Elasticsearch 多条件查询

 

查询 organization_id 为 208 和 event_type 为 007 的数据

curl -X GET 10.44.99.102:9200/situation-event/_search?pretty -d 
{
    "query": {
        "bool": {
            "must": [{
                "term": {
                    "organization_id": "208"
                }
            }, {
                "term": {
                    "event_type": "007"
                }
            }]
        }
    }
}

 

查询 organization_id 为 208 和 event_type 为 007 或者 008 的数据

curl -X GET 10.44.99.102:9200/situation-event/_search?pretty -d 
{
    "query": {
        "bool": {
            "must": [{
                "match_phrase": {
                    "organization_id": "208"
                }
            }],
            "should": [{
                    "match_phrase": {
                        "event_type": "007"
                    }
                },
                {
                    "match_phrase": {
                        "event_type": "008"
                    }
                }
            ],
            "minimum_should_match": 1
        }
    }
}

 

　　

 1 curl -X GET 10.44.99.102:9200/situation-event/_search?pretty -d 
 2 {
 3     "query": {
 4         "bool": {
 5             "must": [{
 6                 "term": {
 7                     "organization_id": "208"
 8                 }
 9             }],
10             "should": [{
11                     "terms": {
12                         "event_type": ["007", "008"]
13                     }
14                 }
15             ],
16             "minimum_should_match": 1
17         }
18     }
19 }
多条件查询

 

{
    "query": {
        "bool": {
            "must": [{
                "range": {
                    "latest_alert_time": {
                        "gte": "2021-06-30 16:34:28",
                        "lt": "2022-06-30 16:34:28"
                    }
                }
            }, {
                "terms": {
                    "severity": ["2", "3"]
                }
            }, {
                "term": {
                    "event_status_cd": "2"
                }
            }, {
                "term": {
                    "alert_status_cd": "4"
                }
            }]
        }
    },
    "aggs": {
        "level": {
            "terms": {
                "field": "severity"
            }
        }
    }
}
多条件时间范围查询并聚合

 

{
    "query": {
        "bool": {
            "must": [
                {
                    "range": {
                        "latest_alert_time": {
                            "gte": "2021-06-30 16:34:28",
                            "lt": "2022-06-30 16:34:28"
                        }
                    }
                }
            ],
            "must_not": [
                {
                    "regexp": {
                        "alert_seq": "1652108160015861" // 正则
                    }
                }
            ]
        }
    }
}
正则查找

 

posted @ 2020-08-19 17:07  你的小可爱吖  阅读(12392)  评论(0)    收藏  举报