目錄
一、時間條件過濾+模糊查詢+精確匹配+關鍵字排除
1. 查詢出包含 log_geo 的數(shù)據(jù) “wildcard”: { “message”: “l(fā)og_geo” }
2. 查詢某個時間段的數(shù)據(jù)
3. 條件查詢與條件排除數(shù)據(jù)
4. from 表示起始的記錄的ID
5. size 表示顯示的記錄數(shù)
6.sort排序 desc降序、asc升序?
7.should查詢在mysql中就好比是or或
8.?aggs:執(zhí)行聚合
9.bool query布爾查詢
二、_source查詢結(jié)果包含或排除某些字段
一、時間條件過濾+模糊查詢+精確匹配+關鍵字排除
1. 查詢出包含 log_geo 的數(shù)據(jù) “wildcard”: { “message”: “l(fā)og_geo” }
log_geo 前面有*表示搜索以log_geo結(jié)尾的數(shù)據(jù)
log_geo后面有* 表示搜以log_geo開始的數(shù)據(jù)
log_geo前后都有*就是通用匹配包含log_geo的記錄
“wildcard”:
{
“message”: “l(fā)og_geo”
}
2. 查詢某個時間段的數(shù)據(jù)
“range”: {
“@timestamp”: {
“gt”: “2018-02-08T07:00:00.056000000+00:00”,
”lt”: “2018-02-08T08:00:00.056000000+00:00”
}
}
#注意 時區(qū)減去8小時
3. 條件查詢與條件排除數(shù)據(jù)
3.1 match 包含provider 的數(shù)據(jù)
{
“match”:
{
“message”: “type:provider”
}
}
3.2 must_not 類似于 must 做排除使用
“must_not”: {
“match”: {
“message”: “dateTime:2018-02-08 15:59”
}
}
4. from 表示起始的記錄的ID
5. size 表示顯示的記錄數(shù)
6.sort排序 desc降序、asc升序?
7.should查詢在mysql中就好比是or或
但在es中使用should查詢必須要和must一起使用才可以,相當于must[should A,should B]
,中文解釋就好比是滿足A或者是B條件的數(shù)據(jù)
8.?aggs:執(zhí)行聚合
9.bool query布爾查詢
布爾查詢是一個復合查詢,由各個bool類型的子查詢組成。
must :返回文檔必須滿足該條件,且提供分數(shù)
filter :返回文檔必須滿足該條件,但是不需要提供分數(shù)
should :返回文檔可以滿足0個或多個條件,且提供分數(shù)
must_not : 返回文檔必須不滿足條件,但是不需要提供分數(shù)
????????查詢語句 1,2,3可以組合,也可以單獨使用,查詢語句如果得不到想要的結(jié)果應該是ES的分詞導致的,組合起來的語句如下:
{
"query": {
"bool": {
"must": [
{ "range": { "@timestamp": { "gt": "2018-02-08T07:00:00.056000000+00:00","lt": "2018-02-08T08:00:00.056000000+00:00" } } }
,
{ "wildcard": { "message": "*cp_geo*" } }
,
{ "match": { "message": "*type:platform*" } }
],
"must_not": { "match": { "message": "*deviceTypeCode:DTout00000000*" } },
"should": []
}
},
"from": 0,
"size": 50,
"sort": { "@timestamp": "desc" },
"aggs": {}
}
參考原文地址:https://blog.51cto.com/u_8649447/4869008
二、_source查詢結(jié)果包含或排除某些字段
????????通過_source 字段中的 include 和 exclude 來指定返回結(jié)果包含哪些字段,排除哪些字段
舉例:根據(jù)關系單號,查詢 es,設置_source 的 include 和 exclude
實例查詢語句:文章來源:http://www.zghlxwxcb.cn/news/detail-802555.html
{
"_source":{
"include":[
"policyNo",
"policyRelationNo",
"policyStatus"
],
"exclude":[
"salesType"
]
},
"query": {
"bool": {
"must": [
{
"term": {
"policyRelationNo": "KR01435021"
}
}
],
"should": [],
"must_not": []
}
},
"from": 0,
"size": 10
}
查詢效果:文章來源地址http://www.zghlxwxcb.cn/news/detail-802555.html
{
"_shards": {
"total": 5,
"successful": 5,
"failed": 0
},
"hits": {
"total": 19,
"max_score": 11.391884,
"hits": [
{
"_index": "search4policy-msad-dev3_20200520000000",
"_type": "policy-msad-dev3",
"_id": "4407038",
"_score": 11.391884,
"_source": {
"policyRelationNo": "KR01435021",
"policyNo": "B609120319",
"policyStatus": 11
}
},
{
"_index": "search4policy-msad-dev3_20200520000000",
"_type": "policy-msad-dev3",
"_id": "4407046",
"_score": 10.713255,
"_source": {
"policyRelationNo": "KR01435021",
"policyNo": "B609120323",
"policyStatus": 11
}
},
{
"_index": "search4policy-msad-dev3_20200520000000",
"_type": "policy-msad-dev3",
"_id": "4407044",
"_score": 10.713255,
"_source": {
"policyRelationNo": "KR01435021",
"policyNo": "B609120322",
"policyStatus": 11
}
},
{
"_index": "search4policy-msad-dev3_20200520000000",
"_type": "policy-msad-dev3",
"_id": "4407066",
"_score": 10.713255,
"_source": {
"policyRelationNo": "KR01435021",
"policyNo": "B609120333",
"policyStatus": 11
}
},
{
"_index": "search4policy-msad-dev3_20200520000000",
"_type": "policy-msad-dev3",
"_id": "4407058",
"_score": 10.713255,
"_source": {
"policyRelationNo": "KR01435021",
"policyNo": "B609120329",
"policyStatus": 11
}
},
{
"_index": "search4policy-msad-dev3_20200520000000",
"_type": "policy-msad-dev3",
"_id": "4407070",
"_score": 10.713255,
"_source": {
"policyRelationNo": "KR01435021",
"policyNo": "B609120335",
"policyStatus": 11
}
},
{
"_index": "search4policy-msad-dev3_20200520000000",
"_type": "policy-msad-dev3",
"_id": "4407056",
"_score": 10.294733,
"_source": {
"policyRelationNo": "KR01435021",
"policyNo": "B609120328",
"policyStatus": 11
}
},
{
"_index": "search4policy-msad-dev3_20200520000000",
"_type": "policy-msad-dev3",
"_id": "4407052",
"_score": 10.294733,
"_source": {
"policyRelationNo": "KR01435021",
"policyNo": "B609120326",
"policyStatus": 11
}
},
{
"_index": "search4policy-msad-dev3_20200520000000",
"_type": "policy-msad-dev3",
"_id": "4407062",
"_score": 10.294733,
"_source": {
"policyRelationNo": "KR01435021",
"policyNo": "B609120331",
"policyStatus": 11
}
},
{
"_index": "search4policy-msad-dev3_20200520000000",
"_type": "policy-msad-dev3",
"_id": "4407064",
"_score": 10.294733,
"_source": {
"policyRelationNo": "KR01435021",
"policyNo": "B609120332",
"policyStatus": 11
}
}
]
},
"took": 5,
"timed_out": false
}
到了這里,關于如何使用ES做簡單的時間條件過濾+模糊查詢+精確匹配+關鍵字排除,查詢 elasticsearch查詢結(jié)果包含或排除某些字段、_source查詢出需要的屬性名稱的文章就介紹完了。如果您還想了解更多內(nèi)容,請在右上角搜索TOY模板網(wǎng)以前的文章或繼續(xù)瀏覽下面的相關文章,希望大家以后多多支持TOY模板網(wǎng)!