1、es數據插入
es入庫字段不可超過1000個字段，超過后無法存入es。建議不超過20個字段
1)批量插入
請求路徑 IP:端口/_bulk，每條數據前加具體索引信息
{"index":{"_index": "jzms_monitor_info_1","_type": "_doc"}}
說明：jzms_monitor_info_1是索引名
以下是發送2條請求報文：
{"index":{"_index": "jzms_monitor_info_1","_type": "_doc"}}
{"appName" : "應用11","appId" : "1111","requestAppID" : "222","startTime" : "20210901101010","requestAppName" : "應用2","id" : "21c02e722fdb4141bdc365d01b45262c","serviceID" : "440000-zfba-xsajbl-la","requestData" : {"ajbh" : "123456","acbrsfzh1" : "44"},"apiID" : "/api/v1/zfba-xsajbl-la/lahgxjcUsingPOST","reportTime":"20211201101010"}
{"index":{"_index": "jzms_monitor_info_1","_type": "_doc"}}
{"appName" : "應用12","appId" : "1111","requestAppID" : "222","startTime" : "20210901101010","requestAppName" : "應用2","id" : "21c02e722fdb4141bdc365d01b45262c","serviceID" : "440000-zfba-xsajbl-la","requestData" : {"ajbh" : "123456","acbrsfzh1" : "22"},"apiID" : "/api/v1/zfba-xsajbl-la/lahgxjcUsingPOST","reportTime":"20211201101010"}
執行成功的返回
2)單條插入
請求路徑：IP:端口/索引名/_doc
請求報文放入請求數據即可。
2、es數據查詢
1）查詢索引全部數據
GET /jzms_monitor_info/_search
{
"query": {
"match_all": {}
}
}
2）刪除索引全部數據
這種方法刪除速度比較慢
POST /jzms_monitor_info/_delete_by_query?pretty
{
"query": {
"match_all": {}
}
}
kibana平台上直接刪除索引再重建索引較快，如下所示：
3）索引創建
PUT /jzms_monitor_info
{
"settings": {
"number_of_shards": 1
},
"mappings": {
"_doc": {
"properties": {
"appId": { "type": "keyword" },
"appName": { "type": "text" },
"reportTime": { "type": "keyword" },
"serviceID": { "type": "keyword" },
"serviceType": { "type": "keyword" },
"apiID": { "type": "keyword" },
"startTime": { "type": "keyword" },
"requestAppId": { "type": "keyword" },
"requestAppName": { "type": "text" },
"requestData": {
"type": "object",
"dynamic": true
}
}
}
}
}
4）帶條件的查詢
3、es啟動命令
service elasticsearch start