Elasticsearch Cat 命令

总结Elasticsearch Cat 命令。

Cat 命令公共参数

  • Help 查看帮助
GET _cat/master?help

id   |   | node id    
host | h | host name  
ip   |   | ip address 
node | n | node name   
  • Verbose 显示列名
GET _cat/master?v

id                     host  ip              node
AhlyPtZYTta1AVH_7mUSbQ node1 192.168.113.101 master-1
  • Headers 只显示特定列
GET _cat/master?v&h=host,ip,node

host  ip              node
node1 192.168.113.101 master-1
  • 数字格式化
bytes=kb store.size以kb输出

GET _cat/indices?v&h=index,docs.count,store.size&bytes=kb

index                           docs.count store.size
.monitoring-es-6-2018.08.25            441        721
.monitoring-kibana-6-2018.08.25         18        205
.kibana                                  1          7
.security-6                              3         19
  • Format 输出格式
#支持的输出格式有json,test,yaml等
#默认以text格式输出
#以json格式输出 format=json&pretty

GET _cat/indices?v&h=index,docs.count,store.size&bytes=kb&format=json&pretty

[
  {
    "index": ".monitoring-es-6-2018.08.25",
    "docs.count": "476",
    "store.size": "1114"
  },
  {
    "index": ".monitoring-kibana-6-2018.08.25",
    "docs.count": "21",
    "store.size": "72"
  },
  {
    "index": ".kibana",
    "docs.count": "1",
    "store.size": "7"
  },
  {
    "index": ".security-6",
    "docs.count": "3",
    "store.size": "19"
  }
]

#以yaml格式输出 format=yaml&pretty
GET _cat/indices?v&h=index,docs.count,store.size&bytes=kb&format=yaml&pretty

---
- index: ".monitoring-es-6-2018.08.25"
  docs.count: "509"
  store.size: "979"
- index: ".monitoring-kibana-6-2018.08.25"
  docs.count: "24"
  store.size: "142"
- index: ".kibana"
  docs.count: "1"
  store.size: "7"
- index: ".security-6"
  docs.count: "3"
  store.size: "19"
  • Sort 排序
#按index升序,docs.count降序
GET _cat/indices?v&h=index,docs.count,store.size&bytes=kb&format=json&pretty&s=index,docs.count:desc

[
  {
    "index": ".kibana",
    "docs.count": "1",
    "store.size": "7"
  },
  {
    "index": ".monitoring-es-6-2018.08.25",
    "docs.count": "608",
    "store.size": "1068"
  },
  {
    "index": ".monitoring-kibana-6-2018.08.25",
    "docs.count": "33",
    "store.size": "163"
  },
  {
    "index": ".security-6",
    "docs.count": "3",
    "store.size": "19"
  }
]

查看集群健康状态

GET _cat/health?v&h=cluster,status

cluster status
my-elk  green

查看集群节点和磁盘剩余

#集群节点
GET _cat/nodes?v

ip              heap.percent ram.percent cpu load_1m load_5m load_15m node.role master name
192.168.113.103           60          93   5    0.54    0.53     0.55 di        -      data-2
192.168.113.104           12          87   7    0.72    0.77     0.94 -         -      client-1
192.168.113.101           13          90   4    0.35    0.32     0.37 m         *      master-1
192.168.113.102           46          91 100    2.81    2.84     3.44 di        -      data-1

#磁盘剩余
GET _cat/nodes?v&h=ip,node.role,name,disk.avail

ip              node.role name     disk.avail
192.168.113.102 di        data-1        2.4gb
192.168.113.103 di        data-2        6.5gb
192.168.113.104 -         client-1        5gb
192.168.113.101 m         master-1      6.5gb

查看集群master节点

GET _cat/master?v

id                     host  ip              node
AhlyPtZYTta1AVH_7mUSbQ node1 192.168.113.101 master-1

查看分配

#查看每个数据节点上的分片数(shards),以及每个数据节点磁盘剩余
GET _cat/allocation?v

shards disk.indices disk.used disk.avail disk.total disk.percent host  ip              node
     4        8.2mb      14gb      3.2gb     17.2gb           81 node2 192.168.113.102 data-1
     4        5.7mb     9.9gb      7.3gb     17.2gb           57 node3 192.168.113.103 data-2

