ES : Can't get text on a START_OBJECT at 1.225

 

pre 环境,批量更新,遇到错误 : "Can't get text on a START_OBJECT at 1:225"

无法解析字段 pushDetail 。mapping 中 pushDetail 字段是keyword 类型,所有应该传字符串类型的数据。业务传的是 json 格式的数据,故报此错。

 

解决方案:

1、修改 pushDetail 字段 mapping 为 Object 类型 ;

2、传 字符串类型,修改更新 DSL 语句:

POST /sn_data_analysis/data_detail/_update_by_query
{
  "query": {
        "bool": {
            "must": [
                {"term": {"appCode": "SNYG"}},
{"term": {"activityId": "TEST160735"}}
            ]
        }
    },
  "script": {
    "inline": "ctx._source.pushDetail = params.pushDetail",
     "params": {
            "pushDetail": ["{\"count\":0,\"type\":1}","{\"count\":0,\"type\":2}","{\"count\":0,\"type\":3}","{\"count\":0,\"type\":4}","{\"count\":0,\"type\":5}","{\"count\":0,\"type\":6}","{\"count\":0,\"type\":7}","{\"count\":0,\"type\":8}","{\"count\":0,\"type\":21}","{\"count\":0,\"type\":9}","{\"count\":0,\"type\":10}","{\"count\":0,\"type\":11}","{\"count\":0,\"type\":12}","{\"count\":0,\"type\":13}","{\"count\":0,\"type\":14}","{\"count\":0,\"type\":19}","{\"count\":0,\"type\":20}","{\"count\":0,\"type\":15}","{\"count\":0,\"type\":17}","{\"count\":0,\"type\":16}","{\"count\":0,\"type\":18}","{\"count\":0,\"type\":22}","{\"count\":0,\"type\":25}","{\"count\":0,\"type\":26}","{\"count\":0,\"type\":27}","{\"count\":0,\"type\":28}","{\"count\":0,\"type\":29}","{\"count\":0,\"type\":30}"]
        },
    "lang": "painless"
  }
}

PS : 批量更新,不支持 doc 更新模式

  • 2
    点赞
  • 2
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
这段ES数据是一条日志记录,包含了事件头和事件实体。其中事件头包括版本号、时间戳、日志级别、进程ID、线程ID和日志来源等信息;事件实体包括事件域、事件动作、事件对象、事件服务、事件状态、事件主题、执行者信息、消息来源、异常时间和多模式路由器等信息。 以下是Java代码示例,用于读取多条ES数据并计算event_header和mimicrouter.exception_time差值平均值: ```java import org.elasticsearch.action.search.SearchRequest; import org.elasticsearch.action.search.SearchResponse; import org.elasticsearch.client.RestHighLevelClient; import org.elasticsearch.common.unit.TimeValue; import org.elasticsearch.index.query.QueryBuilders; import org.elasticsearch.search.SearchHit; import org.elasticsearch.search.builder.SearchSourceBuilder; import java.io.IOException; import java.util.ArrayList; import java.util.List; public class ESReader { private RestHighLevelClient client; public ESReader(RestHighLevelClient client) { this.client = client; } public double getAvgTimestampDiff(String index) throws IOException { SearchRequest searchRequest = new SearchRequest(index); SearchSourceBuilder searchSourceBuilder = new SearchSourceBuilder(); searchSourceBuilder.query(QueryBuilders.matchAllQuery()); searchSourceBuilder.size(1000); // 最多返回1000条数据 searchSourceBuilder.timeout(TimeValue.timeValueSeconds(5)); // 查询超时时间 searchRequest.source(searchSourceBuilder); SearchResponse searchResponse = client.search(searchRequest); SearchHit[] searchHits = searchResponse.getHits().getHits(); List<Long> timestampDiffs = new ArrayList<>(); for (SearchHit searchHit : searchHits) { String timestampStr = searchHit.getSourceAsMap().get("event_header").toString().split(",")[1]; long timestamp = java.sql.Timestamp.valueOf(timestampStr.substring(1, timestampStr.length() - 1)).getTime(); String exceptionTimeStr = searchHit.getSourceAsMap().get("mimicrouter.exception_time").toString(); long exceptionTime = java.sql.Timestamp.valueOf(exceptionTimeStr.replace(" ", "T")).getTime(); timestampDiffs.add(exceptionTime - timestamp); } double avgTimestampDiff = timestampDiffs.stream().mapToLong(Long::longValue).average().orElse(0.0); return avgTimestampDiff; } } ``` 该代码使用了Elasticsearch的Java High Level REST Client,通过查询ES索引获取多条数据。然后,根据每条数据的event_header和mimicrouter.exception_time计算时间差,并求平均值。其中,timestamp和exceptionTime需要根据具体数据格式进行调整。
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值