elk常用命令

标签：rop   col   popular   text   cti   ldd   pre   car   amp   

curl -XGET ‘192.168.1.102:9200/_cat/indices?v&pretty‘

curl -XDELETE ‘http://192.168.1.102:9200/log*‘

curl -XGET "http://192.168.1.102:9200/logstash-2018.09.06/_mapping?pretty"

curl -XPUT "http://192.168.1.102:9200/logstash-2018.09.06"

curl -XGET ‘http://192.168.1.102:9200/_template/logstash‘

curl -XGET "http://192.168.1.102:9200/cars/_search?pretty"

#修改mapping
curl -X PUT "192.168.1.102:9200/cars/_mapping/transactions" -H ‘Content-Type: application/json‘ -d‘
{
"properties": {
"make": {
"type": "text",
"fielddata": true
}}}‘

curl -X GET "192.168.1.102:9200/cars/transactions/_search?pretty" -H ‘Content-Type: application/json‘ -d‘
{
"size" : 0,
"aggs" : {
"popular_colors" : {
"terms" : {
"field" : "color"
}}}}‘

elk常用命令

标签：rop   col   popular   text   cti   ldd   pre   car   amp   

原文地址：https://www.cnblogs.com/wangmo/p/9660873.html