elasticsearch like select ... where ... group by ... having
This is implemented in 5.2 as bucket selector aggregation, ex
GET /_search{ "size": 0, "query": { "term": { "code": "16001" } }, "aggs" : { "errors_per_week" : { "date_histogram" : { "field" : "date", "interval" : "week" }, "aggs": { "total_errors": { "value_count": { "field": "code" } }, "error_bucket_filter": { "bucket_selector": { "buckets_path": { "totalErrors": "total_errors" }, "script": "params.totalErrors > 5" } } } } }}