Elasticsearch gem-API調用格式

Question

我將此寶石用於Elasticsearch API
我試圖將以下curl語句轉換為等效的API調用

curl -X GET 'localhost:9200/_search?pretty=true' -d '{
  "size": 100,
  "fields": [
    "@message",
    "@timestamp"
  ],
  "query": {
    "term": {
      "@message": "drop"
    }
  }
}'

我嘗試了這些但沒有得到預期的結果

Elasticsearch API

@esearch = Elasticsearch::Client.new log: true
@data2 = @esearch.search q: {
                              term:{
                                "@message" => "drop"
                              }
                            },
                            size:'100',
                            fields:'["@message", "@timestamp"]'

運輸API

client = Elasticsearch::Client.new
@data = client.perform_request 'GET', '_search', {
                                                    :size=> 100,
                                                    :query=> {
                                                      :term=> {
                                                        "message"=> "drop"
                                                      }
                                                    },
                                                    {
                                                      :fields=> [
                                                        '@message',
                                                        '@timestamp'
                                                      ]
                                                    }
                                                  }

請幫忙

Answer 1

您需要將所有這些參數包裝在body元素中：

@data2 = @esearch.search 
    body: {
        query: {term:{"@message" => "drop"}}, 
        size:'100', 
        fields:'["@message", "@timestamp"]
   }