elasticsearch 常见语法

有index test_user_index

1. 根据id 获取doc

GET test_user_index/_doc/{id}

2. 根据doc_id 查询指定数据并根据 字段 amount 金额sum，id 统计 count，corp_id 去除

GET /test_order_index/_search
{"size": 0, // 控制返回的文本数"query": {"terms": {"doc_id ": ["doc_id1", "doc_id2", "doc_id3"]}},"aggs": {"company_stats": {"terms": {"field": "doc_id","size": 10},"aggs": {"total_amount": {"sum": {"field": "amount"}},"total_count": {"value_count": {"field": "count"}},"distinct_win_companies": {"cardinality": {"field": "corp_id"}}}}}
}

3. 根据字段列举出字段的所有值

GET /test_order_index/_search
{"size": 0,"aggs": {"agg_label": {"terms": {"field": "city","size": 500 // 控制聚合返回的条数，根据实际情况}}}
}

4. 排除

GET /test_order_index/_search
{"query": {"bool": {"must_not": {"term": {"test": "true"}}}}
}

5. 创建别名

POST /_aliases
{"actions": [{"add": {"index": "your_index","alias": "your_alias"}}]
}

6. 修改别名指向

POST /_aliases
{"actions": [{"remove": {"index": "your_current_index","alias": "your_alias"}},{"add": {"index": "your_new_index","alias": "your_alias"}}]
}