count 后排序问题

[DearDarry]

SELECT
COUNT(distinct sourceIP.keyword) AS size
FROM dataflow
WHERE
startTime > 525757149439
AND startTime < 1525757449439
GROUP BY appName.keyword
ORDER BY size desc
根据size排序怎么处理呢？

[shi-yuan]

{
  "from": 0,
  "size": 0,
  "query": {
    "bool": {
      "filter": [
        {
          "bool": {
            "must": [
              {
                "bool": {
                  "must": [
                    {
                      "range": {
                        "startTime": {
                          "from": 525757149439,
                          "to": null,
                          "include_lower": false,
                          "include_upper": true,
                          "boost": 1
                        }
                      }
                    },
                    {
                      "range": {
                        "startTime": {
                          "from": null,
                          "to": 1525757449439,
                          "include_lower": true,
                          "include_upper": false,
                          "boost": 1
                        }
                      }
                    }
                  ],
                  "adjust_pure_negative": true,
                  "boost": 1
                }
              }
            ],
            "adjust_pure_negative": true,
            "boost": 1
          }
        }
      ],
      "adjust_pure_negative": true,
      "boost": 1
    }
  },
  "_source": {
    "includes": [
      "COUNT"
    ],
    "excludes": []
  },
  "aggregations": {
    "appName.keyword": {
      "terms": {
        "field": "appName.keyword",
        "size": 200,
        "min_doc_count": 1,
        "shard_min_doc_count": 0,
        "show_term_doc_count_error": false,
        "order": [
          {
            "_count": "desc"
          },
          {
            "_key": "asc"
          }
        ]
      },
      "aggregations": {
        "size": {
          "cardinality": {
            "field": "sourceIP.keyword"
          }
        },
        "size_bucket_sort": {
          "bucket_sort": {
            "sort": [
              {
                "size": {
                  "order": "asc"
                }
              }
            ]
          }
        }
      }
    }
  }
}

[Linkaaq]

这种sql的方式目前支持吗？ @shi-yuan
有计划支持以下吗？

[shi-yuan]

不支持的

[detongz]

那我们有没有计划支持一下= =
我可以抄aggregation实现试试