elasticsearch常用命令

  1. 创建模板

    curl -X PUT "192.1.1.1:9200/_index_template/service-template?pretty" -H 'Content-Type: application/json' -d'
    {
    "index_patterns":[
    "service-*"
    ],
    "template":{
    "settings":{
    "number_of_shards":2,
    "number_of_replicas":1,
    "index.max_result_window":"10000"
    },
    "mappings":{
    "dynamic_templates": [
    {
    "strings_as_keywords": {
    "match_mapping_type": "string",
    "mapping": {
    "type": "keyword"
    }
    }
    }
    ],
    "properties":{
    "id":{
    "type":"keyword"
    },
    "value":{
    "type":"short"
    },
    "customerFields":{
    "type":"nested",
    "include_in_parent":true,
    "properties":{
    "fieldId":{
    "type":"keyword"
    },
    "type":{
    "type":"short"
    },
    "sort": {
    "type": "integer"
    }
    }
    },
    "remarks":{
    "type":"keyword"
    }
    }
    }
    }
    }'

  2. 查询模板

复制代码
curl -X GET "192.1.1.1:9200/_index_template/service-template?pretty"
  1. 删除模板

curl -X DELETE "192.1.1.1:9200/_index_template/service-template?pretty"

  1. 创建表
复制代码
curl -X PUT "192.1.1.1:9200/service-2025-02?pretty"
  1. 查询表
复制代码
curl -X GET "192.1.1.1:9200/service-2025-02/_mapping?pretty"
  1. 删除表
复制代码
curl -X DELETE "192.1.1.1:9200/service-2025-02/_search?pretty"
  1. 添加普通字段

    curl -X POST "192.1.1.1:9200/service-2025-01,service-2025-02/_mapping?pretty" -H 'Content-Type: application/json' -d'
    {
    "properties":{
    "remark": {
    "type": "integer"
    }
    }
    }'

  2. 添加嵌套字段

    curl -X POST "192.1.1.1:9200/service-2025-01,service-2025-02/_mapping?pretty" -H 'Content-Type: application/json' -d'
    {
    "properties":{
    "customerFields": {
    "type":"nested",
    "include_in_parent":true,
    "properties":{
    "sort":{
    "type":"integer"
    }
    }
    }
    }
    }'

9.查询表结构

复制代码
curl -X GET "192.1.1.1:9200/service-2025-02/_mapping?pretty"
  1. 给模板增加自动清理时间(高级属性)

    curl -X PUT "192.1.1.1:9200/_ilm/policy/service_polic?pretty" -H 'Content-Type: application/json' -d'
    {
    "policy": {
    "phases": {
    "delete": {
    "min_age": "30d",
    "actions": {
    "delete": {}
    }
    }
    }
    }
    }'

复制代码
11. 给模板增加setting(高级属性)
复制代码
curl -X PUT "192.1.1.1:9200/_index_template/service-template?pretty" -H 'Content-Type: application/json' -d'
{
  "index_patterns":[
    "service-*"
  ],
  "template":{
    "settings":{
      "number_of_shards":2,
      "number_of_replicas":1,
      "index.max_result_window":"10000",
      "index.lifecycle.name": "service_polic",
      "index.lifecycle.rollover_alias": "service_polic_alias",
      "index.refresh_interval": "2s",
      "index.translog.flush_threshold_size": "1gb",
      "index.translog.flush_threshold_period": "1h"
    },
    "mappings":{
      "dynamic_templates": [
                        {
                            "strings_as_keywords": {
                                "match_mapping_type": "string",
                                "mapping": {
                                    "type": "keyword"
                                }
                            }
                        }
                    ],
      "properties":{
        "id": {
          "type": "keyword"
        }
        ......
        ......
      }
    }
  }
}'
  1. 排序查询

    curl -X GET "192.1.1.1:9200/service-2025-02/_search?pretty" -H 'Content-Type: application/json' -d'
    {
    "size" : 2,
    "query" : {
    "query_string" : {
    "query" : "field:hello world"
    }
    },
    "sort":[
    {
    "creationTime":{
    "order":"asc"
    }
    }
    ]
    }'

14.分组查询

复制代码
curl -X GET "192.1.1.1:9200/service-2025-02/_search?pretty" -H 'Content-Type: application/json' -d' 
{
    "size": 2,
    "query": {
        "query_string": {
            "query": "field:hello world"
        }
    },
    "aggs": {
        "group_by_userId": {
            "terms": {
                "field": "userId",
                "size": 10
            }
        }
    },
    "sort": [
        {
            "creationTime": {
                "order": "asc"
            }
        }
    ]
}'
  1. 分组聚合查询

    curl -X GET "192.1.1.1:9200/service-2025-01/_search" -H 'Content-Type: application/json' -d'
    {
    "_source": ["timestamp","field1","field2","lost","userId"],
    "size": 10,
    "query": {
    "bool": {
    "must": [
    {
    "term": {
    "field1": "hello"
    }
    },
    {
    "term": {
    "field2": "world"
    }
    }
    ]
    }
    },
    "aggs": {
    "average_per_5_seconds": {
    "date_histogram": {
    "field": "timestamp",
    "fixed_interval": "5s",
    "min_doc_count": 0
    },
    "aggs": {
    "average_lost": {
    "avg": {
    "field": "lost",
    "missing": 0
    }
    }
    }
    }
    }
    }'

相关推荐
Code哈哈笑4 分钟前
【MongoDB 基本语法】数据库和集合的基本操作--探秘 MongoDB
数据库·mongodb
恋红尘22 分钟前
Redis面试八股
数据库·redis·面试
望获linux30 分钟前
【实时Linux实战系列】实时 Linux 的自动化基准测试框架
java·大数据·linux·运维·网络·elasticsearch·搜索引擎
金宗汉1 小时前
《宇宙递归拓扑学:基于自指性与拓扑流形的无限逼近模型》
大数据·人工智能·笔记·算法·观察者模式
直有两条腿1 小时前
【数据迁移】HBase Bulkload批量加载原理
大数据·数据库·hbase
Joy T1 小时前
海南蓝碳:生态财富与科技驱动的新未来
大数据·人工智能·红树林·海南省·生态区建设
言之。2 小时前
ClickHouse 数据更新策略深度解析:突变操作与最佳实践
服务器·数据库·clickhouse
风清再凯2 小时前
01-ELK安装ES,ES-head
大数据·elk·elasticsearch
Guheyunyi2 小时前
风险感知中枢:监测预警系统的架构与核心
大数据·运维·安全·重构·架构·自动化