ES使用Kibana查询,不区分大小写查询,查询最大数量限定修改

墨蓝 2022-12-27 11:06 339阅读 0赞

ES建立表数据,不区分大小写查询,修改查询最大值

PUT trace-record-test
    { 
      "settings" : {
          "index" : {
            "max_result_window" : "1000000",      //限定最大查询数量
            "analysis" : {
              "normalizer" : {
                "my_normalizer" : {               //不区分大小写查询
                  "filter" : "lowercase",
                  "type" : "custom"
                }
              }
            }
          }
        },
      "mappings" : {
          "properties" : {
            "companyName" : {
              "type" : "text",
              "fields" : {
                "keyword" : {
                  "type" : "keyword",
                  "ignore_above" : 256,
                  "normalizer" : "my_normalizer"      //不区分大小写设定
                }
              }
            },
            "message" : {
              "type" : "text",
              "fields" : {
                "keyword" : {
                  "type" : "keyword",
                  "ignore_above" : 256,
                  "normalizer" : "my_normalizer"
                }
              }
            },
            "mmsi" : {
              "type" : "text",
              "fields" : {
                "keyword" : {
                  "type" : "keyword",
                  "ignore_above" : 256,
                  "normalizer" : "my_normalizer"
                }
              }
            },
            "mobile" : {
              "type" : "text",
              "fields" : {
                "keyword" : {
                  "type" : "keyword",
                  "ignore_above" : 256,
                  "normalizer" : "my_normalizer"
                }
              }
            },
            "origin" : {
              "type" : "long"
            },
            "resultStatus" : {
              "type" : "long"
            },
            "searchTime" : {
              "type" : "date",
              "format" : "yyyy/MM/dd HH:mm:ss||yyyy/MM/dd||epoch_millis"
            },
            "type" : {
              "type" : "long"
            },
            "username" : {
              "type" : "text",
              "fields" : {
                "keyword" : {
                  "type" : "keyword",
                  "ignore_above" : 256,
                  "normalizer" : "my_normalizer"
                }
              }
            }
          }
        }
    }

复制表数据

POST _reindex
    {
      "source": {
        "index": "trace-record-test"    
      },
      "dest": {
        //将数据trace-record-test复制到trace-record中.前提是表数据结构相同
        "index": "trace-record"      
      }
    }

修改表查询最大值

PUT trace-record/_settings
    {
      "index": {
        "max_result_window": "1000000"
      }
    }

查询

POST trace-record-test/_update_by_query
    {
      "query":{
         "match": {
           "resultStatus": "0"
         }
        },
        "script": {
            "inline": "ctx._source['resultStatus'] = '1'"
        }
    }

修改

POST trace-test/_update_by_query   //查询并修改
    {
      "query": {
        "match": {
          "resultStatus":-1
        }
      },
       "script": {
        "source": "ctx._source['resultStatus']=4"
      }
    }

查询,类似mysql where 中的and条件

GET trace-test/_search
    {
      "query": {
       "bool": {
    			"must": [{
    			   "term": {
    			       "type":1
    			   } 
    			 },{
    			   "term": {
    			       "resultStatus":1000
    			   } 
    			 }
    			]
       }
      },
      "sort": [
        {
          "searchTime": {
            "order": "desc"
          }
        }
      ]
    }

修改

POST trace-test/_update_by_query
    {
      "query": {
        "bool": {
    			"must": [{
    			   "term": {
    			       "type":1
    			   } 
    			 },{
    			   "term": {
    			       "resultStatus":1000
    			   } 
    			 }
    			]
        }
      },
       "script": {
        "source": "ctx._source['resultStatus']=4"
      }
    }