Elastic Search 常用语法

根据指定字段查询

{
  "query": {
    "match_phrase": {
      "app": "server-name"
    }
  }
}

{
  "query": {
    "match_phrase": {
      "tags": "server-name"
    }
  }
}

包含排除的

{
  "query": {
    "bool": {
      "must": [{
          "match_phrase": {
            "env": "test20"
          }
        },
        {
          "match_phrase": {
            "app": "server-name"
          }
        },
        {
          "match_phrase": {
            "tags": "server-name"
          }
        },
        {
          "match": {
            "message": "WARN"
          }
      }],
      "filter":{
          "bool":{
              "must_not":[{
                  "match":{
                      "message":"dataCome"
                  }
              },{
                  "match":{
                      "message":"ping"
                  }
              }]
          }
      }
    }
  }
}

模糊匹配搜索

{
  "query": {
    "wildcard": {
      "tags": "rest*"
    }
  }
}