Aggregation result
map string to Aggregation result
This type represents a dictionary mapping string keys to Aggregation result values.
Read the reference documentation
Expand all
This type can be one of the following:
−
Hide 2 properties
values
union oneOf
required
One of:
KeyedPercentiles
ArrayPercentilesItem[]
{}
ArrayPercentilesItem []
−
Hide 3 properties
value
union number | string
required
nullable
−
Hide 2 properties
values
union oneOf
required
One of:
KeyedPercentiles
ArrayPercentilesItem[]
{}
ArrayPercentilesItem []
−
Hide 3 properties
value
union number | string
required
nullable
−
Hide 2 properties
values
union oneOf
required
One of:
KeyedPercentiles
ArrayPercentilesItem[]
{}
ArrayPercentilesItem []
−
Hide 3 properties
value
union number | string
required
nullable
−
Hide 2 properties
values
union oneOf
required
One of:
KeyedPercentiles
ArrayPercentilesItem[]
{}
ArrayPercentilesItem []
−
Hide 3 properties
value
union number | string
required
nullable
−
Hide 2 properties
values
union oneOf
required
One of:
KeyedPercentiles
ArrayPercentilesItem[]
{}
ArrayPercentilesItem []
−
Hide 3 properties
value
union number | string
required
nullable
−
Hide 3 properties
value
union number | string
required
nullable
The metric value. A missing value generally means that there was no data to aggregate,
unless specified otherwise.
−
Hide 3 properties
value
union number | string
required
nullable
The metric value. A missing value generally means that there was no data to aggregate,
unless specified otherwise.
Sum aggregation result. value is always present and is zero if there were no values to process.
−
Hide 3 properties
value
union number | string
required
nullable
The metric value. A missing value generally means that there was no data to aggregate,
unless specified otherwise.
−
Hide 3 properties
value
union number | string
required
nullable
The metric value. A missing value generally means that there was no data to aggregate,
unless specified otherwise.
Weighted average aggregation result. value is missing if the weight was set to zero.
−
Hide 3 properties
value
union number | string
required
nullable
The metric value. A missing value generally means that there was no data to aggregate,
unless specified otherwise.
Value count aggregation result. value is always present.
−
Hide 3 properties
value
union number | string
required
nullable
The metric value. A missing value generally means that there was no data to aggregate,
unless specified otherwise.
−
Hide 3 properties
value
union number | string
required
nullable
The metric value. A missing value generally means that there was no data to aggregate,
unless specified otherwise.
−
Hide 5 properties
value
union number | string
required
nullable
The metric value. A missing value generally means that there was no data to aggregate,
unless specified otherwise.
normalized_value_as_string
string
−
Hide 4 properties
value
union number | string
required
nullable
The metric value. A missing value generally means that there was no data to aggregate,
unless specified otherwise.
−
Hide 3 properties
type
object
required
−
Hide 8 properties
dip
object
+
Show 2 properties
change_point
number
required
distribution_change
object
+
Show 2 properties
change_point
number
required
indeterminable
object
+
Show 1 property
non_stationary
object
+
Show 3 properties
spike
object
+
Show 2 properties
change_point
number
required
step_change
object
+
Show 2 properties
change_point
number
required
trend_change
object
+
Show 3 properties
change_point
number
required
bucket
object
+
Show 2 properties
doc_count
number
required
key
union oneOf
required
One of:
number
or
string
or
boolean
Statistics aggregation result. min, max and avg are missing if there were no values to process
(count is zero).
