Elasticsearch _时间戳

Question

我试图在索引上定义 _timestamp 属性。所以首先，我创建索引

curl -XPUT 'http://elasticsearch:9200/ppe/'

来自服务器的响应:{"ok":true,"acknowledged":true}

然后我尝试用 _timestamp 定义映射

curl -Xput 'http://elasticsearch:9200/ppe/log/_mapping' -d '{
  "log": {
    "properties": {
      "_ttl": {
        "enabled": true
      },
      "_timestamp": {
        "enabled": true,
        "store": "yes"
      },
      "message": {
        "type": "string",
        "store": "yes"
      },
      "appid": {
        "type": "string",
        "store": "yes"
      },
      "level": {
        "type": "integer",
        "store": "yes"
      },
      "logdate": {
        "type": "date",
        "format": "date_time_no_millis",
        "store": "yes"
      }
    }
  }
}'

我从服务器收到了回复

{
  "error": "MapperParsingException[No type specified for property [_timestamp]]",
  "status": 400
}

我的映射有什么问题？

Answer 1

_ttl 和 _timestamp 等特殊字段必须定义在与 properties 对象相同的级别:

curl -Xput 'http://elasticsearch:9200/ppe/log/_mapping' -d '{
    "log": {
        "_ttl": {
            "enabled": true
        },
        "_timestamp": {
            "enabled": true,
            "store": "yes"
        },
        "properties": {
            "message": {
                "type": "string",
                "store": "yes"
            },
            "appid": {
                "type": "string",
                "store": "yes"
            },
            "level": {
                "type": "integer",
                "store": "yes"
            },
            "logdate": {
                "type": "date",
                "format": "date_time_no_millis",
                "store": "yes"
            }
        }
    }
}
'