Question

我在elasticsearch 6.5.1中创建了一个索引，将数据成功加载到该索引。有一个字段"submitted_date"是时间戳。下面是该字段的映射。

"submitted_date": { "type": "date", "format":"yyyy-MM-dd HH:mm:ss.SSS" },

然后我创建了索引模式。我将Time Filter field name用作"submitted_date"。之后，我尝试检查“发现”选项卡中的数据，但数据未显示。有一则消息说No results match your search criteria。

请注意，我以各种可能的方式更改了时间范围选择器中的时间，该时间选择器位于kibana仪表板右上角。

数据随弹性查询显示在“开发工具”选项卡中。

ps：我使用带有Elasticsearch官方库的nodejs插入了数据，没有使用logstash。

我关注了this article，但并没有帮助我。

更新：示例文档

    {
  "took" : 0,
  "timed_out" : false,
  "_shards" : {
    "total" : 1,
    "successful" : 1,
    "skipped" : 0,
    "failed" : 0
  },
  "hits" : {
    "total" : 10480,
    "max_score" : 1.0,
    "hits" : [
      {
        "_index" : "test",
        "_type" : "tests",
        "_id" : "1214334",
        "_score" : 1.0,
        "_source" : {

          "priority" : "4",
          "submitted_date" : "2018-01-04T18:32:21.000Z",
          "submitted_month" : 0,
          "submitted_month_name" : "January",
          "submitted_day" : 4,
          "submitted_weekday" : "Tuesday",
          "submitted_hour" : 18,
          "submitted_year_month" : "2018-0",
          "submitted_year_month_name" : "2018-January",
          "date_key" : "20180104",
          "year_month_key" : "201801",
          "status" : "Closed"
        }
      }
    ]
  }
}

检查请求

    {
  "version": true,
  "size": 500,
  "sort": [
    {
      "_score": {
        "order": "desc"
      }
    }
  ],
  "_source": {
    "excludes": []
  },
  "aggs": {
    "2": {
      "date_histogram": {
        "field": "submitted_date",
        "interval": "1d",
        "time_zone": "Asia/Kolkata",
        "min_doc_count": 1
      }
    }
  },
  "stored_fields": [
    "*"
  ],
  "script_fields": {},
  "docvalue_fields": [
    {
      "field": "close_date",
      "format": "date_time"
    },
    {
      "field": "last_modified_date",
      "format": "date_time"
    },
    {
      "field": "last_resolved_date",
      "format": "date_time"
    },
    {
      "field": "submitted_date",
      "format": "date_time"
    },
    {
      "field": "time_to_resolve",
      "format": "date_time"
    }
  ],
  "query": {
    "bool": {
      "must": [
        {
          "match_all": {}
        },
        {
          "range": {
            "submitted_date": {
              "gte": 1514745000000,
              "lte": 1543937620414,
              "format": "epoch_millis"
            }
          }
        }
      ],
      "filter": [],
      "should": [],
      "must_not": []
    }
  },
  "highlight": {
    "pre_tags": [
      "@kibana-highlighted-field@"
    ],
    "post_tags": [
      "@/kibana-highlighted-field@"
    ],
    "fields": {
      "*": {}
    },
    "fragment_size": 2147483647
  }
}

索引模式

    function _putMapping() {
    return client.indices.create({
        index: process.env.ELASTICSEARCH_INDEX,
           body: {
               settings:{
                index:{
                    "number_of_shards": 1,
                    "number_of_replicas": 5
                },
                    "index.mapping.ignore_malformed" : true
               },
               mappings:{
                   tests:{
                       properties:{
                           "last_modified_date": { "type": "date" },
                           "last_resolved_date": { "type": "date" },
                           "time_to_resolve": { "type": "date" },
                           "submitted_date": { "type": "date", "format":"yyyy-MM-dd HH:mm:ss.SSS" },

                           "date_key": { "type": "integer" },
                           "priority": { "type": "long" },
                           "submitted_hour": { "type": "long" },
                           "submitted_month": { "type": "long" },
                           "submitted_year": { "type": "long" },
                           "submitted_year": { "type": "keyword" },
                           "submitted_year_month": { "type": "keyword" },
                           "submitted_year_month_name": { "type": "keyword" },
                       }
                   }
               }
           }
    });
}

Answer 1

您的submitted_date和2018-01-04T18:32:21.000Z一样，但是您的映射设置为yyyy-MM-dd HH:mm:ss.SSS。

您需要将其更改为"yyyy-MM-dd'T'HH:mm:ss.SSS'Z'"。

没有结果与您在kibana中带有时间戳的搜索条件匹配

1 个答案: