| 日历间隔 | calendar_interval: minute/hour/day/week/month/quarter/year |
|---|---|
| 固定间隔 | fixed_interval: 30s/5m/2h/7d(不能与日历单位混用) |
| 常用参数 | time_zone、min_doc_count、extended_bounds、format |
示例
示例
GET /logs/_search
{
"size": 0,
"aggs": {
"per_day": {
"date_histogram": {
"field": "@timestamp",
"calendar_interval": "day",
"time_zone": "+08:00",
"min_doc_count": 0,
"extended_bounds": { "min": "now-7d/d", "max": "now/d" }
}
}
}
}结果 key 是毫秒时间戳、key_as_string 是按 format 与时区格式化后的字符串,展示层用后者更直观。