【elasticsearch】kibana-ES的布尔运算

最新推荐文章于 2024-07-24 20:23:38 发布
最新推荐文章于 2024-07-24 20:23:38 发布
阅读量149 收藏
点赞数 3
分类专栏： 数据库运维-ElasticSearch-LK 文章标签： elasticsearch 大数据 搜索引擎
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/weixin_43346403/article/details/140052292
版权

1.布尔运算之 AND 的使用 

--查询 city='武汉' and "teacher"= "王麻子"
GET sspuuser/_search
{
"query": {
"bool": {
	"must": [
	{
		"match": {
		"teacher": "王麻子"
		}
	},
	{
		"match": {
		"city": "武汉"
		}
	}
	]
}
}
}
{
  "took" : 19,
  "timed_out" : false,
  "_shards" : {
    "total" : 3,
    "successful" : 3,
    "skipped" : 0,
    "failed" : 0
  },
  "hits" : {
    "total" : {
      "value" : 1,
      "relation" : "eq"
    },
    "max_score" : 1.933259,
    "hits" : [
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "7",
        "_score" : 1.933259,
        "_source" : {
          "id" : 7,
          "name" : "sspu007",
          "city" : "武汉",
          "course" : "redis",
          "teacher" : "王麻子",
          "birthdate" : "20200210"
        }
      }
    ]
  }
}

--如果是三个条件呢
--查询 city='武汉' and "teacher"= "王麻子" and course='redis'
GET sspuuser/_search
{
"query": {
"bool": {
	"must": [
	{
		"match": {
		"teacher": "王麻子"
		}
	},
	{
		"match": {
		"city": "武汉"
		}
	},
	{
		"match": {
		 "city" : "武汉"
		}
	}
	]
}
}
}

{
  "took" : 11,
  "timed_out" : false,
  "_shards" : {
    "total" : 3,
    "successful" : 3,
    "skipped" : 0,
    "failed" : 0
  },
  "hits" : {
    "total" : {
      "value" : 1,
      "relation" : "eq"
    },
    "max_score" : 3.3195531,
    "hits" : [
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "7",
        "_score" : 3.3195531,
        "_source" : {
          "id" : 7,
          "name" : "sspu007",
          "city" : "武汉",
          "course" : "redis",
          "teacher" : "王麻子",
          "birthdate" : "20200210"
        }
      }
    ]
  }
}

2.es布尔运算之

should 查询:OR 查询；
--"name"="sspu007" or "course" = "开源数据库"
GET sspuuser/_search
{
"query": {
"bool": {
"should": [
	{"match": {"name":"sspu007"}},
	{"match": {"course": "开源数据库"}}
    ]
}
}
}
--如果是关系数据库，我们应该可以查询到两条。
--但是这里查询除了4条。
--course=开源数据库，应该是做了拆解，匹配到了"数据库"关键字，
--所以都被查询出来了。
{
  "took" : 20,
  "timed_out" : false,
  "_shards" : {
    "total" : 3,
    "successful" : 3,
    "skipped" : 0,
    "failed" : 0
  },
  "hits" : {
    "total" : {
      "value" : 4,
      "relation" : "eq"
    },
    "max_score" : 2.7230785,
    "hits" : [
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "5",
        "_score" : 2.7230785,
        "_source" : {
          "id" : 5,
          "name" : "sspu005",
          "city" : "杭州",
          "course" : "开源数据库",
          "teacher" : "王麻子",
          "birthdate" : "20200827"
        }
      },
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "11",
        "_score" : 2.407774,
        "_source" : {
          "id" : 11,
          "name" : "sspu011",
          "city" : "上海",
          "course" : "国产数据库",
          "teacher" : "王麻子 2 号",
          "birthdate" : "20200402"
        }
      },
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "10",
        "_score" : 2.238372,
        "_source" : {
          "id" : 10,
          "name" : "sspu010",
          "city" : "广州",
          "course" : "国产数据库",
          "teacher" : "王麻子 1 号",
          "birthdate" : "20200302"
        }
      },
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "7",
        "_score" : 0.6931471,
        "_source" : {
          "id" : 7,
          "name" : "sspu007",
          "city" : "武汉",
          "course" : "redis",
          "teacher" : "王麻子",
          "birthdate" : "20200210"
        }
      }
    ]
  }
}

