Kibana的基础语法

安装kibana之前需要确定一下ES的版本,两者版本需要一致,不然kibana启动不起来。下面是一些kibana的常用语法

#查看所有索引
GET /_cat/indices?v

#删除某个索引
DELETE /skuinfo
#新增索引
PUT /user
#创建映射
PUT /user/userinfo/_mapping
{
    
    
"properties": {
    
    
"name":{
    
    
"type": "text",
"analyzer": "ik_smart",
"search_analyzer": "ik_smart",
"store": false
},
"city":{
    
    
"type": "text",
"analyzer": "ik_smart",
"search_analyzer": "ik_smart",
"store": false
},
"age":{
    
    
"type": "long",
"store": false
},
"description":{
    
    
"type": "text",
"analyzer": "ik_smart",
"search_analyzer": "ik_smart",
"store": false
}
}
}
#新增文档数据 id=1
PUT /user/userinfo/1
{
    
    
"name":"李四",
"age":22,
"city":"深圳",
"description":"李四来自湖北武汉!"
}
#新增文档数据 id=2
PUT /user/userinfo/2
{
    
    
"name":"王五",
"age":35,
"city":"深圳",
"description":"王五家住在深圳!"
}
#新增文档数据 id=3
PUT /user/userinfo/3
{
    
    
"name":"张三",
"age":19,
"city":"深圳",
"description":"在深圳打工,来自湖北武汉"
}
#新增文档数据 id=4
PUT /user/userinfo/4
{
    
    
"name":"张三丰",
"age":66,
"city":"武汉",
"description":"在武汉读书,家在武汉!"
}
#新增文档数据 id=5
PUT /user/userinfo/5
{
    
    
"name":"赵子龙",
"age":77,
"city":"广州",
"description":"赵子龙来自深圳宝安,但是在广州工作!",
"address":"广东省茂名市"
}
#新增文档数据 id=6
PUT /user/userinfo/6
{
    
    
"name":"赵毅",
"age":55,
"city":"广州",
"description":"赵毅来自广州白云区,从事电子商务8年!"
}
#新增文档数据 id=7
PUT /user/userinfo/7
{
    
    
"name":"赵哈哈",
"age":57,
"city":"武汉",
"description":"武汉赵哈哈,在深圳打工已有半年了,月薪7500!"
}
#更新数据,id=4
PUT /user/userinfo/4
{
    
    
"name":"张三丰",
"description":"在武汉读书,家在武汉!在深圳工作!"
}
#根据ID查询
GET /user/userinfo/4
#恢复文档数据 id=4
PUT /user/userinfo/4
{
    
    
"name":"张三丰",
"age":66,
"city":"武汉",
"description":"在武汉读书,家在武汉!"
}
#使用POST更新某个域的数据
POST /user/userinfo/4/_update
{
    
    
"doc":{
    
    
"name":"张三丰",
"description":"在武汉读书,家在武汉!在深圳工作!"
}
}
#根据ID查询
GET /user/userinfo/4
#删除数据
DELETE user/userinfo/4
#查询所有
GET /user/_search
#根据ID查询
GET /user/userinfo/2
#搜索排序
GET /user/_search
{
    
    
"query":{
    
    
"match_all": {
    
    }
},
"sort":{
    
    
"age":{
    
    
"order":"desc"
}
}
}
#分页实现
GET /user/_search
{
    
    
"query":{
    
    
"match_all": {
    
    }
},
"sort":{
    
    
"age":{
    
    
"order":"desc"
}
},
"from": 0,
"size": 2
}
#查询-term
GET _search
{
    
    
"query":{
    
    
"term":{
    
    
"city":"武汉"
}
}
}
#查询-terms 允许多个Term
GET _search
{
    
    
"query":{
    
    
"terms":{
    
    
"city":
[
"武汉",
"广州"
]
}
}
}
#match查询
GET _search
{
    
    
"query": {
    
    
"match": {
    
    
"description": "武汉"
}
}
}
#过滤-range 范围过滤
#gt表示> gte表示=>
#lt表示< lte表示<=
GET _search
{
    
    
"query":{
    
    
"range": {
    
    
"age": {
    
    
"gte": 30,
"lte": 57
}
}
}
}
#过滤搜索 exists:是指包含某个域的数据检索
GET _search
{
    
    
"query": {
    
    
"exists":{
    
    
"field":"address"
}
}
}
#过滤搜索 bool
#must : 多个查询条件的完全匹配,相当于 and。
#must_not : 多个查询条件的相反匹配,相当于 not。
#should : 至少有一个查询条件匹配, 相当于 or。
GET _search
{
    
    
"query": {
    
    
"bool": {
    
    
"must": [
{
    
    
"term": {
    
    
"city": {
    
    
"value": "深圳"
}
}
},
{
    
    
"range":{
    
    
"age":{
    
    
"gte":20,
"lte":99
}
}
}
]
}
}
}
#查询所有 match_all
GET _search
{
    
    
"query": {
    
    
"match_all": {
    
    }
}
}
#字符串匹配
GET _search
{
    
    
"query": {
    
    
"match": {
    
    
"description": "武汉"
}
}
}
#前缀匹配 prefix
GET _search
{
    
    
"query": {
    
    
"prefix": {
    
    
"name": {
    
    
"value": "赵"
}
}
}
}
#多个域匹配搜索
GET _search
{
    
    
"query": {
    
    
"multi_match": {
    
    
"query": "深圳",
"fields": [
"city",
"description"
]
}
}
}
#过滤-range 范围过滤
#gt表示> gte表示=>
#lt表示< lte表示<=
GET _search
{
    
    
"query": {
    
    
"bool": {
    
    
"must": [
{
    
    "match": {
    
    
"city": "深圳武汉"
}}
],
"filter": {
    
    
"range": {
    
    
"age": {
    
    
"gte": 20,
"lte": 60
}
}
}
}
}
}

Guess you like

Origin blog.csdn.net/delete_bug/article/details/121449898