如何在德鲁伊查询中同时添加 "and" 和 "or" 过滤器？

Question

我正在尝试编写一个德鲁伊查询（json 文件），它同时是“and”和“or”过滤器。我试过这个：

{
  "queryType": "select",
  "dataSource": "timeseries_db",
  "intervals": ["2020-09-08T17:00:00\/2020-09-08T17:30:00"],
  "pagingSpec":{ "threshold":100},
  "filter": {
    "type": "and",
    "fields": [
      {
        "type": "selector",
        "dimension": "orgid",
        "value": "864e1875-ea80-455b-a835-f75bed0df2a7"
      },
      "filter": {
        "type": "or",
        "fields": [
         {
           "type": "selector",
           "dimension": "host_name",
           "value": "testname.82fae43ca"
         },
         {
           "type": "selector",
           "dimension": "host_name",
           "value": "testname.09db12d4a"
         }
        ]
      }
    ]
  },
  "granularity": "all"
}

我想获取组织 ID 为 864e1875-ea80-455b-a835-f75bed0df2a7 且主机名为 testname.82fae43ca 或 testname.09db12d4a 的记录

当我运行这个查询时，它抛出错误提示“类型”丢失。但我已经包括了“类型”。感谢任何帮助。

Answer 1

您不需要 and 过滤器中的额外 "filter"。试试这个：

{
  "queryType": "select",
  "dataSource": "timeseries_db",
  "intervals": ["2020-09-08T17:00:00\/2020-09-08T17:30:00"],
  "pagingSpec":{ "threshold":100},
  "filter": {
    "type": "and",
    "fields": [
      {
        "type": "selector",
        "dimension": "orgid",
        "value": "864e1875-ea80-455b-a835-f75bed0df2a7"
      },
      {
        "type": "or",
        "fields": [
         {
           "type": "selector",
           "dimension": "host_name",
           "value": "testname.82fae43ca"
         },
         {
           "type": "selector",
           "dimension": "host_name",
           "value": "testname.09db12d4a"
         }
        ]
      }
    ]
  },
  "granularity": "all"
}

另一种方法是在 or:

中使用 in 过滤器而不是两个 selector 过滤器

{
  "queryType": "select",
  "dataSource": "timeseries_db",
  "intervals": ["2020-09-08T17:00:00\/2020-09-08T17:30:00"],
  "pagingSpec":{ "threshold":100},
  "filter": {
    "type": "and",
    "fields": [
      {
        "type": "selector",
        "dimension": "orgid",
        "value": "864e1875-ea80-455b-a835-f75bed0df2a7"
      },
      {
        "type": "in",
        "dimension": "host_name",
        "values": ["testname.82fae43ca", "testname.09db12d4a"]
      }
    ]
  },
  "granularity": "all"
}

如何在德鲁伊查询中同时添加 "and" 和 "or" 过滤器？

How to add "and" and "or" filters at the same time in a druid query?

druid