Obsidian/Recognition/Programing/ELK/query DSL.md

https://blog.naver.com/PostView.naver?blogId=sssang97&logNo=222431994969&parentCategoryNo=&categoryNo=348&viewDate=&isShowPopularPosts=false&from=postView

https://esbook.kimjmin.net/06-text-analysis/6.6-token-filter/6.6.4-ngram-edge-ngram-shingle

https://wonyong-jang.github.io/elk/2021/02/08/ELK-Elastic-Search4.html

https://jomuljomul.tistory.com/entry/ElasticSearch-%EC%A0%95%EB%A6%AC%ED%95%98%EA%B8%B0-Full-Text-Search-%EC%A2%85%EB%A5%98

https://velog.io/@hanblueblue/Elastic-Search-2

• 스크립팅 https://velog.io/@soyeon207/ES-8.-Script

POST replay_log_*/_search
{
  "size" : 10000,
  "track_total_hits": true,
  "query" : {
    "bool" : {
      "filter" : [
        {
          "terms" : {
            "header.msg_type.keyword" : [
              10
            ]
          }
        },
        {
          "range" : {
            "header.recv_time" : {
              "from" : "20240416090000.000",
              "to" : "20240416103059.999"
            }
          }
        }
      ]
    }
  },
  "_source": ["@timestamp", "header", "message"],
  "sort" : [{"header.recv_time.keyword" : {"order" : "ASC"}}],
  "search_after" : ["0"]
}