总结Elasticsearch Cat 命令。
Cat 命令公共参数
- Help 查看帮助
GET _cat/master?help id | | node id host | h | host name ip | | ip address node | n | node name
- Verbose 显示列名
GET _cat/master?v id host ip node AhlyPtZYTta1AVH_7mUSbQ node1 192.168.113.101 master-1
- Headers 只显示特定列
GET _cat/master?v&h=host,ip,node host ip node node1 192.168.113.101 master-1
- 数字格式化
bytes=kb store.size以kb输出 GET _cat/indices?v&h=index,docs.count,store.size&bytes=kb index docs.count store.size .monitoring-es-6-2018.08.25 441 721 .monitoring-kibana-6-2018.08.25 18 205 .kibana 1 7 .security-6 3 19
- Format 输出格式
#支持的输出格式有json,test,yaml等 #默认以text格式输出 #以json格式输出 format=json&pretty GET _cat/indices?v&h=index,docs.count,store.size&bytes=kb&format=json&pretty [ { "index": ".monitoring-es-6-2018.08.25", "docs.count": "476", "store.size": "1114" }, { "index": ".monitoring-kibana-6-2018.08.25", "docs.count": "21", "store.size": "72" }, { "index": ".kibana", "docs.count": "1", "store.size": "7" }, { "index": ".security-6", "docs.count": "3", "store.size": "19" } ] #以yaml格式输出 format=yaml&pretty GET _cat/indices?v&h=index,docs.count,store.size&bytes=kb&format=yaml&pretty --- - index: ".monitoring-es-6-2018.08.25" docs.count: "509" store.size: "979" - index: ".monitoring-kibana-6-2018.08.25" docs.count: "24" store.size: "142" - index: ".kibana" docs.count: "1" store.size: "7" - index: ".security-6" docs.count: "3" store.size: "19"
- Sort 排序
#按index升序，docs.count降序 GET _cat/indices?v&h=index,docs.count,store.size&bytes=kb&format=json&pretty&s=index,docs.count:desc [ { "index": ".kibana", "docs.count": "1", "store.size": "7" }, { "index": ".monitoring-es-6-2018.08.25", "docs.count": "608", "store.size": "1068" }, { "index": ".monitoring-kibana-6-2018.08.25", "docs.count": "33", "store.size": "163" }, { "index": ".security-6", "docs.count": "3", "store.size": "19" } ]
查看集群健康状态
GET _cat/health?v&h=cluster,status cluster status my-elk green
查看集群节点和磁盘剩余
#集群节点 GET _cat/nodes?v ip heap.percent ram.percent cpu load_1m load_5m load_15m node.role master name 192.168.113.103 60 93 5 0.54 0.53 0.55 di - data-2 192.168.113.104 12 87 7 0.72 0.77 0.94 - - client-1 192.168.113.101 13 90 4 0.35 0.32 0.37 m * master-1 192.168.113.102 46 91 100 2.81 2.84 3.44 di - data-1 #磁盘剩余 GET _cat/nodes?v&h=ip,node.role,name,disk.avail ip node.role name disk.avail 192.168.113.102 di data-1 2.4gb 192.168.113.103 di data-2 6.5gb 192.168.113.104 - client-1 5gb 192.168.113.101 m master-1 6.5gb
查看集群master节点
GET _cat/master?v id host ip node AhlyPtZYTta1AVH_7mUSbQ node1 192.168.113.101 master-1
查看分配
#查看每个数据节点上的分片数(shards)，以及每个数据节点磁盘剩余 GET _cat/allocation?v shards disk.indices disk.used disk.avail disk.total disk.percent host ip node 4 8.2mb 14gb 3.2gb 17.2gb 81 node2 192.168.113.102 data-1 4 5.7mb 9.9gb 7.3gb 17.2gb 57 node3 192.168.113.103 data-2
查看被挂起任务
GET _cat/pending_tasks?v
insertOrder timeInQueue priority source
查看每个节点正在运行的插件
GET _cat/plugins?v name component version data-2 x-pack-core 6.2.4 data-2 x-pack-deprecation 6.2.4 data-2 x-pack-graph 6.2.4 data-2 x-pack-logstash 6.2.4 data-2 x-pack-ml 6.2.4 data-2 x-pack-monitoring 6.2.4 data-2 x-pack-security 6.2.4 data-2 x-pack-upgrade 6.2.4 data-2 x-pack-watcher 6.2.4 client-1 x-pack-core 6.2.4 client-1 x-pack-deprecation 6.2.4 client-1 x-pack-graph 6.2.4 client-1 x-pack-logstash 6.2.4 client-1 x-pack-ml 6.2.4 client-1 x-pack-monitoring 6.2.4 client-1 x-pack-security 6.2.4 client-1 x-pack-upgrade 6.2.4 client-1 x-pack-watcher 6.2.4 master-1 x-pack-core 6.2.4 master-1 x-pack-deprecation 6.2.4 master-1 x-pack-graph 6.2.4 master-1 x-pack-logstash 6.2.4 master-1 x-pack-ml 6.2.4 master-1 x-pack-monitoring 6.2.4 master-1 x-pack-security 6.2.4 master-1 x-pack-upgrade 6.2.4 master-1 x-pack-watcher 6.2.4 data-1 x-pack-core 6.2.4 data-1 x-pack-deprecation 6.2.4 data-1 x-pack-graph 6.2.4 data-1 x-pack-logstash 6.2.4 data-1 x-pack-ml 6.2.4 data-1 x-pack-monitoring 6.2.4 data-1 x-pack-security 6.2.4 data-1 x-pack-upgrade 6.2.4 data-1 x-pack-watcher 6.2.4
