Elastic Certified Engineer 认证考点介绍

1. ECE考试介绍

ECE指elastic公司于2018年6月29号推出的elastic certified engineer认证考试。

报考方式及考试注意事项：

1. 考试版本自2021年7月1日起，由7.2升级为7.13
2. 官网注册报名 ，缴费
3. PSI系统预约时间考试(注意选择时区),远程在线考试
4. 提前15分钟进PSI系统配合监考官检查环境
5. 和监考官打字聊天，需要共享桌面语音和摄像头
6. 可以使用google翻译，和监考官商量，进去桌面直接浏览器输入谷歌翻译网址即可，也建议使用chrome自带的翻译工具

7. 考试系统web界面上有一排按钮，需要全部点绿进行声音，摄像头，桌面分享，按监考人员指挥缓慢操作
8. 有些题目只需要保存是环境即可，有些题目需要复制json到答题框，不要复制url(跨集群检索需要复制url)
9. Youtube两期官方考试介绍研讨会的视频要看一下，是es官方人员对考试的两次介绍，非常有用

2. 官网英文考纲

2.1. Installation and Configuration

• Deploy and start an Elasticsearch cluster that satisfies a given set of requirements
• Configure the nodes of a cluster to satisfy a given set of requirements
• Secure a cluster using Elasticsearch Security
• Define role-based access control using Elasticsearch Security

2.2. Indexing Data

• Define an index that satisfies a given set of requirements
• Perform index, create, read, update, and delete operations on the documents of an index
• Define and use index aliases
• Define and use an index template for a given pattern that satisfies a given set of requirements
• Define and use a dynamic template that satisfies a given set of requirements
• Use the Reindex API and Update By Query API to reindex and/or update documents
• Define and use an ingest pipeline that satisfies a given set of requirements, including the use of Painless to modify documents

2.3. Queries

• Write and execute a search query for terms and/or phrases in one or more fields of an index
• Write and execute a search query that is a Boolean combination of multiple queries and filters
• Highlight the search terms in the response of a query
• Sort the results of a query by a given set of requirements
  Implement pagination of the results of a search query
• Apply fuzzy matching to a query
• Define and use a search template
• Write and execute a query that searches across multiple clusters

2.4. Aggregations

• Write and execute metric and bucket aggregations
• Write and execute aggregations that contain sub-aggregations

2.5. Mappings and Text Analysis

• Define a mapping that satisfies a given set of requirements
• Define and use a custom analyzer that satisfies a given set of requirements
• Define and use multi-fields with different data types and/or analyzers
• Configure an index so that it properly maintains the relationships of nested arrays of objects

2.6. Cluster Administration

• Allocate the shards of an index to specific nodes based on a given set of requirements
• Configure shard allocation awareness and forced awareness for an index
• Diagnose shard issues and repair a cluster’s health
• Backup and restore a cluster and/or specific indices
• Configure a cluster for use with a hot/warm architecture
• Configure a cluster for cross cluster search

3. 对应中文考纲

3.1 安装与配置

• 部署启动集群满足给定的要求
• 配置集群的节点满足给定要求
• 使用security保护集群
• 使用基于role的security访问控制
  可以参考以下知识点：

//节点属性
node.name: sinan04
node.master: true
node.data: true
node.ingest: true
node.ml: false
cluster.remote.connect: false
//allocate
node.attr.zone: zone2
node.attr.type: warm
//快照
path.repo: ["/home/caster/repo"]
//禁止内存交换/锁内存
swapoff -a
vim /etc/security/limits.conf
* hard memlock unlimited
* soft memlock unlimited
bootstrap.memory_lock: true
action.destructive_requires_name: true
//开启安全，考试集群有白金权限无需配置SSL
xpack.security.enabled: true

3.2 索引数据

• 定义满足需求的索引
• 在索引上操作index，create，read，update和delete
• 定义使用别名
• 定义并使用满足需求的索引模板

search template

• 定义并使用满足需求的动态模板

match_mapping_type: 匹配类型
match/unmatch：匹配字段名
match_pattern：正则匹配

• 使用reindex和update by query操作文档
• 定义并使用满足需求的ingest pipeline(包括用painless)修改文档

3.3 查询

• 一个或者多个字段进行terms/phrases检索
• bool检索
• 高亮
• 排序
• 分页(3种)
• fuzzy匹配检索。
• search template
• 跨集群检索

3.4 聚合

• 定义使用metric bucket聚合
• 定义使用子聚合

3.5 映射和文本分析

• 定义mapping
• 自定义分词器
  参考以下分词器配置：

PUT myindex
{
  "settings": {
    "number_of_replicas": 1,
    "analysis": {
      "analyzer": {//分词器配置
        "my_analyzer": {//自定义分词器名称，含有a，b，c三部分
          "type": "custom",
          "tokenizer": "standard",
          "filter": [
            "my_synonym",
            "my_low",
            "my_filter"
          ],
          "char_filter": [
            "my_char_filter"
          ]
        }
      },
      "tokenizer": {},//a
      "filter": {//b
        "my_synonym": {//设置同义词
          "type": "synonym",
          "synonyms": [
            "foo,bar"
          ]
        },
        "my_low": {//转小写
          "type": "lowercase"
        },
        "my_filter": {//过滤长度5以下token
          "type": "length",
          "min": "5"
        }
      },
      "char_filter": {//c
        "my_char_filter": {//去掉单引号
          "type": "mapping",
          "mappings": [
            "'=>"
          ]
        }
      }
    }
  },
  "mappings": {
    "properties": {
      "text": {
        "type": "text",
        "analyzer": "my_analyzer"
      }
    }
  }
}

• 多类型字段及不同分词器
• Nested arrays类型使用

3.6 集群管理

• 分配分片到指定节点
• 分片感知/强制感知
• 诊断解决分片问题
• 备份恢复集群索引
• 使用hot/warm架构
• 跨集群查询