弹性搜索查询名称/值对列pull

时间:2019-01-17 11:15:06

标签: elasticsearch kibana elasticsearch-query aws-elasticsearch

我们有一个文档进行弹性搜索,其中包含名称/值对的多个部分,我们希望仅基于名称列值来获取值。

"envelopeData": {
  "envelopeName": "Bills",
  "details": {
    "detail": [
      {
        "name": "UC_CORP",
        "value": "76483"
      },
      {
        "name": "UC_CYCLE",
        "value": "V"
      }    

我们希望基于名称的结果只有76483,等于 UC_CORP

1 个答案:

答案 0 :(得分:2)

如果字段 envelopeData.details.detail nested类型,则可以对嵌套路径上的所需名称执行匹配查询,并可以使用inner_hits获取只是价值。

将字段 envelopeData.details.detail 映射为嵌套(如果未嵌套):

PUT stackoverflow
{
  "mappings": {
    "_doc": {
      "properties": {
        "envelopeData.details.detail": {
          "type": "nested" 
        }
      }
    }
  }
}

然后,您可以使用 inner_hits 执行以下查询以获取价值:

GET stackoverflow/_search
{
  "_source": "false", 
  "query": {
    "nested": {
      "path": "envelopeData.details.detail",
      "query": {
        "match": {
          "envelopeData.details.detail.name.keyword": "UC_CORP"
        }
      }, 
      "inner_hits": {
        "_source": "envelopeData.details.detail.value"
      }
    }
  }
}

输出:

{
  "_index": "stackoverflow",
  "_type": "_doc",
  "_id": "W5GUW2gB3GnGVyg-Sf4T",
  "_score": 0.6931472,
  "_source": {},
  "inner_hits": {
    "envelopeData.details.detail": {
      "hits": {
        "total": 1,
        "max_score": 0.6931472,
        "hits": [
          {
            "_index": "stackoverflow",
            "_type": "_doc",
            "_id": "W5GUW2gB3GnGVyg-Sf4T",
            "_nested": {
              "field": "envelopeData.details.detail",
              "offset": 0
            },
            "_score": 0.6931472,
            "_source": {
              "value": "76483"  -> Outputs value only
            }
          }
        ]
      }
    }
  }
}