查看每个节点的自定义属性
GET /_cat/nodeattrs?v node host ip attr value data-2 node3 192.168.113.103 ml.machine_memory 1028517888 data-2 node3 192.168.113.103 ml.max_open_jobs 20 data-2 node3 192.168.113.103 ml.enabled true client-1 node4 192.168.113.104 ml.machine_memory 1856888832 client-1 node4 192.168.113.104 ml.max_open_jobs 20 client-1 node4 192.168.113.104 ml.enabled true master-1 node1 192.168.113.101 ml.machine_memory 1028517888 master-1 node1 192.168.113.101 ml.max_open_jobs 20 master-1 node1 192.168.113.101 ml.enabled true data-1 node2 192.168.113.102 ml.machine_memory 1028517888 data-1 node2 192.168.113.102 ml.max_open_jobs 20 data-1 node2 192.168.113.102 ml.enabled true
查看索引分片的恢复视图
#索引分片的恢复视图,包括正在进行和先前已完成的恢复 #只要索引分片移动到群集中的其他节点，就会发生恢复事件 GET _cat/recovery/.kibana?v&format=json&pretty [ { "index": ".kibana", "shard": "0", "time": "446ms", "type": "empty_store", "stage": "done", "source_host": "n/a", "source_node": "n/a", "target_host": "node2", "target_node": "data-1", "repository": "n/a", "snapshot": "n/a", "files": "0", "files_recovered": "0", "files_percent": "0.0%", "files_total": "0", "bytes": "0", "bytes_recovered": "0", "bytes_percent": "0.0%", "bytes_total": "0", "translog_ops": "0", "translog_ops_recovered": "0", "translog_ops_percent": "100.0%" }, { "index": ".kibana", "shard": "0", "time": "2s", "type": "peer", "stage": "done", "source_host": "node2", "source_node": "data-1", "target_host": "node3", "target_node": "data-2", "repository": "n/a", "snapshot": "n/a", "files": "1", "files_recovered": "1", "files_percent": "100.0%", "files_total": "1", "bytes": "230", "bytes_recovered": "230", "bytes_percent": "100.0%", "bytes_total": "230", "translog_ops": "0", "translog_ops_recovered": "0", "translog_ops_percent": "100.0%" } ]
查看每个数据节点上fielddata当前占用的堆内存
全文检索用倒排索引非常合适;但过滤、分组聚合、排序这些操作，正排索引更合适。
ES中引入了fielddata的数据结构用来做正排索引。如果需要对某一个字段排序、分组聚合、过滤，则可将字段设置成fielddata。
默认情况下:
text类型的字段是不能分组及排序的，如需要则需要开启该字段的fielddata=true,但是这样耗费大量的内存，不建议这么使用。
keyword类型默认可分组及排序。
fielddata默认是采用懒加载的机制加载到堆内存中。当某个字段基数特别大，可能会出现OOM。
GET _cat/fielddata?v&h=node,field,size
node field size
data-1 kibana_stats.kibana.uuid 0b data-1 kibana_stats.kibana.status 0b data-2 kibana_stats.kibana.uuid 0b data-2 kibana_stats.kibana.status 0b #对某一字段进行查看 GET _cat/fielddata?v&h=node,field,size&fields=kibana_stats.kibana.uuid node field size data-2 kibana_stats.kibana.uuid 0b data-1 kibana_stats.kibana.uuid 0b
查看注册的快照仓库
GET _cat/repositories?v
id type
查看快照仓库下的快照
#可将ES中的一个或多个索引定期备份到如HDFS、S3等更可靠的文件系统，以应对灾难性的故障 #第一次快照是一个完整拷贝，所有后续快照则保留的是已存快照和新数据之间的差异 #当出现灾难性故障时，可基于快照恢复 GET _cat/snapshots/repo1?v
查看每个节点线程池的统计信息
#查看每个节点bulk线程池的统计信息 # actinve（活跃的），queue（队列中的）和 reject（拒绝的） GET _cat/thread_pool/bulk?v&format=json&pretty [ { "node_name": "data-2", "name": "bulk", "active": "0", "queue": "0", "rejected": "0" }, { "node_name": "client-1", "name": "bulk", "active": "0", "queue": "0", "rejected": "0" }, { "node_name": "master-1", "name": "bulk", "active": "0", "queue": "0", "rejected": "0" }, { "node_name": "data-1", "name": "bulk", "active": "0", "queue": "0", "rejected": "0" } ]
查看索引
GET _cat/indices/.monitoring*?v&h=index,health index health .monitoring-es-6-2018.08.25 green .monitoring-kibana-6-2018.08.25 green
查看别名
GET _cat/aliases?v&h=alias,index alias index .security .security-6
查看索引模板
