kibana操作记录

操作记录"/>

kibana操作记录

GET _search
{"query": {"match_all": {}}
}GET _cat/nodes
GET _cat/health
GET _cat/master
GET _cat/indices
GET _cat/indices?v# 索引一个文档
PUT /customer/_doc/6
{"name":"Haha"
}# 查看一个文档
GET /customer/_doc/6
GET /customer# 更新一个文档
POST customer/_update/6/
{"doc":{"name":"Jane","age":19}
}# 删除一个文档
DELETE customer/_doc/5
# 删除整个索引
DELETE customer
DELETE bankGET bank/_doc/1
PUT /bank/_doc/_bulkGET customer/_doc/1
PUT /customer/_bulk
{"index":{"_id":"1"}}   
{"name":"John Doe"}
{"index":{"_id":"2"}}
{"name":"Jane"}# 对整个es操作
PUT /_bulk
{"delete":{"_index":"webset","_id":"123"}}
{"create":{"_index":"webset","_id":"123"}}
{"title":"My first blog post"}
{"index":{"_index":"webset"}}
{"title":"My second blog post"}
{"update":{"_index":"webset","_id":"123"}}
{"doc":{"title":"My updateed blok post"}}GET _cat/indices?v
DELETE bank# 通过request uri检索
GET bank/_search?q=*&sort=account_number:descGET bank/_search
{"query": {"match_all": {}},"sort": [{"account_number": "desc"},{"balance": "desc"}]
}GET /GET bank/_search
{"query": {"match_all": {}},"sort": [{"account_number": {"order": "desc"}}]
}# match
GET bank/_search
{"query": {"match": {"address": "mill lane"}}
}# match_phrase
GET bank/_search
{"query": {"match_phrase": {"address": "mill lane"}}
}
# multi_match 在某个字段里面匹配 分词
GET bank/_search
{"query": {"multi_match": {"query": "mill Movico","fields": ["address", "city"]}}
}# bool复合查询
GET bank/_search
{"query": {"bool": {"must": [{"match": {"gender": "M"}},{"match": {"address": "mill"}}],"must_not": [{"match": {"age": 28}}],"should": [{"match": {"lastname": "Holland"}}]}}
}# filter
# 年龄在18-30
GET bank/_search
{"query": {"bool": {"must": [{"range": {"age": {"gte": 18,"lte": 30}}}]}}
}
# filter不贡献相关性得分，可以对结果直接过滤
GET bank/_search
{"query": {"bool": {"filter": [{"range": {"age": {"gte": 18,"lte": 30}}}]}}
}# 精确匹配字段值
GET bank/_search
{"query": {"term": {"age":28}}
}
# match_phrase不分词查询
GET bank/_search
{"query": {"match_phrase": {"address": "mill lane"}}
}
# 使用keyword精确完整匹配
GET bank/_search
{"query": {"match": {"address.keyword": "198 Mill Lane"}}
}# 搜索地址中含有mill的所有人的年龄分布terms、平均年龄avg、平均薪资
GET bank/_search
{"query": {"match": {"address": "mill"}},"aggs": {"ageAgg": {"terms": {"field": "age","size": 10}},"ageAvg":{"avg": {"field": "age"}},"balanceAvg":{"avg": {"field": "balance"}}},"size": 0
}# 求所有人的年龄分布、各年龄分布的平均值、工资平均值（子聚合）
GET bank/_search
{"query": {"match_all": {}},"aggs": {"ageAgg": {"terms": {"field": "age","size": 100},"aggs": {"ageAvg": {"avg": {"field": "age"}},"balanceAvg":{"avg": {"field": "balance"}}}}},"size": 0
}# 求所有人的年龄分布、各年龄分布中M和F的平均薪资及这个年龄段的总体平均薪资
GET bank/_search
{"query": {"match_all": {}},"aggs": {"ageAgg": {"terms": {"field": "age","size": 100},"aggs": {"balanceAvg": {"avg": {"field": "balance"}},"genderAgg": {"terms": {"field": "gender.keyword","size": 10},"aggs": {"balanceAvg": {"avg": {"field": "balance"}}}}}}},"size": 0
}# mapping 字段的类型，决定了如何处理数据
# 查看映射
GET bank/_mapping
DELETE my_index
# 创建映射 keyword不进行分词，text分词,index默认为true（是否可被检索）
PUT my_index
{"mappings": {"properties": {"age":{"type": "integer"},"email":{"type": "keyword"},"name":{"type": "text","index": true}}}
}
GET my_index/
# 添加映射
PUT my_index/_mapping
{"properties":{"employee_id": {"type":"keyword","index":"false"}}
}
DELETE my_indexGET bank/_mappingPUT newbank
{"mappings": {"properties": {"account_number": {"type": "long"},"address": {"type": "text"},"age": {"type": "integer"},"balance": {"type": "long"},"city": {"type": "keyword"},"email": {"type": "keyword"},"employer": {"type": "keyword"},"firstname": {"type": "keyword"},"gender": {"type": "keyword"},"lastname": {"type": "keyword"},"state": {"type": "text"}}}
}
GET bank/_search
# 迁移数据
POST _reindex
{"source": {"index": "bank"},"dest": {"index": "newbank"}
}GET newbank/_search# 分词 无法分割中文
POST _analyze
{"analyzer": "standard","text": ["hello你好"]
}
# 使用ik分词器
POST _analyze
{"analyzer": "ik_smart","text": ["我是中国人"]
}
POST _analyze
{"analyzer": "ik_max_word","text": ["我是中国人"]
}POST _analyze
{"analyzer": "ik_smart","text": ["乔碧萝殿下天大我地大"]
}