3.布尔运算之排查

--查询course不等于:'国产数据库'
GET sspuuser/_search
{
	"query": {
	"bool": {
	"must_not": [
	{"match": {"course" : "国产数据库"}}
	]
	}
	}
}
--包含:"数据库关键字的都被过滤掉了"
{
  "took" : 5,
  "timed_out" : false,
  "_shards" : {
    "total" : 3,
    "successful" : 3,
    "skipped" : 0,
    "failed" : 0
  },
  "hits" : {
    "total" : {
      "value" : 8,
      "relation" : "eq"
    },
    "max_score" : 0.0,
    "hits" : [
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "7",
        "_score" : 0.0,
        "_source" : {
          "id" : 7,
          "name" : "sspu007",
          "city" : "武汉",
          "course" : "redis",
          "teacher" : "王麻子",
          "birthdate" : "20200210"
        }
      },
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "2",
        "_score" : 0.0,
        "_source" : {
          "id" : 2,
          "name" : "sspu002",
          "city" : "深圳",
          "course" : "mysql",
          "teacher" : "王麻子 2 号",
          "birthdate" : "20200826"
        }
      },
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "3",
        "_score" : 0.0,
        "_source" : {
          "id" : 3,
          "name" : "sspu003",
          "city" : "北京",
          "course" : "sqlserver",
          "teacher" : "王麻子 1号",
          "birthdate" : "20200825"
        }
      },
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "4",
        "_score" : 0.0,
        "_source" : {
          "id" : 4,
          "name" : "sspu004",
          "city" : "上海",
          "course" : "postgrestsql",
          "teacher" : "王麻子 3 号",
          "birthdate" : "20200828"
        }
      },
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "1",
        "_score" : 0.0,
        "_source" : {
          "id" : 1,
          "name" : "sspu001",
          "city" : "广州",
          "course" : "oracle",
          "teacher" : "王麻子",
          "birthdate" : "20200829"
        }
      },
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "6",
        "_score" : 0.0,
        "_source" : {
          "id" : 6,
          "name" : "sspu006",
          "city" : "成都",
          "course" : "greenplum",
          "teacher" : "王麻子",
          "birthdate" : "20200729"
        }
      },
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "8",
        "_score" : 0.0,
        "_source" : {
          "id" : 8,
          "name" : "sspu008",
          "city" : "北京",
          "course" : "mongodb",
          "teacher" : "王麻子",
          "birthdate" : "20190529"
        }
      },
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "9",
        "_score" : 0.0,
        "_source" : {
          "id" : 9,
          "name" : "sspu009",
          "city" : "上海",
          "course" : "db2",
          "teacher" : "王麻子",
          "birthdate" : "20180229"
        }
      }
    ]
  }
}
--同时不满足多个条件的过滤掉。
GET sspuuser/_search
{
	"query": {
	"bool": {
	"must_not": [
	{"match": {"course" : "国产数据库"}},
	{"match": {"course" : "db2"}},
	{"match": {"course" : "mongodb"}},
	{"match": {"course" : "sqlserver"}},
	{"match": {"course" : "redis"}},
	{"match": {"course" : "mysql"}}
	]
	}
	}
}
--不满足的过滤后，结果如下。
{
  "took" : 8,
  "timed_out" : false,
  "_shards" : {
    "total" : 3,
    "successful" : 3,
    "skipped" : 0,
    "failed" : 0
  },
  "hits" : {
    "total" : {
      "value" : 3,
      "relation" : "eq"
    },
    "max_score" : 0.0,
    "hits" : [
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "4",
        "_score" : 0.0,
        "_source" : {
          "id" : 4,
          "name" : "sspu004",
          "city" : "上海",
          "course" : "postgrestsql",
          "teacher" : "王麻子 3 号",
          "birthdate" : "20200828"
        }
      },
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "1",
        "_score" : 0.0,
        "_source" : {
          "id" : 1,
          "name" : "sspu001",
          "city" : "广州",
          "course" : "oracle",
          "teacher" : "王麻子",
          "birthdate" : "20200829"
        }
      },
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "6",
        "_score" : 0.0,
        "_source" : {
          "id" : 6,
          "name" : "sspu006",
          "city" : "成都",
          "course" : "greenplum",
          "teacher" : "王麻子",
          "birthdate" : "20200729"
        }
      }
    ]
  }
}

4.满足部分条件，同时不满足某些条件=xx, 同时<>YY;

