4. Elasticsearch 常用语法

DELETE logstash_servers-2019-08-15

====================================

GET logstash_servers-2019-08-15/_search

{

"query": {

"match_all": {}

}

}

======================================

GET _search

{

"query": {

"match_all": {}

}

}

====================================

GET _cat/indices?v

 

=========================================

DELETE /logstash_network-2019-08-07

=========================================

GET /website/article/_search

{

"query": {

"match_all": {}

}

}

 

=====================================

 

 

PUT /Test123

 

=========================================

 

DELETE /syslogtest-2019-01

 

GET /logstash-switchlog-2019-04/_search

 

GET /logstash-solarwinds-2019-04/_search?q=*

 

GET /logstash-switchlog-2019-04

 

 

 

 

GET /logstash_network*/_search

 

{

"query": {

"term": {

"message": {

"value": "LINK_UPDOWN"

}

}

}

}

 

 

 

 

GET logstash-switchlog-2019-04/_search

{"query":{"match":{"message":{"query":"OSPF_NBR_CHG Ten-GigabitEthernet1/0/1 BJ-YS-1F-A01-ASW-H3CS6800-002 ","operator":"and"}}}}

 

 

 

GET logstash-switchlog-2019-04/_search

{

"query": {

"match": {

"message": {

"query": "LLDP_DELETE_NEIGHBOR LINK_UPDOWN PHY_UPDOWN OSPF_NBR_CHG",

"minimum_should_match": "1"

}

}

}

}

 

 

 

GET logstash-switchlog-2019-04/_search

{

"query": {

"bool": {

"filter": [

{

"trem": {

"message": "ospf DOWN"

}

}

]

}

}

}

 

 

GET logstash-switchlog-2019-04/_search

{

"query": {

"bool": {

"must": [

{}

],

"must_not": [

{}

]

}

}

}