sslfk的博客

elasticsearch8

高斯衰减python实现

kibana安装

迁移方法1，通过代码迁移，优点不需要改动任何集群配置和重启器群：from elasticsearch import Elasticsearchfrom elasticsearch import helpersdef get_all_data(table, query_dsl,scroll='5m',timeout='1m'): es = Elasticsearch([{'host': "IP", 'port': PORT, "http_auth": "user:passwd"}])

下载地址：下载中心 - Elastic 中文社区依赖的jar包下载地址：https://mvnrepository.com/artifact/mysql/mysql-connector-java/8.0.28依赖jdk8然后解压后，在任意目录下创建一个同步配置文件：logstash1.confinput { jdbc { jdbc_driver_library => "G:/soft/logstash/logstash-7.9.3/mysql_connect_j/mysq...

集群启动异常：Native memory allocation (mmap) failed to map 2060255232 bytes for committing reserved memory问题原因是内存配置要求过高，进入jvm.options中修改内存配置，然后重启

should直接使用时，minimum_should_match默认为1当should和must或filter同级使用时，minimum_should_match默认为0，也就是即使一个也没有匹配也是会有结果返回。如果想让should中至少一个条件生效，只需手动配置minimum_should_match为1即可...

参考：https://www.elastic.co/guide/en/elasticsearch/reference/7.5/query-dsl-mlt-query.html对应的代码为：{ "query": { "more_like_this" : { "fields" : ["name.first", "name.last"], "like" : [ { "_inde

mapping设置：{ "mappings":{ "properties":{ "publish_time":{ "type":"date", "format":"yyyy-MM-dd HH:mm:ss||yyyy-MM-dd||epoch_millis" } } }}

方式1：from elasticsearch import Elasticsearchconn = Elasticsearch( [{'host': host, 'port': ES_PORT, "http_auth": "%s:%s" % (ES_USER, ES_PASSWORD)} for host in ES_HOST])方式2：from elasticsearch import Elasticsearches = Elasticsearch(hosts=["ht

collapse本意是压缩，坍塌，在这里其实是按照某种方式聚合归类：距离参考：Collapse search results | Elasticsearch Guide [7.16] | Elastic{ "query": { "match": { "name": "海" } }, "collapse": { "field": "data_type", "inner_hits": {

elasticsearch 逐字联想

config中对应的配置：[elasticsearch]ES_MESSAGEW = http://elastic:密码@IP:9200/连接器：from elasticsearch import Elasticsearches = Elasticsearch(hosts=[config.get("elasticsearch","ES_MESSAGEW")])

elasticsearch 常见操作

分词器 变换全角和半角以及数字串模糊匹配

keyword 忽略大小写，全角半角符号转化