1、查询数据
monitor/_search
{
"size": 0,
"query": {
"term": {
"index.date": "20191024"
}
},
"aggs": {
"log_count": {
"terms": {
"field": "level.keyword"
}
}
}
}
2、清空数据
monitor/_doc/_delete_by_query
{"query":{"match_all":{}}}
3、设置fielddata数据
monitor/_mapping
{
"properties": {
"level": {
"type": "text",
"fielddata": true
}
}
}