007 PipeLine Agg

# PipeLine Agg

# 第一类，sibling  结果和现有的分析结果同级

# max，min， avg & sum bucket；stats bucket; percentiles bucket

# 第二类，parent，结果内嵌到现有的聚合分析之中

# derivative 求导； Cumultive Sum累计求和；Moving Function滑动窗口

POST kibana_sample_data_flights/_search

{

  "size": 0,

  "aggs": {

    "Dests": {

      "terms": {

        "field": "Dest",

        "size": 10

      },

      "aggs": {

        "avg_AvgTicketPrice": {

          "avg": {

            "field": "AvgTicketPrice"

          }

        }

      }

    },

    "stats_by_dest": {

    "stats_bucket": {

      "buckets_path": "Dests.avg_AvgTicketPrice"

    }

    }

  }

}

POST  kibana_sample_data_flights/_search

{

  "size": 0,

  "aggs": {

    "DistanceMiles": {

      "histogram": {

        "field": "DistanceMiles",

        "interval": 200,

        "min_doc_count": 100

      },

      "aggs": {

        "avg_AvgTicketPrice": {

          "avg": {

            "field": "AvgTicketPrice"

          }

        },

        "derivative_avg_AvgTicketPrice":{

          "derivative": {

            "buckets_path": "avg_AvgTicketPrice"

          }

        }

      }

    }

  }

}