elk之del tools

1、在Kibana搜索数据

message:"打开送风模式"

2、Dev Tools常用命令

GET _search

{
"query": {
"match_all": {}
}
}

GET /

#增加索引
PUT /shijiange

DELETE /secure-2019.03.14

#查看索引
GET _cat/indices?v

GET /secure-2019.03.15/_search?q=*

GET /messages-2019.03.15/_search?q=*

#删除索引
DELETE /logstash-*

DELETE /access-2019.03.14

GET /logstash-2019.03.13/_search?q=*

GET /access-2019.03.14/_search?q=*

#设置字段
PUT /shijiange/users/1
{
"name":"shijiange",
"age": 30
}

#查询索引
GET /shijiange/users/1

#查询所有数据
GET /shijiange/_search?q=*

#查询所有数据
GET /logstash-2019.03.13/_search?q=*

DELETE /logstash-2019.03.13

#原来已经存在的，再put一条数据,就会变成update
PUT /shijiange/users/1
{
"name":"shijiange",
"age": 29
}

#获取数据
GET /shijiange/users/1

DELETE /shijiange/users/1

#修改但不覆盖
PUT /shijiange/users/2
{
"name":"shijiange",
"age": 33
}

GET /shijiange/users/2

#修改但不覆盖，增加一条
POST /shijiange/users/2/_update
{
"doc": {
"age": 25
}
}

#修改所有数据或增加字段
POST /shijiange/_update_by_query
{
"script": {
"source": "ctx._source['age']=20"
},
"query": {
"match_all": {}
}
}

GET /shijiange/_search?q=*

#增加一个字段
POST /shijiange/_update_by_query
{
"script":{
"source": "ctx._source['city']='hangzhou'"
},
"query":{
"match_all": {}
}
}

#查看filebase索引
#查看索引
GET _cat/indices?v

##查询所有数据
GET /filebeat-6.6.1-2019.03.13/_search?q=*

GET /logstash-2019.03.13/_search?q=*

####################################

es 用法：

[root@a1 filebeat-6.6.1]# curl 127.0.0.1:9200
{
"name" : "EJ4yuWc",
"cluster_name" : "elasticsearch",
"cluster_uuid" : "egdxoOg_Tx2G73eOX4GU5w",
"version" : {
"number" : "6.6.1",
"build_flavor" : "default",
"build_type" : "tar",
"build_hash" : "1fd8f69",
"build_date" : "2019-02-13T17:10:04.160291Z",
"build_snapshot" : false,
"lucene_version" : "7.6.0",
"minimum_wire_compatibility_version" : "5.6.0",
"minimum_index_compatibility_version" : "5.0.0"
},
"tagline" : "You Know, for Search"
}

#查看接口

[root@a1 filebeat-6.6.1]# curl 127.0.0.1:9200/_cat
=^.^=
/_cat/allocation
/_cat/shards
/_cat/shards/{index}
/_cat/master
/_cat/nodes
/_cat/tasks
/_cat/indices
/_cat/indices/{index}
/_cat/segments
/_cat/segments/{index}
/_cat/count
/_cat/count/{index}
/_cat/recovery
/_cat/recovery/{index}
/_cat/health
/_cat/pending_tasks
/_cat/aliases
/_cat/aliases/{alias}
/_cat/thread_pool
/_cat/thread_pool/{thread_pools}
/_cat/plugins
/_cat/fielddata
/_cat/fielddata/{fields}
/_cat/nodeattrs
/_cat/repositories
/_cat/snapshots/{repository}
/_cat/templates