es查询DSL语句

最新推荐文章于 2024-06-20 13:52:27 发布
最新推荐文章于 2024-06-20 13:52:27 发布
阅读量5.3k 收藏 16
点赞数 2
分类专栏： Elasticsearch
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/zxl646801924/article/details/103164317
版权

1.索引index相关操作

# 查询所有索引
GET _cat/indices?v

# 查询某个索引下的信息
GET /lockie_test

# 新增索引
PUT /lockie_test

# 删除索引
DELETE /lockie_test

# 创建索引,同时设置mapping
PUT lockie_test
{
  "mappings": {
    "properties": {
      "orderNo": {
        "type": "text"
      }
    }
  }
}

2.mapping相关

# 查询某个索引的mapping
GET lockie_test/_mapping?pretty

# 创建索引,同时设置mapping
PUT /lockie_test/_mapping
{
  "mappings": {
    "properties": {
      "orderNo": {
        "type": "text"
      }
    }
  }
}


# 添加新字段
POST lockie_test/_mapping
{
  "properties": {
    "dealDl": {
      "type": "double"
    },
    "balanceTime": {
      "type": "date",
      "format": "yyyy-MM-dd HH:mm:ss"
    },
    "city": {
      "type": "text"
    }
  }
}

# 删除mapping,删除索引即可
DELETE /lockie_test

3.doc相关，新增，删除，更新

# 新增数据 指定id使用PUT，不指定id由es随机生成使用POST
PUT lockie_test/_doc/1
{
  "orderNo": "201910221750150001",
  "dealDl": 2.5,
  "balanceTime": "2019-10-22 17:50:15",
  "city": "上海"
}


PUT lockie_test/_doc/2
{
  "orderNo": "201910221751150002",
  "dealDl": 1.5,
  "balanceTime": "2019-10-22 17:51:15",
  "city": "北京"
}

PUT lockie_test/_doc/3
{
  "orderNo": "201910230905150003",
  "dealDl": 20.8,
  "balanceTime": "2019-10-23 09:05:10",
  "city": "广州"
}


# 删除数据
DELETE lockie_test/_doc/3

# 根据查询条件删除
POST /lockie_test/_delete_by_query?q=city:广州
POST /lockie_test/_delete_by_query
{
  "query":{
    "match":{
      "city": "广州"
    }
  }
}


# 修改数据，如果用PUT则是替换全部数据，使用POST则更新想要的数据
PUT lockie_test/_doc/3
{
  "orderNo": "201910230905150003"
}

# 查询更新结果发现使用PUT更新后字段只剩下orderNo
{
  "_index" : "lockie_test",
  "_type" : "_doc",
  "_id" : "3",
  "_version" : 1,
  "_seq_no" : 32,
  "_primary_term" : 2,
  "found" : true,
  "_source" : {
    "orderNo" : "201910230905150003"
  }
}

# 如果只是想更新某个字段的值则需要使用POST，比如更新id=3的城市为深圳
POST lockie_test/_doc/3/_update
{
  "doc": {
    "city": "深圳",
    "remark": "这是备注3"
  }
}

# 查询更新后结果
{
  "_index" : "lockie_test",
  "_type" : "_doc",
  "_id" : "3",
  "_version" : 5,
  "_seq_no" : 36,
  "_primary_term" : 2,
  "found" : true,
  "_source" : {
    "orderNo" : "201910230905150003",
    "dealDl" : 20.8,
    "balanceTime" : "2019-10-23 09:05:10",
    "city" : "深圳",
    "remark" : "这是备注3"
  }
}


# 根据条件更新，批量更新
POST /lockie_test/_update_by_query
{
  "script": {
    "lang": "painless",
    "inline": "ctx._source.remark='批量更新备注'"
  }
}

