ELK 之 logStash之使用mysql的sql查询

使用SQL单个索引查询，可惜的是不能支持多个索引查询
get _sql?format=txt
{
  "query":"""
  select u.id,u.name,u.age from mytest u where  u.id >0
  """,
  "fetch_size":5
}

get _sql?format=json
{
  "query":"""
  select u.id,u.name,u.age from mytest u where  u.id >0 order by id desc
  """,
  "fetch_size":5
  
}

下一页的通过游标进行查询

get _sql?format=json
{
 "cursor" : "k8OvAwFaAXN4RkdsdVkyeDFaR1ZmWTI5dWRHVjRkRjkxZFdsa0RYRjFaWEo1UVc1a1JtVjBZMmdCRkVWd05uUnRibEZDV2tKTk5uWldXWEZFZGt4SkFBQUFBQUFBSE04V1oxbFFhelpYU2pkUlVFTTBkbmxQVEZKSFVpMUpadz09/////w8DAWYCaWQBAmlkAQRsb25nAAAAAWYEbmFtZQEEbmFtZQEEdGV4dAAAAAFmA2FnZQEDYWdlAQRsb25nAAAAAQc="
}