ES使用Kibana查询,不区分大小写查询,查询最大数量限定修改

ES建立表数据,不区分大小写查询,修改查询最大值

PUT trace-record-test
{ 
  "settings" : {
      "index" : {
        "max_result_window" : "1000000",      //限定最大查询数量
        "analysis" : {
          "normalizer" : {
            "my_normalizer" : {               //不区分大小写查询
              "filter" : "lowercase",
              "type" : "custom"
            }
          }
        }
      }
    },
  "mappings" : {
      "properties" : {
        "companyName" : {
          "type" : "text",
          "fields" : {
            "keyword" : {
              "type" : "keyword",
              "ignore_above" : 256,
              "normalizer" : "my_normalizer"      //不区分大小写设定
            }
          }
        },
        "message" : {
          "type" : "text",
          "fields" : {
            "keyword" : {
              "type" : "keyword",
              "ignore_above" : 256,
              "normalizer" : "my_normalizer"
            }
          }
        },
        "mmsi" : {
          "type" : "text",
          "fields" : {
            "keyword" : {
              "type" : "keyword",
              "ignore_above" : 256,
              "normalizer" : "my_normalizer"
            }
          }
        },
        "mobile" : {
          "type" : "text",
          "fields" : {
            "keyword" : {
              "type" : "keyword",
              "ignore_above" : 256,
              "normalizer" : "my_normalizer"
            }
          }
        },
        "origin" : {
          "type" : "long"
        },
        "resultStatus" : {
          "type" : "long"
        },
        "searchTime" : {
          "type" : "date",
          "format" : "yyyy/MM/dd HH:mm:ss||yyyy/MM/dd||epoch_millis"
        },
        "type" : {
          "type" : "long"
        },
        "username" : {
          "type" : "text",
          "fields" : {
            "keyword" : {
              "type" : "keyword",
              "ignore_above" : 256,
              "normalizer" : "my_normalizer"
            }
          }
        }
      }
    }
}

复制表数据

POST _reindex
{
  "source": {
    "index": "trace-record-test"    
  },
  "dest": {
    //将数据trace-record-test复制到trace-record中.前提是表数据结构相同
    "index": "trace-record"      
  }
}

修改表查询最大值

PUT trace-record/_settings
{
  "index": {
    "max_result_window": "1000000"
  }
}

查询

POST trace-record-test/_update_by_query
{
  "query":{
     "match": {
       "resultStatus": "0"
     }
    },
    "script": {
        "inline": "ctx._source['resultStatus'] = '1'"
    }
}

修改

POST trace-test/_update_by_query   //查询并修改
{
  "query": {
    "match": {
      "resultStatus":-1
    }
  },
   "script": {
    "source": "ctx._source['resultStatus']=4"
  }
}

查询,类似mysql where 中的and条件

GET trace-test/_search
{
  "query": {
   "bool": {
			"must": [{
			   "term": {
			       "type":1
			   } 
			 },{
			   "term": {
			       "resultStatus":1000
			   } 
			 }
			]
   }
  },
  "sort": [
    {
      "searchTime": {
        "order": "desc"
      }
    }
  ]
}

修改 

POST trace-test/_update_by_query
{
  "query": {
    "bool": {
			"must": [{
			   "term": {
			       "type":1
			   } 
			 },{
			   "term": {
			       "resultStatus":1000
			   } 
			 }
			]
    }
  },
   "script": {
    "source": "ctx._source['resultStatus']=4"
  }
}