−
Hide 10 properties
min
union number | string
required
nullable
max
union number | string
required
nullable
avg
union number | string
required
nullable
−
Hide 10 properties
min
union number | string
required
nullable
max
union number | string
required
nullable
avg
union number | string
required
nullable
−
Hide 24 properties
min
union number | string
required
nullable
max
union number | string
required
nullable
avg
union number | string
required
nullable
sum_of_squares
union number | string
required
nullable
variance
union number | string
required
nullable
variance_population
union number | string
required
nullable
variance_sampling
union number | string
required
nullable
std_deviation
union number | string
required
nullable
std_deviation_population
union number | string
required
nullable
std_deviation_sampling
union number | string
required
nullable
std_deviation_bounds
object
+
Show 6 properties
upper
union number | string
required
nullable
lower
union number | string
required
nullable
upper_population
union number | string
required
nullable
lower_population
union number | string
required
nullable
upper_sampling
union number | string
required
nullable
lower_sampling
union number | string
required
nullable
sum_of_squares_as_string
string
variance_as_string
string
variance_population_as_string
string
variance_sampling_as_string
string
std_deviation_as_string
string
std_deviation_bounds_as_string
object
+
Show 6 properties
upper_population
string
required
lower_population
string
required
upper_sampling
string
required
lower_sampling
string
required
−
Hide 24 properties
min
union number | string
required
nullable
max
union number | string
required
nullable
avg
union number | string
required
nullable
sum_of_squares
union number | string
required
nullable
variance
union number | string
required
nullable
variance_population
union number | string
required
nullable
variance_sampling
union number | string
required
nullable
std_deviation
union number | string
required
nullable
std_deviation_population
union number | string
required
nullable
std_deviation_sampling
union number | string
required
nullable
std_deviation_bounds
object
+
Show 6 properties
upper
union number | string
required
nullable
lower
union number | string
required
nullable
upper_population
union number | string
required
nullable
lower_population
union number | string
required
nullable
upper_sampling
union number | string
required
nullable
lower_sampling
union number | string
required
nullable
sum_of_squares_as_string
string
variance_as_string
string
variance_population_as_string
string
variance_sampling_as_string
string
std_deviation_as_string
string
std_deviation_bounds_as_string
object
+
Show 6 properties
upper_population
string
required
lower_population
string
required
upper_sampling
string
required
lower_sampling
string
required
−
Hide 2 properties
bounds
object
+
Show 2 properties
top_left
union oneOf
required
One of:
LatLonGeoLocation
GeoHashLocation
number[]
string
−
Hide 2 properties
lat
number
required
Latitude
lon
number
required
Longitude
bottom_right
union oneOf
required
One of:
LatLonGeoLocation
GeoHashLocation
number[]
string
−
Hide 2 properties
lat
number
required
Latitude
lon
number
required
Longitude
−
Hide 3 properties
location
object
+
Show 2 properties
−
Hide 2 properties
bounds
union oneOf
One of:
Coords
TopLeftBottomRight
TopRightBottomLeft
Wkt
−
Hide 2 properties
top_left
union oneOf
required
One of:
LatLonGeoLocation
GeoHashLocation
number[]
string
−
Hide 2 properties
lat
number
required
Latitude
lon
number
required
Longitude
bottom_right
union oneOf
required
One of:
LatLonGeoLocation
GeoHashLocation
number[]
string
−
Hide 2 properties
lat
number
required
Latitude
lon
number
required
Longitude
−
Hide 2 properties
top_right
union oneOf
required
One of:
LatLonGeoLocation
GeoHashLocation
number[]
string
−
Hide 2 properties
lat
number
required
Latitude
lon
number
required
Longitude
bottom_left
union oneOf
required
One of:
LatLonGeoLocation
GeoHashLocation
number[]
string
−
Hide 2 properties
lat
number
required
Latitude
lon
number
required
Longitude
−
Hide 3 properties
location
union oneOf
One of:
LatLonGeoLocation
GeoHashLocation
number[]
string
−
Hide 2 properties
lat
number
required
Latitude
lon
number
required
Longitude
−
Hide 2 properties
buckets
union oneOf
required
One of:
string to Histogram
Histogram[]
−
Hide 1 property
<string>
object
+
Show 3 properties
doc_count
number
required
{}
HistogramBucket []
−
Hide 3 properties
doc_count
number
required
−
Hide 2 properties
buckets
union oneOf
required
One of:
−
Hide 1 property
<string>
object
+
Show 3 properties
doc_count
number
required
{}
DateHistogramBucket []
−
Hide 3 properties
doc_count
number
required
−
Hide 3 properties
buckets
union oneOf
required
One of:
−
Hide 1 property
<string>
object
+
Show 3 properties
doc_count
number
required
{}
DateHistogramBucket []
−
Hide 3 properties
doc_count
number
required
−
Hide 2 properties
buckets
union oneOf
required
One of:
string to Variable
Variable[]
−
Hide 1 property
<string>
object
+
Show 7 properties
doc_count
number
required
{}
VariableWidthHistogramBucket []
−
Hide 7 properties
doc_count
number
required
Result of a terms aggregation when the field is a string.
−
Hide 4 properties
buckets
union oneOf
required
One of:
string to String
String[]
−
Hide 1 property
<string>
object
+
Show 3 properties
doc_count
number
required
doc_count_error_upper_bound
number
key
union oneOf
required
One of:
number
or
string
or
boolean
{}
StringTermsBucket []
−
Hide 3 properties
doc_count
number
required
doc_count_error_upper_bound
number
key
union oneOf
required
One of:
number
or
string
or
boolean
doc_count_error_upper_bound
number
sum_other_doc_count
number
Result of a terms aggregation when the field is some kind of whole number like a integer, long, or a date.
