Common cluster name inside given intranet:
cluster.name: mycluster
Unique node name within claster:
node.name: "node1"
Node types:
node.master: true node.ingest: true node.data: true
Network interfaces to bind to:
network.host: [_local_, node1.example.com]
Port definitions:
http.port : 9200 tcp.port : 9300
Override default locations:
path.data: /path/to/data1,/path/to/data2 path.logs: /path/to/logs path.plugins: /path/to/plugins
Explicit list of seed nodes in cluster:
discovery.zen.ping.unicast.hosts: ["master1.example.com", "master2.example.com:9300"]
Dump applied configs:
GET /_cluster/settings?include_defaults=true
To get data in table form use /_cat endpoint:
GET /_cat/nodes
To pretty print output append query:
GET /_cat/nodes?pretty=1
Cluster health:
GET /_cat/health?v GET /_cluster/health?pretty GET /_cluster/health?pretty&level=cluster
List of nodes in cluster (ip, RAM, CPU):
GET /_cat/nodes?v GET /_cat/master?v watch -d curl -s 'localhost:9200/_cat/nodes?v'
List cluster state:
GET /_cluster/state?pretty GET /_cluster/allocation/explain
List of tasks executed in cluster:
GET /_cat/tasks?v GET /_cat/tasks?detailed GET _tasks
List of indexes (status, health, size):
GET /_cat/indices GET /_cat/indices?v GET /_cat/indices?v&s=index GET /_cluster/health?pretty&level=indices
List of shards:
GET /_cat/shards?v
List of mappings across all indexes:
GET /_mapping GET /_all/_mapping GET /twitter,kimchy/_mapping
List of shards:
GET /_cluster/health?pretty&level=shards
Assign number of shards and replicas:
curl -XPUT -d '{settings: {index: "number_of_shards": 3, "number_of_replicas": 1}}'
TERM1 TERM2 is same as TERM1 OR TERM2.
"TERM1 TERM2" is for phrase.
"TERM1 TERM2"~5 is for proximity.
TERM~0.8 is for fuzzy.
* is for wildcard.
Boosting is done with ^N syntax, like TERM1^10 TERM2.
Range with [2017-01-01 TO 2017-02-29].
Logical AND, OR, NOT and parentheses for grouping.
Fields are set before colon, like FIELD:TERM.
_exists_:<field> for testing field existence.
Note
_missing_:<field> was removed from Kibana 5.x, use NOT _exists_:<field>.
-<field>:<val> or -<field>:"<val>" for excluding field value.
+<field>:<val> or +<field>:"<val>" for including field value.