查看被挂起任务

GET _cat/pending_tasks?v

insertOrder timeInQueue priority source

查看每个节点正在运行的插件

GET _cat/plugins?v

name     component          version
data-2   x-pack-core        6.2.4
data-2   x-pack-deprecation 6.2.4
data-2   x-pack-graph       6.2.4
data-2   x-pack-logstash    6.2.4
data-2   x-pack-ml          6.2.4
data-2   x-pack-monitoring  6.2.4
data-2   x-pack-security    6.2.4
data-2   x-pack-upgrade     6.2.4
data-2   x-pack-watcher     6.2.4
client-1 x-pack-core        6.2.4
client-1 x-pack-deprecation 6.2.4
client-1 x-pack-graph       6.2.4
client-1 x-pack-logstash    6.2.4
client-1 x-pack-ml          6.2.4
client-1 x-pack-monitoring  6.2.4
client-1 x-pack-security    6.2.4
client-1 x-pack-upgrade     6.2.4
client-1 x-pack-watcher     6.2.4
master-1 x-pack-core        6.2.4
master-1 x-pack-deprecation 6.2.4
master-1 x-pack-graph       6.2.4
master-1 x-pack-logstash    6.2.4
master-1 x-pack-ml          6.2.4
master-1 x-pack-monitoring  6.2.4
master-1 x-pack-security    6.2.4
master-1 x-pack-upgrade     6.2.4
master-1 x-pack-watcher     6.2.4
data-1   x-pack-core        6.2.4
data-1   x-pack-deprecation 6.2.4
data-1   x-pack-graph       6.2.4
data-1   x-pack-logstash    6.2.4
data-1   x-pack-ml          6.2.4
data-1   x-pack-monitoring  6.2.4
data-1   x-pack-security    6.2.4
data-1   x-pack-upgrade     6.2.4
data-1   x-pack-watcher     6.2.4

查看每个节点的自定义属性

GET /_cat/nodeattrs?v

node     host  ip              attr              value
data-2   node3 192.168.113.103 ml.machine_memory 1028517888
data-2   node3 192.168.113.103 ml.max_open_jobs  20
data-2   node3 192.168.113.103 ml.enabled        true
client-1 node4 192.168.113.104 ml.machine_memory 1856888832
client-1 node4 192.168.113.104 ml.max_open_jobs  20
client-1 node4 192.168.113.104 ml.enabled        true
master-1 node1 192.168.113.101 ml.machine_memory 1028517888
master-1 node1 192.168.113.101 ml.max_open_jobs  20
master-1 node1 192.168.113.101 ml.enabled        true
data-1   node2 192.168.113.102 ml.machine_memory 1028517888
data-1   node2 192.168.113.102 ml.max_open_jobs  20
data-1   node2 192.168.113.102 ml.enabled        true

查看索引分片的恢复视图

#索引分片的恢复视图,包括正在进行和先前已完成的恢复
#只要索引分片移动到群集中的其他节点,就会发生恢复事件
GET _cat/recovery/.kibana?v&format=json&pretty

[
  {
    "index": ".kibana",
    "shard": "0",
    "time": "446ms",
    "type": "empty_store",
    "stage": "done",
    "source_host": "n/a",
    "source_node": "n/a",
    "target_host": "node2",
    "target_node": "data-1",
    "repository": "n/a",
    "snapshot": "n/a",
    "files": "0",
    "files_recovered": "0",
    "files_percent": "0.0%",
    "files_total": "0",
    "bytes": "0",
    "bytes_recovered": "0",
    "bytes_percent": "0.0%",
    "bytes_total": "0",
    "translog_ops": "0",
    "translog_ops_recovered": "0",
    "translog_ops_percent": "100.0%"
  },
  {
    "index": ".kibana",
    "shard": "0",
    "time": "2s",
    "type": "peer",
    "stage": "done",
    "source_host": "node2",
    "source_node": "data-1",
    "target_host": "node3",
    "target_node": "data-2",
    "repository": "n/a",
    "snapshot": "n/a",
    "files": "1",
    "files_recovered": "1",
    "files_percent": "100.0%",
    "files_total": "1",
    "bytes": "230",
    "bytes_recovered": "230",
    "bytes_percent": "100.0%",
    "bytes_total": "230",
    "translog_ops": "0",
    "translog_ops_recovered": "0",
    "translog_ops_percent": "100.0%"
  }
]

