es,一旦在存储超过95%的磁盘中的节点上分配了一个或多个分片的任何索引,该索引将被强制进入只读模式;这个索引的某一个节点的机器上存储不够了;这个索引就不被允许写入;
1、根据id,修改某个索引指定字段的DSL(这里修改了totalState、metricsErrorTriggerAlarmState等的值)
POST flume_real_time_alarm_monitor/_update/HostId1_174
{
"doc": {
"totalState": 1,
"metricsErrorTriggerAlarmState" : 1,
"importance" : 2,
"reportTime" : 1600067226443(当前时间)
}
}
2、根据条件删除:hostName=frim02kf
POST flume_real_time_alarm_monitor/_delete_by_query
{
"query": {
"bool": {
"must": [
{"term": {
"hostName": {
"value": "frim02kf"
}}}]}}}
3、查询语句:
{
"query": {
"bool": {
"must": [
{"term": {
"hostName": {
"value": "panxiuwen_windows10"
}
}}
]
}
},"_source": ["customizedFiveState","continualCustomizedFiveExceptions"]
}
GET flume_real_time_alarm_monitor/_search
{
"query": {
"script": {
"script": {
"source": "new Date().getTime()-doc['reportTime'].value.toInstant().toEpochMilli() >= 600000"
}
}
},"sort": [
{
"reportTime": {
"order": "desc"
}
}
]
}
4、根据DSL语句统计条数:
GET flume_real_time_alarm_monitor/_count
{
"query": {
"bool": {
"must": [
{"term": {
"totalState": {
"value": "1"}
}
},
{
"term": {
"isWhiteList": {
"value": "0"
}
}
},
{"term": {
"importance": {
"value": "2"
}
}}
]
}
}
}
5、根据记录ID,去删除对应的记录:
DELETE flume_real_time_data_link/_doc/aea4ed64481243b39a090540e0c9fb87
6、聚合查询
GET flume_real_time_system_metrics/_search
{ "size": 0, "query": { "bool": { "must": [ { "term": { "isWhiteList": { "value": 0, "boost": 1 } } } ], "adjust_pure_negative": true, "boost": 1 } }, "aggregations": { "group_importance": { "terms": { "field": "importance", "size": 10000, "min_doc_count": 1, "shard_min_doc_count": 0, "show_term_doc_count_error": false, "order": { "_key": "desc" } }, "aggregations": { "group_heartState": { "terms": { "field": "heartState", "size": 10, "min_doc_count": 1, "shard_min_doc_count": 0, "show_term_doc_count_error": false, "order": [ { "_count": "desc" }, { "_key": "asc" } ] } }, "group_lagState": { "terms": { "field": "lagState", "size": 10, "min_doc_count": 1, "shard_min_doc_count": 0, "show_term_doc_count_error": false, "order": [ { "_count": "desc" }, { "_key": "asc" } ] } }, "group_remainsState": { "terms": { "field": "remainsState", "size": 10, "min_doc_count": 1, "shard_min_doc_count": 0, "show_term_doc_count_error": false, "order": [ { "_count": "desc" }, { "_key": "asc" } ] } }, "group_discardState": { "terms": { "field": "discardState", "size": 10, "min_doc_count": 1, "shard_min_doc_count": 0, "show_term_doc_count_error": false, "order": [ { "_count": "desc" }, { "_key": "asc" } ] } }, "group_metricsError": { "terms": { "field": "metricsError", "size": 10, "min_doc_count": 1, "shard_min_doc_count": 0, "show_term_doc_count_error": false, "order": [ { "_count": "desc" }, { "_key": "asc" } ] } }, "group_cpuState": { "terms": { "field": "cpuState", "size": 10, "min_doc_count": 1, "shard_min_doc_count": 0, "show_term_doc_count_error": false, "order": [ { "_count": "desc" }, { "_key": "asc" } ] } }, "group_memoryState": { "terms": { "field": "memoryState", "size": 10, "min_doc_count": 1, "shard_min_doc_count": 0, "show_term_doc_count_error": false, "order": [ { "_count": "desc" }, { "_key": "asc" } ] } }, "group_customizedOneState": { "terms": { "field": "customizedOneState", "size": 10, "min_doc_count": 1, "shard_min_doc_count": 0, "show_term_doc_count_error": false, "order": [ { "_count": "desc" }, { "_key": "asc" } ] } }, "group_customizedTwoState": { "terms": { "field": "customizedTwoState", "size": 10, "min_doc_count": 1, "shard_min_doc_count": 0, "show_term_doc_count_error": false, "order": [ { "_count": "desc" }, { "_key": "asc" } ] } }, "group_customizedThreeState": { "terms": { "field": "customizedThreeState", "size": 10, "min_doc_count": 1, "shard_min_doc_count": 0, "show_term_doc_count_error": false, "order": [ { "_count": "desc" }, { "_key": "asc" } ] } }, "group_customizedFourState": { "terms": { "field": "customizedFourState", "size": 10, "min_doc_count": 1, "shard_min_doc_count": 0, "show_term_doc_count_error": false, "order": [ { "_count": "desc" }, { "_key": "asc" } ] } }, "group_customizedFiveState": { "terms": { "field": "customizedFiveState", "size": 10, "min_doc_count": 1, "shard_min_doc_count": 0, "show_term_doc_count_error": false, "order": [ { "_count": "desc" }, { "_key": "asc" } ] } } } } }}