我已经构建了以下ElasticSearch(Post)查询,以便获取符合以下标准的记录:
-选择类型:“服务器”
-选择字段:“servername”、“silo”、“packages.displayname”、“packages.displayversion”、“environment”
{
"size": 10,
"_source" : ["servername", "silo", "packages.displayname", "packages.displayversion","environment"],
"query": {
"type" : {
"value" : "server"
}
}
}
它起作用了!
问题是当我想添加以下条件时:
-“packages.displayname”=“谷歌浏览器”
{
"size": 10,
"_source" : ["servername", "silo", "packages.displayname", "packages.displayversion","environment"],
"query": {
"type" : {
"value" : "server"
},
"match" : {"packages.displayname" : "Google Chrome"}
}
}
它不起作用!出现以下错误:
"type": "parsing_exception",
"reason": "[type] malformed query, expected [END_OBJECT] but found [FIELD_NAME]",
"line": 8,
"col": 9
我对ElasticSearch一窍不通……有人能帮我弄清楚该怎么写这个问题吗?
谢谢