query to moloch example for my blog

elasticsearch_moloch_query.py

from elasticsearch import Elasticsearch
es = Elasticsearch(['elasticsearch:9200'])
response = es.search(
        index="sessions2-181016",
        body={
  "size": 0,
  "query": {
    "bool": {
      "filter": {
        "bool": {
          "must": {
            "term": {
              "tags": "sample"
            }
          },
          "should": [
            {
              "term": {
                "dstPort": "80"
              }
            },
            {
              "term": {
                "dstPort": "443"
              }
            }
          ]
        }
      }
    }
  },
  "aggs": {
    "agg_terms_dstIp": {
      "terms": {
        "field": "dstIp",
        "size": 100
      }
    }
  }
}
, request_timeout=100)
type(response)
response["aggregations"]["agg_terms_dstIp"]