Elasticsearch 7 Quick Start Guide

Moving function aggregation

This aggregation slides a window across data. It allows the user to specify a custom script to be executed on each window. It has the following syntax:

{  "moving_fn": {    "buckets_path": "the_sum",    "window": 10,    "script": "MovingFunctions.min(values)"  }}

It takes the following parameters:

• buckets_path: The path to the buckets that are used in the pre-built function
• window: The size of the window that will slide across the histogram
• script: The script to be executed on each window

This script takes pre-built functions, such as the following:

• max(): This function returns the maximum value from a window.
• min(): This function returns the minimum value from a window.
• sum(): This function returns the sum of the values ...