Elasticsearch 模糊查询，去重查询，返回指定列查询

模糊查询

public ResultListDO<IntelligenceReportDO> queryList(IntelligenceReportDO param) {
        try {
            RestHighLevelClient client = ESUtil.getRestHighLevelClient();
            SearchRequest searchRequest = new SearchRequest(NGSOC_INTELLIGENCE_REPORT);
            SearchSourceBuilder sourceBuilder = new SearchSourceBuilder();      // 构建搜索条件
            List<IntelligenceReportDO> list = new LinkedList<>();
            // 查询条件，我们可以使用QueryBuilders 工具类来实现
            BoolQueryBuilder boolQueryBuilder = QueryBuilders.boolQuery();
            //报告标题——模糊查询
            if (StringUtils.isNotBlank(param.getReport_title())){
                WildcardQueryBuilder queryBuilder1 = QueryBuilders.wildcardQuery("report_title", "*" + param.getReport_title() + "*");//搜索名字中含有jack的文档
                boolQueryBuilder.must(queryBuilder1);
            }
            //使用in 查询
            if (StringUtils.isNotBlank(param.getIoc_type())){
                List<String> strList = getIocType(param.getIoc_type());
                // 根据subject IN查询
                if (strList != null && strList.size() > 0) {
                    for (int j = 0; j < strList.size(); j++) {
                        boolQueryBuilder.should(QueryBuilders.matchPhraseQuery("data_id", strList.get(j)));
                    }
                    //boolQueryBuilder.minimumShouldMatch(1);
                }
            }
            sourceBuilder.sort("data_id", SortOrder.DESC);
            sourceBuilder.query(boolQueryBuilder);
            //起始位置从...开始
            sourceBuilder.from((param.getPage()-1) * param.getLimit());
            sourceBuilder.size(param.getLimit());
            sourceBuilder.timeout(new TimeValue(60, TimeUnit.SECONDS));
            searchRequest.source(sourceBuilder);
            SearchResponse search = client.search(searchRequest, RequestOptions.DEFAULT);
            if (search.getHits().getTotalHits().value > 0) {
                SearchHit[] hits = search.getHits().getHits();
                for (SearchHit hit : hits) {
                    Map<String, Object> map = hit.getSourceAsMap();
                    IntelligenceReportDO intelligenceReportDO = JSON.parseObject(JSON.toJSONString(map), IntelligenceReportDO.class);
                    intelligenceReportDO.setId(hit.getId());

                    String[] threat_arr = intelligenceReportDO.getReport_threat_type_name();
                    if (threat_arr != null && threat_arr.length > 0){
                        String threat_type_show = "";
                        for (int i=0;i<threat_arr.length;i++){
                            threat_type_show += threat_arr[i] + " ";
                        }
                        intelligenceReportDO.setReport_threat_type_show(threat_type_show);
                    }
                    //涉及行业
                    if (intelligenceReportDO.getReport_industry() != null){
                        intelligenceReportDO.setReport_industry_show(tcommonManage.getCodeTypeName(intelligenceReportDO.getReport_industry()));
                    }
                    list.add(intelligenceReportDO);
                }
            }
            return new ResultListDO<>(MessageCode.EXECUTE_SUCCESS,search.getHits().getTotalHits().value,list);
        }catch(Exception e) {
            log.error("method:queryList, ret:KnowledgeLog error", e);
            return new ResultListDO<>(MessageCode.DATABASE_ERROR);
        }
    }

去重查询，返回指定列查询

private List<String> getIocType(String ioc_type){
        List<String> list = new ArrayList<>();
        try {
            String[] arrys = {"ioc_type","report_id"};   //返回的指定列
            RestHighLevelClient client = ESUtil.getRestHighLevelClient();
            SearchRequest searchRequest = new SearchRequest("索引名字");
            SearchSourceBuilder sourceBuilder = new SearchSourceBuilder();      // 构建搜索条件
            // 查询条件，我们可以使用QueryBuilders 工具类来实现
            BoolQueryBuilder boolQueryBuilder = QueryBuilders.boolQuery();
            //根据IOC类型查询
            boolQueryBuilder.must(QueryBuilders.termQuery("ioc_type",ioc_type));
            sourceBuilder.fetchSource(arrys,Strings.EMPTY_ARRAY);
            //指定distinct字段（去重）
            CollapseBuilder collapseBuilder = new CollapseBuilder("report_id");
            sourceBuilder.query(boolQueryBuilder).collapse(collapseBuilder);
            sourceBuilder.timeout(new TimeValue(60, TimeUnit.SECONDS));
            sourceBuilder.size(100);        //设置查询的数量，因为默认是查询前10条记录
            searchRequest.source(sourceBuilder);
            SearchResponse search = client.search(searchRequest, RequestOptions.DEFAULT);
            if (search.getHits().getTotalHits().value > 0) {
                SearchHit[] hits = search.getHits().getHits();
                for (SearchHit hit : hits) {
                    Map<String, Object> map = hit.getSourceAsMap();
                    //获取你想要数据
                    if (!list.contains(map.get("report_id"))){
                        list.add(map.get("report_id").toString());
                    }
                }
            }
        }catch(Exception e) {
            log.error("method:queryList, ret:KnowledgeLog error", e);
        }
        return list;
    }