如果公司的数量足够小，你不需要浏览它们，你可以使用top_hits和bucket_selector聚合的组合来完成。基本上，top_hits将找到最新的报告，bucket_selector将删除所有没有足够现金的公司。

PUT test
{
  "mappings": {
    "properties": {
      "id": {
        "type": "long"
      },
      "financials": {
        "type": "nested",
        "properties": {
          "periodEndDate": {
            "type": "date"
          },
          "cash": {
            "type":"long"
          },
          "inventory": {
            "type": "long"
          }
        }
      }
    }
  }
}

POST test/_bulk?refresh
{"index":{"_id":1}}
{"id":1,"financials":[{"periodEndDate":"2022-06-30","cash":10000,"inventory":24000},{"periodEndDate":"2022-12-31","cash":12000,"inventory":19000}]}
{"index":{"_id":2}}
{"id":2,"financials":[{"periodEndDate":"2022-12-31","cash":200000,"inventory":1590000},{"periodEndDate":"2023-03-31","cash":210000,"inventory":1430000}]}

POST test/_search
{
  "size": 0,
  "aggs": {
    "companies": {
      "terms": {
        "field": "id"
      },
      "aggs": {
        "nested": {
          "nested": {
            "path": "financials"
          },
          "aggs": {
            "last_cash": {
              "top_hits": {
                "sort": [
                  {
                    "financials.periodEndDate": {
                      "order": "desc"
                    }
                  }
                ],
                "_source": {
                  "includes": [
                    "financials.cash",
                    "financials.periodEndDate"
                  ]
                },
                "size": 1
              }
            }
          }
        },
        "having.top_cash": {
          "bucket_selector": {
            "buckets_path": {
              "last_cash": "nested>last_cash[_source.cash]"
            },
            "script": "params.last_cash > 200000"
          }
        }
      }
    }
  }
}

字符串
这种方法有几个局限性，包括可扩展性差，它可以处理的公司数量有限，不支持第二个最旧的报告。如果您还需要按相关性对公司进行排序或浏览它们，它也不是最佳解决方案。
为了实现所有这些功能并构建一个可扩展的解决方案，我建议在索引时添加一个额外的处理，并将最新的报告和第二个最新的报告作为主对象中的专用字段进行索引，而不是将它们存储为嵌套并在搜索时尝试查找最新的和第二个最新的报告。因此，基本上您的记录应该如下所示：

{
    "id": 1,
    "latest_finanicals": {
            "periodEndDate": "2022-12-31",
            "cash": 12000,
            "inventory": 19000
        }
    },
    "previous_finanicals": {
            "periodEndDate": "2022-06-30",
            "cash": 10000,
            "inventory": 24000
        }
    }
    "financials": [
      {
        "periodEndDate": "2022-06-30",
        "cash": 10000,
        "inventory": 24000
      },
      {
        "periodEndDate": "2022-12-31",
        "cash": 12000,
        "inventory": 19000
      }
    ]
  }

型
使用latest_finanicals和previous_finanicals的object类型代替nested类型。然后所有查询将变得非常简单。