Es常用Elasticsearch SQL查询语句

Es常用Elasticsearch SQL查询语句

# 多条件查询
GET /event*/_search
{
  "query": {
    "bool": {
      "must": [
        {
          "term": {
            "dataFrom": "其他"
          }
        }
      ],
      "must_not": [
        {
          "term": {
            "eventFrom": "情报"
          }
        },
        {
          "term": {
            "eventFrom": "otherDiscover"
          }
        }
      ]
    }
  }
}

# 多条件查询
GET /event*/_search
{
  "query": {
    "bool": {
      "must": [
        {
          "term": {
            "dataFrom": "其他"
          }
        },
        {
          "term": {
            "eventFrom": "otherDiscover"
          }
        }
      ]
    }
  }
}


# 条件删除
POST /event*/_doc/_delete_by_query
{
  "query": {
    "bool": {
      "must": [
        {
          "term": {
            "dataFrom": "其他"
          }
        },
        {
          "term": {
            "eventFrom": "otherDiscover"
          }
        }
      ]
    }
  }
}

# 多条件时间范围查询
GET /event*/_search
{
  "query": {
    "bool": {
      "must": [
        {
          "term": {
            "dataFrom": "其他"
          }
        },
        {
          "range": {
            "endTime": {
              "gte": "2021-9-01 00:00:00",
              "lte": "2021-10-01 00:00:00"
            }
          }
        }
      ]
    }
  }
}