2024-02-11 12:29:05 +00:00
|
|
|
https://blog.naver.com/PostView.naver?blogId=sssang97&logNo=222431994969&parentCategoryNo=&categoryNo=348&viewDate=&isShowPopularPosts=false&from=postView
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
https://esbook.kimjmin.net/06-text-analysis/6.6-token-filter/6.6.4-ngram-edge-ngram-shingle
|
|
|
|
|
|
|
|
|
|
https://wonyong-jang.github.io/elk/2021/02/08/ELK-Elastic-Search4.html
|
|
|
|
|
|
|
|
|
|
https://jomuljomul.tistory.com/entry/ElasticSearch-%EC%A0%95%EB%A6%AC%ED%95%98%EA%B8%B0-Full-Text-Search-%EC%A2%85%EB%A5%98
|
|
|
|
|
|
|
|
|
|
https://velog.io/@hanblueblue/Elastic-Search-2
|
|
|
|
|
|
|
|
|
|
- 스크립팅
|
|
|
|
|
https://velog.io/@soyeon207/ES-8.-Script
|
|
|
|
|
|
2024-04-22 09:12:10 +00:00
|
|
|
|
|
|
|
|
```json
|
|
|
|
|
|
|
|
|
|
POST replay_log_*/_search
|
|
|
|
|
{
|
|
|
|
|
"size" : 10000,
|
|
|
|
|
"track_total_hits": true,
|
|
|
|
|
"query" : {
|
|
|
|
|
"bool" : {
|
|
|
|
|
"filter" : [
|
|
|
|
|
{
|
|
|
|
|
"terms" : {
|
|
|
|
|
"header.msg_type.keyword" : [
|
|
|
|
|
10
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"range" : {
|
|
|
|
|
"header.recv_time" : {
|
|
|
|
|
"from" : "20240416090000.000",
|
|
|
|
|
"to" : "20240416103059.999"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
"_source": ["@timestamp", "header", "message"],
|
|
|
|
|
"sort" : [{"header.recv_time.keyword" : {"order" : "ASC"}}],
|
|
|
|
|
"search_after" : ["0"]
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
```
|