GET _cat/templates?v&format=json&pretty [ { "name": "logstash-index-template", "index_patterns": "[.logstash]", "order": "0", "version": null }, { "name": "security_audit_log", "index_patterns": "[.security_audit_log*]", "order": "2147483647", "version": null }, { "name": ".monitoring-kibana", "index_patterns": "[.monitoring-kibana-6-*]", "order": "0", "version": "6020099" }, { "name": ".watches", "index_patterns": "[.watches*]", "order": "2147483647", "version": null }, { "name": ".monitoring-beats", "index_patterns": "[.monitoring-beats-6-*]", "order": "0", "version": "6020099" }, { "name": ".ml-notifications", "index_patterns": "[.ml-notifications]", "order": "0", "version": "6020499" }, { "name": ".ml-anomalies-", "index_patterns": "[.ml-anomalies-*]", "order": "0", "version": "6020499" }, { "name": ".ml-state", "index_patterns": "[.ml-state]", "order": "0", "version": "6020499" }, { "name": "security-index-template", "index_patterns": "[.security-*]", "order": "1000", "version": null }, { "name": ".watch-history-7", "index_patterns": "[.watcher-history-7*]", "order": "2147483647", "version": null }, { "name": ".ml-meta", "index_patterns": "[.ml-meta]", "order": "0", "version": "6020499" }, { "name": ".monitoring-alerts", "index_patterns": "[.monitoring-alerts-6]", "order": "0", "version": "6020099" }, { "name": ".monitoring-logstash", "index_patterns": "[.monitoring-logstash-6-*]", "order": "0", "version": "6020099" }, { "name": ".triggered_watches", "index_patterns": "[.triggered_watches*]", "order": "2147483647", "version": null }, { "name": ".monitoring-es", "index_patterns": "[.monitoring-es-6-*]", "order": "0", "version": "6020099" }, { "name": "kibana_index_template:.kibana", "index_patterns": "[.kibana]", "order": "0", "version": null } ]
查看单个或某类或整个集群文档数
#整个集群文档数 GET _cat/count?v epoch timestamp count 1535185950 16:32:30 3008 #某类索引文档数 GET _cat/count/.monitoring*?v epoch timestamp count 1535186185 16:36:25 2162
注意:只包含实际文档数，不包括尚未清除的已删除文档。
查看每个索引的分片
GET _cat/shards?v&format=json&pretty&s=index [ { "index": ".kibana", "shard": "0", "prirep": "p", "state": "STARTED", "docs": "1", "store": "4kb", "ip": "192.168.113.102", "node": "data-1" }, { "index": ".kibana", "shard": "0", "prirep": "r", "state": "STARTED", "docs": "1", "store": "4kb", "ip": "192.168.113.103", "node": "data-2" }, { "index": ".monitoring-es-6-2018.08.25", "shard": "0", "prirep": "p", "state": "STARTED", "docs": "2557", "store": "1.6mb", "ip": "192.168.113.102", "node": "data-1" }, { "index": ".monitoring-es-6-2018.08.25", "shard": "0", "prirep": "r", "state": "STARTED", "docs": "2557", "store": "1.5mb", "ip": "192.168.113.103", "node": "data-2" }, { "index": ".monitoring-kibana-6-2018.08.25", "shard": "0", "prirep": "p", "state": "STARTED", "docs": "211", "store": "110.1kb", "ip": "192.168.113.102", "node": "data-1" }, { "index": ".monitoring-kibana-6-2018.08.25", "shard": "0", "prirep": "r", "state": "STARTED", "docs": "211", "store": "110.1kb", "ip": "192.168.113.103", "node": "data-2" }, { "index": ".security-6", "shard": "0", "prirep": "p", "state": "STARTED", "docs": "3", "store": "9.8kb", "ip": "192.168.113.102", "node": "data-1" }, { "index": ".security-6", "shard": "0", "prirep": "r", "state": "STARTED", "docs": "3", "store": "9.8kb", "ip": "192.168.113.103", "node": "data-2" } ]
查看每个索引的segment
GET _cat/segments/.kibana?v&format=json&pretty [ { "index": ".kibana", "shard": "0", "prirep": "p", "ip": "192.168.113.102", "segment": "_2", "generation": "2", "docs.count": "1", "docs.deleted": "0", "size": "3.7kb", "size.memory": "1346", "committed": "true", "searchable": "true", "version": "7.2.1", "compound": "true" }, { "index": ".kibana", "shard": "0", "prirep": "r", "ip": "192.168.113.103", "segment": "_2", "generation": "2", "docs.count": "1", "docs.deleted": "0", "size": "3.7kb", "size.memory": "1346", "committed": "true", "searchable": "true", "version": "7.2.1", "compound": "true" } ]