elasticsearch - 弹性查询的 bool 查询

Question

我在 flex 搜索中使用 bool(boolean) 查询。我的查询是

curl -XGET 'localhost:9200/population/_search' -d '{
   "query":{
        "bool" : {
            "must" : {
                "term" : { "user" : "rahul" }
            },
            "filter": {
                "term" : { "message" : "dsi" }
            },
            "must_not" : {

                    "country" : "pakistan"

            },
            "should" : [
                {
                    "term" : { "country" : "india" }
                },
                {
                    "term" : { "state" : "karnataka" }
                }
            ],

            "minimum_should_match" : 1,
            "boost" : 1.0
        }}

    }'

用户，州，国家是我的 flex 搜索中的字段。
但出现错误。

    {"error":{"root_cause":[{"type":"query_parsing_exception","reason":"[_na] query malformed, no field after start_object","index":"population","line":13,"col":17}],"type":"search_phase_execution_exception","reason":"all shards failed","phase":"query","grouped":true,"failed_shards":[{"shard":0,"index":"population","node":"bECY7K9ORPSuLrXpL1DpDw","reason":{"type":"query_parsing_exception","reason":"[_na] query malformed, no field after start_object","index":"population","line":13,"col":17}}]},"status":400}

Answer 1

您的bool/must_not子句不正确，您缺少term查询

curl -XGET 'localhost:9200/population/_search' -d '{
   "query":{
        "bool" : {
            "must" : {
                "term" : { "user" : "rahul" }
            },
            "filter": {
                "term" : { "message" : "dsi" }
            },
            "must_not" : {
                "term": { "country" : "pakistan" }      <--- change this line
            },
            "should" : [
                {
                    "term" : { "country" : "india" }
                },
                {
                    "term" : { "state" : "karnataka" }
                }
            ],

            "minimum_should_match" : 1,
            "boost" : 1.0
        }}

    }'