搜索查询弹性搜索

本文介绍了搜索查询弹性搜索的处理方法，对大家解决问题具有一定的参考价值，需要的朋友们下面随着小编来一起学习吧！ 问题描述

{stringindex：{mappings：{files：{properties：{BaseOfCode：{type：long} BaseOfData：{type：long}，特征：{type：long }，FileType：{type：long}，Id：{type：string $ bStrings：{properties：{FileOffset：{type：long}，RO_BaseOfCode：{type：long}，SectionName：{type：string} SectionOffset：{type：long}，String：{type：string } }，SubSystem：{type：long} } } }

} }

我的要求是当我搜索一个特定的字符串（String.string）时，我只想获得该字符串的FileOffSet（String.FileOffSet）。 我如何做？

谢谢

解决方案

我想你想执行一个嵌套查询，只检索一个字段作为结果，但是我看到你的映射问题，所以我会分三个部分我的答案：

我看到了什么问题：

如何查询嵌套字段（这更多是ES背景）：

如何找到解决方案：

1）我看到了什么问题：

您要查询嵌套字段，但您没有嵌套字段。

嵌套字段部分

字段字符串不嵌套在类型文件中（没有嵌套字段的嵌套数据可能会带来未来的问题），否则您的Strings字段的映射将是这样的：

{stringindex：{mappings：{files：{properties ：{Strings：{properties：{type：nested，String：{type string} } } } } } } }

注意：是的，我剪切了大部分的字段，但是我这样做很容易显示你没有创建一个嵌套字段。

使用嵌套字段在手中，我们需要一个嵌套查询。

具体字段结果部分

要仅查询一个字段作为结果，您必须在查询中包含属性_source。

2）如何查询嵌套字段

这更适用于ES背景，如果您从未与嵌套字段一起工作。

小例子

一个嵌套字段：

{nesttype ：{properties：{name：{type：string}，parents：{type ，properties：{sex：{type：string}，name：{type：string} } } } } }

你创建一些输入：

{name：Dan，parents：[{name ，sex：m}， {name：Anna，sex：f}]} {name：Lana 父母：[{name：Maria，sex：f}]}

然后您查询，但只能获取嵌套字段parents.name：

{查询：{nested：{path：parents，query：{bool：{must [ { term：{sex：m} } ] } } } }，_source：[parents.name] }

这个查询的输出是所有有性别父母的人的父母的姓名。一个条目（丹）有一个父亲，而另一个（拉娜）没有。所以它只会检索Dan的父母姓名。

3）如何找到解决方案：

要修复您的映射：

您只需要在字符串字段中包含嵌套类型： p>

{files：{properties：{ ... Strings：{type：nested，properties：{FileOffset：{type：long}， RO_BaseOfCode：{type：long}， ... } } ... } } }

要查询您的数据：

{查询：{嵌套：{path：Strings，query：{bool：{must：[ {term：{ String：我的字符串} } ] } } } }，_source：[Strings.FileOffSet] }

I have documents in elastic search in the following format

{ "stringindex" : { "mappings" : { "files" : { "properties" : { "BaseOfCode" : { "type" : "long" }, "BaseOfData" : { "type" : "long" }, "Characteristics" : { "type" : "long" }, "FileType" : { "type" : "long" }, "Id" : { "type" : "string" }, "Strings" : { "properties" : { "FileOffset" : { "type" : "long" }, "RO_BaseOfCode" : { "type" : "long" }, "SectionName" : { "type" : "string" }, "SectionOffset" : { "type" : "long" }, "String" : { "type" : "string" } } }, "SubSystem" : { "type" : "long" } } } }

} }

My requirement is when I search for a particular string (String.string) i want to get only the FileOffSet (String.FileOffSet) for that string. How do i do this?

Thanks

解决方案

I suppose that you want to perform a nested query and retrieve only one field as the result, but I see problems in your mapping, hence I will split my answer in 3 sections:

What is the problem I see:

How to query nested fields (this is more ES background):

How to find a solution:

1) What is the problem I see:

You want to query a nested field, but you don't have a nested field.

The nested field part:

The field "Strings" is not nested in the type "files" (nested data without a nested field may bring future problems), otherwise your mapping for the field "Strings" would be something like this:

{ "stringindex" : { "mappings" : { "files" : { "properties" : { "Strings" : { "properties" : { "type" : "nested", "String" : { "type" : "string" } } } } } } } }

Note: yes, I cut most of the fields, but I did this to easily show that you didn't create a nested field.

With a nested field "in hands", we need a nested query.

The specific field result part:

To retrieve only one field as result, you have to include the property "_source" in your query.

2) How to query nested fields:

This is more for ES background, if you have never worked with nested fields.

Small example:

You define a type with a nested field:

{ "nesttype" : { "properties" : { "name" : { "type" : "string" }, "parents" : { "type" : "nested" , "properties" : { "sex" : { "type" : "string" }, "name" : { "type" : "string" } } } } } }

You create some inputs:

{ "name" : "Dan", "parents" : [{ "name" : "John" , "sex" : "m" }, { "name" : "Anna" , "sex" : "f" }] } { "name" : "Lana", "parents" : [{ "name" : "Maria" , "sex" : "f" }] }

Then you query, but only fetch the nested field "parents.name":

{ "query": { "nested": { "path": "parents", "query": { "bool": { "must": [ { "term": { "sex": "m" } } ] } } } }, "_source" : [ "parents.name" ] }

The output of this query is "the name of the parents of all people who have a parent of the sex 'm' ". One entry (Dan) has a father, whereas the other (Lana) doesn't. So it only will retrieve Dan's parents names.

3) How to find a solution:

To fix your mapping:

You only need to include the type "nested" in the field "Strings":

{ "files" : { "properties" : { ... "Strings" : { "type" : "nested" , "properties" : { "FileOffset" : { "type" : "long" }, "RO_BaseOfCode" : { "type" : "long" }, ... } } ... } } }

To query your data:

{ "query": { "nested": { "path": "Strings", "query": { "bool": { "must": [ { "term": { "String": "my string" } } ] } } } }, "_source" : [ "Strings.FileOffSet" ] }