ES操作指南

Creating a text file with the described Elasticsearch operations.

es_operations = """

Elasticsearch 基本操作语法:

  1. 索引文档 (Index Documents):

自动生成 ID:

POST /index_name/_doc

{

"field1": "value1",

"field2": "value2"

}

指定 ID:

PUT /index_name/_doc/1

{

"field1": "value1",

"field2": "value2"

}

  1. 获取文档 (Get Documents):

按 ID 获取:

GET /index_name/_doc/1

  1. 更新文档 (Update Documents):

部分更新文档:

POST /index_name/_update/1

{

"doc": {

"field2": "new_value"

}

}

  1. 删除文档 (Delete Documents):

按 ID 删除:

DELETE /index_name/_doc/1

  1. 查询文档 (Search Documents):

Match 查询:

GET /index_name/_search

{

"query": {

"match": {

"field1": "value"

}

}

}

Term 查询:

GET /index_name/_search

{

"query": {

"term": {

"field1": "exact_value"

}

}

}

Bool 查询:

GET /index_name/_search

{

"query": {

"bool": {

"must": [

{ "match": { "field1": "value" } },

{ "term": { "field2": "exact_value" } }

],

"must_not": [

{ "term": { "field3": "value_to_exclude" } }

],

"should": [

{ "match": { "field4": "optional_value" } }

]

}

}

}

{

"multi_match": {

"query": "search text",

"fields": ["field1", "field2", "field3"]

}

}

  1. 范围查询 (Range Queries):

GET /index_name/_search

{

"query": {

"range": {

"timestamp": {

"gte": "2024-01-01",

"lte": "2024-12-31"

}

}

}

}

  1. 聚合查询 (Aggregations):

按字段分组 (Terms Aggregation):

GET /index_name/_search

{

"size": 0,

"aggs": {

"group_by_field1": {

"terms": {

"field": "field1.keyword"

}

}

}

}

统计 (Stats Aggregation):

GET /index_name/_search

{

"size": 0,

"aggs": {

"field1_stats": {

"stats": {

"field": "field1"

}

}

}

}

  1. 排序 (Sort):

GET /index_name/_search

{

"query": {

"match_all": {}

},

"sort": [

{ "field1": { "order": "asc" } },

{ "field2": { "order": "desc" } }

]

}

  1. 分页 (Pagination):

GET /index_name/_search

{

"query": {

"match_all": {}

},

"from": 0,

"size": 10

}

  1. 批量操作 (Bulk Operations):

POST /_bulk

{ "index": { "_index": "index_name", "_id": "1" } }

{ "field1": "value1" }

{ "delete": { "_index": "index_name", "_id": "2" } }

{ "update": { "_index": "index_name", "_id": "3" } }

{ "doc": { "field2": "new_value" } }

  1. 滚动查询 (Scroll Query):

POST /index_name/_search?scroll=1m

{

"size": 100,

"query": {

"match_all": {}

}

}

使用 _scroll_id 获取后续批次数据:

POST /_search/scroll

{

"scroll": "1m",

"scroll_id":"DXF1ZXJ5QW5kRmV0Y2gBAAAAAAAABbZjaFl1N3dLcmJNTE1GZ1BQOGZqZ3cAAAAAAA"

}

  1. 删除索引 (Delete Index):

DELETE /index_name

相关推荐
洛森唛2 小时前
Elasticsearch DSL 查询语法大全:从入门到精通
后端·elasticsearch
字节跳动数据平台7 小时前
代码量减少 70%、GPU 利用率达 95%:火山引擎多模态数据湖如何释放模思智能的算法生产力
大数据
得物技术8 小时前
深入剖析Spark UI界面:参数与界面详解|得物技术
大数据·后端·spark
武子康9 小时前
大数据-238 离线数仓 - 广告业务 Hive分析实战:ADS 点击率、购买率与 Top100 排名避坑
大数据·后端·apache hive
武子康1 天前
大数据-237 离线数仓 - Hive 广告业务实战:ODS→DWD 事件解析、广告明细与转化分析落地
大数据·后端·apache hive
大大大大晴天1 天前
Flink生产问题排障-Kryo serializer scala extensions are not available
大数据·flink
Elasticsearch2 天前
如何使用 Agent Builder 排查 Kubernetes Pod 重启和 OOMKilled 事件
elasticsearch
Elasticsearch3 天前
通用表达式语言 ( CEL ): CEL 输入如何改进 Elastic Agent 集成中的数据收集
elasticsearch
武子康3 天前
大数据-236 离线数仓 - 会员指标验证、DataX 导出与广告业务 ODS/DWD/ADS 全流程
大数据·后端·apache hive
武子康4 天前
大数据-235 离线数仓 - 实战:Flume+HDFS+Hive 搭建 ODS/DWD/DWS/ADS 会员分析链路
大数据·后端·apache hive