当前位置：首页 > news >正文

Elasticsearch聚合分析实战

news 2026/6/18 9:48:12

Elasticsearch聚合分析实战

引言

Elasticsearch的聚合功能是其强大的分析能力之一，支持指标聚合、桶聚合、管道聚合等多种分析方式。本文将详细介绍Elasticsearch聚合的使用方法和最佳实践。

聚合基础

1.1 聚合类型

import org.elasticsearch.search.aggregations.*; public class AggregationBasics { /** * 指标聚合 */ public void metricAggregations(RestHighLevelClient client) throws IOException { SearchSourceBuilder builder = new SearchSourceBuilder(); // AVG聚合 AvgAggregationBuilder avgAgg = AggregationBuilders.avg("avg_price").field("price"); // SUM聚合 SumAggregationBuilder sumAgg = AggregationBuilders.sum("total_sales").field("sales"); // MAX聚合 MaxAggregationBuilder maxAgg = AggregationBuilders.max("max_price").field("price"); // MIN聚合 MinAggregationBuilder minAgg = AggregationBuilders.min("min_price").field("price"); // COUNT聚合 ValueCountAggregationBuilder countAgg = AggregationBuilders.count("count").field("productId"); // Stats聚合（包含所有统计） StatsAggregationBuilder statsAgg = AggregationBuilders.stats("price_stats").field("price"); // 添加聚合 builder.aggregation(avgAgg); builder.size(0); // 只返回聚合结果 } }

桶聚合

2.1 Terms聚合

/** * Terms桶聚合 */ public class TermsAggregation { /** * 按字段值分组 */ public void termsAggregation(RestHighLevelClient client) throws IOException { SearchSourceBuilder builder = new SearchSourceBuilder(); // Terms聚合 TermsAggregationBuilder termsAgg = AggregationBuilders .terms("by_category") .field("category") .size(10) .order(Map.Entry.comparingByValue()); // 添加子聚合 termsAgg.subAggregation(AggregationBuilders.avg("avg_price").field("price")); termsAgg.subAggregation(AggregationBuilders.sum("total_sales").field("sales")); builder.aggregation(termsAgg); builder.size(0); } }

2.2 直方图聚合

/** * 直方图聚合 */ public class HistogramAggregation { /** * 数值直方图 */ public void histogramAggregation(RestHighLevelClient client) throws IOException { SearchSourceBuilder builder = new SearchSourceBuilder(); // 数值直方图 HistogramAggregationBuilder histogram = AggregationBuilders .histogram("by_price") .field("price") .interval(100) .minDocCount(1); builder.aggregation(histogram); builder.size(0); } /** * 日期直方图 */ public void dateHistogramAggregation(RestHighLevelClient client) throws IOException { SearchSourceBuilder builder = new SearchSourceBuilder(); DateHistogramAggregationBuilder dateHistogram = AggregationBuilders .dateHistogram("by_date") .field("createTime") .calendarInterval(DateHistogramInterval.MONTH) .format("yyyy-MM-dd") .minDocCount(0) .extendedBounds("2024-01-01", "2024-12-31"); builder.aggregation(dateHistogram); builder.size(0); } }

管道聚合

3.1 管道聚合

/** * 管道聚合 */ public class PipelineAggregation { /** * 管道聚合 */ public void pipelineAggregation(RestHighLevelClient client) throws IOException { SearchSourceBuilder builder = new SearchSourceBuilder(); // 父聚合 - 按分类 TermsAggregationBuilder byCategory = AggregationBuilders .terms("by_category") .field("category") .size(10); // 子聚合 - 每个分类的平均价格 AvgAggregationBuilder avgPrice = AggregationBuilders.avg("avg_price").field("price"); // 管道聚合 - 计算平均值 AvgAggregationBuilder avgOfAvg = AggregationBuilders.avg("avg_of_avg") .field("avg_price"); // 添加管道聚合 byCategory.subAggregation(avgPrice); byCategory.subAggregation(avgOfAvg); builder.aggregation(byCategory); builder.size(0); } }

过滤聚合

4.1 全局和过滤聚合

/** * 过滤聚合 */ public class FilterAggregation { /** * 全局聚合 */ public void globalAggregation(RestHighLevelClient client) throws IOException { SearchSourceBuilder builder = new SearchSourceBuilder(); // 全局聚合 GlobalAggregationBuilder global = AggregationBuilders.global("all_products") .subAggregation(AggregationBuilders.avg("avg_price").field("price")); // 过滤聚合 FilterAggregationBuilder filter = AggregationBuilders.filter("electronics", QueryBuilders.termQuery("category", "electronics")); filter.subAggregation(AggregationBuilders.avg("avg_price").field("price")); builder.aggregation(global); builder.aggregation(filter); builder.size(0); } }