Average of field in nested mapping for elasticssearch - elasticsearch

Question

I unable to get the average of cpuaveload filed.
Mapping:
{
"kpi" : {
"mappings" : {
"kpi" : {
"properties" : {
"date" : {
"type" : "date"
},
"kpi" : {
"type" : "nested",
"properties" : {
"CpuAverageLoad" : {
"type" : "long"
},
"HaGroupId" : {
"type" : "text",
"fields" : {
"keyword" : {
"type" : "keyword",
"ignore_above" : 256
}
}
},
"LbGroupId" : {
"type" : "text",
"fields" : {
"keyword" : {
"type" : "keyword",
"ignore_above" : 256
}
}
},
"MemFree" : {
"type" : "long"
},
"MemUsed" : {
"type" : "long"
},
"NodeId" : {
"type" : "text",
"fields" : {
"keyword" : {
"type" : "keyword",
"ignore_above" : 256
}
}
},
"NodeType" : {
"type" : "text",
"fields" : {
"keyword" : {
"type" : "keyword",
"ignore_above" : 256
}
}
},
"State" : {
"type" : "text",
"fields" : {
"keyword" : {
"type" : "keyword",
"ignore_above" : 256
}
}
},
"Static_limit" : {
"type" : "long"
}
}
}
}
}
}
}
}
Query
curl -XPOST 'localhost:9200/kpi/_search?size=0&pretty' -H 'Content-Type: application/json' -d'
{
"from": 0, "size": 10,
"sort":[
{"date" : {"order" : "desc"}}
],
"stored_fields": [],
"query": {
"nested": {
"path": "kpi",
"query": {
"match": {"kpi.NodeType" : "cs"}
},
"inner_hits": {
},
"aggs" : {
"kpi" : {
"nested" : {
"path" : "kpi"
},
"aggs" : {
"avg_price" : { "avg" : { "field" : "kpi.CpuAverageLoad" } }
}
}
}
}
}
}'
When i execute I get the below error:
"[nested] query does not support [aggs]"
type : "parsing_exception",
reason : "[nested] query does not support [aggs]",
line : 16, col : 16
I need to get the average of CpuAveLoad

Answer 1

The problem is, that you included the aggs inside the query. The inner_hits is also defined in a wrong position. This should work:
{
"from": 0, "size": 10,
"sort":[{
"date" : {"order" : "desc"}
}],
"stored_fields": [],
"query": {
"nested" : {
"path" : "kpi",
"query" : {
"match" : { "kpi.NodeType" : "type_a" }
},
"inner_hits" : {
}
}
},
"aggs": {
"kpi": {
"nested": {
"path": "kpi"
},
"aggs" : {
"average-agg" : {
"avg" : { "field" : "kpi.CpuAverageLoad" }
}
}
}
}
}
The solution was tested with elasticsearch 5-6. Please let me know if it worked for you.