tech
Defaultdeesfrzh

Elasticsearch

Motor de busqueda y analisis distribuido - busqueda full-text, analisis de logs, exploracion de datos en tiempo real

TL;DR

Qué: Un motor de búsqueda y análisis distribuido.

Por qué: Búsqueda full-text, análisis en tiempo real, análisis de logs, escalable.

Quick Start

Instalación con Docker:

docker run -d --name elasticsearch \
  -p 9200:9200 -p 9300:9300 \
  -e "discovery.type=single-node" \
  -e "xpack.security.enabled=false" \
  docker.elastic.co/elasticsearch/elasticsearch:8.11.0

Verificar:

curl http://localhost:9200

Indexar un documento:

curl -X POST "localhost:9200/users/_doc" \
  -H "Content-Type: application/json" \
  -d '{"name": "John", "email": "[email protected]"}'

Buscar:

curl "localhost:9200/users/_search?q=name:john"

Cheatsheet

OperaciónEndpoint
Crear índicePUT /index
Indexar documentoPOST /index/_doc
Obtener documentoGET /index/_doc/id
BuscarGET /index/_search
ActualizarPOST /index/_update/id
EliminarDELETE /index/_doc/id
Eliminar índiceDELETE /index

Gotchas

Index and document operations

# Crear índice con mapping
curl -X PUT "localhost:9200/products" -H "Content-Type: application/json" -d '
{
  "mappings": {
    "properties": {
      "name": { "type": "text" },
      "price": { "type": "float" },
      "tags": { "type": "keyword" }
    }
  }
}'

# Indexar con ID específico
curl -X PUT "localhost:9200/products/_doc/1" -H "Content-Type: application/json" -d '
{
  "name": "Laptop",
  "price": 999.99,
  "tags": ["electronics", "computer"]
}'

Search queries

# Consulta match (full-text)
curl -X GET "localhost:9200/products/_search" -H "Content-Type: application/json" -d '
{
  "query": {
    "match": { "name": "laptop" }
  }
}'

# Consulta bool (compleja)
curl -X GET "localhost:9200/products/_search" -H "Content-Type: application/json" -d '
{
  "query": {
    "bool": {
      "must": [{ "match": { "name": "laptop" }}],
      "filter": [{ "range": { "price": { "lte": 1000 }}}]
    }
  }
}'

Aggregations

curl -X GET "localhost:9200/products/_search" -H "Content-Type: application/json" -d '
{
  "size": 0,
  "aggs": {
    "avg_price": { "avg": { "field": "price" }},
    "by_tag": { "terms": { "field": "tags" }}
  }
}'

Next Steps