elasticsearch - Elasticsearch 2.3-通过查询删除文档

Question

我正在使用Elasticsearch 2.3和Sense，并尝试通过查询删除文档。

我引用这些文档:
https://www.elastic.co/guide/en/elasticsearch/plugins/current/delete-by-query-usage.html

请求

DELETE /monitors/monitor/_query
{
  "term": { "ProcessName" : "myProcName" }
}

响应

{
  "found": false,
  "_index": "monitors",
  "_type": "monitor",
  "_id": "_query",
  "_version": 11,
  "_shards": {
    "total": 2,
    "successful": 1,
    "failed": 0
  }
}

如您所见，即使我将ProcessName命名为“myProcName”，也无法获得任何结果。
响应还表明引擎查找的 _id等于 _query。

编辑1:
即使发送请求:

DELETE /monitors/monitor/_query
{
  "query": {
    "term": { "ProcessName" : "tibapp_qflowfile" }
  }
}

我得到回应:

{
  "found": false,
  "_index": "monitors",
  "_type": "monitor",
  "_id": "_query",
  "_version": 1,
  "_shards": {
    "total": 2,
    "successful": 1,
    "failed": 0
  }
}

Answer 1

您得到的输出表示您尚未安装“按查询删除”插件，默认情况下未安装该插件。

Do that first，重新启动您的节点，此后它将起作用

bin/plugin install delete-by-query