查看每个数据节点上fielddata当前占用的堆内存

全文检索用倒排索引非常合适;但过滤、分组聚合、排序这些操作,正排索引更合适。

ES中引入了fielddata的数据结构用来做正排索引。如果需要对某一个字段排序、分组聚合、过滤,则可将字段设置成fielddata。

默认情况下:

  text类型的字段是不能分组及排序的,如需要则需要开启该字段的fielddata=true,但是这样耗费大量的内存,不建议这么使用。

  keyword类型默认可分组及排序。

fielddata默认是采用懒加载的机制加载到堆内存中。当某个字段基数特别大,可能会出现OOM。

GET _cat/fielddata?v&h=node,field,size

node   field                      size
data-1 kibana_stats.kibana.uuid     0b
data-1 kibana_stats.kibana.status   0b
data-2 kibana_stats.kibana.uuid     0b
data-2 kibana_stats.kibana.status   0b

#对某一字段进行查看
GET _cat/fielddata?v&h=node,field,size&fields=kibana_stats.kibana.uuid

node   field                    size
data-2 kibana_stats.kibana.uuid   0b
data-1 kibana_stats.kibana.uuid   0b

查看注册的快照仓库

GET _cat/repositories?v

id type

查看快照仓库下的快照

#可将ES中的一个或多个索引定期备份到如HDFS、S3等更可靠的文件系统,以应对灾难性的故障
#第一次快照是一个完整拷贝,所有后续快照则保留的是已存快照和新数据之间的差异
#当出现灾难性故障时,可基于快照恢复

GET _cat/snapshots/repo1?v

查看每个节点线程池的统计信息

#查看每个节点bulk线程池的统计信息
# actinve(活跃的),queue(队列中的)和 reject(拒绝的)
GET _cat/thread_pool/bulk?v&format=json&pretty

[
  {
    "node_name": "data-2",
    "name": "bulk",
    "active": "0",
    "queue": "0",
    "rejected": "0"
  },
  {
    "node_name": "client-1",
    "name": "bulk",
    "active": "0",
    "queue": "0",
    "rejected": "0"
  },
  {
    "node_name": "master-1",
    "name": "bulk",
    "active": "0",
    "queue": "0",
    "rejected": "0"
  },
  {
    "node_name": "data-1",
    "name": "bulk",
    "active": "0",
    "queue": "0",
    "rejected": "0"
  }
]

查看索引

GET _cat/indices/.monitoring*?v&h=index,health

index                           health
.monitoring-es-6-2018.08.25     green
.monitoring-kibana-6-2018.08.25 green

查看别名

GET _cat/aliases?v&h=alias,index

alias     index
.security .security-6

查看索引模板

GET _cat/templates?v&format=json&pretty

[
  {
    "name": "logstash-index-template",
    "index_patterns": "[.logstash]",
    "order": "0",
    "version": null
  },
  {
    "name": "security_audit_log",
    "index_patterns": "[.security_audit_log*]",
    "order": "2147483647",
    "version": null
  },
  {
    "name": ".monitoring-kibana",
    "index_patterns": "[.monitoring-kibana-6-*]",
    "order": "0",
    "version": "6020099"
  },
  {
    "name": ".watches",
    "index_patterns": "[.watches*]",
    "order": "2147483647",
    "version": null
  },
  {
    "name": ".monitoring-beats",
    "index_patterns": "[.monitoring-beats-6-*]",
    "order": "0",
    "version": "6020099"
  },
  {
    "name": ".ml-notifications",
    "index_patterns": "[.ml-notifications]",
    "order": "0",
    "version": "6020499"
  },
  {
    "name": ".ml-anomalies-",
    "index_patterns": "[.ml-anomalies-*]",
    "order": "0",
    "version": "6020499"
  },
  {
    "name": ".ml-state",
    "index_patterns": "[.ml-state]",
    "order": "0",
    "version": "6020499"
  },
  {
    "name": "security-index-template",
    "index_patterns": "[.security-*]",
    "order": "1000",
    "version": null
  },
  {
    "name": ".watch-history-7",
    "index_patterns": "[.watcher-history-7*]",
    "order": "2147483647",
    "version": null
  },
  {
    "name": ".ml-meta",
    "index_patterns": "[.ml-meta]",
    "order": "0",
    "version": "6020499"
  },
  {
    "name": ".monitoring-alerts",
    "index_patterns": "[.monitoring-alerts-6]",
    "order": "0",
    "version": "6020099"
  },
  {
    "name": ".monitoring-logstash",
    "index_patterns": "[.monitoring-logstash-6-*]",
    "order": "0",
    "version": "6020099"
  },
  {
    "name": ".triggered_watches",
    "index_patterns": "[.triggered_watches*]",
    "order": "2147483647",
    "version": null
  },
  {
    "name": ".monitoring-es",
    "index_patterns": "[.monitoring-es-6-*]",
    "order": "0",
    "version": "6020099"
  },
  {
    "name": "kibana_index_template:.kibana",
    "index_patterns": "[.kibana]",
    "order": "0",
    "version": null
  }
]

