Learning Elastic Stack 6.0

Nesting aggregations

Bucket aggregations split the context into one or more bucket. We can restrict the context of the aggregation by specifying the query element, as we have seen in the previous section.

When a metric aggregation is nested inside a bucket aggregation, the metric aggregation is computed within each bucket. Let us understand this by taking the following question that we may want to get an answer for:

What is the total bandwidth consumed by each user or a specific customer on a given day? 

We have to take the following steps:

1. First filter the overall data for the given customer and for the given day. This can be done using a global query element of the bool type.
2. Once we have the filtered data, we want to create some buckets ...