elasticsearch - 如何使用 Kibana“脚本字段”查找重复项？

Question

我是 Elastic Stack 的新手。我有一个关于如何计算重复记录的问题。我的索引如下。我想检查重复项electric_id

    {
  "_index": "testelectric-2020.07.22",
  "_type": "_doc",
  "_id": "2aef2aa9c3fb9fb41e32bc816d3d4c983a7be93e298a29914107153cdc",
  "_version": 1,
  "_score": null,
  "_source": {
    "station": 1,
    "electric_id": "A2B7-000ACD21650F",
    "line": 5,
    "leak": 0.0044564689805,
    "dataname": "testelectric",
    "synced": false,
    "@timestamp": "2020-07-22T01:26:36.000Z",
    "lcr": 0.600109672546,
    "dmc": "#06MP    ###220720*1MUM0BL8K*=",
    "testtime": "2020-07-22T01:26:36.000Z",
    "judgement": true,
    "resistance": 0.486959082
  },
  "fields": {
    "testtime": [
      "2020-07-22T01:26:36.000Z"
    ],
    "@timestamp": [
      "2020-07-22T01:26:36.000Z"
    ]
  },
  "sort": [
    1595381196000
  ]
}

所以，在这里我希望创建一个脚本字段，我可以在其中检测electric_id 出现了多少次。示例视图将是这样的（我通过忽略其他字段来缩短它）

| testtime                    | electric_id | number of duplicated counts(scripted field) |
| Jul 22, 2020 @ 03:26:36.000 | AAA         | 0                                           |
| Jul 22, 2020 @ 03:27:36.000 | AAA         | 1                                           |
| Jul 22, 2020 @ 03:28:36.000 | BBB         | 0                                           |
| Jul 22, 2020 @ 03:29:36.000 | CCC         | 0                                           |
| Jul 22, 2020 @ 03:30:36.000 | AAA         | 2                                           |
| Jul 22, 2020 @ 03:31:36.000 | BBB         | 1                                           |

非常感谢任何帮助。提前谢谢你。

标签： elasticsearchkibanaelastic-stackcalculated-field