One, reference
learning series catalog-update ing
"Elastic Stack Practical Manual" Early Bird Edition First
2. Introduction
2.1 Basics
content | description |
---|
Basic introduction | |
Competencies | |
Technical advantages | |
Special term | |
2.2 Getting Started
content | description |
---|
elastic stack deployment | |
Elasticsearch basic application | |
Kibana basic application | |
2.3 Advanced
content | description |
---|
CCR/CCS | |
Rollup | |
Data stream | |
Index lifecycle management | |
Shard management | |
Snopshot | |
Watcher | |
Alters | |
Transform | |
Graph | |
Machine learning | |
elasticsearch SQL | |
Canvas | |
APM | |
Uptime | |
Enterprise Search | |
SIEM | |
Endpoint Security | |
Cluster management and monitoring | |
Elasticsearch various language development examples | |
Three, the query in kibana
3.1 Cluster
# 获取整个 cluster 的状态
GET _cluster/state
# 获取当前可以进行 vote 的所有 master-eligible 节点
GET _cluster/state?filter_path=metadata.cluster_coordination.last_committed_config
3.2 Index
# 配置索引的主/副分片
# 主分片无法修改,因为es索引时候,根据主分片数量,确定文档所在分片
# 副本分片可以动态修改
PUT yztest
{
"settings": {
"number_of_shards": 2,
"number_of_replicas": 1
}
}
# 查看索引配置
GET kibana_sample_data_logs/_settings?pretty
{
"kibana_sample_data_logs" : {
"settings" : {
"index" : {
"routing" : {
"allocation" : {
"include" : {
"_tier_preference" : "data_content"
}
}
},
"number_of_shards" : "1",
"auto_expand_replicas" : "0-1",
"blocks" : {
"read_only_allow_delete" : "false"
},
"provided_name" : "kibana_sample_data_logs",
"creation_date" : "1622706464015",
"number_of_replicas" : "1",
"uuid" : "KIsQkeGpTpi9-WO0rz-ACw",
"version" : {
"created" : "7130199"
}
}
}
}
}
**粗体** _斜体_ [链接](http://example.com) `代码` - 列表 > 引用
。你还可以使用@
来通知其他用户。