kibana查询es语句实例

@[TOC](kibana查询es语句实例)
kibana dev tools会自动补全

//查看状态
GET /_cat/health?v
//节点
GET /_cat/nodes?v
//索引
GET /_cat/indices?v
PUT /customer
DELETE /customer
//类型
GET /bank/_mapping

//文档
PUT /customer/doc/1
{
  "name": "John Doe"
}
GET /customer/doc/1
POST /customer/doc/1/_update
{
  "doc":{"name":"Jane Doe"}
}
DELETE /customer/doc/1
GET /customer/_mapping
POST /customer/doc/_bulk
{"index":{"_id":"1"}}
{"name": "John Doe" }
{"index":{"_id":"2"}}
{"name": "Jane Doe" }
GET /customer/doc/2


//查询
GET /bank/_search
{
  "query": { "match_all": {} }
}
GET /bank/_search
{
  "query": {"match_all": {}}
  , "from": 0
  , "size": 5
}
GET /bank/_search
{
  "query": {"match_all": {}}
  , "from": 0
  , "size": 5,
  "sort": [
    {
      "balance": {
        "order": "desc"
      }
    }

  ]
}


//选择字段 排序
GET /bank/_search
{
  "query": {"match_all": {}},
  "_source": ["account_number","balance"],
  "sort": [
    {
      "balance": {
        "order": "desc"
      }
    }
  ]
}


//条件搜索
GET /bank/_search
{
  "query": {
    "match": {
      "account_number": "20"
    }
  }
}
GET /bank/_search
{
  "query": {
    "match": {
      "address": "mill"
    }
  }
}
GET /bank/_search
{
  "query": {
    "match_phrase": {
      "address": "mill lane"
    }
  }
}


//组合搜索
GET /bank/_search
{
  "query": {
    "bool": {
      "must": [
        {
          "match": {
            "address": "mill"
          }}
          , {"match": {
            "address": "lane"
          }
        }
      ]
    }
  }
}
GET /bank/_search
{
  "query": {
    "bool": {
      "should": [
        {
          "match": {
            "address": "mill"
          }
        },{
          "match": {
            "address": "lane"
          }
        }
      ]
    }
  }
}
GET /bank/_search
{
  "query": {
    "bool": {
      "must_not": [
        {
          "match": {
            "address": "mill"
          }
        },{
          "match": {
            "address": "lane"
          }
        }
      ]
    }
  }
}
GET /bank/_search
{
  "query": {
    "bool": {
      "must": [
        {
          "match": {
            "age": "40"
          }
        }
      ],"must_not": [
        {"match": {
          "state": "ID"
        }}
      ]
    }
  }
}


//过滤搜索
GET /bank/_search
{
  "query": {
    "bool": {
      "must": [
        {"match_all": {}}
      ],
      "filter": [
        {"range": {
          "balance": {
            "gte": 20000,
            "lte": 30000
          }
        }}
      ]
    }
  }
}
//普通聚合
GET /bank/_search
{
  "size": 0,
  "aggs": {
    "group_by_state": {
      "terms": {
        "field": "state.keyword"
      }
    }
  }
}


//嵌套聚合
GET /bank/_search
{
  "size": 0,
  "aggs": {
    "group_by_state": {
      "terms": {
        "field": "state.keyword"
      },"aggs":{
      "average_balance":{
        "avg": {
          "field": "balance"
        }
      }
    }
    }
  }
}


//嵌套聚合后排序
GET /bank/_search
{
  "size": 0
  , "aggs": {
    "group_by_state": {
      "terms": {
        "field": "state.keyword",
        "order": {
          "average_balance": "desc"
        }
      },"aggs": {
        "average_balance": {
          "avg": {
            "field": "balance"
          }
        }
      }
    }
  }
}


//分段聚合
GET /bank/_search
{
  "size": 0,
  "aggs": {
    "group_by_age": {
      "range": {
        "field": "age",
        "ranges": [
          {
            "from": 20,
            "to": 30
          },{
            "from": 30,
            "to": 40
          },{
            "from": 40,
            "to": 50
          }
        ]
      },"aggs": {
        "group_by_gender": {
          "terms": {
            "field": "gender.keyword"
          },"aggs": {
            "average_balance": {
              "avg": {
                "field": "balance"
              }
            }
          }
        }
      }
    }
  }
}
  • 0
    点赞
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值