--"teacher"= "王麻子 1 号"
--查询teacher中包含1的值。
GET sspuuser/_search
{
"query":{
"bool": {
"must": [
{
"match": {
"teacher": "1"
}
}
]}}}
--结果如下。
{
  "took" : 4,
  "timed_out" : false,
  "_shards" : {
    "total" : 3,
    "successful" : 3,
    "skipped" : 0,
    "failed" : 0
  },
  "hits" : {
    "total" : {
      "value" : 2,
      "relation" : "eq"
    },
    "max_score" : 0.6931471,
    "hits" : [
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "3",
        "_score" : 0.6931471,
        "_source" : {
          "id" : 3,
          "name" : "sspu003",
          "city" : "北京",
          "course" : "sqlserver",
          "teacher" : "王麻子 1号",
          "birthdate" : "20200825"
        }
      },
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "10",
        "_score" : 0.6931471,
        "_source" : {
          "id" : 10,
          "name" : "sspu010",
          "city" : "广州",
          "course" : "国产数据库",
          "teacher" : "王麻子 1 号",
          "birthdate" : "20200302"
        }
      }
    ]
  }
}

--teacher包含1,时间范围过滤:生日大于:20200701

GET sspuuser/_search
{
  "query": {
    "bool": {
      "must": [
        {
          "match": {
            "teacher": "1"
          }
        }
      ],
      "filter": {
        "range": {
          "birthdate": {
            "gt": "20200825"
          }
        }
      }
    }
  }
}

{
  "took" : 31,
  "timed_out" : false,
  "_shards" : {
    "total" : 3,
    "successful" : 3,
    "skipped" : 0,
    "failed" : 0
  },
  "hits" : {
    "total" : {
      "value" : 1,
      "relation" : "eq"
    },
    "max_score" : 0.6931471,
    "hits" : [
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "3",
        "_score" : 0.6931471,
        "_source" : {
          "id" : 3,
          "name" : "sspu003",
          "city" : "北京",
          "course" : "sqlserver",
          "teacher" : "王麻子 1号",
          "birthdate" : "20200825"
        }
      }
    ]
  }
}

gt:大于 :>
gte:大于等于:>=
lt:小于:<
lte:小于等于:<=
--生日小于:20200824的文档。
GET sspuuser/_search
{
  "query": {
    "bool": {
      "must": [
        {
          "match": {
            "teacher": "1"
          }
        }
      ],
      "filter": {
        "range": {
          "birthdate": {
            "lt": "20200824"
          }
        }
      }
    }
  }
}
--小于等于:20200302的文档。

GET sspuuser/_search
{
  "query": {
    "bool": {
      "must": [
        {
          "match": {
            "teacher": "1"
          }
        }
      ],
      "filter": {
        "range": {
          "birthdate": {
            "lte": "20200302"
          }
        }
      }
    }
  }
}
--结果如下。
{
  "took" : 5,
  "timed_out" : false,
  "_shards" : {
    "total" : 3,
    "successful" : 3,
    "skipped" : 0,
    "failed" : 0
  },
  "hits" : {
    "total" : {
      "value" : 1,
      "relation" : "eq"
    },
    "max_score" : 0.6931471,
    "hits" : [
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "10",
        "_score" : 0.6931471,
        "_source" : {
          "id" : 10,
          "name" : "sspu010",
          "city" : "广州",
          "course" : "国产数据库",
          "teacher" : "王麻子 1 号",
          "birthdate" : "20200302"
        }
      }
    ]
  }
}

5.按照日期范围查询 

GET sspuuser/_search
{
  "query": {
    "bool": {
      "filter": {
        "range": {
          "birthdate": {
            "gte": 20200302,
            "lte": 20200824
          }
        }
      }
    }
  }
}
--结果如下。
{
  "took" : 7,
  "timed_out" : false,
  "_shards" : {
    "total" : 3,
    "successful" : 3,
    "skipped" : 0,
    "failed" : 0
  },
  "hits" : {
    "total" : {
      "value" : 3,
      "relation" : "eq"
    },
    "max_score" : 0.0,
    "hits" : [
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "10",
        "_score" : 0.0,
        "_source" : {
          "id" : 10,
          "name" : "sspu010",
          "city" : "广州",
          "course" : "国产数据库",
          "teacher" : "王麻子 1 号",
          "birthdate" : "20200302"
        }
      },
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "6",
        "_score" : 0.0,
        "_source" : {
          "id" : 6,
          "name" : "sspu006",
          "city" : "成都",
          "course" : "greenplum",
          "teacher" : "王麻子",
          "birthdate" : "20200729"
        }
      },
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "11",
        "_score" : 0.0,
        "_source" : {
          "id" : 11,
          "name" : "sspu011",
          "city" : "上海",
          "course" : "国产数据库",
          "teacher" : "王麻子 2 号",
          "birthdate" : "20200402"
        }
      }
    ]
  }
}

