elasticsearch - 按日期和对象分组 Elasticsearch

Question

嗨，我是Elasticsearch的新手，我有这样的架构:

"_source": {
            "user_email": "christea2045@yahoo.com",
            "eventtime": "2019-11-07T15:07:35.439043",
            "shipping_address": {
                "zipcode": "28234"
          }
 },

而且我想按日期进行分组，并且还对每个日期进行邮政编码分组，我可以按日期进行分组，但是在为邮政编码添加aggs之后，出现错误:

[16:20] unable to parse BaseAggregationBuilder with name [group_shipzip]: parser not found

这是我的查询看起来像:

{
    "_source": ["user_email","shipping_address.zipcode","eventtime"],
     "query" : {
        "match_phrase_prefix" : {
            "user_email": "christea2045@yahoo.com"
        }
    },
    "aggs": {
        "group_by_date":{
            "date_histogram":{
                "field" : "eventtime",
                "interval" : "1d"
            }
        },
        "aggs":{
            "group_shipzip":{
                "terms":{
                    "field": "shipping_address.zipcode.keyword"
                }
            }
        }

    }
}

Answer 1

试试这个:

   {
    "_source": ["user_email", "shipping_address.zipcode", "eventtime"],
    "query": {
        "match_phrase_prefix": {
            "user_email": "christea2045@yahoo.com"
        }
    },
    "aggs": {
        "group_by_date": {
            "date_histogram": {
                "field": "eventtime",
                "interval": "1d"
            },

            "aggs": {
                "group_shipzip": {
                    "terms": {
                        "field": "shipping_address.zipcode.keyword"
                    }
                }
            }
        }

    }
}