−
Hide 4 properties
buckets
union oneOf
required
One of:
−
Hide 1 property
<string>
object
+
Show 4 properties
doc_count
number
required
doc_count_error_upper_bound
number
{}
LongTermsBucket []
−
Hide 4 properties
doc_count
number
required
doc_count_error_upper_bound
number
doc_count_error_upper_bound
number
sum_other_doc_count
number
Result of a terms aggregation when the field is some kind of decimal number like a float, double, or distance.
−
Hide 4 properties
buckets
union oneOf
required
One of:
string to Double
Double[]
−
Hide 1 property
<string>
object
+
Show 4 properties
doc_count
number
required
doc_count_error_upper_bound
number
{}
DoubleTermsBucket []
−
Hide 4 properties
doc_count
number
required
doc_count_error_upper_bound
number
doc_count_error_upper_bound
number
sum_other_doc_count
number
Result of a terms aggregation when the field is unmapped. buckets is always empty.
−
Hide 4 properties
buckets
union oneOf
required
One of:
object[]
or
string to object
doc_count_error_upper_bound
number
sum_other_doc_count
number
Result of the rare_terms aggregation when the field is some kind of whole number like a integer, long, or a date.
−
Hide 2 properties
buckets
union oneOf
required
One of:
−
Hide 1 property
<string>
object
+
Show 3 properties
doc_count
number
required
{}
LongRareTermsBucket []
−
Hide 3 properties
doc_count
number
required
Result of the rare_terms aggregation when the field is a string.
−
Hide 2 properties
buckets
union oneOf
required
One of:
string to String
String[]
−
Hide 1 property
<string>
object
+
Show 2 properties
doc_count
number
required
{}
StringRareTermsBucket []
−
Hide 2 properties
doc_count
number
required
Result of a rare_terms aggregation when the field is unmapped. buckets is always empty.
−
Hide 2 properties
buckets
union oneOf
required
One of:
object[]
or
string to object
−
Hide 4 properties
buckets
union oneOf
required
One of:
−
Hide 1 property
<string>
object
+
Show 4 properties
doc_count
number
required
key
union oneOf []
required
One of:
number
or
string
or
boolean
doc_count_error_upper_bound
number
{}
MultiTermsBucket []
−
Hide 4 properties
doc_count
number
required
key
union oneOf []
required
One of:
number
or
string
or
boolean
doc_count_error_upper_bound
number
doc_count_error_upper_bound
number
sum_other_doc_count
number
−
Hide 2 properties
doc_count
number
required
−
Hide 2 properties
doc_count
number
required
−
Hide 2 properties
doc_count
number
required
−
Hide 2 properties
doc_count
number
required
−
Hide 2 properties
doc_count
number
required
−
Hide 2 properties
doc_count
number
required
−
Hide 2 properties
doc_count
number
required
−
Hide 2 properties
doc_count
number
required
−
Hide 2 properties
doc_count
number
required
−
Hide 2 properties
buckets
union oneOf
required
One of:
−
Hide 1 property
<string>
object
+
Show 2 properties
doc_count
number
required
{}
GeoHashGridBucket []
−
Hide 2 properties
doc_count
number
required
−
Hide 2 properties
buckets
union oneOf
required
One of:
−
Hide 1 property
<string>
object
+
Show 2 properties
doc_count
number
required
{}
GeoTileGridBucket []
−
Hide 2 properties
doc_count
number
required
−
Hide 2 properties
buckets
union oneOf
required
One of:
−
Hide 1 property
<string>
object
+
Show 2 properties
doc_count
number
required
{}
GeoHexGridBucket []
−
Hide 2 properties
doc_count
number
required
−
Hide 2 properties
buckets
union oneOf
required
One of:
−
Hide 1 property
<string>
object
+
Show 6 properties
doc_count
number
required
key
string
The bucket key. Present if the aggregation is not keyed
{}
RangeBucket []
−
Hide 6 properties
doc_count
number
required
key
string
The bucket key. Present if the aggregation is not keyed
Result of a date_range aggregation. Same format as a for a range aggregation: from and to
in buckets are milliseconds since the Epoch, represented as a floating point number.
−
Hide 2 properties
buckets
union oneOf
required
Same options as
buckets
in
RangeAggregate
Result of a geo_distance aggregation. The unit for from and to is meters by default.