6.模糊匹配 

--查询包含:"数据库" 的记录，
GET sspuuser/_search
{
  "query": {
    "match": {
      "course": "数据库"
    }
  }
}
--结果。
{
  "took" : 11,
  "timed_out" : false,
  "_shards" : {
    "total" : 3,
    "successful" : 3,
    "skipped" : 0,
    "failed" : 0
  },
  "hits" : {
    "total" : {
      "value" : 3,
      "relation" : "eq"
    },
    "max_score" : 2.407774,
    "hits" : [
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "11",
        "_score" : 2.407774,
        "_source" : {
          "id" : 11,
          "name" : "sspu011",
          "city" : "上海",
          "course" : "国产数据库",
          "teacher" : "王麻子 2 号",
          "birthdate" : "20200402"
        }
      },
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "10",
        "_score" : 2.238372,
        "_source" : {
          "id" : 10,
          "name" : "sspu010",
          "city" : "广州",
          "course" : "国产数据库",
          "teacher" : "王麻子 1 号",
          "birthdate" : "20200302"
        }
      },
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "5",
        "_score" : 1.633847,
        "_source" : {
          "id" : 5,
          "name" : "sspu005",
          "city" : "杭州",
          "course" : "开源数据库",
          "teacher" : "王麻子",
          "birthdate" : "20200827"
        }
      }
    ]
  }
}
--搜索城市中包含"上"的文档

GET sspuuser/_search
{
  "query": {
    "match": {
      "city": "上"
    }
  }
}
{
  "took" : 5,
  "timed_out" : false,
  "_shards" : {
    "total" : 3,
    "successful" : 3,
    "skipped" : 0,
    "failed" : 0
  },
  "hits" : {
    "total" : {
      "value" : 3,
      "relation" : "eq"
    },
    "max_score" : 1.2039728,
    "hits" : [
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "4",
        "_score" : 1.2039728,
        "_source" : {
          "id" : 4,
          "name" : "sspu004",
          "city" : "上海",
          "course" : "postgrestsql",
          "teacher" : "王麻子 3 号",
          "birthdate" : "20200828"
        }
      },
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "9",
        "_score" : 0.87546873,
        "_source" : {
          "id" : 9,
          "name" : "sspu009",
          "city" : "上海",
          "course" : "db2",
          "teacher" : "王麻子",
          "birthdate" : "20180229"
        }
      },
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "11",
        "_score" : 0.87546873,
        "_source" : {
          "id" : 11,
          "name" : "sspu011",
          "city" : "上海",
          "course" : "国产数据库",
          "teacher" : "王麻子 2 号",
          "birthdate" : "20200402"
        }
      }
    ]
  }
}

--搜索城市中包含"上"或者包含"广"的文档
GET sspuuser/_search
{
  "query": {
    "match": {
      "city": "上广"
    }
  }
}
{
  "took" : 4,
  "timed_out" : false,
  "_shards" : {
    "total" : 3,
    "successful" : 3,
    "skipped" : 0,
    "failed" : 0
  },
  "hits" : {
    "total" : {
      "value" : 5,
      "relation" : "eq"
    },
    "max_score" : 1.3862942,
    "hits" : [
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "1",
        "_score" : 1.3862942,
        "_source" : {
          "id" : 1,
          "name" : "sspu001",
          "city" : "广州",
          "course" : "oracle",
          "teacher" : "王麻子",
          "birthdate" : "20200829"
        }
      },
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "4",
        "_score" : 1.2039728,
        "_source" : {
          "id" : 4,
          "name" : "sspu004",
          "city" : "上海",
          "course" : "postgrestsql",
          "teacher" : "王麻子 3 号",
          "birthdate" : "20200828"
        }
      },
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "10",
        "_score" : 1.2039728,
        "_source" : {
          "id" : 10,
          "name" : "sspu010",
          "city" : "广州",
          "course" : "国产数据库",
          "teacher" : "王麻子 1 号",
          "birthdate" : "20200302"
        }
      },
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "9",
        "_score" : 0.87546873,
        "_source" : {
          "id" : 9,
          "name" : "sspu009",
          "city" : "上海",
          "course" : "db2",
          "teacher" : "王麻子",
          "birthdate" : "20180229"
        }
      },
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "11",
        "_score" : 0.87546873,
        "_source" : {
          "id" : 11,
          "name" : "sspu011",
          "city" : "上海",
          "course" : "国产数据库",
          "teacher" : "王麻子 2 号",
          "birthdate" : "20200402"
        }
      }
    ]
  }
}

