一个完整的select c1,c2,c3,c4..... from tab where .....
例子:
GET dealer-server-2020.08.20/_search?q=beats_ip:10.111.8.142&filter_path=hits.hits._source&_source_includes=beats_ip,myindex_date,trace_id
分解:
GET dealer-server-2020.08.20/_search
?q=beats_ip:10.111.8.142 ##where条件
&filter_path=hits.hits._source ##路径筛选,只保留_source内容,去掉_index _score等内容
&_source_includes=beats_ip,myindex_date,trace_id ##检索条目,select cl1,cl2,cl3....
GET dealer-server-2020.08.20/_search?_source_includes=beats_ip,myindex_date,trace_id