Published by powerfulyang on Aug 3, 2022

类似于 distinct 去重的字段不能是 text 类型。所以 mapping 要有 keyword。

js
Copy Code
1
2
3
4
5
6
7
8
9
10
POST /logstash-*/_search
{
    index: 'logstash-*',
    query: {
      match_all: {},
    },
    collapse: {
      field: 'container_name.keyword',
    },
}