将嵌套文档链接在一起并在ElasticSearch中进行构面

Question

I have a mapping which looks like this:

"mappings": {
    "mydoc": {
        "properties": {
            "event": {
                "type": "nested",
                "properties": {
                    "eventType": {
                        "type": "string"
                    },
                    "idList": {
                        "type": "integer"
                    },
                    "id": {
                        "type": "integer"
                    },
                }
            }
        }
    }
}

A mydoc document contains a nested array of event documents.

Within a mydoc document, I want to find all IDs where:

• There exists an event with event.type='A' and event.idList contains some ID X
• There exists another event with event.type='B' and event.id equals X

Across the index, I want a list of IDs where this criteria holds and also a count (for each ID) of the number of mydoc documents this occurred in.

Is it possible to achieve this in ElasticSearch? I was thinking it might be possible with a nested facet filter or a terms filter lookup but I have not seen a way to do it with these yet.

Answer 1

I think that a parent-child relation might suit your case better then a nested document.
Then you can query you (child) events document directly if you're searching only in the scope of the events (or add a condition on the _parent field to limit to a specific top document).
And you can use the has_child filter or query to search (or facet) on your top documents with conditions on the events (see http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/query-dsl-has-child-filter.html )