我想实现以下目标:
too many connection
。contain no conn
。不能查询是:
"must_not" => [
"regexp" =>[
"LogMessage" => ".*Too many connections.*"
]
],
"must_not" => [
"regexp" =>[
"LogMessage" => "^.{0,0}$"
]
],
"must_not" => [
"regexp" =>[
"LogMessage" => ".*no conn.*"
]
],
但上述情况不正常。
答案 0 :(得分:1)
请尝试这样:
"must_not" => [
[
"regexp" =>[
"LogMessage" => ".*Too many connections.*"
]
],
[
"regexp" =>[
"LogMessage" => "^.{0,0}$"
]
],
[
"regexp" =>[
"LogMessage" => ".*no conn.*"
]
]
]