es基本操作（陆续更新）

表达：
GET /_cat/health?v    ----?v输出详细信息

GET /_cat/health?v&ts=0   ----&ts=0禁止显示时间戳
epoch      timestamp cluster       status node.total node.data shards pri relo init unassign pending_tasks max_task_wait_time active_shards_percent
1475871424 16:17:04  elasticsearch green           1         1      5   5    0    0        0             0                  -                100.0%
cluster       status node.total node.data shards pri relo init unassign pending_tasks max_task_wait_time active_shards_percent
elasticsearch green           1         1      5   5    0    0        0             0                  -                100.0%

GET /_cat/fielddata?v&fields=body   ----显示fields=body的
id                     host      ip        node    field   size
Nqk-6inXQq-OxUfOUI8jNQ 127.0.0.1 127.0.0.1 Nqk-6in body    544b

GET /_cat/fielddata/body,soul?v     ----显示body和soul
id                     host      ip        node    field   size
Nqk-6inXQq-OxUfOUI8jNQ 127.0.0.1 127.0.0.1 Nqk-6in body    544b
Nqk-6inXQq-OxUfOUI8jNQ 127.0.0.1 127.0.0.1 Nqk-6in soul    480b

GET /_cat/nodes?v&h=id,ip,port,v,m   ----h是筛选条件


curl 'localhost:9200/_cat/indices?format=json&pretty'  ----以json格式显示
[
  {
    "pri.store.size": "650b",
    "health": "yellow",
    "status": "open",
    "index": "twitter",
    "pri": "5",
    "rep": "1",
    "docs.count": "0",
    "docs.deleted": "0",
    "store.size": "650b"
  }
]


curl '192.168.56.10:9200/_cat/indices?pretty' -H "Accept: application/json"    ----以json格式显示
[
  {
    "pri.store.size": "650b",
    "health": "yellow",
    "status": "open",
    "index": "twitter",
    "pri": "5",
    "rep": "1",
    "docs.count": "0",
    "docs.deleted": "0",
    "store.size": "650b"
  }
]




----------------------------------------------------------------------------------------------------------------------
查看分片：
[root@elk-bj-116-213-115-23 ~]# curl http://10.0.1.23:9200/_cat/shards
索引名                             分片号 分片or副本                           数据量        地址      节点
logstash-wedrive-6-2017.03           1         r   STARTED   3275832           910.2mb     10.0.1.78   node-2
logstash-wedrive-6-2017.03           1         p   STARTED   3275832           656mb       10.0.1.23   node-1
logstash-wedrive-6-2017.03           2         p   STARTED   3260508           654.5mb     10.0.1.35   node-3
logstash-wedrive-6-2017.03           2         r   STARTED   3260508           656mb       10.0.1.78   node-2
logstash-wedrive-6-2017.03           3         r   STARTED   3266847           652.4mb     10.0.1.35   node-3
logstash-wedrive-6-2017.03           3         p   STARTED   3266847           662.6mb     10.0.1.23   node-1
logstash-wedrive-6-2017.03           4         r   STARTED   3266542           655.3mb     10.0.1.35   node-3
logstash-wedrive-6-2017.03           4         p   STARTED   3266542           657mb       10.0.1.23   node-1
注：p为分片


只差看mapx索引的分片：
[root@elk-bj-116-213-115-23 ~]# curl http://10.0.1.23:9200/_cat/shards/logstash-mapx*
logstash-mapx-197-2017.02 1 r STARTED 11472553 6.5gb 10.0.1.35 node-3
logstash-mapx-197-2017.02 1 p STARTED 11472553 6.5gb 10.0.1.23 node-1
logstash-mapx-197-2017.02 2 p STARTED 11420723 6.5gb 10.0.1.35 node-3
logstash-mapx-197-2017.02 2 r STARTED 11420723 6.5gb 10.0.1.78 node-2



查看健康
[root@elk-bj-116-213-115-23 ~]# curl http://10.0.1.23:9200/_cat/health?v
                                                  节点总数             分片数  优先级          未分配的                                              活跃分片占比
epoch      timestamp       cluster     status    node.total  node.data shards   pri  relo init unassign    pending_tasks  max_task_wait_time    active_shards_percent
1489722715 11:51:55  my-application    green         3         3        302     151    0    0        0             0                  -                100.0%
注:后面跟?v表示详细输出


