在Jaeger ElasticSearch中搜索

Question

Jaeger ElasticSearc的查询返回以下条目

"_index" : "jaeger-span-2020-07-31",
"_type" : "span",
"_source" : {
"startTime" : 1596157225275112,
"startTimeMillis" : 1596157225275,
"duration" : 0,
"tags" : [
{
"key" : "span.kind",
"type" : "string",
"value" : "server"
},
{
"key" : "internal.span.format",
"type" : "string",
"value" : "zipkin"
}
],
"process" : {
"serviceName" : "transaction-manager",
}
}
}

我的目标是找到标记为["internal.span"]的条目；zipkin"；。字段"；标签"；是"；嵌套"；。我正在尝试下面这样的查询。我没有被击中。我想念什么？

{
"from": 0,
"size": 1,
"query": { 
"bool": {
"must": [ 
{"match": { "process.serviceName": "transaction-manager" }},
{
"nested": {
"path": "tags",
"query": {
"match": {
"value": "zipkin"
}
}
}
}
]
}
}
}

Answer 1

您只需要在匹配查询中使用tags.value而不是value。

以下查询应该会有所帮助：

POST <your_index_name>/_search
{
"from": 0,
"size": 1,
"query": {
"bool": {
"must": [
{
"match": {
"process.serviceName": "transaction-manager"
}
},
{
"nested": {
"path": "tags",
"query": {
"match": {
"tags.value": "zipkin"        <---- Note this
}
}
}
}
]
}
}
}