elk和es数据操作

 1、查询数据

 

 

monitor/_search

{
  "size": 0,
  "query": {
    "term": {
      "index.date": "20191024"
    }
  },
  "aggs": {
    "log_count": {
      "terms": {
        "field": "level.keyword"
      }
    }
  }
}

 

 2、清空数据

 monitor/_doc/_delete_by_query

 {"query":{"match_all":{}}}

 3、设置fielddata数据

 

monitor/_mapping

{
  "properties": {
    "level": {
      "type": "text",
      "fielddata": true
    }
  }
}