我在索引中有一些檔案..
"hits" : [
{
"_index" : "siem-referencedata-table-table2d526444eff99b1706053853ef7",
"_type" : "_doc",
"_id" : "0table222cc244b04b59d9ecafb0476e6",
"_score" : 1.0,
"_source" : {
"column-name1" : "10.1.10.1",
"column-name2" : "range(100,200)",
"column-name3" : "nam3",
"create_time" : "2022-05-21 03:30:39",
"last_seen" : "2022-05-21 03:30:39",
"id" : "0table222cc244b04b59d9ecafb0476e6"
}
},...
我想搜索具有三個欄位的檔案column-name1,column-name2和column-name3。我使用以下查詢term來搜索確切考慮的單詞:
{
"query": {
"bool": {
"must": [
{
"term": {
"column-name1": {"value":"10.1.10.1"}
}
},
{
"term": {
"column-name2": {"value":"range(100,200)"}
}
},
{
"term": {
"column-name3": {"value":"nam3"}
}
}
]
}
}
}
它沒有"column-name2": {"value":"range(100,200)"}..我應該怎么處理range能力?還有另一種方法來處理這個嗎?
uj5u.com熱心網友回復:
通過添加keyword到以下檔案解決了查詢:
{
"query": {
"bool": {
"must": [
{
"term": {
"column-name1.keyword": {"value":"10.1.10.1"}
}
},
{
"term": {
"column-name2.keyword": {"value":"range(100,200)"}
}
},
{
"term": {
"column-name3.keyword": {"value":"nam3"}
}
}
]
}
}
}
感謝Barkha Jain!
轉載請註明出處,本文鏈接:https://www.uj5u.com/net/481762.html
上一篇:更新多欄位完成建議權重
