elasticsearch - 如何在 90 天后将分钟数据聚合到每小时？

Question

我想在某个时间段后将分钟数据平均到每小时。为此，查询将是什么。

查询结构是 -

   GET ml_test_meters-2019_6/_search
{
  "query": {
    "bool": {
      "must": [
        {
          "query_string": {
            "query": "*",
            "analyze_wildcard": true
          }
        },
        {
          "range": {
            "host-status.meta.current-time": {
              "gte": 1549611907552,
              "lte": 1549654551498,
              "format": "epoch_millis"
            }
          }
        }
      ],
      "must_not": []
    }
  },
  "size": 0,
  "_source": {
    "excludes": []
  },
  "aggs": {
    "2": {
      "date_histogram": {
        "field": "host-status.meta.current-time",
        "interval": "1h",
        "time_zone": "US/Central",
        "min_doc_count": 1
      },
      "aggs": {
        "3": {
          "terms": {
            "field": "host-status.name.keyword",
            "size": 500,
            "order": {
              "1": "desc"
            }
          },
          "aggs": {
            "1": {
              "avg": {
                "field": "host-status.status-properties.status-detail.total-cpu-stat-iowait"
              }
            }
          }
        }
      }
    }
  }
}

可能的解决方案是什么？我想稍后将新数据插入同一索引并删除每分钟的数据。

标签： elasticsearchkibana