es常用查询语句以及操作命令

es常用查询语句以及操作命令

下面整理记录下常用的es操作语句，方便查阅

1. 更新数据

 例1：增加字段值

POST example/_update_by_query
{
  "query": {
      "bool": {
        "must": [],
        "filter": [
          {
            "term": {
              "id": "84986808"
            }
          }
        ]
      }
  },
  "script":{
    "source": "ctx._source['sort_time'] = 1645957516"
  }
}

例2：更新指定的记录

POST example/_update_by_query
{
  "query": {
      "bool": {
        "must": [],
        "filter": [
          {
            "term": {
              "id": "14005923"
            }
          }
        ]
      }
  },
  "script":{
    "source": "ctx._source['ext'] = '{\"on_duty\": 0,\"job_complete\": [{\"info\": [], \"label\": [775], \"occupation_id\": 39}], \"shumei_request_id\": \"8606a41366bbf6ac8838e732a2538804\", \"material_resources\": [], \"automatic_verify_tags\": [1, 2, 14, 20, 21]}'"
  }
}

2. 删除数据

    例1：

POST example/_delete_by_query
{
  "query":{
    "terms": {
      "id": [
        "13966489"
      ]
    }
  }
}

    例2:

POST example/_delete_by_query
{
  "query":{
    "term": {
      "admin_user_id": {
        "value": "1543"
      }
    }
  }
}

 

3. 查询数据

     例1：条件筛选1

GET example/_search
{
  "query": {
    "term": {
      "admin_user_id": {
        "value": "1543"
      }
    }
  }
}

     例2：条件筛选2

GET example/_search
{
  "query": {
    "bool": {
      "must": [
        {
          "terms": {
            "expend_type": [
              "1",
              "13"
            ]
          }
        }
      ],
      "filter": [
        {
          "term": {
            "target_id": "13991180"
          }
        }
      ]
    }
  },
  "_source": [
    "id",
    "target_id"
  ],
  "size": "2",
  "sort": [
    {
      "id": "desc"
    }
  ]
}

    例3：条件筛选3

GET example/_search
{
  "query": {
      "bool": {
        "must": [],
        "filter": [
          {
            "term": {
              "complaint_id": "5891"
            }
          },
          {
            "term": {
              "type": "1"
            }
          }
        
        ]
      }
  }
}

    例4：聚合查询

GET  example/_search
{
  "size":100,
  "query": {
    "bool": {
      "must": [
        {
          "terms": {
            "expend_type": [
              1,
              13
            ]
          }
        }
      ],
      "filter": [
        {
          "term": {
            "target_id": "13990899"
          }
        }
      ]
    }
  },
  "_source": [
    "user_id"
  ],
  "aggs": {
    "phone_count": {
      "terms": {
        "field": "user_id",
        "size":20
      }
    }
  }
}

 例5：对某字段折叠查询

GET example/_search
{
  "query": {
    "bool": {
      "must": [],
      "filter": [
        {
          "term": {
            "target_id": "14016237"
          }
        }
      ]
    }
  },
  "_source": [
    "id",
    "user_id",
    "expend_type",
    "@timestamp"
  ],
  "size": "15",
  "collapse": {
    "field": "user_id",
    "inner_hits": {
        "name": "expend_list",
        "size":1,
        "sort":[{"id":"asc"}]
     }
  },
  "sort":[{"id":"desc"}]
}