按分钟统计错误与去重用户
按分钟统计错误与去重用户
GET /logs-app/_search
{
"size": 0,
"aggs": {
"per_minute": {
"date_histogram": { "field": "@timestamp", "fixed_interval": "1m" },
"aggs": {
"errors": { "filter": { "term": { "level.keyword": "error" } } },
"uv": { "cardinality": { "field": "user_id.keyword" } }
}
}
}
}size: 0 表示不返回命中文档，只取聚合结果，适合纯统计查询。