mirror of
https://github.com/getredash/redash.git
synced 2026-03-22 01:00:14 -04:00
73 lines
1.9 KiB
ReStructuredText
73 lines
1.9 KiB
ReStructuredText
ElasticSearch: Querying
|
|
#######################
|
|
|
|
ElasticSearch currently supports only simple Lucene style queries (like
|
|
Kibana but without the aggregation).
|
|
|
|
Full blown JSON based ElasticSearch queries (including aggregations)
|
|
will be added later.
|
|
|
|
Simple query example:
|
|
=====================
|
|
|
|
- Query the index named "twitter"
|
|
- Filter by "user:kimchy"
|
|
- Return the fields: "@timestamp", "tweet" and "user"
|
|
- Return up to 15 results
|
|
- Sort by @timestamp ascending
|
|
|
|
.. code:: json
|
|
|
|
{
|
|
"index" : "twitter",
|
|
"query" : "user:kimchy",
|
|
"fields" : ["@timestamp", "tweet", "user"],
|
|
"size" : 15,
|
|
"sort" : "@timestamp:asc"
|
|
}
|
|
|
|
Simple query on a logstash ElasticSearch instance:
|
|
==================================================
|
|
|
|
- Query the index named "logstash-2015.04.\*" (in this case its all of
|
|
April 2015)
|
|
- Filter by type:events AND eventName:UserUpgrade AND channel:selfserve
|
|
- Return fields: "@timestamp", "userId", "channel", "utm\_source",
|
|
"utm\_medium", "utm\_campaign", "utm\_content"
|
|
- Return up to 250 results
|
|
- Sort by @timestamp ascending
|
|
|
|
.. code:: json
|
|
|
|
{
|
|
"index" : "logstash-2015.04.*",
|
|
"query" : "type:events AND eventName:UserUpgrade AND channel:selfserve",
|
|
"fields" : ["@timestamp", "userId", "channel", "utm_source", "utm_medium", "utm_campaign", "utm_content"],
|
|
"size" : 250,
|
|
"sort" : "@timestamp:asc"
|
|
}
|
|
|
|
Simple query on a ElasticSearch instance:
|
|
==================================================
|
|
|
|
|
|
- Query the index named "twitter"
|
|
- Filter by user equal "kimchy"
|
|
- Return the fields: "@timestamp", "tweet" and "user"
|
|
- Return up to 15 results
|
|
- Sort by @timestamp ascending
|
|
|
|
.. code:: json
|
|
|
|
{
|
|
"index" : "twitter",
|
|
"query" : {
|
|
"match": {
|
|
"user" : "kimchy"
|
|
}
|
|
},
|
|
"fields" : ["@timestamp", "tweet", "user"],
|
|
"size" : 15,
|
|
"sort" : "@timestamp:asc"
|
|
}
|