I donβt think there is a built-in way for this, but achieving this is pretty easy with facet
What you need to do:
- Save all query keywords with timestamp in elasticsearch index
- Run the match_all query filtered by the time interval you are interested in and apply the term facet to it
Unfortunately, I do not have time to write you an example, but this should lead you to a solution.
Here is an example:
// Demo index curl -XDELETE 'http://localhost:9200/queries/' curl -XPUT 'http://localhost:9200/queries/' // Add some data curl -XPUT 'http://localhost:9200/queries/query/1' -d ' { "date": "2013-02-19T12:57:23", "query": "Trying out ElasticSearch, so far so good?" }' curl -XPUT 'http://localhost:9200/queries/query/2' -d ' { "date": "2013-03-02T11:27:23", "query": "Lets give ElasticSearch another try" }' curl -XPUT 'http://localhost:9200/queries/query/3' -d ' { "date": "2013-04-02T08:27:23", "query": "OK, why dont we stick to SOLR?" }' curl -XPUT 'http://localhost:9200/queries/query/4' -d ' { "date": "2013-04-19T11:27:23", "query": "Couse ElasticSearch is so much cooler, its bonsai cool" }' // Query it curl -XGET 'http://localhost:9200/queries/query/_search?pretty=true' -d ' { "query" : { "filtered" : { "filter" : { "range" : { "date" : { "gte" : "2013-01-01T00:00:00", "lt" : "2013-04-01T00:00:00" } } }, "query" : { "match_all" : {} } } }, "facets": { "keywords": { "terms": { "field": "query" } } } } '
Adjust date range in query to see output changes
Thorsten
source share