# 更新使用函数计算
POST lockie_test/_doc/1/_update
{
  "script": "ctx._source.dealDl += 1"
}

# 查看更新后的结果
{
  "took" : 154,
  "timed_out" : false,
  "_shards" : {
    "total" : 1,
    "successful" : 1,
    "skipped" : 0,
    "failed" : 0
  },
  "hits" : {
    "total" : {
      "value" : 3,
      "relation" : "eq"
    },
    "max_score" : 1.0,
    "hits" : [
      {
        "_index" : "lockie_test",
        "_type" : "_doc",
        "_id" : "1",
        "_score" : 1.0,
        "_source" : {
          "orderNo" : "201910221750150001",
          "dealDl" : 3.5,
          "city" : "深圳",
          "remark" : "批量更新备注",
          "balanceTime" : "2019-10-22 17:50:15"
        }
      },
      {
        "_index" : "lockie_test",
        "_type" : "_doc",
        "_id" : "2",
        "_score" : 1.0,
        "_source" : {
          "orderNo" : "201910221751150002",
          "dealDl" : 1.5,
          "city" : "北京",
          "remark" : "批量更新备注",
          "balanceTime" : "2019-10-22 17:51:15"
        }
      },
      {
        "_index" : "lockie_test",
        "_type" : "_doc",
        "_id" : "3",
        "_score" : 1.0,
        "_source" : {
          "orderNo" : "201910230905150003",
          "dealDl" : 20.8,
          "city" : "深圳",
          "remark" : "批量更新备注",
          "balanceTime" : "2019-10-23 09:05:10"
        }
      }
    ]
  }
}

4.doc的查询操作

# 查询所有数据
GET lockie_test/_search

{
  "took" : 619,
  "timed_out" : false,
  "_shards" : {
    "total" : 1,
    "successful" : 1,
    "skipped" : 0,
    "failed" : 0
  },
  "hits" : {
    "total" : {
      "value" : 3,
      "relation" : "eq"
    },
    "max_score" : 1.0,
    "hits" : [
      {
        "_index" : "lockie_test",
        "_type" : "_doc",
        "_id" : "2",
        "_score" : 1.0,
        "_source" : {
          "orderNo" : "201910221751150002",
          "dealDl" : 1.5,
          "city" : "北京",
          "remark" : "这是备注2",
          "balanceTime" : "2019-10-22 17:51:15"
        }
      },
      {
        "_index" : "lockie_test",
        "_type" : "_doc",
        "_id" : "3",
        "_score" : 1.0,
        "_source" : {
          "orderNo" : "201910230905150003",
          "dealDl" : 20.8,
          "city" : "深圳",
          "remark" : "这是备注3",
          "balanceTime" : "2019-10-23 09:05:10"
        }
      },
      {
        "_index" : "lockie_test",
        "_type" : "_doc",
        "_id" : "1",
        "_score" : 1.0,
        "_source" : {
          "orderNo" : "201910221750150001",
          "dealDl" : 3.5,
          "city" : "上海",
          "remark" : "这是备注1",
          "balanceTime" : "2019-10-22 17:50:15"
        }
      }
    ]
  }
}

# 查询所有的并且排序
GET lockie_test/_search?sort=_id:asc

# 根据id查询
GET lockie_test/_doc/1

{
  "_index" : "lockie_test",
  "_type" : "_doc",
  "_id" : "1",
  "_version" : 22,
  "_seq_no" : 43,
  "_primary_term" : 2,
  "found" : true,
  "_source" : {
    "orderNo" : "201910221750150001",
    "dealDl" : 3.5,
    "city" : "上海",
    "remark" : "这是备注1",
    "balanceTime" : "2019-10-22 17:50:15"
  }
}

# 根据其他条件查询
GET /lockie_test/_search?q=remark:备注&sort=dealDl:desc

# 查询只显示指定字段
GET lockie_test/_doc/1?_source=orderNo,remark
GET lockie_test/_search
{
  "_source": ["orderNo","city","remark"]
}

