Elasticsearch term aggregation using script with key as integer

Question

Is it possible to make the key of the resulting aggregation be the int value returned by the script instead of a string?

See this example, but using dayOfMonth or hourOfDay instead of dayOfWeek, so there are more than 10 values, so the result ends up being ordered, "1", "10", "11", ..." instead of1, 2, 3,...`.

Here's an example of the full call:

POST /sales/_search?size=0
{
    "aggs": {
        "dayOfMonth": {
            "terms": {
                "script": {
                    "lang": "painless",
                    "source": "doc['date'].value.dayOfMonth"
                }
            }
        }
    }
}

And an example response:

{
  ...
  "aggregations": {
    "dayOfWeek": {
      "doc_count_error_upper_bound": 0,
      "sum_other_doc_count": 0,
      "buckets": [
        {
          "key": "1",
          "doc_count": 4
        },
        {
          "key": "10",
          "doc_count": 3
        },
        {
          "key": "2",
          "doc_count": 2
        }
      ]
    }
  }
}

You can instruct your client app to make the conversion, can't you? — Val, Oct 02 '18 at 07:01
Yes, but I would prefer that that not be required and the result come back sorted numerically instead of alphabetically. — Dave Johansen, Oct 02 '18 at 21:59
The values are "1" through "7". How will that be sorted differently than 1 through 7? — Tim, Oct 03 '18 at 15:18
`dayOfMonth` or `hourOfDay` are better examples that demonstrate the problem. I've update the question to reflect that. — Dave Johansen, Oct 04 '18 at 11:50

score 0 · Answer 1 · answered Dec 19 '22 at 08:55

Setting the value_type parameter can resolve the issue by coercing the unmapped field into the correct type.

{
  "aggs": {
    "ip_addresses": {
      "terms": {
        "script": "doc['date'].value.dayOfMonth",
        "value_type": "long"
      }
    }
  }
}

Failed Trying to Format Bytesedit

Elasticsearch term aggregation using script with key as integer

1 Answers1