Exemple #1
0
        public void IndiceMatchQuery()
        {
            var repTempIndex           = new TimeStampedIndexDescriptor("einstein_engine-", "yyyy.MM.dd", "@timestamp", IndexStep.Day);
            ElasticSearchClient client = new ElasticSearchClient("http://172.22.9.99:9200/", repTempIndex);

            QueryBuilder builder = new QueryBuilder();

            builder.Indices.AddIndices("einstein_engine-*");
            builder.Indices.SetQuery(new LuceneQuery("Level:\"INFO\""));

            builder.PrintQuery(client.IndexDescriptors);

            ElasticSearchResult result = client.ExecuteQuery(builder);

            Assert.AreNotEqual(0, result.Items.Count);
            Assert.IsTrue(result.Items.All(i => i.Type == "einstein_engine"));
        }
Exemple #2
0
        public void IndiceNotMatchQuery()
        {
            var repSecIndex            = new TimeStampedIndexDescriptor("rep-sec-", "yyyy.MM.dd", "@timestamp", IndexStep.Day);
            var reptempIndex           = new TimeStampedIndexDescriptor("rep-templates-reader-", "yyyy.MM.dd", "@timestamp", IndexStep.Day);
            ElasticSearchClient client = new ElasticSearchClient("http://172.22.1.31:9200/", repSecIndex, reptempIndex);

            QueryBuilder builder = new QueryBuilder();

            builder.Indices.AddIndices("rep-templates-reader-*");
            builder.Indices.SetQuery(new LuceneQuery("type:(rep-sec)"));
            builder.Indices.SetNoMatchQuery(new LuceneQuery("*"));

            builder.PrintQuery(client.IndexDescriptors);

            ElasticSearchResult result = client.ExecuteQuery(builder);

            Assert.AreNotEqual(0, result.Items.Count);
            Assert.IsTrue(result.Items.All(i => i.Type == "rep-sec"));
        }
Exemple #3
0
        public void Xxx()
        {
            var einsteinIndex = new TimeStampedIndexDescriptor("einstein_engine-", "yyyy.MM.dd", "@timestamp", IndexStep.Day);
            var client        = new ElasticSearchClient("http://172.22.9.99:9200/", einsteinIndex);

            QueryBuilder qB = new QueryBuilder();

            qB.Filtered.Filters.Add(FilterType.Must, new MovingTimeRange("@timestamp", 86400));
            qB.Filtered.Filters.Add(FilterType.Must, new TermsFilter("CorrelationCode", "tl_DD8AC340-B0ED-4C52-B2A3-38ECF6F2CDF5", "3b3b49de-72cc-499e-bf8e-f8aa6bd4c9cb", "ITALY")
            {
                Execution = "bool"
            });

            qB.PrintQuery();

            ElasticSearchResult result = client.ExecuteQuery(qB, new GetParam("search_type", "count"));

            Console.WriteLine(result.Total);
        }
Exemple #4
0
        public void Test()
        {
            var repSecIndex            = new TimeStampedIndexDescriptor("rep-sec-", "yyyy.MM.dd", "@timestamp", IndexStep.Day);
            var repTempIndex           = new TimeStampedIndexDescriptor("rep-templates-reader-", "yyyy.MM.dd", "@timestamp", IndexStep.Day);
            ElasticSearchClient client = new ElasticSearchClient("http://10.0.22.16:9200/", repSecIndex, repTempIndex);

            QueryBuilder builder = new QueryBuilder();

            builder.Filtered.Filters.Add(FilterType.Must, new LuceneFilter("chujeris"));
            builder.Aggregates.Add("2", new TermsAggregate("key", 9999)
            {
                Order = new OrderField("_count", SortOrder.Desc)
            });

            builder.PrintQuery(client.IndexDescriptors);

            ElasticSearchResult result = client.ExecuteQuery(builder);

            Assert.AreNotEqual(0, result.Items.Count);
        }
Exemple #5
0
        public void AggregateTest()
        {
            var repSecIndex            = new TimeStampedIndexDescriptor("reporting_analytics_ui-", "yyyy.MM.dd", "@timestamp", IndexStep.Day);
            ElasticSearchClient client = new ElasticSearchClient("http://172.22.9.99:9200/", repSecIndex);

            QueryBuilder builder = new QueryBuilder();

            builder.Filtered.Filters.Add(FilterType.Must, new FixedTimeRange("@timestamp", DateTime.Now.Yesterday(), DateTime.Now.EndOfDay()));
            builder.Size = 0;

            builder.Aggregates.Add(
                "template_aggregate",
                new TermsAggregate("TemplateId")
            {
                Script = "TemplateName"
            }
                );

            builder.PrintQuery(client.IndexDescriptors);

            dynamic result = client.ExecuteQuery(builder);

            Console.WriteLine(JsonConvert.SerializeObject(result, Formatting.Indented));
        }
 public TestBase()
 {
     var index = new TimeStampedIndexDescriptor("einstein_agency-", "yyyy.MM.dd", "@timestamp", IndexStep.Day);
     Client = new ElasticSearchClient("http://10.8.58.65:9200/", index);
 }