{
  "_index" : "lockie_test",
  "_type" : "_doc",
  "_id" : "1",
  "_version" : 22,
  "_seq_no" : 43,
  "_primary_term" : 2,
  "found" : true,
  "_source" : {
    "orderNo" : "201910221750150001",
    "remark" : "这是备注1"
  }
}

# 分页查询from ,to分页参数
GET lockie_test/_search
{
  "from": 0,
  "size": 2, 
  "sort": [
    {
      "dealDl": {
        "order": "asc"
      }
    }
  ],
  "query": {
    "match_all": {}
  }
}

# match匹配查询，类似数据库的like，match_phrase将条件作为一个短语进行查询
GET /lockie_test/_search
{
  "query": {
    "match": {
      "city": "深圳"
    }
  }
}

# must查询，条件必须满足才能查到
GET /lockie_test/_search
{
  "query": {
    "bool": {
      "must": [
        {
          "term": {
            "orderNo": {
              "value": "201910221750150001"
            }
          }
        },
        {
          "match": {
            "city": "上海"
          }
        }
      ]
    }
  }
}

{
  "took" : 1,
  "timed_out" : false,
  "_shards" : {
    "total" : 1,
    "successful" : 1,
    "skipped" : 0,
    "failed" : 0
  },
  "hits" : {
    "total" : {
      "value" : 1,
      "relation" : "eq"
    },
    "max_score" : 2.9424875,
    "hits" : [
      {
        "_index" : "lockie_test",
        "_type" : "_doc",
        "_id" : "1",
        "_score" : 2.9424875,
        "_source" : {
          "orderNo" : "201910221750150001",
          "dealDl" : 3.5,
          "city" : "上海",
          "remark" : "这是备注1",
          "balanceTime" : "2019-10-22 17:50:15"
        }
      }
    ]
  }
}


# should查询，类似数据库的or，条件任一个满足即可
GET /lockie_test/_search
{
  "query": {
    "bool": {
      "should": [
        {
          "term": {
            "orderNo": {
              "value": "201910221750150001"
            }
          }
        },
        {
          "match": {
            "city": "深圳"
          }
        }
      ]
    }
  }
}

{
  "took" : 0,
  "timed_out" : false,
  "_shards" : {
    "total" : 1,
    "successful" : 1,
    "skipped" : 0,
    "failed" : 0
  },
  "hits" : {
    "total" : {
      "value" : 2,
      "relation" : "eq"
    },
    "max_score" : 1.9616584,
    "hits" : [
      {
        "_index" : "lockie_test",
        "_type" : "_doc",
        "_id" : "3",
        "_score" : 1.9616584,
        "_source" : {
          "orderNo" : "201910230905150003",
          "dealDl" : 20.8,
          "city" : "深圳",
          "remark" : "这是备注3",
          "balanceTime" : "2019-10-23 09:05:10"
        }
      },
      {
        "_index" : "lockie_test",
        "_type" : "_doc",
        "_id" : "1",
        "_score" : 0.9808292,
        "_source" : {
          "orderNo" : "201910221750150001",
          "dealDl" : 3.5,
          "city" : "上海",
          "remark" : "这是备注1",
          "balanceTime" : "2019-10-22 17:50:15"
        }
      }
    ]
  }
}

# minimum_should_match 这个是指或的条件,必须满足多少条,下面的minimum_should_match=2,所以一条都查不到
GET /lockie_test/_search
{
  "query": {
    "bool": {
      "should": [
        {
          "term": {
            "orderNo": {
              "value": "201910221750150001"
            }
          }
        },
        {
          "match": {
            "city": "深圳"
          }
        }
      ],
      "minimum_should_match": 2
    }
  }
}

# must_not 排出条件值，类似数据库的not和not in
GET /lockie_test/_search
{
  "query": {
    "bool": {
      "must_not": [
        {
          "term": {
            "orderNo": {
              "value": "201910230905150003"
            }
          }
        }
      ]
    }
  }
}