设置一个分片一个副本
[root@web-mapx-bj-192-168-6-3 ~]# curl -XPUT 192.168.6.3:9200/_settings -d'{"number_of_replicas":1}'
{"acknowledged":true}[root@web-mapx-bj-192-168-6-3 ~]#
[root@web-mapx-bj-192-168-6-3 ~]# curl http://192.168.6.3:9200/_cat/shards
logstash-ceshi-2 2 p STARTED     24 39.2kb 192.168.6.3 node-1
logstash-ceshi-2 2 r UNASSIGNED                        
logstash-ceshi-2 3 p STARTED     27 39.4kb 192.168.6.3 node-1
logstash-ceshi-2 3 r UNASSIGNED                        
logstash-ceshi-2 1 p STARTED     27 34.8kb 192.168.6.3 node-1
logstash-ceshi-2 1 r UNASSIGNED                        
logstash-ceshi-2 4 p STARTED     30 34.9kb 192.168.6.3 node-1
logstash-ceshi-2 4 r UNASSIGNED                        
logstash-ceshi-2 0 p STARTED     28 55.4kb 192.168.6.3 node-1
logstash-ceshi-2 0 r UNASSIGNED                   



设置一个分片三个副本
[root@web-mapx-bj-192-168-6-3 ~]# curl -XPUT 192.168.6.3:9200/_settings -d'{"number_of_replicas":3}'
{"acknowledged":true}[root@web-mapx-bj-192-168-6-3 ~]#
[root@web-mapx-bj-192-168-6-3 ~]# curl http://192.168.6.3:9200/_cat/shards
logstash-ceshi-2 2 p STARTED     24 39.2kb 192.168.6.3 node-1
logstash-ceshi-2 2 r UNASSIGNED                        
logstash-ceshi-2 2 r UNASSIGNED                        
logstash-ceshi-2 2 r UNASSIGNED                        
logstash-ceshi-2 3 p STARTED     27 39.4kb 192.168.6.3 node-1
logstash-ceshi-2 3 r UNASSIGNED                        
logstash-ceshi-2 3 r UNASSIGNED                        
logstash-ceshi-2 3 r UNASSIGNED                        
logstash-ceshi-2 1 p STARTED     27 34.8kb 192.168.6.3 node-1
logstash-ceshi-2 1 r UNASSIGNED                        
logstash-ceshi-2 1 r UNASSIGNED                        
logstash-ceshi-2 1 r UNASSIGNED                        
logstash-ceshi-2 4 p STARTED     30 34.9kb 192.168.6.3 node-1


查看es大概信息
[root@web-mapx-bj-192-168-6-3 ~]# curl 192.168.6.3:9200/_cat/master?v
id                     host        ip          node
Y6Ol9LHuQOurWHRAHCkDVA 192.168.6.3 192.168.6.3 node-1


查看节点信息（看一下集群）
[root@elk-bj-116-213-115-23 ~]# curl http://10.0.1.23:9200/_cat/nodes?v
ip        heap.percent ram.percent cpu load_1m load_5m load_15m node.role master name
10.0.1.35           62          97  12    6.69    7.10     7.89 mdi       -      node-3
10.0.1.78           56          99   6    3.26    3.39     3.31 mdi       -      node-2
10.0.1.23           70          97  12    6.69    8.74     7.36 mdi       *      node-1

带h是条件差选
[root@web-mapx-bj-192-168-6-3 ~]# curl 192.168.6.3:9200/_cat/nodes?v
ip          heap.percent ram.percent cpu load_1m load_5m load_15m node.role master name
192.168.6.3           16          27   1    0.03    0.04     0.00 mdi       *      node-1
[root@web-mapx-bj-192-168-6-3 ~]# curl 192.168.6.3:9200/_cat/nodes?h=ip,port,heapPercent,name
192.168.6.3 9300 16 node-1

