index
PUT /log_index_prod_a{"mappings": {"properties": {"id": {"type": "keyword"},"logLevel": {"type": "keyword"},"logTime": {"type": "date"},"userId": {"type": "long"},"ip": {"type": "ip"},"source": {"type": "byte"},"content": {"type": "object"}}},"aliases": {"log_index_prod_alias": {}}}
template
GET _template/log_index_templatePUT /_template/log_index_template{"index_patterns": "log_index_prod_*","order": 1,"mappings": {"properties": {"logLevel": {"type": "keyword"},"logTime": {"type": "date"},"userId": {"type": "long"},"ip": {"type": "ip"},"source": {"type": "byte"},"content": {"type": "object"}}},"aliases": {"log_index_prod_alias": {}}}
mapping
“content”: {“type”: “object”}会生成fields-keyword,无论插入的content.details、content.operationType的值是keyword抑或text(有空格)。
GET log_index_prod_a/_mapping{"log_index_prod_a" : {"mappings" : {"properties" : {"content" : {"properties" : {"details" : {"type" : "text","fields" : {"keyword" : {"type" : "keyword","ignore_above" : 256}}},"category" : {"type" : "text","fields" : {"keyword" : {"type" : "keyword","ignore_above" : 256}}},"testArray" : {"properties" : {"foo" : {"type" : "long"}}},"testNo" : {"type" : "long"}}},"ip" : {"type" : "ip"},"logLevel" : {"type" : "keyword"},"logTime" : {"type" : "date"},"source" : {"type" : "byte"},"userId" : {"type" : "long"}}}}}
search
GET _search{"query": {"match_all": {}}}GET log_index_prod_alias/_searchGET log_index_prod_alias/_search{"query": {"match_all": {}},"sort": [{"logTime": {"order": "desc"}}]}GET log_index_prod_alias/_search{"query": {"match": {"content.details": "current"}}}GET log_index_prod_alias/_search{"query": {"match": {"content.category": "sport"}}}GET log_index_prod_alias/_search{"query": {"match": {"content.category.keyword": "sport"}}}GET log_index_prod_alias/_search{"query": {"match": {"content.testNo": 1}}}GET log_index_prod_alias/_search{"query": {"match": {"userId": 1}}}