# range 范围查询
GET /lockie_test/_search
{
  "query": {
    "bool": {
      "must": [
        {
          "range": {
            "balanceTime": {
              "gte": "2019-10-21 00:00:00",
              "lte": "2019-10-22 23:00:00"
            }
          }
        }
      ]
    }
  }
}


{
  "took" : 0,
  "timed_out" : false,
  "_shards" : {
    "total" : 1,
    "successful" : 1,
    "skipped" : 0,
    "failed" : 0
  },
  "hits" : {
    "total" : {
      "value" : 2,
      "relation" : "eq"
    },
    "max_score" : 1.0,
    "hits" : [
      {
        "_index" : "lockie_test",
        "_type" : "_doc",
        "_id" : "2",
        "_score" : 1.0,
        "_source" : {
          "orderNo" : "201910221751150002",
          "dealDl" : 1.5,
          "city" : "北京",
          "remark" : "这是备注2",
          "balanceTime" : "2019-10-22 17:51:15"
        }
      },
      {
        "_index" : "lockie_test",
        "_type" : "_doc",
        "_id" : "1",
        "_score" : 1.0,
        "_source" : {
          "orderNo" : "201910221750150001",
          "dealDl" : 3.5,
          "city" : "上海",
          "remark" : "这是备注1",
          "balanceTime" : "2019-10-21 10:50:15"
        }
      }
    ]
  }
}




# 聚合查询，分组类似数据库的group by
GET /lockie_test/_search
{
  "size": 0,
  "aggs": {
    "group_by_city": {
      "terms": {
        "field": "city"
      }
    }
  }
}


{
  "took" : 0,
  "timed_out" : false,
  "_shards" : {
    "total" : 1,
    "successful" : 1,
    "skipped" : 0,
    "failed" : 0
  },
  "hits" : {
    "total" : {
      "value" : 3,
      "relation" : "eq"
    },
    "max_score" : null,
    "hits" : [
      {
        "_index" : "lockie_test",
        "_type" : "_doc",
        "_id" : "2",
        "_score" : null,
        "_source" : {
          "orderNo" : "201910221751150002",
          "dealDl" : 1.5,
          "city" : "北京",
          "remark" : "这是备注2",
          "balanceTime" : "2019-10-22 17:51:15"
        },
        "sort" : [
          1.5
        ]
      },
      {
        "_index" : "lockie_test",
        "_type" : "_doc",
        "_id" : "1",
        "_score" : null,
        "_source" : {
          "orderNo" : "201910221750150001",
          "dealDl" : 3.5,
          "city" : "上海",
          "remark" : "这是备注1",
          "balanceTime" : "2019-10-21 10:50:15"
        },
        "sort" : [
          3.5
        ]
      }
    ]
  }
}


# avg求平均值
GET /lockie_test/_search
{
  "size": 0, 
  "aggs": {
    "avg_dealDl": {
      "avg": {
        "field": "dealDl"
      }
    }
  }
}

{
  "took" : 3,
  "timed_out" : false,
  "_shards" : {
    "total" : 1,
    "successful" : 1,
    "skipped" : 0,
    "failed" : 0
  },
  "hits" : {
    "total" : {
      "value" : 3,
      "relation" : "eq"
    },
    "max_score" : null,
    "hits" : [ ]
  },
  "aggregations" : {
    "avg_dealDl" : {
      "value" : 8.6
    }
  }
}


# 分组聚合求平均值
GET /lockie_test/_search
{
  "size": 0,
  "aggs": {
    "group_by_time": {
      "terms": {
        "field": "balanceTime",
        "order": {
          "avg_dealDl": "asc"
        }
      },
      "aggs": {
        "avg_dealDl": {
          "avg": {
            "field": "dealDl"
          }
        }
      }
    }
  }
}


