1.

命令

curl -u es_username:es_password -X GET "IP:9200/logstash-prog-accesslog_bdapi-2018.10.11/logs/_search?pretty=true" -H 'Content-Type: application/json' -d'
{
    "query" : {
        "bool": {
            "must": {
                "match" : {
                    "nginx.access.response_code" : "500"
                }
            },
            "filter": {
                "range" : {
                    "@timestamp" : { 
                        "gt" : "2018-10-11T07:00:00.000Z", 
                        "lt": "2018-10-11T07:10:00.000Z"
                    } 
                }
            }
        }
    },
    "size": 500
}

文档结构