Es常用Elasticsearch SQL查詢語句

Es常用Elasticsearch SQL查詢語句

# 多條件查詢
GET /event*/_search
{
  "query": {
    "bool": {
      "must": [
        {
          "term": {
            "dataFrom": "其他"
          }
        }
      ],
      "must_not": [
        {
          "term": {
            "eventFrom": "情報"
          }
        },
        {
          "term": {
            "eventFrom": "otherDiscover"
          }
        }
      ]
    }
  }
}

# 多條件查詢
GET /event*/_search
{
  "query": {
    "bool": {
      "must": [
        {
          "term": {
            "dataFrom": "其他"
          }
        },
        {
          "term": {
            "eventFrom": "otherDiscover"
          }
        }
      ]
    }
  }
}


# 條件刪除
POST /event*/_doc/_delete_by_query
{
  "query": {
    "bool": {
      "must": [
        {
          "term": {
            "dataFrom": "其他"
          }
        },
        {
          "term": {
            "eventFrom": "otherDiscover"
          }
        }
      ]
    }
  }
}

# 多條件時間范圍查詢
GET /event*/_search
{
  "query": {
    "bool": {
      "must": [
        {
          "term": {
            "dataFrom": "其他"
          }
        },
        {
          "range": {
            "endTime": {
              "gte": "2021-9-01 00:00:00",
              "lte": "2021-10-01 00:00:00"
            }
          }
        }
      ]
    }
  }
}