ES 命令

集群相关

//查询当前集群的健康信息
GET /_cat/health?v

//查询每个节点上分配的分片（shard）的数量和每个分片（shard）所使用的硬盘容量
GET /_cat/allocation?v

//输出当前集群的拓扑结构（包括当前节点所在的地方和整个集群的相关信息等）
GET /_cat/nodes?v

//检索一个或多个（或所有）群集节点统计信息
GET /_nodes/stats

//显示master的节点ID，绑定IP地址，节点名称 
GET /_cat/master?v

//获取集群中每个节点当前热线程
GET _nodes/hot_threads

//查询集群配置
GET /_cluster/settings

//配置信息
GET /_settings

//输出索引分片中关于segment的低层级的信息
GET /_cat/segments?v

//查询索引index的相关信息
GET /_cat/indices?v

索引相关

//查询指定索引先关信息
GET /index_name

// 查询index的mapping
GET fit_trace-*/_mapping/logs

metric相关

//查询所有metric
GET /_metrics?v

// 查询指定metric
GET /_metric/fit_trace_dev_agg?v

//新增metric
PUT /_metric/fit_trace_dev_agg
{
    "tags": {
        "msgno": "string",
        "module": "string"
    },
    "time": {
        "name": "timestamp",
        "format": "epoch_millis"
    },
    "fields": {
    },
    "options": {
        "expire_day": 3,
        "refresh_interval": "10s",
        "number_of_shards": 40,
        "number_of_replicas": 1
    }
}

//更新metric
PUT /_metric/fit_trace_idc/update
{
    "tags": {
        "msgno": "string",
        "module": "string"
    },
    "time": {
        "name": "timestamp",
        "format": "epoch_millis"
    },
    "fields": {
    },
    "options": {
        "expire_day": 3,
        "refresh_interval": "10s",
        "number_of_shards": 40,
        "number_of_replicas": 1
    }
}

//删除metric字段
PUT /_metric/fit_trace_idc/delete
{
    "fields": ["msgno", "module", "src_ip", "src_server", "src_service", "dst_ip",
        "dst_server", "dst_service", "returncode", "cost", "datetime", "ext1", "ext2",
        "ext3","ext4", "ext5", "ext6", "deploy_id", "report_type", "src_addr_type",
        "src_pkg_name", "src_span_id", "dst_addr_type", "dst_pkg_name", "dst_span_id"]
}

//删除metric
DELETE /_metric/fit_trace-2019.07.11

rollup

# 获取所有rollup任务名称
GET /_rollups

# 获取单个rollup任务信息
GET /_rollup/dev_agg_system_1d?v

# 建立rollup任务
PUT /_rollup/test_count
{
    "base_metric": "rollup_dev_agg_1h",
    "rollup_metric": "test_count",
    "base_rollup": "dev_agg_1h",
    "query" : "module:trace_test",
    "group_by": [
      "entry"
    ],
    "function": {
        "cost_sum": {
            "sum": {
                "field": "cost"
            }
        },
        "cost_avg": {
            "avg": {
                "field": "cost"
            }
        },
        "count": {
            "sum": {
                "field": ""
            }
        }
    },
    "start_time": 1620572400,
    "interval": "5m",
    "frequency": "5m",
    "delay": "1m",
    "start_time" : 1622091600,
    "end_time" : 2147483647,
    "execution_mode" : "best",
    "routing_optimize" : true,
    "options": {
        "expire_day": 3,
        "refresh_interval": "10s",
        "number_of_shards": 2,
        "number_of_replicas": 1
    }
}

# 更新rollup任务
POST /_rollup/dev_agg_system_1d/update
{
    "state": "running",
    "function": {
        "cost_avg" : {
          "avg" : {
            "field" : "cost_avg"
          }
        },
        "cost_max" : {
          "avg" : {
            "field" : "cost_max"
          }
        },
        "cost_min" : {
          "min" : {
            "field" : "cost_min"
          }
        },
        "count" : {
          "sum" : {
            "field" : "count"
          }
        }
    }
}

# 删除rollup任务
DELETE /_rollup/test_count

数据相关

// "datetime":"2018-12-20T01:00:07.000Z"
// "datetime":"2018-12-20T01:00:07.000+0800" 带时区

// 批量插入数据
POST /fit_trace_temp/logs/_bulk
{"index":{"_routing": "trace" }}
{
  "module":"trace",
  "msgno":"51015be7b6485422292050306486",
  "src_server":"wxpay_slow_server",
  "dst_ip":"10.189.155.135",
  "src_ip":"10.189.155.135",
  "datetime":"2018-12-20T01:00:07.000Z",
  "dst_service":"fpay_bindpay_authen_service",
  "dst_server":"fpay_itg_server",
  "src_service":"wx_fpay_authen",
  "cost":2111263,
  "returncode":35500031
}

//查询数据
GET /fit_trace-2019.05.15/_search
{
  "query": {
  	"terms": {
   		"module": ["trace"]
    },
    "range": {
      "timestamp": {
        "gte": "05/15/2019 18:00:00",
        "lte": "05/15/2019 18:00:05",
        "format": "MM/dd/yyyy HH:mm:ss",
        "time_zone":"+08:00"
      }
    }
  },
  "docvalue_fields": [
    "module",
    "msgno",
    "cost"
  ]
}

模板相关

//查询模板
GET /_template/fit_trace_template

//删除模板
DELETE /_template/fit_trace_temp_1

//设置模板
PUT /_template/fit_trace_template
{
    "template" : "fit_trace-*",
    "order" : 0,
    "settings" : {
        "index": {
            "number_of_shards": "12"
      	}
    },
    "mappings" : {
        "logs" : {
            "_source":{
                "enabled": true
            },
            "dynamic":"strict",
            "properties": {
                "module":{
                    "type":"keyword",
                    "index":"not_analyzed",
                    "doc_values":true
                },
                "datetime":{
                    "type":"date",
                    "index":"not_analyzed",
                    "doc_values":true
                },
                "msgno":{
                    "type":"keyword",
                    "index":"not_analyzed",
                    "doc_values":true
                }
            }
        }
    }
}