ADiq4Aph

1{   
2    ...
3    "mailProvider": "gmail.com",
4    "mxHost1": {
5      "name": "aspmx.l.google.com",
6      ...
7    },
8    "mxHost2": {
9      "name": "aspmx2.googlemail.com",
10      ...
11    },
12    "mxHost3": {
13      "name": "aspmx3.googlemail.com",
14      ...
15    }
16} 
17     
18POST /results/_search?size=0
19{
20    "aggs": {
21        "top_providers": {
22            "terms": {
23                "field": "mailProvider.keyword",
24                "size": 3
25            }
26        }
27    }
28} 
29     
30{
31  ...
32  "aggregations" : {
33    "top_providers" : {
34        "buckets" : [
35        {
36          "key" : "gmail.com",
37          "doc_count" : 138
38        },
39        {
40          "key" : "outlook.com",
41          "doc_count" : 43
42        },
43        {
44          "key" : "secureserver.net",
45          "doc_count" : 29
46        }
47      ]
48    }
49  }
50}