Hi,
I combine a a “query” with a subsequent “stats aggreations”. the idea is that the query limits the number of documents to be aggregated so that I could get aggregations on all pairs from/to fields in the aggregate. However there is still other_doc_count 3900 of total 5900 and only 15 % of pairs represented.
How can i control this process - i.e. avoid statistical selection of documents?
There is an overall limit of 10000 records to be returned in the api.
{ "size":0,
“query”: { “range”: { “@date”:{ “gte”: “2020-10-05T11:50:14.704Z”, “lte”: “2020-10-05T12:50:14.704Z”, “time_zone”:“Europe/Oslo” } } } ,
“aggs”: { “from”: { “terms”: {“field”: “from.keyword” }, “aggs”: { “to”: { “terms”: {“field”: “to.keyword” }, “aggs”: { “h_ddelay”: { “stats”: { “field”: “h_ddelay” } }, “h_jit”: {
“stats”: { “field”: “h_jit” } }, “h_slope_10”: { “stats”: { “field”: “h_slope_10” } }, “h_min_d”: { “stats”: { “field”: “h_min_d” } } } } } } } }’