python - 使用python更新elasticsearch记录

Question

我可以连接到索引并从中选择第一条记录。但是我需要使用“newval”参数更新记录。并且更新方法失败并显示错误:

AttributeError: 'NoneType' object has no attribute 'copy'

这是代码

import elasticsearch
from elasticsearch import helpers
es = elasticsearch.Elasticsearch('http://172.31.73.228:9200')

myquery={"query": {"match_all": {}}}
res = es.search(index="packetbeat-2017.06.12", body=myquery)

for i in range(2):
    print (res['hits']['hits'][i] )

返回的记录我需要更新:

{'_index': 'packetbeat-2017.06.12', '_type': 'flow', '_id': 'AVyZmvuW4pXRFgxKGB7c', '_score': 1.0, '_source': {'@timestamp': '2017-06-12T00:01:30.000Z', 'beat': {'hostname': 'ip-172-31-73-228', 'name': 'ip-172-31-73-228', 'version': '5.4.1'}, 'dest': {'ip': '172.31.73.228', 'port': 9200, 'stats': {'net_bytes_total': 10015, 'net_packets_total': 46}}, 'final': True, 'flow_id': 'EAT/////AP//////CP8AAAFzfHHGrB9J5JLr8CM', 'last_time': '2017-06-12T00:00:30.732Z', 'source': {'ip': '115.124.113.198', 'port': 60306, 'stats': {'net_bytes_total': 141066, 'net_packets_total': 81}}, 'start_time': '2017-06-12T00:00:30.732Z', 'transport': 'tcp', 'type': 'flow'}}

我的更新方法:

mybody={'doc': {'newval': 24}}

es.update('packetbeat-2017.06.12', 'flow', 'AVyZmvuW4pXRFgxKGB7c', body=mybody, params=None)

我无法将“newval”变量添加到上述记录中。

Answer 1

以下代码段可以正常工作:

import elasticsearch
es = elasticsearch.Elasticsearch('http://localhost:9200')

res = es.search(index="packetbeat-2017.06.12", body={"query": {"match_all": {}}})

for single in res['hits']['hits']:
    print (single)

es.update('packetbeat-2017.06.12', 'flow', 'AVyZmvuW4pXRFgxKGB7c', body={'doc': {'newval': 24}})

请考虑避免执行此类请求。
查看有关update by query的文档。