--搜索包含"上海"的文档。
GET sspuuser/_search
{
  "query": {
    "match": {
      "city": "上海"
    }
  }
}
{
  "took" : 3,
  "timed_out" : false,
  "_shards" : {
    "total" : 3,
    "successful" : 3,
    "skipped" : 0,
    "failed" : 0
  },
  "hits" : {
    "total" : {
      "value" : 3,
      "relation" : "eq"
    },
    "max_score" : 2.4079456,
    "hits" : [
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "4",
        "_score" : 2.4079456,
        "_source" : {
          "id" : 4,
          "name" : "sspu004",
          "city" : "上海",
          "course" : "postgrestsql",
          "teacher" : "王麻子 3 号",
          "birthdate" : "20200828"
        }
      },
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "9",
        "_score" : 1.7509375,
        "_source" : {
          "id" : 9,
          "name" : "sspu009",
          "city" : "上海",
          "course" : "db2",
          "teacher" : "王麻子",
          "birthdate" : "20180229"
        }
      },
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "11",
        "_score" : 1.7509375,
        "_source" : {
          "id" : 11,
          "name" : "sspu011",
          "city" : "上海",
          "course" : "国产数据库",
          "teacher" : "王麻子 2 号",
          "birthdate" : "20200402"
        }
      }
    ]
  }
}

7.match_phrase

完整匹配指定的值:返回包含"上海"的记录。
GET sspuuser/_search
{
  "query": {
    "match_phrase": {
      "city": "上海"
    }
  }
}
{
  "took" : 4,
  "timed_out" : false,
  "_shards" : {
    "total" : 3,
    "successful" : 3,
    "skipped" : 0,
    "failed" : 0
  },
  "hits" : {
    "total" : {
      "value" : 3,
      "relation" : "eq"
    },
    "max_score" : 2.4079456,
    "hits" : [
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "4",
        "_score" : 2.4079456,
        "_source" : {
          "id" : 4,
          "name" : "sspu004",
          "city" : "上海",
          "course" : "postgrestsql",
          "teacher" : "王麻子 3 号",
          "birthdate" : "20200828"
        }
      },
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "9",
        "_score" : 1.7509375,
        "_source" : {
          "id" : 9,
          "name" : "sspu009",
          "city" : "上海",
          "course" : "db2",
          "teacher" : "王麻子",
          "birthdate" : "20180229"
        }
      },
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "11",
        "_score" : 1.7509375,
        "_source" : {
          "id" : 11,
          "name" : "sspu011",
          "city" : "上海",
          "course" : "国产数据库",
          "teacher" : "王麻子 2 号",
          "birthdate" : "20200402"
        }
      }
    ]
  }
}
--搜索包含:"上广"的记录，没有记录。这个和上面的 match 得到的结果不同
GET sspuuser/_search
{
  "query": {
    "match_phrase": {
      "city": "上广"
    }
  }
}
--搜索包含:"广" 的文档
GET sspuuser/_search
{
  "query": {
    "match_phrase": {
      "city": "广"
    }
  }
}
{
  "took" : 6,
  "timed_out" : false,
  "_shards" : {
    "total" : 3,
    "successful" : 3,
    "skipped" : 0,
    "failed" : 0
  },
  "hits" : {
    "total" : {
      "value" : 2,
      "relation" : "eq"
    },
    "max_score" : 1.3862942,
    "hits" : [
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "1",
        "_score" : 1.3862942,
        "_source" : {
          "id" : 1,
          "name" : "sspu001",
          "city" : "广州",
          "course" : "oracle",
          "teacher" : "王麻子",
          "birthdate" : "20200829"
        }
      },
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "10",
        "_score" : 1.2039728,
        "_source" : {
          "id" : 10,
          "name" : "sspu010",
          "city" : "广州",
          "course" : "国产数据库",
          "teacher" : "王麻子 1 号",
          "birthdate" : "20200302"
        }
      }
    ]
  }
}