{
  "took" : 6,
  "timed_out" : false,
  "_shards" : {
    "total" : 1,
    "successful" : 1,
    "skipped" : 0,
    "failed" : 0
  },
  "hits" : {
    "total" : {
      "value" : 3,
      "relation" : "eq"
    },
    "max_score" : null,
    "hits" : [ ]
  },
  "aggregations" : {
    "group_by_time" : {
      "doc_count_error_upper_bound" : 0,
      "sum_other_doc_count" : 0,
      "buckets" : [
        {
          "key" : 1571766675000,
          "key_as_string" : "2019-10-22 17:51:15",
          "doc_count" : 1,
          "avg_dealDl" : {
            "value" : 1.5
          }
        },
        {
          "key" : 1571655015000,
          "key_as_string" : "2019-10-21 10:50:15",
          "doc_count" : 1,
          "avg_dealDl" : {
            "value" : 3.5
          }
        },
        {
          "key" : 1571821510000,
          "key_as_string" : "2019-10-23 09:05:10",
          "doc_count" : 1,
          "avg_dealDl" : {
            "value" : 20.8
          }
        }
      ]
    }
  }
}

 

lockie_zou
关注
  • 2
    点赞
  • 踩
  • 16
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
专栏目录
elasticSearch查询语句DSL
06-27
在这篇资源中，我们将详细介绍如何使用DSL...最后，我们将分享一些实用技巧和最佳实践，帮助您充分发挥DSL在Elasticsearch中的优势。我们将探讨性能优化、查询调试和索引优化等关键主题，以提升查询效率和搜索准确性。
2.ELK之Elasticsearch常用DSL语句(kibana语句)
热门推荐
mijichui2153的博客
06-23 2万+
Filter DSL term 过滤 term主要用于精确匹配哪些值，比如数字，日期，布尔值或 not_analyzed 的字符串(未经分析的文本数据类型)： { “term”: { “age”: 26 }} { “term”: { “date”: “2014-09-01” }} { “term”: { “public”: true }} { “term”: { “tag”: “full_text” }} 完整的例子， hostname 字段完全匹配成 xxx 的数据： { "query"
ES相关DSL语句(持续更新)
weixin_49456013的博客
12-29 1711
ES的kibana操作语句汇总
Elasticsearch教程之《一文读懂ES-DSL》
最新发布
极客世杰
06-20 1172
bool。
ES的DSL语句
weixin_42624574的博客
06-17 1711
mysql与elasticsearch的概念对比：Mysql：擅长事务类型操作，可以确保数据的安全和一致性Elasticsearch：擅长海量数据的搜索、分析、计算因此在企业中，往往是两者结合使用：对安全性要求较高的写操作，使用mysql实现对查询性能要求较高的搜索需求，使用elasticsearch实现两者再基于某种方式，实现数据的同步，保证一致性 mapping是对索引库中文档的约束，常见的mapping属性包括：type：字段数据类型，常见的简单类型有：字符串：text（可分词的文本）、keyword
常用ES查询DSL语句
攻城狮Kevin
11-12 4989
1. 针对hive表中jsonObject类型的String数据 mapping中定义如下： "esf_room": { "type": "text", "fields": { "keyword": { "type": "keyword" } }, "norms": false }, DSL查询语句如下： GET /hdp_teu_dia_f...
工作常用ES DSL查询语句（干货满满）
分享IT行业各种技术经验，从入门到入行，关注我学习更多知识。
01-06 2256
工作中几乎每天都需要使用到ES查询数据，需要根据自己的查询需求构造DSL查询语句来实现，本文记录并分享本人工作中常用的DSL语句以及所遇到问题的解决方案，DSL语句灵活多变，可进行多种组合，任你搭配，让我们一起往下看，希望对你有帮助。
springboot集成ES+DSL语句
04-25
