[ELK] IT인을 위한 ELK 통합로그시스템 구축과 활용 퀴즈 정답 1,2

1 번 

POST /tourcompany/_delete_by_query
{
  "query":{
    "match": {
      "holiday_dest": "Bora Bora"
    }
  }
}

POST /tourcompany/_update_by_query
{
  "query": {
    "match": {
      "holiday_dest": "Hawaii"
    }
  },
  "script": {
    "source": "if(ctx._source.departure_date == '2017/01/10'){ctx._source.departure_date = '2017/01/17'}"
  }
}

GET /tourcompany/_search?pretty
{
  "query": {
    "match": {
      "holiday_dest": "Disneyland"
    }
  },
  "_source": ["phone"]
}

GET tourcompany/_search?pretty
{
  "query": {
    "match_all": {
      
    }
  }
}

 

 

나름 응용해서 답을 작성해봤다

 

 

2번

bulk api 활용 insert

POST tourcompany/customerlist/_bulk
{"index":{"_id":"1"}}
{"name": "Alfred","phone" : "010-1234-5678","holiday_dest" : "Disneyland","departure_date" : "2017/01/20"}
{"index":{"_id":"2"}}
{"name": "Huey","phone" : "010-2222-4444","holiday_dest" : "Disneyland","departure_date" : "2017/01/20"}
{"index":{"_id":"3"}}
{"name": "Naomi","phone" : "010-3333-5555","holiday_dest" : "Hawaii","departure_date" : "2017/01/10"}
{"index":{"_id":"4"}}
{"name": "Andra","phone" : "010-6666-7777","holiday_dest" : "Bora Bora","departure_date" : "2017/01/11"}
{"index":{"_id":"5"}}
{"name": "Paul","phone" : "010-9999-8888","holiday_dest" : "Hawaii","departure_date" : "2017/01/10"}
{"index":{"_id":"6"}}
{"name": "Colin","phone" : "010-5555-4444","holiday_dest" : "Venice","departure_date" : "2017/01/16"}

주의해야할점은 data json을 한줄로 써야 에러가 안난다는 점이다

 

GET tourcompany/_search
{
  "query": {
    "bool": {
      "must": {
        "match" :{
          "phone" : "010-3333-5555"
        }
      }
    }
  }
}

GET tourcompany/_search
{
  "query": {
    "match": {
      "holiday_dest": "Disneyland"
    }
  },
  "_source": "phone"
}

GET tourcompany/_search?q="2017/01/10"or"2017/01/11"&sort=name.keyword&_source=name,departure_date
POST tourcompany/customerlist/_delete_by_query?q="Bora Bora"

 

 

or 를 dsl 쿼리문으로 바꾸려고 해봤는데 잘 안되는거 같다 그냥 저렇게 쓰는게 간단하고 좋은거 같다