es 按照时间查询的几种格式

最新推荐文章于 2025-07-24 11:47:31 发布

sxf_0123

最新推荐文章于 2025-07-24 11:47:31 发布

阅读量4.9w

点赞数 2

CC 4.0 BY-SA版权

分类专栏： ELK 文章标签： elk

本文链接：https://blog.youkuaiyun.com/sxf_123456/article/details/79578923

ELK 专栏收录该内容

63 篇文章

订阅专栏

本文展示了Elasticsearch中根据时间进行查询的多种方式，包括使用term过滤特定日期和时间范围，以及结合聚合查询进行数据筛选。示例查询涉及了不同日期格式和时间区的处理。

GET m-2fg-day/_search
{
"size": 0,
"query": {
"bool": {
"filter":[
{"term":{"2fg_year":"2017"}},
{"term":{"2fg_month":"09"}},
{"term":{"2fg_day":"25"}}
]
}
},
"aggs": {
"uncertain_reason": {
"terms": {
"field": "uncertain_reason.keyword",
"size": 10
}
}
}

}

GET gather-034-20180302/_search
{
"query": {
"bool": {
"must": [
{"range": {
"report_time": {
"gte": "2018-03-02T09:39:12.000Z",
"lte": "2018-03-02T13:00:00.000Z"
}
}},
{
"term": {
"itv_account": {
"value": "*@ITV4"
}
}
}
]
}
}
}

GET gather-000/_search
{
"size": 0,
"query": {
"range": {
"@timestamp": {
"gte": "2017-08-30T00:00:00",
"lte": "2017-08-30T23:59:59",
"time_zone":"+08:00"
}
}
}

}

GET gather-034-20180316/_search
{
"_source": {
"include": [
"report_time",
"flr"
]
},
"query": {
"bool": {
"must": [
{
"range": {
"flr": {
"gte": 30
}
}
},
{"term": {
"area": {
"value": "SC_CD"
}
}},
{
"range": {
"report_time": {
"gte": "now-30m"
}
}
}
]
}
},
"aggs": {
"1": {
"terms": {
"field": "itv_account",
"size": 10
},
"aggs": {
"2": {
"avg": {
"field": "flr"
}
}
}
}
},"sort": [
{
"report_time": {
"order": "desc"
}
}
]
}