−
Hide 2 properties
buckets
union oneOf
required
Same options as
buckets
in
RangeAggregate
−
Hide 2 properties
buckets
union oneOf
required
One of:
−
Hide 1 property
<string>
object
+
Show 4 properties
doc_count
number
required
{}
IpRangeBucket []
−
Hide 4 properties
doc_count
number
required
−
Hide 2 properties
buckets
union oneOf
required
One of:
−
Hide 1 property
<string>
object
+
Show 5 properties
doc_count
number
required
prefix_length
number
required
{}
IpPrefixBucket []
−
Hide 5 properties
doc_count
number
required
prefix_length
number
required
−
Hide 2 properties
buckets
union oneOf
required
One of:
string to Filters
Filters[]
−
Hide 1 property
<string>
object
+
Show 2 properties
doc_count
number
required
{}
FiltersBucket []
−
Hide 2 properties
doc_count
number
required
−
Hide 2 properties
buckets
union oneOf
required
One of:
string to Adjacency
Adjacency[]
−
Hide 1 property
<string>
object
+
Show 2 properties
doc_count
number
required
{}
AdjacencyMatrixBucket []
−
Hide 2 properties
doc_count
number
required
−
Hide 4 properties
buckets
union oneOf
required
One of:
string to Significant
Significant[]
−
Hide 1 property
<string>
object
+
Show 5 properties
doc_count
number
required
{}
SignificantLongTermsBucket []
−
Hide 5 properties
doc_count
number
required
−
Hide 4 properties
buckets
union oneOf
required
One of:
string to Significant
Significant[]
−
Hide 1 property
<string>
object
+
Show 4 properties
doc_count
number
required
{}
SignificantStringTermsBucket []
−
Hide 4 properties
doc_count
number
required
Result of the significant_terms aggregation on an unmapped field. buckets is always empty.
−
Hide 4 properties
buckets
union oneOf
required
One of:
object[]
or
string to object
−
Hide 3 properties
buckets
union oneOf
required
One of:
string to Composite
Composite[]
−
Hide 1 property
<string>
object
+
Show 2 properties
doc_count
number
required
{}
CompositeBucket []
−
Hide 2 properties
doc_count
number
required
−
Hide 2 properties
buckets
union oneOf
required
One of:
string to Frequent
Frequent[]
−
Hide 1 property
<string>
object
+
Show 3 properties
doc_count
number
required
key
map string to string
required
{}
FrequentItemSetsBucket []
−
Hide 3 properties
doc_count
number
required
key
map string to string
required
−
Hide 2 properties
buckets
union oneOf
required
One of:
−
Hide 1 property
<string>
object
+
Show 2 properties
doc_count
number
required
key
map string to oneOf
required
{}
TimeSeriesBucket []
−
Hide 2 properties
doc_count
number
required
key
map string to oneOf
required
−
Hide 2 properties
hits
object
required
−
Hide 3 properties
total
union oneOf
Total hit count information, present only if track_total_hits wasn't false in the search request.
One of:
−
Hide 2 properties
relation
enum
required
Supported values include:
eq: Accurate
gte: Lower bound, including returned events or sequences
Values:
eq
gte
hits
object []
required
−
Hide 20 properties
_score
union number | string
nullable
_explanation
object
+
Show 3 properties
description
string
required
details
object []
required
+
Show 3 properties
description
string
required
details
object []
Same fields as
details
in
_explanation
fields
map string to object
highlight
map string to string
inner_hits
map string to object
<string>
object
+
Show 1 property
hits
object
required
Same fields as
hits
in
TopHitsAggregate
matched_queries
union oneOf
One of:
string[]
or
string to number
_nested
object
+
Show 3 properties
_nested
object
Same fields as
_nested
in
hits
ignored_field_values
map string to object
max_score
union number | string
nullable
−
Hide 5 properties
value
union oneOf
One of:
number
or
string
or
boolean
feature_importance
object []
+
Show 3 properties
feature_name
string
required
classes
object []
+
Show 2 properties
class_name
string
required
importance
number
required
top_classes
object []
+
Show 3 properties
class_name
union oneOf
required
One of:
number
or
string
or
boolean
class_probability
number
required
class_score
number
required
−
Hide 10 properties
min_length
union number | string
required
nullable
max_length
union number | string
required
nullable
avg_length
union number | string
required
nullable
entropy
union number | string
required
nullable
distribution
union oneOf
nullable
One of:
string to number
or
string
min_length_as_string
string
max_length_as_string
string
avg_length_as_string
string
−
Hide 2 properties
top
object []
required
−
Hide 2 properties
sort
union oneOf []
required
One of:
union
or
string
metrics
map string to oneOf
required
−
Hide 3 properties
value
union number | string
required
nullable
Result of the cumulative_cardinality aggregation
−
Hide 3 properties
−
Hide 3 properties
doc_count
number
required
fields
object []
+
Show 8 properties
covariance
map string to number
required
correlation
map string to number
required
−
Hide 4 properties
geometry
object
required
−
Hide 2 properties
type
string
required
Always "LineString"
coordinates
number []
required
Array of [lon, lat] coordinates
properties
object
required