WARNING: Version 1.4 of Elasticsearch has passed its EOL date.
This documentation is no longer being maintained and may be removed. If you are running this version, we strongly advise you to upgrade. For the latest information, see the current release documentation.
Sum Aggregation
editSum Aggregation
editA single-value
metrics aggregation that sums up numeric values that are extracted from the aggregated documents. These values can be extracted either from specific numeric fields in the documents, or be generated by a provided script.
Assuming the data consists of documents representing stock ticks, where each tick holds the change in the stock price from the previous tick.
{ "query" : { "filtered" : { "query" : { "match_all" : {}}, "filter" : { "range" : { "timestamp" : { "from" : "now/1d+9.5h", "to" : "now/1d+16h" }} } } }, "aggs" : { "intraday_return" : { "sum" : { "field" : "change" } } } }
The above aggregation sums up all changes in the today’s trading stock ticks which accounts for the intraday return. The aggregation type is sum
and the field
setting defines the numeric field of the documents of which values will be summed up. The above will return the following:
{ ... "aggregations": { "intraday_return": { "value": 2.18 } } }
The name of the aggregation (intraday_return
above) also serves as the key by which the aggregation result can be retrieved from the returned response.
Script
editComputing the intraday return based on a script:
{ ..., "aggs" : { "intraday_return" : { "sum" : { "script" : "doc['change'].value" } } } }
Value Script
editComputing the sum of squares over all stock tick changes:
{ "aggs" : { ... "aggs" : { "daytime_return" : { "sum" : { "field" : "change", "script" : "_value * _value" } } } } }