8.term查询，精确匹配查询 

--精确匹配。
--搜索:city 包含 "上" 的文档，没有结果。
GET sspuuser/_search
{
  "query": {
    "term": {
      "city": "上"
    }
  }
}
{
  "took" : 4,
  "timed_out" : false,
  "_shards" : {
    "total" : 3,
    "successful" : 3,
    "skipped" : 0,
    "failed" : 0
  },
  "hits" : {
    "total" : {
      "value" : 3,
      "relation" : "eq"
    },
    "max_score" : 1.2039728,
    "hits" : [
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "4",
        "_score" : 1.2039728,
        "_source" : {
          "id" : 4,
          "name" : "sspu004",
          "city" : "上海",
          "course" : "postgrestsql",
          "teacher" : "王麻子 3 号",
          "birthdate" : "20200828"
        }
      },
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "9",
        "_score" : 0.87546873,
        "_source" : {
          "id" : 9,
          "name" : "sspu009",
          "city" : "上海",
          "course" : "db2",
          "teacher" : "王麻子",
          "birthdate" : "20180229"
        }
      },
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "11",
        "_score" : 0.87546873,
        "_source" : {
          "id" : 11,
          "name" : "sspu011",
          "city" : "上海",
          "course" : "国产数据库",
          "teacher" : "王麻子 2 号",
          "birthdate" : "20200402"
        }
      }
    ]
  }
}

--搜索:city="上海" 的文档，没有查询到结果。
GET sspuuser/_search
{
  "query": {
    "term": {
      "city": "上海"
    }
  }
}

--term和match的区别。
--match是经过分析(analyze)的，会根据分词结果进行匹配。
--term是不经过分词的，直接取倒排索引查找精确的值。

--不推荐使用:term,而是使用 match;

GET sspuuser/_search
{
  "query": {
    "term": {
      "name": "sspu011"
    }
  }
}
{
  "took" : 4,
  "timed_out" : false,
  "_shards" : {
    "total" : 3,
    "successful" : 3,
    "skipped" : 0,
    "failed" : 0
  },
  "hits" : {
    "total" : {
      "value" : 1,
      "relation" : "eq"
    },
    "max_score" : 1.3862942,
    "hits" : [
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "11",
        "_score" : 1.3862942,
        "_source" : {
          "id" : 11,
          "name" : "sspu011",
          "city" : "上海",
          "course" : "国产数据库",
          "teacher" : "王麻子 2 号",
          "birthdate" : "20200402"
        }
      }
    ]
  }
}

9.高亮显示 

--查询出city包含"广"的稳定,city中"广"高亮显示。
GET sspuuser/_search
{
	"query":{
	"match": {
	"city" : "广"
	}
	},
	"highlight" :{
	"fields": {
	"city":{}
	}
	}
}
{
  "took" : 7,
  "timed_out" : false,
  "_shards" : {
    "total" : 3,
    "successful" : 3,
    "skipped" : 0,
    "failed" : 0
  },
  "hits" : {
    "total" : {
      "value" : 2,
      "relation" : "eq"
    },
    "max_score" : 1.3862942,
    "hits" : [
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "1",
        "_score" : 1.3862942,
        "_source" : {
          "id" : 1,
          "name" : "sspu001",
          "city" : "广州",
          "course" : "oracle",
          "teacher" : "王麻子",
          "birthdate" : "20200829"
        },
        "highlight" : {
          "city" : [
            "<em>广</em>州"
          ]
        }
      },
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "10",
        "_score" : 1.2039728,
        "_source" : {
          "id" : 10,
          "name" : "sspu010",
          "city" : "广州",
          "course" : "国产数据库",
          "teacher" : "王麻子 1 号",
          "birthdate" : "20200302"
        },
        "highlight" : {
          "city" : [
            "<em>广</em>州"
          ]
        }
      }
    ]
  }
}
--"广" 高亮显示
curl -XGET 192.168.1.7:9201/sspuuser/_search?pretty -H 'Content-Type: application/json' -d '
{
	"query":{
	"match": {
	"city" : "广"
	}
	},
	"highlight" :{
	"fields": {
	"city":{}
	}
	}
}
'

10.自定义高亮显示。

--teacher高亮显示为红色。
GET sspuuser/_search
{
	"query":{
	"match": {
	"name" : "sspu010"
	}
	},
	"highlight" :{
	"pre_tags": "<b class='key' style='color:red'>",
	"post_tags": "</b>",
	"fields": {
	"teacher":{}
	}
	}
}
--结果中未出现高亮显示的标签。
{
  "took" : 9,
  "timed_out" : false,
  "_shards" : {
    "total" : 3,
    "successful" : 3,
    "skipped" : 0,
    "failed" : 0
  },
  "hits" : {
    "total" : {
      "value" : 1,
      "relation" : "eq"
    },
    "max_score" : 1.2039728,
    "hits" : [
      {
        "_index" : "sspuuser",
        "_type" : "_doc",
        "_id" : "10",
        "_score" : 1.2039728,
        "_source" : {
          "id" : 10,
          "name" : "sspu010",
          "city" : "广州",
          "course" : "国产数据库",
          "teacher" : "王麻子 1 号",
          "birthdate" : "20200302"
        }
      }
    ]
  }
}

