ES 常见命令

目录

ELK命令大全

查询索引的定义
GET index_name/_mapping

查询索引模板的定义
GET _template/index_name

往索引写数据
POST index_name/_doc
{
"param_1": "111",
"param_2": "1111",

}

主要用于为名为 index_name 的索引更新或创建映射（mapping）。
PUT index_name/_mapping
{
"properties": {
"create_time": {
"type": "date"
}
}
}

全量搜索
GET index_name/_search
{
"query": {
"match_all": {}
}
}

根据某个字段精确搜索
GET index_name/_search
{
"query": {
"term": {
"accountId": {
"value": 111
}
}
}
}

根据某个字段搜索并按某个字段排序
GET index_name/_search
{
"query": {
"term": {
"accountId": {
"value": 111
}
}
},
"sort": [
{
"createTime": {
"order": "desc"
}
}
],
"from": 0,
"size": 10
}

删除索引
DELETE index_name

删除索引模板
DELETE _template/index_template_name

创建索引模板
PUT template/index_template_name
{
"index_patterns": ["index_template_name*"],//影响到索引的名称
"settings": {
"number_of_shards": 1,
"number_of_replicas": 3
},
"mappings": {
"dynamic":"false",--需要关闭字段类型自动映射如果想让未定义的字段被忽略
"properties": {
"xxx_id": {
"type": "keyword"
},

        "create_time": {"type": "date","format": "yyyy-MM-dd HH:mm:ss"},"xx_2": {"type": "integer"},"xxx": {"type": "boolean"}}
}

}

创建索引
PUT index_name
{

"mappings": {"dynamic":"false","properties": {"xxx_id": {"type": "keyword"},"create_time": {"type": "date","format": "yyyy-MM-dd HH:mm:ss"},"xx_2": {"type": "integer"},"xxx": {"type": "boolean"}}
}

}