es常用查询编辑

本文介绍: 指定字段必须存在或不存在。//自定字段去重查询。

查询指定id信息
GET /index_name/_doc/1074266245


查询指定信息并降序
GET /index_name/_search
{
  "query": {
    "term": {
      "deviceId": {
        "value": "1074266245"
      }
    }
  }, 
  "sort": [
    {
      "timestamp": {
        "order": "desc"
      }
    }
  ]
}



//多条件查询
GET /index_name/_search
{
  "query": {
    "bool": {
      "must": [
        {
          "term": {
            "payload.locator_dev_id": {
              "value": 100902
            }
          }
        },
        {
          "term": {
            "payload.dev_id": {
              "value": 100301
            }
          }
        }
      ]
    }
  },
  "sort": [
    {
      "timestamp": {
        "order": "desc"
      }
    }
  ]
}
//自定字段去重查询
GET /index_name/_search
{
    "query": {
    "term": {
      "bodyObj.payLoad.dev_id": {
        "value": "100101"
      }
    }
    },
    "collapse": {
        "field": "bodyObj.payLoad.key"
    },
    "from": 0,
    "size": 10,
    "track_total_hits": true,
    "aggs": {
      "courseAgg": {
        "cardinality": {
          "field": "bodyObj.payLoad.key"
        }
      }
    }
}
//修改指定字段值
POST /index_name/_update/101202
{
  "doc": {
    "category":"2"
  }
}

#指定字段必须存在或不存在
GET /index_name/_search
{
  "query": {
    "bool": {
      "must": [
        {
          "exists": {
            "field": "deviceId"
          }
        }
      ]
    }
  },
  "sort": [
    {
      "timestamp": {
        "order": "desc"
      }
    }
  ]
}