Elasticsearch 7 Quick Start Guide

Pipeline aggregations

Pipeline aggregations return outputs from other aggregations, and add information to the output tree. There are two families of aggregation:

• Parent aggregations: Pipeline aggregations that take the output from the parent aggregation and compute new buckets or aggregations to add to the existing buckets
• Sibling aggregations: Pipeline aggregations that take the output from a sibling aggregation and compute new buckets or aggregations to add to the existing buckets

The pipeline aggregations use buckets_path to reference the aggregations. This allows the pipelines to be chained. The syntax for the path is as follows:

PATH = <AGG_NAME>[<AGG_SEPARATOR>,<AGG_NAME>]*[<METRIC_SEPARATOR>, <METRIC>];

Here, the parameters are ...