在复合聚合中使用嵌套字段

Question

基本上，我试图通过名字和姓氏找到重复的联系人

我错过了什么吗？任何帮助都将不胜感激。

下面是示例文档之一

{
    "regionId": 10,
    "firstName": "John",
    "lastName": "mayer",
    "emails": [
      {
        "isPrimary": true,
        "email": "[e-mail]"
      }
    ]
}

我试图对Elasticsearch进行如下查询：

GET contacts/_search
{
  "size" : 0,
  "query" : {
    "term" : {
      "regionId" : {
        "value" : 10,
        "boost" : 1.0
      }
    }
  },
  "_source" : false,
  "stored_fields" : "_none_",
  "aggregations" : {
    "groupby" : {
      "composite" : {
        "size" : 1000,
        "sources" : [
          {
            "firstNameField" : {
              "terms" : {
                "field" : "firstName.keyword",
                "missing_bucket" : true,
                "order" : "asc"
              }
            }
          },
          {
            "lastNameField" : {
              "terms" : {
                "field" : "lastName.keyword",
                "missing_bucket" : true,
                "order" : "asc"
              }
            }
          },
          {
            "emailField" : {
              "terms" : {
                "field" : "emails.email.keyword",
                "missing_bucket" : true,
                "order" : "asc"
              }
            }
          }
        ]
      },
      "aggregations" : {
        "having.3483" : {
          "bucket_selector" : {
            "buckets_path" : {
              "a0" : "_count"
            },
            "script" : {
              "source" : "InternalSqlScriptUtils.nullSafeFilter(InternalSqlScriptUtils.gt(params.a0,params.v0))",
              "lang" : "painless",
              "params" : {
                "v0" : 1
              }
            },
            "gap_policy" : "skip"
          }
        }
      }
    }
  }
}

Answer 1

不幸的是，这是不可能的。复合中的所有源都需要位于相同的嵌套上下文下。

我建议提取主邮件

GET contacts/_update_by_query
{
  "query": {
    "nested": {
      "path": "emails",
      "query": {
        "exists": {
          "field": "emails.isPrimary"
        }
      }
    }
  },
  "script": {
    "source": """
      ctx._source.primary_email = ctx._source.emails.find(egroup -> egroup.isPrimary).email;
    """,
    "lang": "painless"
  }
}

然后在主_电子邮件上执行复合agg。关键字。