Elasticsearch RESTful API大全（持续更新中）

本文将Elasticsearch的常用RESTful API整理在一起，想用的时候直接复制粘贴，提高开发效率。

• 根据条件查询的多字段聚合，可以获取重复数据:

GET meeting_event_2022_07/_search
{
    "query": {
      "bool": {
        "filter": [
          {
            "term": {
              "event": "EndMeeting"
            }
          },
          {
            "range": {
              "timestamp": {
                "gt": 1658420316000
              }
            }
          }
        ]
      }
    },
    "size": 0,
    "aggs": {
        "aggs1": {
            "terms": {
                "field":"timestamp",
                "size":3000,
                "min_doc_count":1
            },
            "aggs": {
              "aggs2": {
                "terms": {
                  "field":"tags.groupId",
                  "size":3000,
                  "min_doc_count":1
                }
              }
            }
        }
    }
}

• 删除索引:

DELETE /call_chain_detail_new_2022_4

• 删除索引模板:

DELETE _template/stream_template

• 查看索引模板:

GET _template/client_call_chain

• 查看索引:

GET /call_chain_detail_new_2022_4

• 创建索引:

PUT /call_err_stat_histogram_2022_07_temp
{
	"settings": {
		"index": {
			"number_of_shards": 1,
			"number_of_replicas": 0,
			"translog": {
				"durability": "async",
				"sync_interval": "30s"
			},
			"refresh_interval": "15s"
		},
		"index.routing.allocation.require.lifecycle": "hot"
	},
	"mappings": {
		"_source": {
			"enabled": true
		},
		"dynamic": "false",
		"properties": {
			"dateline": {
				"type": "long"
			},
			"failNum": {
				"type": "long",
				"index": false
			}
		}
	}
}

• 索引数据转移:

POST /_reindex
{
    "source": {
        "index": "call_chain_detail_new_2022_7"
    },
    "dest": {
        "index": "call_err_stat_table_2022_07"
    }
}

• 查看所有索引:

GET /_all

• 查看每个节点的属性:

GET _cat/nodeattrs?v&h=node,attr,value&s=attr:desc

• 查看索引的分片分布:

GET _cat/shards/server_call_chain_detail_main_2022_07_14?v&h=index,shard,prirep,node&s=node
GET _cat/shards?v

• 修改查询请求最多返回多少个文档：

PUT meeting_event_2022_07/_settings?preserve_existing=true
{
  "max_result_window": "1000000"
}

• 查询去重后的数量：

POST meeting_event_2022_06/_search
{
  "query": {
      "bool": {
        "filter": [
          {
            "term": {
              "event": "StartMeeting"
            }
          },
          {
            "range": {
              "timestamp": {
                "gte": 1654012800000,
                "lte": 1654185599000
              }
            }
          }
        ]
      }
    },
  "size":0,
  "aggs":{
    "distincttest":{
      "cardinality": {
        "field": "tags.groupId"
      }
    }
  }
}

• 条件删除数据：

POST meeting_event_2022_06/_delete_by_query
{
  "query": {
      "bool": {
        "filter": [
          {
            "range": {
              "timestamp": {
                "gte": 1653926400000,
                "lte": 1654185600000
              }
            }
          }
        ]
      }
    }
}

• 查询索引所有记录：

GET meeting_event_2022_05/_search
{
  "query": {
      "match_all": {}
    }
}

• 模糊查询：

GET server_call_chain_detail_main_2022_08_12/_search
{
  "query": {
    "wildcard": {
      "tags.groupId": {
        "value": "*62f5c8c1-5c9e-fe49-e100-00006f6e6669}"
      }
    }
  }
}

• 多字段in查询：

GET meeting_event_2022_08/_search
{
    "query": {
      "bool": {
        "filter": [
          {
            "terms": {
              "event": ["StartMeeting", "EndMeeting"]
            }
          },
          {
            "term": {
              "tags.companyId": "1341186"
            }
          }
        ]
      }
    }
}

• 查询数量：

GET server_call_chain_detail_sub/_count
{
  "query": {
    "bool": {
      "filter": [
          {
            "term": {
              "deviceId": "sc1"
            }
          },
          {
            "range": {
              "startTime": {
                "gte": 1662652800000,
                "lt": 1662739200000
              }
            }
          }
        ]
    }
  }
}

查询分片是否迁移完成：

GET _cluster/allocation/explain
{
  "index": "index_name",
  "shard": 0,
  "primary": true
}