es常用接口

1、删除query匹配的doc

POST /rally-results-2021-04/_delete_by_query
{
"query": {
"match": {
"user-tags.tag_cluster_name": "es-benchmark-search3data1replicas"
}
}
}

 

2、前缀查询

{
"query": {
"prefix": {
"user-tags.tag_cluster_name": "es-benchmark-search"
}
}
}

 3、删除index

 4、查看分片状态

GET /_cat/shards?h=index,shard,prirep,state,unassigned.reason| grep UNASSIGNED

5、正则匹配

{
"query": {
"wildcard": {
"user-tags.tag_cluster_name": "es-benchmark-search?*2replicas"
}
}
}

 6、查看es集群的http接口

GET /_cat/nodes?v&h=n,r,http

 7、多条件组合查询

bool常用于多条件组合查询

filter：返回必须满足子条件的doc，搜索结果不计算得分，会用缓存

term常用于精确值搜索

POST 索引名/_search
{
"query": {
"bool": {
"filter": [
{
"term": {
"log_id": "xxxxxx"
}
},
{
"term": {
"space": "gddd_001"
}
},
{
"range": {
"ice_level": {
"gte": 0,
"lt": 6
}
}
},
{
"range":{
"client_timestamp": {
"gte": 1612137806000,
"lte": 1612184606000
}
}
}
]
}
},
"sort": { "@timestamp": { "order": "desc" }}
}

8、查询metricbeat中old gc time

GET /metricbeat-*/_search
{
"query":{
"bool":{
"filter":[
{
"exists": {
"field": "elasticsearch.node.stats.jvm.gc.collectors.old.collection.ms"
}
},
{
"range": {
"@timestamp": {
"gte": "2021-06-23T02:34:00.000Z",
"lte": "2021-06-23T02:35:00.000Z"
}
}
}
]
}
}
}