上一篇文章中,我们介绍了Elasticsearch集群运行情况、索引、文档的CRUD操作了,下面让我们来愉快地学习一些新的命令吧。
批处理
Elasticsearch除了能够索引,更新和删除单个文档之外,还提供了使用_bulkAPI批量执行上述任何操作的功能。
此功能非常重要,因为它提供了一种非常有效的机制,可以尽可能快地执行多个操作,并尽可能少地进行网络往返。
作为一个简单示例,以下调用在一个批量操作中索引两个文档(ID 1 - John Doe和ID 2 - Jane Doe):
[builder @master~] $ curl - X POST "localhost:9200/customer/_doc/_bulk?pretty" - H 'Content-Type: application/json' - d '
{
"index":
{
"_id": "1"
}
}
{
"name": "John Doe"
}
{
"index":
{
"_id": "2"
}
}
{
"name": "Jane Doe"
}
'
{
"took": 19,
"errors": false,
"items": [
{
"index":
{
"_index": "customer",
"_type": "_doc",
"_id": "1",
"_version": 6,
"result": "updated",
"_shards":
{
"total": 2,
"successful": 1,
"failed": 0
},
"_seq_no": 5,
"_primary_term": 2,
"status": 200
}
},
{
"index":
{
"_index": "customer",
"_type": "_doc",
"_id": "2",
"_version": 1,
"result": "created",
"_shards":
{
"total": 2,
"successful": 1,
"failed": 0
},
"_seq_no": 0,
"_primary_term": 2,
"status": 201
}
}]
}
复制代码
下面示例更新第一个文档( ID为1), 然后在一个批量操作中删除第二个文档( ID为2):
[builder @master~] $ curl - X POST "localhost:9200/customer/_doc/_bulk?pretty" - H 'Content-Type: application/json' - d '
{
"index":
{
"_id": "1"
}
}
{
"name": "John Doe"
}
{
"index":
{
"_id": "2"
}
}
{
"name": "Jane Doe"
}
'
{
"took": 15,
"errors": false,
"items": [
{
"index":
{
"_index": "customer",
"_type": "_doc",
"_id": "1",
"_version": 7,
"result": "updated",
"_shards":
{
"total": 2,
"successful": 1,
"failed": 0
},
"_seq_no": 6,
"_primary_term": 2,
"status": 200
}
},
{
"index":
{
"_index": "customer",
"_type": "_doc",
"_id": "2",
"_version": 2,
"result": "updated",
"_shards":
{
"total": 2,
"successful": 1,
"failed": 0
},
"_seq_no": 1,
"_primary_term": 2,
"status": 200
}
}]
}
复制代码
请注意,对于删除操作,之后没有相应的源文档,因为删除只需要删除文档的ID。Bulk API不会因其中一个操作失败而失败。如果单个操作因任何原因失败,它将继续处理其后的其余操作。批量API返回时,它将为每个操作提供一个状态(按照发送的顺序),以便您可以检查特定操作是否失败。
数据操作
导入数据
下面我们在某个文件夹中保存着1个json文件,内容如下:
[builder@master ~/Developer/esTempData]$ cat accounts.json
{"index":{"_id":"1"}}
{"account_number":1,"balance":39225,"firstname":"Amber","lastname":"Duke","age":32,"gender":"M","address":"880 Holmes Lane","employer":"Pyrami","email":"amberduke@pyrami.com","city":"Brogan","state":"IL"}
{"index":{"_id":"6"}}
{"account_number":6,"balance":5686,"firstname":"Hattie","lastname":"Bond","age":36,"gender":"M","address":"671 Bristol Street","employer":"Netagy","email":"hattiebond@netagy.com","city":"Dante","state":"TN"}
...
# 我们的json文件中有1000条数据,上面只展示2条数据
复制代码
导入我们的json文件数据到Elasticsearch,需要在json文件的当前路径下执行:
[builder@master ~/Developer/esTempData]$ curl -H "Content-Type: application/json" -XPOST "localhost:9200/bank/_doc/_bulk?pretty&refresh" --data-binary "@accounts.json"
...
