Elasticsearch 多条件查询

 

查询 organization_id 为 208 和 event_type 为 007 的数据

curl -X GET 10.44.99.102:9200/situation-event/_search?pretty -d 
{
    "query": {
        "bool": {
            "must": [{
                "term": {
                    "organization_id": "208"
                }
            }, {
                "term": {
                    "event_type": "007"
                }
            }]
        }
    }
}

 

查询 organization_id 为 208 和 event_type 为 007 或者 008 的数据

curl -X GET 10.44.99.102:9200/situation-event/_search?pretty -d 
{
    "query": {
        "bool": {
            "must": [{
                "match_phrase": {
                    "organization_id": "208"
                }
            }],
            "should": [{
                    "match_phrase": {
                        "event_type": "007"
                    }
                },
                {
                    "match_phrase": {
                        "event_type": "008"
                    }
                }
            ],
            "minimum_should_match": 1
        }
    }
}

 

　　

curl -X GET 10.44.99.102:9200/situation-event/_search?pretty -d 
{
    "query": {
        "bool": {
            "must": [{
                "term": {
                    "organization_id": "208"
                }
            }],
            "should": [{
                    "terms": {
                        "event_type": ["007", "008"]
                    }
                }
            ],
            "minimum_should_match": 1
        }
    }
}

 

{
    "query": {
        "bool": {
            "must": [{
                "range": {
                    "latest_alert_time": {
                        "gte": "2021-06-30 16:34:28",
                        "lt": "2022-06-30 16:34:28"
                    }
                }
            }, {
                "terms": {
                    "severity": ["2", "3"]
                }
            }, {
                "term": {
                    "event_status_cd": "2"
                }
            }, {
                "term": {
                    "alert_status_cd": "4"
                }
            }]
        }
    },
    "aggs": {
        "level": {
            "terms": {
                "field": "severity"
            }
        }
    }
}

 

{
    "query": {
        "bool": {
            "must": [
                {
                    "range": {
                        "latest_alert_time": {
                            "gte": "2021-06-30 16:34:28",
                            "lt": "2022-06-30 16:34:28"
                        }
                    }
                }
            ],
            "must_not": [
                {
                    "regexp": {
                        "alert_seq": "1652108160015861" // 正则
                    }
                }
            ]
        }
    }
}