查看分配提供了多少个碎片分配给每个数据节点的快照以及它们使用的磁盘空间
[root@elk-bj-116-213-115-23 ~]# curl http://10.0.1.23:9200/_cat/allocation?v
shards disk.indices disk.used disk.avail disk.total disk.percent host      ip        node
   100          2tb     2.9tb      7.8tb     10.8tb           27 10.0.1.78 10.0.1.78 node-2
   101        2.3tb     3.1tb      7.6tb     10.8tb           28 10.0.1.23 10.0.1.23 node-1
   101        2.1tb     2.7tb      8.1tb     10.8tb           25 10.0.1.35 10.0.1.35 node-3


计数提供对整个群集的文档计数的快速访问，或单个索引。
[root@web-mapx-bj-192-168-6-3 ~]# curl  http://192.168.6.3:9200/_cat/count?v
epoch      timestamp count
1489728942 13:35:42  1050


[root@elk-bj-116-213-115-23 ~]# curl http://10.0.1.23:9200/_cat/indices?v
health status index                                uuid                   pri rep docs.count docs.deleted store.size pri.store.size
green  open   logstash-gateway-tcp-obd-231-2017.03 lxRi5XGHQDOkzQt7JsCPqg   5   1   24899200            0     20.5gb         10.3gb
green  open   logstash-wireless-11-2017.02         XSw7i0LFQDmbbVERJV85ZA   5   1  294776427            0      381gb        190.5gb
green  open   logstash-wireless-82-2017.03         YFg9Gd84SXejsR_yqSH9qg   5   1  183429352            0    246.3gb        122.2gb
green  open   logstash-wedrive-12-2017.03          97RExDb5R32JadvGMXffhg   5   1   16621024            0      6.7gb          3.2gb




[root@elk-bj-116-213-115-23 ~]# curl -XGET '10.0.1.23:9200/_cat/recovery?v'
索引                 分片    时间  类型      阶段  源主机       源节点      目标主机   目标节点    仓库       快照    文件       文件恢复数      回复百分比     总数     字节
index                shard  time   type     stage source_host source_node target_host target_node repository snapshot files    files_recovered files_percent files_total bytes        bytes_recovered bytes_percent bytes_total  translog_ops translog_ops_recovered translog_ops_percent
logstash-35-2017.03   0     2.3s   peer     done  10.0.1.35   node-3      10.0.1.78   node-2      n/a        n/a      34       34              100.0%        34          27149046     27149046        100.0%        27149046     0            0                      100.0%
logstash-35-2017.03   0     13.9s  peer     done  10.0.1.35   node-3      10.0.1.23   node-1      n/a        n/a      46       46              100.0%        46          27129071     27129071        100.0%        27129071     4            4                      100.0%
logstash-35-2017.03   1     3.2s   peer     done  10.0.1.23   node-1      10.0.1.35   node-3      n/a        n/a      1        1               100.0%        1           130          130             100.0%        130          0            0                      100.0%
logstash-35-2017.03   1     3.1s   peer     done  10.0.1.23   node-1      10.0.1.78   node-2      n/a        n/a      49       49              100.0%        49          32769397     32769397        100.0%        32769397     0            0              


查看全部索引
[root@web-mapx-bj-192-168-6-3 0]# curl 'localhost:9200/_cat/indices?v'
health status index            uuid                   pri rep docs.count docs.deleted store.size pri.store.size
yellow open   .kibana          bLVFjCNuRf2zVUh6gnqr3g   1   1          3            0     14.6kb         14.6kb
yellow open   logstash-ceshi-2 Xg8PY2z_TgeRNLU2W6CGtg   5   1        174            0    182.7kb        182.7kb
yellow open   logstash-ceshi-1 bK-9dRu2SO6GbKnpUxNXSg   5   1        898            0    400.5kb        400.5kb


查看主节点在哪里
[root@elk-bj-116-213-115-23 ~]# curl 10.0.1.23:9200/_cat/nodes
10.0.1.78 70 99 7 2.91 3.14 3.43 mdi - node-2
10.0.1.35 81 99 7 4.32 5.47 6.90 mdi - node-3
10.0.1.23 75 99 6 2.79 3.18 3.30 mdi * node-1

删除索引
[root@elk-bj-116-213-115-23 ~]# curl -XDELETE '10.0.1.23:9200/logstash-mapx-197-2016.12'