regexp关键字查询
POST prod-lumi-testlog-formal-alias*/_search
{ "size": 100,
"sort": [
{
"ts": {
"order": "desc"
}
}
],
"query": {
"bool": {
"filter": [
{
"regexp": {
"field.message": ".*101017090042408608.*"
}
},
{
"term":
{
"tag.source":"/home/fee/logs/abc/log/abc.log"
}
},{
"term":
{
"tag.test":"abc"
}
},
{
"range": {
"ts": {
"gte": "2024-02-27T11:23:15+08:00",
"lte": "2024-03-04T11:06:00+08:00"
}
}
}
]
}
}
}