must vs. filter
GET /test-tracing-span-*/_search
{
"query": {
"terms": {
"component": [ "http", "grpc", "gateway" ]
}
},
"aggs": {
"group-by-service": {
"terms": {
"field": "service_name",
"order": {"api_count": "desc"},
"size": 2147483647
},
"aggs": {
"api_count": {
"cardinality": { "field": "api_name" }
}
}
}
},
"size": 0
}
GET /test-tracing-span-*/_search
{
"query": {
"bool": {
"must": {
"terms": {
"component": [ "http", "grpc", "gateway" ]
}
}
}
},
"aggs": {
"group-by-service": {
"terms": {
"field": "service_name",
"order": {"api_count": "desc"},
"size": 2147483647
},
"aggs": {
"api_count": {
"cardinality": { "field": "api_name" }
}
}
}
},
"size": 0
}
GET /test-tracing-span-*/_search
{
"query": {
"bool": {
"filter": {
"terms": {
"component": [ "http", "grpc", "gateway" ]
}
}
}
},
"aggs": {
"group-by-service": {
"terms": {
"field": "service_name",
"order": {"api_count": "desc"},
"size": 2147483647
},
"aggs": {
"api_count": {
"cardinality": { "field": "api_name" }
}
}
}
},
"size": 0
}
平均数/百分位
POST test-tracing-span-*/_search
{
"size": 0,
"aggs": {
"avg_size": {
"avg": {
"field": "request_size"
}
}
}
}
{
"size": 0,
"aggs": {
"percentiles": {
"percentiles": {
"field": "request_size",
"percents": [50, 75, 95]
}
}
}
}