elasticsearch中的空字段需要替换答案

【问题标题】：Null field in elasticsearch need to be replacedelasticsearch中的空字段需要替换
【发布时间】：2021-05-21 11:03:33
【问题描述】：

如何在 elasticsearch 中将 "build_duration" : "null", 替换为值 21600000？

DevTools > 控制台

GET myindex/_search
{
  "query": {
    "term": {
      "build_duration": "null" 
    }
  }
}

输出：-

{
  "took" : 10,
  "timed_out" : false,
  "_shards" : {
    "total" : 1,
    "successful" : 1,
    "skipped" : 0,
    "failed" : 0
  },
  "hits" : {
    "total" : {
      "value" : 1,
      "relation" : "eq"
    },
    "max_score" : 9.658761,
    "hits" : [
      {
        "_index" : "myindex",
        "_type" : "_doc",
        "_id" : "40324749",
        "_score" : 9.658761,
        "_source" : {
        "build_duration" : "null",
        "build_end_time" : "2021-05-20 04:00:36",
        "build_requester" : "daniel.su",
        "build_site" : "POL",
        "build_id" : "40324749",
        "@version" : "1"
        }
      }
    ]
  }
}

【问题讨论】：

标签： elasticsearch kibana elastic-stack elk

【解决方案1】：

通过以下查询可以替换字段值。

  POST /myindex/_update/mydocid
    {
        "doc" : {
            "build_duration": "21600000"
        }
    }

【讨论】：