该函数的功能是通过向指定的RESTful API发送POST请求，执行SQL语句，并返回查询结果的数量。 EsQueryUtils.executeSqlDsl(String queryString, RestClient restClient)
sql-management-es:将sql转为elasticsearch的DSL语句，并可进行增删改查操作
05-02
将sql转为elasticsearch的DSL语句，并可进行增删改查操作,例如： String sql = "update test set team_leader_name = 'tom',team_name = 'google',type = 100 where _id = '1'"; EsCommand cmd = ParseSql2EsCommand...
elasql:通用SQL到Elasticsearch DSL查询转换器
04-28
通用SQL到Elasticsearch DSL查询转换器。 专为设计 地位 实验性-加入我们，骇客入侵！ 安装 npm install elasql 用法 const convert = require('elasql').convert convert('SELECT id,name FROM shop WHERE shop_id...
spl2dsl:使用Peg.js将Splunk SPL转换为Elasticsearch DSL
05-18
基于 Splunk 的 SPL 查询语言转换成 ElasticSearch 的 DSL。 转换结果和 对齐。 可以配置 进行表达式搜索。 Usage const converter = require("./lib/converter") try { const { target, dev } = converter.parse(`...
es_DSL语句
qq_65567681的博客
10-21 435
mapping是对索引库中文档的约束，常见的mapping属性包括:
Elasticsearch DSL 查询语句
彳亍
07-28 4430
在 ES 中，提供了十分丰富的DSL 查询。 DSL 查询使用 JSON 格式的请求体与 ES 交互，可以实现各种各样的查询需求。
【DSL】ES+DSL 查询语法
weixin_41613094的博客
07-06 1万+
ES+DSL 查询语法学习的复习
elasticsearch常用DSL查询、统计语句大全(珍藏版)
健康平安的活着的专栏
03-31 3662
【代码】elasticsearch常用DSL查询语句大全(珍藏版)
es——DSL实现聚合
LINING_GG的博客
12-11 599
es——DSL实现聚合
es的自动补全查询——DSL语句&java代码实现
LINING_GG的博客
12-07 2733
es的自动补全查询——DSL语句&java代码实现
【ES系列】ES的数据结构与DSL语法
m0_50697831的博客
02-06 3037
elasticsearch 数据结构 检索 搜索语法
Elasticsearch查询及聚合类DSL语句宝典
阿道夫的博客
04-04 338
随着使用es场景的增多，工作当中避免不了去使用es进行数据的存储，在数据存储到es当中以后就需要使用DSL语句进行数据的查询、聚合等操作，DSL对SE的意义就像SQL对MySQL一样，学会如何编写查询语句决定了后期是否能完全驾驭ES，所以至关重要，本专题主要是分享常用的DSL语句，拿来即用。1、网络安全理论知识（2天）①了解行业相关背景，前景，确定发展方向。②学习网络安全相关法律法规。③网络安全运营的概念。④等保简介、等保规定、流程和规范。（非常重要）2、渗透测试基础（一周）
elasticsearch DSL语句
08-11
您好！关于Elasticsearch DSL语句，我可以为您提供一些基本的信息。DSL（Domain Specific Language）是一种用于构建和执行查询的专用语言。在Elasticsearch中，您可以使用DSL语句来执行各种操作，如搜索、聚合和过滤。 下面是一些常用的Elasticsearch DSL语句示例： 1. 搜索文档： ``` GET /index_name/_search { "query": { "match": { "field_name": "search_term" } } } ``` 这个DSL语句将在`index_name`索引中搜索匹配`field_name`字段包含`search_term`的文档。 2. 聚合： ``` GET /index_name/_search { "aggs": { "agg_name": { "terms": { "field": "field_name" } } } } ``` 这个DSL语句将在`index_name`索引中聚合`field_name`字段的值。 3. 过滤文档： ``` GET /index_name/_search { "query": { "bool": { "filter": [ { "term": { "field_name": "filter_value" } } ] } } } ``` 这个DSL语句将过滤`index_name`索引中`field_name`字段等于`filter_value`的文档。 这些只是一些基本的示例，Elasticsearch DSL提供了更多的功能和查询选项。您可以根据具体的需求使用更复杂的DSL语句来执行更高级的操作。希望这些信息对您有所帮助！如有更多问题，请随时提问。

“相关推荐”对你有帮助么？

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值