我如何在Elasticsearch的查询DSL中应用匹配和范围

Question

I want use the match and range, my body in the query is :

{
  "query": {        
    "match" : {
      "netscaler.ipadd" : "192.68.2.39"
    },
    "range": {
      "@timestamp": {
        "gte":"2015-08-04T11:00:00",
        "lt":"2015-08-04T12:00:00"
      }
    }
  },
  "aggs" : {
    "avg_grade" : {
      "avg" : { "field" : "netscaler.stat.system.memusagepcnt" } 
    }
  }
}

and elsaticsearch responds with:

{
  "error": {
    "root_cause": [{
      "type": "parsing_exception",
      "reason": "[match] malformed query, expected [END_OBJECT] but found [FIELD_NAME]",
      "line": 6,
      "col": 7
    }],
    "type": "parsing_exception",
    "reason": "[match] malformed query, expected [END_OBJECT] but found [FIELD_NAME]",
    "line": 6,
    "col": 7
  },
  "status": 400
}

I need know which is the best way or the correct way for do that.

Answer 1

If you have multiple queries you probably should wrap them inside a bool query:

{
  "query": {
    "bool": {
      "must": [
        {
          "match": {
            "netscaler.ipadd": "192.68.2.39"
          }
        },
        {
          "range": {
            "@timestamp": {
              "gte": "2015-08-04T11:00:00",
              "lt": "2015-08-04T12:00:00"
            }
          }
        }
      ]
    }
  },
  "aggs": {
    "avg_grade": {
      "avg": {
        "field": "netscaler.stat.system.memusagepcnt"
      }
   }
 }
}

More info in the docs