我是ELasticsearch的新手,并且在玩NSRL哈希数据集和elasticsearch。好吧,我正在尝试使用python搜索特定的哈希,这是我的代码
query = {'query': {'match': {'MD5':hashmd5}}}
return_val = es.search(index="full-nsrl2", body=query)
我得到这个答复
{
u'hits':{
u'hits':[
],
u'total':0,
u'max_score':None
},
u'_shards':{
u'successful':5,
u'failed':0,
u'total':5
},
u'took':2,
u'timed_out':False
}
但是,当我按照“ http://127.0.0.1:9200/full-nsrl2/_search?=1EEE08650E8849C431175826620DFA99”的方式通过Elasticsearch api手动搜索时,会得到我一直在寻找的响应
{
"took":80,
"timed_out":false,
"_shards":{
"total":5,
"successful":5,
"failed":0
},
"hits":{
"total":26,
"max_score":6.2274733,
"hits":[
{
"_index":"full-nsrl",
"_type":"nsrl-type",
"_id":"AWZpGY7N_EHOwi5tpWzL",
"_score":6.2274733,
"_source":{
"null":[
"54BBBAE146801BE7D5DA4550B5DB276A",
"E693FEF0",
"AttachFiletoTask.htm",
"14610",
"5704",
"358",
""
],
"#TYPE System.Management.Automation.PSCustomObject":"BD5470E7FA81A596019E9ADC41045A62316C2303"
}
}
}