docker pull docker.elastic.co/elasticsearch/elasticsearch:7.10.0
docker run --name elasticsearch -d -p 9200:9200 -p 9300:9300 elasticsearch:7.10.0

pip install elasticsearch

from elasticsearch import Elasticsearch

# 連接本地的 Elasticsearch 實(shí)例
es = Elasticsearch([{'host': 'localhost', 'port': 9200}])

# 檢查連接是否成功
if es.ping():
    print("連接成功！")
else:
    print("連接失敗！")

es = Elasticsearch([{'host': '遠(yuǎn)程IP地址', 'port': 9200}])

# 檢查連接
if es.ping():
    print("連接成功！")
else:
    print("連接失敗！")

# 創(chuàng)建一個(gè)索引
index_name = "my_index"
response = es.indices.create(index=index_name, ignore=400)  # ignore 400 錯(cuò)誤是因?yàn)樗饕汛嬖?
print(response)

mapping = {
    "mappings": {
        "properties": {
            "name": {"type": "text"},
            "age": {"type": "integer"},
            "timestamp": {"type": "date"}
        }
    }
}

response = es.indices.create(index="my_index_with_mapping", body=mapping, ignore=400)
print(response)

document = {
    "name": "John Doe",
    "age": 29,
    "timestamp": "2024-12-24T10:00:00"
}

# 插入數(shù)據(jù)到索引
response = es.index(index="my_index", document=document)
print(response)

from elasticsearch.helpers import bulk

# 批量插入數(shù)據(jù)
actions = [
    {
        "_op_type": "index",  # 操作類(lèi)型，可以是 index、update、delete
        "_index": "my_index",
        "_source": {
            "name": "Alice",
            "age": 30,
            "timestamp": "2024-12-24T12:00:00"
        }
    },
    {
        "_op_type": "index",
        "_index": "my_index",
        "_source": {
            "name": "Bob",
            "age": 35,
            "timestamp": "2024-12-24T12:05:00"
        }
    }
]

# 執(zhí)行批量插入
success, failed = bulk(es, actions)
print(f"成功插入 {success} 條，失敗 {failed} 條")

response = es.search(index="my_index", body={
    "query": {
        "match_all": {}  # 查詢(xún)所有文檔
    }
})
print(response)

response = es.search(index="my_index", body={
    "query": {
        "match": {
            "name": "John Doe"  # 查找name字段為"John Doe"的文檔
        }
    }
})
print(response)

response = es.search(index="my_index", body={
    "query": {
        "bool": {
            "must": [
                {"match": {"name": "Alice"}},
                {"range": {"age": {"gte": 25}}}
            ],
            "filter": [
                {"term": {"timestamp": "2024-12-24T12:00:00"}}
            ]
        }
    }
})
print(response)

response = es.search(index="my_index", body={
    "query": {
        "range": {
            "age": {
                "gte": 30
            }
        }
    }
})
print(response)

document_id = "1"  # 假設(shè)這是我們要更新文檔的 ID

update_doc = {
    "doc": {
        "age": 31
    }
}

response = es.update(index="my_index", id=document_id, body=update_doc)
print(response)

document_id = "1"  # 假設(shè)這是我們要?jiǎng)h除文檔的 ID
response = es.delete(index="my_index", id=document_id)
print(response)

response = es.search(index="my_index", body={
    "size": 0,  # 不返回文檔，只返回聚合結(jié)果
    "aggs": {
        "average_age": {
            "avg": {
                "field": "age"
            }
        },
        "age_range": {
            "range": {
                "field": "age",
                "ranges": [
                    {"to": 30},
                    {"from": 30, "to": 40},
                    {"from": 40}
                ]
            }
        }
    }
})

# 打印聚合結(jié)果
print(response['aggregations'])

response = es.indices.delete(index="my_index", ignore=[400, 404])
print(response)

# 創(chuàng)建索引別名
response = es.indices.put_alias(index="my_index", name="my_index_alias")
print(response)

# 使用別名查詢(xún)
response = es.search(index="my_index_alias", body={
    "query": {
        "match_all": {}
    }
})
print(response)

template = {
    "index_patterns": ["log-*"],  # 匹配所有以 log- 開(kāi)頭的索引
    "mappings": {
        "properties": {
            "timestamp": {"type": "date"},
            "log_level": {"type": "keyword"}
        }
    }
}

response = es.indices.put_template(name="log_template", body=template)
print(response)