
                    }
                }
            }
        }
    }
}

我想对 duration 这个字段按照平均值从大到小排序，找出前 100 条数据，那么这么排序要加在什么地方呢？

3 replies • 2020-11-27 15:12:57 +08:00

zsl199512101234

Nov 27, 2020

https://www.elastic.co/guide/cn/elasticsearch/guide/current/nested-sorting.html

sniperking1234

Nov 27, 2020

@zsl199512101234 我试了下，这样写 sort 貌似对有聚合的查询不起作用。

sniperking1234

Nov 27, 2020

找到方法了，这么写就可以
{
"size": 0,
"aggs": {
"tags": {
"nested": {
"path": "tags"
},
"aggs": {
"key": {
"filter": {
"term": {
"tags.key": "http.url"
}
},
"aggs": {
"values": {
"terms": {
"field": "tags.value",
"size": 200,
"order": {"rev>duration": "desc"}
},
"aggs": {
"rev": {
"reverse_nested": {},
"aggs": {
"duration": {
"avg": {
"field": "duration"
}
}
}
}
}
}
}
}
}
}
}
}