ES 查询修改

查询ES索引整表

POST /_sql?format=txt
{
  "query": " SELECT * FROM biz_event_alarm_index_2023_6"
}
-- 或者
GET biz_event_alarm_index_2023_6/_search

带条件查询指定字段

POST /_sql?format=txt
{
  "query": "select id,alarmName,createTime from biz_event_alarm_index_2023_6 where id =18"
}

sql 查询结果示例

      id       |   alarmName   |       createTime       
---------------+---------------+------------------------
18             |液体             |2023-06-28T14:12:11.390Z

ES修改

POST 的 _update_by_query使用
query中为筛选条件, script为修改的内容

POST biz_event_alarm_index_2023_6/_update_by_query
{
  "query":{
    "bool":{
      "must":{
        "range" : {
          "id" : {
            "from" : 17,
            "to" : null,
            "include_lower" : true,
            "include_upper" : true,
            "boost" : 1.0
          }
        }
      }
    }
  },
  "script":{
    "source":"ctx._source['alarmName'] = '告警名称';"
  }
}

等同于

update biz_event_alarm_index_2023_6 set alarmName= '告警名称'  where id <=17

es数据量过大 超出范围

PUT _all/_settings
{
  "index":{
    "max_result_window":1000000
  }
}