es查詢，聚合、平均值、值范圍、cardinality去重查詢

原文：https://blog.csdn.net/sxf_123456/article/details/78195829

普通查詢

GET ana-apk/_search
{
  "query": {
    "match_all": {}
  }
}

查詢不重復的mac地址

GET ana-apk/_search 
{
  "size": 10,
  "aggs": {
    "MAC": {
      "cardinality": {
        "field": "MAC.keyword"
      }
    }
  },
  "_source":{
    "include":["MAC","ProbeOUI","RTPLossRate"]
  }
}

計算RTPLossRate的平均值

GET ana-apk/_search 
{
  "size": 0,
  "aggs": {
    "avg_RTPLossRate": {
      "avg": {
        "field": "RTPLossRate"
      }
    }
  }
}

查詢RTPLossRate小於0的值

GET ana-apk/_search 
{
  "size": 10,
  "query": {
    "range": {
      "RTPLossRate": {
        "lt": 0
      }
    }
  },
  "_source":{
    "include":["MAC","ProbeOUI","RTPLossRate","message"]
  }
}

查詢RTPLossRate大於等於0小於等於1000的值

GET ana-apk/_search 
{
  "size": 10,
  "query": {
    "range": {
      "RTPLossRate": {
        "gte": 0,
        "lte": 1000
      }
    }
  },
  "aggs": {
    "avg_RTPLossRate": {
      "avg": {
        "field": "RTPLossRate"
      }
    }
  }
}

查詢RTPLossRate在0到1000之間的數據，並輸出字段為OUI的10個值

GET ana-apk/_search  
{
  "size": 0,
  "query": {
    "range": {
      "RTPLossRate": {
        "gte": 0,
        "lte": 1000
      }
    }
  },
  "aggs": {
    "NAME": {
      "terms": {
        "field": "OUI",
        "size": 10
      }
    }
  }
}

 

查詢字段OUI包含SKYWORTH的值，並且RTPLossRate的范圍在0到1000之間，計算RTPLossRate的平均值

GET ana-apk/_search 
{
  "size": 0,
  "query": {
    "bool": {
      "must": [
        {"term": {
          "OUI": {
            "value": "SKYWORTH"
          }
        }},
        {"range": {
          "RTPLossRate": {
            "gte": 0,
            "lte": 1000
          }
        }}
      ]
    }},
    "aggs": {
      "avg_RTPLossRate": {
        "avg": {
          "field": "RTPLossRate"
        }
      }
    }
}

 

支持原創，請移步原文：https://blog.csdn.net/sxf_123456/article/details/78195829​​​​​​​