需要替换elasticsearch中的空字段

Question

如何在 elasticsearch 中用值 21600000 替换 "build_duration" : "null",？

DevTools > 控制台

GET myindex/_search
{
  "query": {
    "term": {
      "build_duration": "null" 
    }
  }
}

输出：-

{
  "took" : 10,
  "timed_out" : false,
  "_shards" : {
    "total" : 1,
    "successful" : 1,
    "skipped" : 0,
    "failed" : 0
  },
  "hits" : {
    "total" : {
      "value" : 1,
      "relation" : "eq"
    },
    "max_score" : 9.658761,
    "hits" : [
      {
        "_index" : "myindex",
        "_type" : "_doc",
        "_id" : "40324749",
        "_score" : 9.658761,
        "_source" : {
        "build_duration" : "null",
        "build_end_time" : "2021-05-20 04:00:36",
        "build_requester" : "daniel.su",
        "build_site" : "POL",
        "build_id" : "40324749",
        "@version" : "1"
        }
      }
    ]
  }
}

Answer 1

使用以下查询可以替换字段值。

  POST /myindex/_update/mydocid
    {
        "doc" : {
            "build_duration": "21600000"
        }
    }