--'teacher'高亮显示
curl -XGET 192.168.1.7:9201/sspuuser/_search?pretty -H 'Content-Type: application/json' -d '
{
	"query":{
	"match": {
	"name" : "sspu010"
	}
	},
	"highlight" :{
	"pre_tags": "<b class='key' style='color:red'>",
	"post_tags": "</b>",
	"fields": {
	"teacher":{}
	}
	}
}'

戒掉贪嗔痴(薛双奇)
关注
  • 3
    点赞
  • 踩
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
专栏目录
kibana 写两个查询条件_使用es布尔查询进行多条件查询
weixin_26757949的博客
01-17 6094
布尔查询(Bool Query)布尔查询是一种联合查询，可以对多个查询条件进行组合，布尔查询有四个子查询关键词：关键词描述must查询的结果必须匹配查询条件，并计算scorefilter查询的结果必须匹配查询条件，和must不同不会计算scoreshould查询结果必须符合查询条件中的一个或多个must_not查询结果必须不符合查询条件有时我们在查询es时，希望能够一次返回符合多个查询条件的结果，...
kibana 查询_详解EFK之kibana查询与过滤
weixin_39754616的博客
12-03 4700
概述在kibana中，可通过搜索查询过滤事务或者在visualization界面点击元素过滤。记得先启用查询功能注意：Kibana拆分字段的时候是根据空格拆分的。例如：nested exception is java.net.SocketTimeoutException: Read timed out ，单独搜索 nested ，exception 都可以，但单独搜索 SocketTimeoutE...
Kibana常用查询命令
m0_50275872的博客
09-25 1万+
kibana 查询es 数据常用命令
Kibana查询语法使用手册
热门推荐
白开水的博客
03-15 7万+
引用自 https://blog.csdn.net/zhengchaooo/article/details/79500130 Kibana查询语法使用手册速查全文搜索字段正则近似搜索范围搜索优先级分组字段分组转义特殊字符简单查询1、范围查询2、逻辑操作3、分组4、转义特殊字符Lucene语法简单说明TermsFields模糊查询Term ModifiersFuzzy SearchesProxi...
kibana 搜索操作
mllhxn的专栏
03-17 1万+
关于kibana搜索语法的原文链接是，http://xiaorui.cc/?p=1099在kibana搜索的时候，可以简单的使用 Lucene通用的语法，或者使用基于JSON格式QueryDSL（DSL：领域特定语言）来构造搜索各种请求（更加灵活，方便构造复杂查询）。ElasticSearch 的各种语法，我还算熟悉的，但是在kibana这个强大的图表系统里面，居然迷失自我了 。 Lucene提供了
最新版linux kibana-7.13.1-linux-x86_64.tar.gz
06-04
2. **搜索与探索**：用户可以通过Kibana的搜索功能快速查找特定的数据，支持全文搜索、布尔运算和高级过滤器，使得数据检索更加高效。 3. **仪表板**：Kibana 允许用户创建自定义仪表板，将多个可视化组件组合在...
最新版linux elasticsearch-7.10.2-linux-x86_64.tar.gz
01-15
通过Kibana（可视化界面）配合Elasticsearch，可以方便地查看和分析集群的性能指标。 总的来说，Elasticsearch 7.10.2在Linux环境下提供了高性能、可扩展的搜索和分析解决方案。无论是对于日志分析、网站搜索还是...
elasticsearch-7.9.2
03-09
1. **全文搜索引擎**：Elasticsearch基于Lucene，支持全文搜索功能，可以对非结构化数据进行高效检索，提供布尔运算、短语匹配、模糊搜索等高级查询能力。 2. **分布式架构**：Elasticsearch设计为分布式的，支持多...
elasticsearch-7.17.9-windows-x86-64.zip
02-04
7. **搜索功能**：Elasticsearch提供了全文搜索、短语搜索、布尔运算、模糊搜索、多字段搜索等多种搜索方式，同时支持复杂查询结构，如过滤、排序和聚合。 8. **可视化工具**：Kibana是官方提供的数据可视化工具，...
ElasticSearch-head插件
11-21
