我有这样的kibana文件
{
"_index": "echo.caspian-test.2020-06-11.idx.2",
"_type": "status",
"_id": "01754abe95fd084495da20646194fdf7",
"_score": 1,
"_source": {
"applicationVersion": "9f80e49dea1c647fa1baf2e70665aba3a74158eb",
"echoClientVersion": "1.5.1",
"echoMetadata": {
"transportType": "echo"
},
"dataCenter": "hdc-digital-non-prod",
"echoLoggerVersion": "EchoLogbackAppender-1.5.1",
"host": "e22ab1e4-9256-438b-5855-ad04",
"type": "INFO",
"message": "AddUpdate process method ends",
"messageDetail": {
"logger": "com.kroger.cxp.app.transformer.processor.AddUpdateTransformerImpl",
"thread": "DispatchThread: [com.ibm.mq.jmqi.remote.impl.RemoteSession[:/1f6e1b6c][connectionId=414D5143514D2E4150504C2E54455354967C7F5F0407B82E]]"
},
"routingKey": "caspian-test",
"timestamp": "1603276805250"
},
"fields": {
"timestamp": [
"2020-10-21T10:40:05.250Z"
]
}
}
我需要搜索所有文档有一个特定的connectionid,这是在
“messagedetail”:{“logger”:“com.kroger.cxp.app.transformer.processor.addupdatetransformerimpl”,“thread”:“调度线程:[com.ibm.mq.jmqi.remote.impl.remotesession[:/1f6e1b6c][connectionid=414D5143514D2E4150504C2E5445534967C7F5F0407B82E]]”
我怎么能那样做。我已尝试搜索messagedetail.thread=%$connection\u id%,但无效
1条答案
按热度按时间gdx19jrr1#
你需要添加一个
nested path
在您的搜索查询,使其工作和您的messageDetail
必须是嵌套数据类型,如下所示添加带有Map、搜索查询和结果的工作示例
索引Map
索引示例文档
和搜索查询
和搜索资源