查看单个或某类或整个集群文档数

#整个集群文档数
GET _cat/count?v
epoch      timestamp count
1535185950 16:32:30  3008

#某类索引文档数
GET _cat/count/.monitoring*?v
epoch      timestamp count
1535186185 16:36:25  2162

注意:只包含实际文档数,不包括尚未清除的已删除文档。

查看每个索引的分片

GET _cat/shards?v&format=json&pretty&s=index
[
  {
    "index": ".kibana",
    "shard": "0",
    "prirep": "p",
    "state": "STARTED",
    "docs": "1",
    "store": "4kb",
    "ip": "192.168.113.102",
    "node": "data-1"
  },
  {
    "index": ".kibana",
    "shard": "0",
    "prirep": "r",
    "state": "STARTED",
    "docs": "1",
    "store": "4kb",
    "ip": "192.168.113.103",
    "node": "data-2"
  },
  {
    "index": ".monitoring-es-6-2018.08.25",
    "shard": "0",
    "prirep": "p",
    "state": "STARTED",
    "docs": "2557",
    "store": "1.6mb",
    "ip": "192.168.113.102",
    "node": "data-1"
  },
  {
    "index": ".monitoring-es-6-2018.08.25",
    "shard": "0",
    "prirep": "r",
    "state": "STARTED",
    "docs": "2557",
    "store": "1.5mb",
    "ip": "192.168.113.103",
    "node": "data-2"
  },
  {
    "index": ".monitoring-kibana-6-2018.08.25",
    "shard": "0",
    "prirep": "p",
    "state": "STARTED",
    "docs": "211",
    "store": "110.1kb",
    "ip": "192.168.113.102",
    "node": "data-1"
  },
  {
    "index": ".monitoring-kibana-6-2018.08.25",
    "shard": "0",
    "prirep": "r",
    "state": "STARTED",
    "docs": "211",
    "store": "110.1kb",
    "ip": "192.168.113.103",
    "node": "data-2"
  },
  {
    "index": ".security-6",
    "shard": "0",
    "prirep": "p",
    "state": "STARTED",
    "docs": "3",
    "store": "9.8kb",
    "ip": "192.168.113.102",
    "node": "data-1"
  },
  {
    "index": ".security-6",
    "shard": "0",
    "prirep": "r",
    "state": "STARTED",
    "docs": "3",
    "store": "9.8kb",
    "ip": "192.168.113.103",
    "node": "data-2"
  }
]

查看每个索引的segment

GET _cat/segments/.kibana?v&format=json&pretty

[
  {
    "index": ".kibana",
    "shard": "0",
    "prirep": "p",
    "ip": "192.168.113.102",
    "segment": "_2",
    "generation": "2",
    "docs.count": "1",
    "docs.deleted": "0",
    "size": "3.7kb",
    "size.memory": "1346",
    "committed": "true",
    "searchable": "true",
    "version": "7.2.1",
    "compound": "true"
  },
  {
    "index": ".kibana",
    "shard": "0",
    "prirep": "r",
    "ip": "192.168.113.103",
    "segment": "_2",
    "generation": "2",
    "docs.count": "1",
    "docs.deleted": "0",
    "size": "3.7kb",
    "size.memory": "1346",
    "committed": "true",
    "searchable": "true",
    "version": "7.2.1",
    "compound": "true"
  }
]
评论 3
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值