6. **搜索与聚合**：支持复杂的查询语法，如布尔运算、短语匹配、范围查询等，并能展示聚合结果，便于数据分析。 7. **安全控制**：虽然head插件本身不提供安全认证，但可以通过配置Elasticsearch的权限控制，限制...
Kibana查询语法详解
手边笔记
03-31 5万+
Kibana查询语法详解 Kibana查询语法和Lucene相同，下面是Lucene的查询语法介绍。 注意：Lucene查询语法不适合在程序中使用，程序中使用可以调用Lucene-API，API提供了丰富功能来组合定制你所需要的查询器，查询语法是为手工输入高级查询设计的，而不是为程序拼接语法串而设计的。 1. 简单说明 1.1 Terms 一个查询将分解为若干Term以及操作符...
Kibana的使用方法（只看指定属性的数据，排除几个属性的数据，布尔查询，范围查询，模糊查询，过滤查询，排序查询）
Andre_dong的博客
11-15 3125
如果我们想只看到我们想看到的几个信息，该怎么去编写呢？ 可以用下图中的方法 我们可以用_source方法，然后往里面加入字段就可以了。 还有一种写法是这样的，就是把参数作为对象传入。以下这个查询字段的方法和上面的一样。 还有一种排除字段的方法，就是你要排除哪个字段，输入进去后，右边不会去显示这个字段了。 布尔查询 先说一下bool查询，这个bool查询只有must和should两种查询方法，一种是必须查询，就是必须要符合全部条件才能被查询到，另一种是非必须查询，也就是符合一条或者几条都会被显示到。
Git学习笔记
weixin_41422954的博客
07-23 257
Git学习笔记
Elasticsearch：Golang ECS 日志记录 - zap
Elastic 中国社区官方博客
07-23 549
ECS 记录器是你最喜欢的日志库的格式化程序/编码器插件。它们可让你轻松地将日志格式化为与 ECS 兼容的 JSON。编码器以 JSON 格式记录日志，并在可能的情况下依赖默认的。它还处理 ECS 错误格式的错误字段记录。
06-用户画像 + es映射+写入数据
weixin_46567476的博客
07-24 653
外部表删除时不会删除行数据，只删除元数据。或者cd 到当前目录下使用下面的命令运行。内部表数据会全部删除。
git面面观，面试题，常见问题
jylee的博客
07-23 655
Git是一款分布式源代码管理工具(版本控制工具)。Git得其数据更像是一系列微型文件系统的快照。使用Git，每次提交或保存项目状态时，Git基本上都会记录当时所有文件的外观，并存储对该快照的引用。为了提高效率，如果文件没有改变，Git不会再次存储文件，只是指向它已存储的上一个相同文件的链接。Git认为它的数据更像是一个快照流，会将数据作为项目的快照存储一段时间。可以有效、高速地处理从很小到非常大的项目版本管理。
vue3 + ts 报错：Parsing error: Unexpected token : eslint
weixin_52268321的博客
07-23 335
配置 “parser”: “@babel/eslint-parser” 告诉 ESLint 在检查代码之前，先使用 Babel 的解析器将代码转换成 ESLint 可以理解的形式。这对于那些使用了新的 ECMAScript 特性（如箭头函数、模板字符串、类等）或者使用了 Babel 进行代码转换的项目非常有用。
C. Good Prefixes
最新发布
无知的我
07-24 480
解题说明：此题是一道数学题，统计出数列中存在多少个子数列满足条件，很显然遍历数列，当出现子数列之和正好为其中最大数的两倍即可。统计出所有满足条件的情况。
【es】elasticsearch 自定义排序-按关键字位置排序
Rabbit House
07-23 411
另外doc、_source、ctx是结合上下文在不同场景用的，比如doc是_search查询用的，但这个问题的查询就用了_source，不能太死板。去掉.keyword能取到，但取得是内容片段，比如原文“金坷垃好处都有啥”，这个word/words值是“都有啥”。还有实体类的主键，按ee官方推荐是留个没注解的id自动生成id，而不是指定自己生成的主键，因为会影响数据储存的分区，导致查询效率降低。这个字段是用了ik分词器的，去掉分词器后（谨慎改变实体类，每次改变都会试es数据清空），word值成了“啥”
kibana-7.4.2-windows-x86_64
09-10
Kibana是一个开源的数据分析和可视化工具，用于与Elasticsearch进行集成并实现数据的展示和分析。kibana-7.4.2-windows-x86_64是特定的Kibana版本，适用于Windows 64位操作系统。 Kibana-7.4.2是在Elastic Stack的...
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值