elk kibana 日志搜索使用

kibana 测试版本:5.5

官网日志:https://www.elastic.co/guide/en/elasticsearch/reference/5.5/query-filter-context.html

query DSL:


增加了多条后


bool 后一级有 "must" "must_not" "filter"

{
  "query": {
    "bool": {
      "must_not": [
        {
          "match": {
            "class": "example01"
          }
        },
        {
          "match": {
            "class": "example02"
          }
        },
        {
          "match": {
            "class": "example03"
          }
        },
        {
          "match": {
            "class": "example04"
          }
        }
      ]
    }
  }
}

3.直接在输入栏里输入:
NOT class:(example01 example02 example03 example04)
参考地址:https://www.elastic.co/guide/en/elasticsearch/reference/5.5/query-dsl-query-string-query.html#query-string-syntax

posted on 2019-11-21 17:31  游荡的鱼  阅读(1525)  评论(0编辑  收藏  举报

导航