Elasticsearch 术语查询大小以包括一些术语

Question

Elasticsearch docs shows below example for size and includes

GET /_search
{
  "aggs": {
    "JapaneseCars": {
      "terms": {
        "field": "make",
        "size": 10
        "include": [ "mazda", "honda" ]
      }
    }
  }
}

But here "include" only includes "mazda" and "honda" in results, i want result to include those 2 as well other results based on doc_count since i am using size in query, is there any way to achieve this.

Answer 1

terms aggregation always return buckets with highest number of documents.

You cannot define an aggregation to always include buckets for some specified keys AND other top buckets.

But you could define two separate aggregations and merge buckets in your application

GET /_search
{
  "aggs": {
    "JapaneseCars": {
      "terms": {
        "field": "make",
        "include": [ "mazda", "honda" ]
      }
    },
    "OtherCars": {
      "terms": {
        "field": "make",
        "exclude": [ "mazda", "honda" ]
      }
    },
  }
}

Answer 2

You can skip the include keyword right:

GET /_search
{
  "aggs": {
    "JapaneseCars": {
      "terms": {
        "field": "make",
        "size": 10
      }
    }
  }
}