curl -XPOST "http://10.1.4.28:9200/log_alarm-2020*/_search" -H 'Content-Type: application/json' -d '{"query": {"match_all": {}},"aggs": {"tern": {"terms": {"field": "ruleId","size": 200}}}}'