gistfile1.json

POST /logstash-2014.11.24/_search
{
    "query": {
        "term": {
            "_EventID_": "themepackage"
        }
    },
    "size": 0,
    "aggs": {
        "country": {
            "terms": {
                "field": "Locale",
                "size": 0
            }
        }
    }
}



{
    "took": 3,
    "timed_out": false,
    "_shards": {
        "total": 5,
        "successful": 5,
        "failed": 0
    },
    "hits": {
        "total": 11618,
        "max_score": 0,
        "hits": []
    },
    "aggregations": {
        "country": {
            "doc_count_error_upper_bound": 0,
            "sum_other_doc_count": 0,
            "buckets": [
                {
                    "key": "kokr",
                    "doc_count": 6564
                },
                {
                    "key": "enus",
                    "doc_count": 1895
                },
                {
                    "key": "engb",
                    "doc_count": 632
                },
                {
                    "key": "inid",
                    "doc_count": 550
                },
                {
                    "key": "zhcn",
                    "doc_count": 298
                },
                {
                    "key": "zhtw",
                    "doc_count": 295
                },
                {
                    "key": "thth",
                    "doc_count": 236
                },
                {
                    "key": "enph",
                    "doc_count": 167
                },
                {
                    "key": "esus",
                    "doc_count": 105
                },
                {
                    "key": "jajp",
                    "doc_count": 75
                },
                {
                    "key": "ptbr",
                    "doc_count": 69
                },
                {
                    "key": "vivn",
                    "doc_count": 67
                },
                {
                    "key": "arae",
                    "doc_count": 60
                },
                {
                    "key": "enau",
                    "doc_count": 57
                },
                {
                    "key": "fair",
                    "doc_count": 50
                },
                {
                    "key": "enin",
                    "doc_count": 42
                },
                {
                    "key": "zhhk",
                    "doc_count": 41
                },
                {
                    "key": "ruru",
                    "doc_count": 38
                },
                {
                    "key": "eses",
                    "doc_count": 31
                },
                {
                    "key": "esmx",
                    "doc_count": 31
                },
                {
                    "key": "frfr",
                    "doc_count": 30
                },
                {
                    "key": "enca",
                    "doc_count": 28
                },
                {
                    "key": "msmy",
                    "doc_count": 23
                },
                {
                    "key": "enmm",
                    "doc_count": 20
                },
                {
                    "key": "dede",
                    "doc_count": 19
                },
                {
                    "key": "trtr",
                    "doc_count": 18
                },
                {
                    "key": "ensg",
                    "doc_count": 16
                },
                {
                    "key": "ukua",
                    "doc_count": 15
                },
                {
                    "key": "itit",
                    "doc_count": 14
                },
                {
                    "key": "in",
                    "doc_count": 13
                },
                {
                    "key": "fafa",
                    "doc_count": 12
                },
                {
                    "key": "arsa",
                    "doc_count": 11
                },
                {
                    "key": "areg",
                    "doc_count": 10
                },
                {
                    "key": "ennz",
                    "doc_count": 10
                },
                {
                    "key": "roro",
                    "doc_count": 10
                },
                {
                    "key": "enru",
                    "doc_count": 6
                },
                {
                    "key": "esve",
                    "doc_count": 6
                },
                {
                    "key": "fairlnum",
                    "doc_count": 6
                },
                {
                    "key": "deat",
                    "doc_count": 4
                },
                {
                    "key": "en",
                    "doc_count": 4
                },
                {
                    "key": "espe",
                    "doc_count": 4
                },
                {
                    "key": "iwil",
                    "doc_count": 4
                },
                {
                    "key": "elgr",
                    "doc_count": 3
                },
                {
                    "key": "enmy",
                    "doc_count": 3
                },
                {
                    "key": "frbe",
                    "doc_count": 3
                },
                {
                    "key": "nlnl",
                    "doc_count": 3
                },
                {
                    "key": "enie",
                    "doc_count": 2
                },
                {
                    "key": "esgt",
                    "doc_count": 2
                },
                {
                    "key": "ruua",
                    "doc_count": 2
                },
                {
                    "key": "sksk",
                    "doc_count": 2
                },
                {
                    "key": "zhsg",
                    "doc_count": 2
                },
                {
                    "key": "enth",
                    "doc_count": 1
                },
                {
                    "key": "esar",
                    "doc_count": 1
                },
                {
                    "key": "esbo",
                    "doc_count": 1
                },
                {
                    "key": "espr",
                    "doc_count": 1
                },
                {
                    "key": "frca",
                    "doc_count": 1
                },
                {
                    "key": "plpl",
                    "doc_count": 1
                },
                {
                    "key": "ptpt",
                    "doc_count": 1
                },
                {
                    "key": "ruby",
                    "doc_count": 1
                },
                {
                    "key": "srrs",
                    "doc_count": 1
                },
                {
                    "key": "svse",
                    "doc_count": 1
                }
            ]
        }
    }
}