## 查看索引数据,可以看到第2行的数据有1000条记录了
[builder@master ~]$ curl -X GET "http://localhost:9200/_cat/indices?v"
health status index uuid pri rep docs.count docs.deleted store.size pri.store.size
green open .kibana_1 WShElb71RVigvhHRsU5vIA 1 0 3 0 11.9kb 11.9kb
yellow open bank LLrKZKoNT-ifFpiv-dBc9w 5 1 1000 0 474.6kb 474.6kb
yellow open customer jrkOIUCjTLec7_5OcwldYw 5 1 3 0 10.9kb 10.9kb
复制代码
搜索API
搜索有两种基本方式:一种是通过发送搜索参数REST请求URI和其他通过发送他们REST请求JSON主体。请求JSON体方法更具表现力,并以更可读的JSON格式定义搜索。我们将尝试一个请求URI方法的示例,但是对于本教程的其余部分,我们将专门使用请求体方法。
可以从_search端点访问用于搜索的REST API 。此示例返回bank索引中的所有文档:
[builder@master ~]$ curl -X GET 'localhost:9200/bank/_search?q=*&sort=account_number:asc&pretty'
复制代码
该q=*参数指示Elasticsearch匹配索引中的所有文档。该sort=account_number:asc参数指示使用account_number每个文档的字段以升序对结果进行排序。该pretty参数再次告诉Elasticsearch返回漂亮的JSON结果。
响应(部分显示):
{
"took" : 63,
"timed_out" : false,
"_shards" : {
"total" : 5,
"successful" : 5,
"skipped" : 0,
"failed" : 0
},
"hits" : {
"total" : 1000,
"max_score" : null,
"hits" : [ {
"_index" : "bank",
"_type" : "_doc",
"_id" : "0",
"sort": [0],
"_score" : null,
"_source" : {"account_number":0,"balance":16623,"firstname":"Bradshaw","lastname":"Mckenzie","age":29,"gender":"F","address":"244 Columbus Place","employer":"Euron","email":"bradshawmckenzie@euron.com","city":"Hobucken","state":"CO"}
}, {
"_index" : "bank",
"_type" : "_doc",
"_id" : "1",
"sort": [1],
"_score" : null,
"_source" : {"account_number":1,"balance":39225,"firstname":"Amber","lastname":"Duke","age":32,"gender":"M","address":"880 Holmes Lane","employer":"Pyrami","email":"amberduke@pyrami.com","city":"Brogan","state":"IL"}
}, ...
]
}
}
复制代码
关于response响应字段含义:
- took - Elasticsearch执行搜索的时间(以毫秒为单位)
- timed_out - 告诉我们搜索是否超时
- _shards - 告诉我们搜索了多少个分片,以及搜索成功/失败分片的计数
- hits - 搜索结果
- hits.total - 符合我们搜索条件的文档总数
- hits.hits - 实际的搜索结果数组(默认为前10个文档)
- hits.sort - 对结果进行排序键(如果按分数排序则丢失)
- hits._score并max_score- 暂时忽略这些字段
下面使用JSON请求体的方法完成上述相同的搜索:
$ curl -X GET 'localhost:9200/bank/_search' -d '{
"query": { "match_all": {} },
"sort": [
{ "account_number": "asc" }
]
}' -H "Content-Type:application/json"
# response 报文:
{"took":14,"timed_out":false,"_shards":{"total":5,"successful":5,"skipped":0,"failed":0},"hits":{"total":1000,"max_score":null,"hits":[{"_index":"bank","_type":"_doc","_id":"0","_score":null,"_source":{"account_number":0,"balance":16623,"firstname":"Bradshaw","lastname":"Mckenzie","age":29,"gender":"F","address":"244 Columbus Place","employer":"Euron","email":"bradshawmckenzie@euron.com","city":"Hobucken","state":"CO"},"sort":[0]}...
复制代码
好啦,本文暂时介绍这几个命令的简单使用方法。更多elasticsearch的相关知识我们在后面再娓娓道来...