[elk]验证mapping字段数和数据字段数关系

时间 2019-12-12

标签 elk 验证 mapping 字段数据关系繁體版

原文原文链接

验证一个mapping下字段缺乏或者超过

结论: 没有什么不能够.
1.若是数据字段不在mapping里,则动态会更新mapping.
2.数据字段数也能够小于mapping里字段数app

建立一个mapping

DELETE /lib2

PUT /lib2
{
  "settings": {
    "number_of_shards": 2,
    "number_of_replicas": 1
  },
  "mappings": {
    "user": {
      "properties":{
        "name":{"type":"keyword"},
        "age":{"type":"integer"},
        "address":{"type":"text"},
        "birth":{"type":"date"}
      }
    }
  }
}


GET /lib2/_mapping

PUT /lib2/user/1
{
  "name":"maotai1",
  "age":21,
  "address":"shan xi xian",
  "birth":"2018-02-06T06:22:59.00Z"
}

少两个字段

PUT /lib2/user/2
{
  "name":"maotai2",
  "age":22
}

多一个favor字段

PUT /lib2/user/3
{
  "name":"maotai3",
  "age":23,
  "address":"shan xi xian",
  "birth":"2018-02-06T06:22:59.00Z",
  "favor":["book","sleep"]
}

查询

GET /lib2/user/_search
{
  "query": {
    "match_all": {}
  }
}

如下几种状况都是ok的

mapping字段数 == 数据字段数
code

mapping字段数 >= 数据字段数
blog

mapping字段数 <= 数据字段数
date