ElasticSearch常用语句

怼烎@ 2022-01-22 06:55 352阅读 0赞

# ElasticSearch常用语句 #

ElasticSearch:6.4.x

定义规则：

PUT _template/template_1
    {
    	"index_patterns": ["es_index_*"],  #es索引index规则
    	"settings": {
    		"number_of_shards": 5,  #设置分片数
                     "number_of_replicas" : 3, #设置副本书
                     "index.refresh_interval": "20s"
    	},
    	"mappings": {
    		"es_type": {    #es的type名称
    			"properties": {    #设置字段属性
    				"Id": { 
    					"type": "text"
    				},
    				"Rooms": {
    					"type": "object"
    				},
    				"CreateTime": {
    					"type": "date"
    				},
    				"Days": {
    					"type": "integer"
    				}
    			}
    		}
    	}
    }

指定查找内容是否包含某个字段和根据某个字段排序：

GET es_index/_search
    {
      "query": {
       
        "bool":{
          "must_not": [  #不包含@version字段的内容
            {"exists":
              {
                "field": "@version"
              }
            }
          ]
        }
        
      },
      "sort": [   #根据createTime进行降序排序
        {
          "CreateTime": {
            "order": "desc"
          }
        }
      ]
    }

根据某个字段范围和某个字段是否为某值查询：

GET es_index/_search
    {
      "query": {
        "bool": {
          "must": [
            {"range": {"CreateTime": {"lt": "2019-06-05T00:00:00+0800"}}},
            {"bool":{"should":[{"match_phrase":{"Rooms":"test1"}},{"match_phrase":{"Rooms":"test2"}}]}}
          ]
        }
      }
    }

script\_score查询：

GET es_index/_search
    {
        "query": {
            "function_score": {
                "query": {
                    "match": { "Rooms": "test" }
                },
                "script_score" : {
                    "script" : {
                        "params": {
                            "a": 5,
                            "b": 1.2
                        },
                        "source": "params.a / Math.pow(params.b, doc['Days'].value)"
                    }
                }
            }
        }
    }

join操作：

PUT es_index
    {
      "mappings": {
        "es_type": {
          "properties": {
            "my_join_field": {
              "type": "join",
              "relations": {
                "my_parent": "my_child"
              }
            }
          }
        }
      }
    }
    
    PUT es_index/es_type/1?refresh
    {
      "text": "This is a parent document",
      "my_join_field": "my_parent"
    }
    
    PUT es_index/es_type/2?routing=1&refresh
    {
      "text": "This is a child document",
      "my_join_field": {
        "name": "my_child",
        "parent": "1"
      }
    }

join查询：

GET /es_index/_search
    {
      "query": {
        "parent_id": {
          "type": "my_child",
          "id": "1"
        }
      }
    }

azkaban定时删除满足条件的数据：

curl -X POST "localhost:9200/es_index/_delete_by_query" -H 'Content-Type: application/json' -d'{"query":{"bool":{"must":[{"range":{"CreateTime":{"lt":"$({var now=new('DateUtil',"${azkaban.flow.start.timestamp}");now.plusDay(-91);now.toString("yyyy-MM-dd")})"}}},{"bool":{"should":[{"match_phrase":{"Rooms":"test1"}},{"match_phrase":{"Rooms":"test2"}}]}}]}}}'