elasticsearch 基础语法

elasticsearch 常见语法

有index test_user_index

1. 根据id 获取doc

GET test_user_index/_doc/{id}

2. 根据doc_id 查询指定数据并根据 字段 amount 金额sum，id 统计 count，corp_id 去除

GET /test_order_index/_search
{
  "size": 0, // 控制返回的文本数
  "query": {
    "terms": {
      "doc_id ": ["doc_id1", "doc_id2", "doc_id3"]
    }
  },
  "aggs": {
    "company_stats": {
      "terms": {
        "field": "doc_id",
        "size": 10
      },
      "aggs": {
        "total_amount": {
          "sum": {
            "field": "amount"
          }
        },
        "total_count": {
          "value_count": {
            "field": "count"
          }
        },
        "distinct_win_companies": {
          "cardinality": {
            "field": "corp_id"
          }
        }
      }
    }
  }
}

3. 根据字段列举出字段的所有值

GET /test_order_index/_search
{
  "size": 0,
  "aggs": {
    "agg_label": {
      "terms": {
        "field": "city",
        "size": 500 // 控制聚合返回的条数，根据实际情况
      }
    }
  }
}

4. 排除

GET /test_order_index/_search
{
  "query": {
    "bool": {
      "must_not": {
        "term": {
          "test": "true"
        }
      }
    }
  }
}

5. 创建别名

POST /_aliases
{
  "actions": [
    {
      "add": {
        "index": "your_index",
        "alias": "your_alias"
      }
    }
  ]
}

6. 修改别名指向

POST /_aliases
{
  "actions": [
    {
      "remove": {
        "index": "your_current_index",
        "alias": "your_alias"
      }
    },
    {
      "add": {
        "index": "your_new_index",
        "alias": "your_alias"
      }
    }
  ]
}