ElasticSearch: nested mapping, data and facet query

facet query

{
    "query": {
        "bool": {
            "must": [
                {
                    "range": {
                        "wired_pages": {
                            "gt": 1000
                        }
                    }
                },
                {
                    "nested": {
                        "path": "processes",
                        "score_mode": "total",
                        "_scope": "hung",
                        "query": {
                            "field": {
                                "processes.status": "hung"
                            }
                        }
                    }
                }
            ]
        }
    },
    "facets": {
        "process_facet": {
            "terms_stats": {
                "key_field": "processes.process_name",
                "value_field": "processes.count"
            },
            "scope": "hung"
        }
    }
}

nested mapping

{
    "processlog": {
        "properties": {
            "wired_pages": {
                "type": "integer"
            },
            "free_pages": {
                "type": "integer"
            },
            "processes": {
                "type": "nested",
                "include_in_root": 1,
                "properties": {
                    "count": {
                        "type": "integer"
                    },
                    "status": {
                        "type": "string"
                    },
                    "process_name": {
                        "type": "string"
                    }
                }
            }
        }
    }
}

sample data

{
    "wired_pages": 1000,
    "free_pages": 40,
    "processes": [
        {
            "count": 32,
            "status": "hung",
            "process_name": "bash"
        },
        {
            "count": 12,
            "status": "normal",
            "process_name": "ls"
        }
    ]
}