1.使用Winlogbeats收集windows logs

https://kyletopasna.medium.com/collecting-windows-logs-with-elastics-winlogbeats-4961bc3004b6

2.ES地理位置和性状查询示例

https://medium.com/geekculture/elastic-search-geo-point-and-geo-shape-queries-explained-df69ec157527

3.解决配置K8S中遇到的no matches for kind "Elasticsearch"

https://stackoverflow.com/questions/69313889/how-can-i-make-k8s-find-elasticsearch-kind-type

• 编辑：bsll

• 归档：https://ela.st/cn-daily-all

• 订阅：https://ela.st/cn-daily-sub

• 沙龙：https://ela.st/cn-meetup

Polygon Weekly AMA

活动主题：

《Polygon开发者入门Workshop——从️搭建自己的LendingPool》

活动时间：

9月11号晚上7点

活动举办方：

Polygon x SolidStake x Elastic中文社区

活动地点：

扫码进AMA微信群！ 会议号是：193 658 608

1.怎么为每个索引选择合适的分片？

https://opster.com/elasticsearch-glossary/elasticsearch-choose-number-of-shards/?kinsta-cache-cleared=true

2.在kibana使用德国高速公路数据示例

https://spinscale.de/posts/2021-09-01-using-german-highway-api-data-with-kibana-maps.html

3.在es查询中查找实体名的方法

https://stackoverflow.com/questions/55989250/how-to-find-entity-in-search-query-in-elasticsearch

将索引从一个集群（ip：192.168.0.1）迁移到另一个集群（ip：192.168.0.2），新集群需要配置白名单：

# elasticsearch.yml
reindex.remote.whitelist: ['192.168.0.1:9200']

import json

import requests

import base64

# 迁移索引数据
def reindex(index):
    print("{0} 索引正在迁移中".format(index))
    jsonData = {
        "source": {
            "remote": {
                "host": "http://192.168.0.1:9200",
                "socket_timeout": "30s",
                "connect_timeout": "30s",
                "username": "elastic",
                "password": "123456"
            },
            "index": index
        },
        "dest": {
            "index": index
        }
    }
    res = requests.post("http://192.168.0.2:9200/_reindex", json=jsonData)
    print(res.status_code)
    print(res.content)

# 获取创建索引的语句
def getIndexDslJson(index):

    username = "elastic"
    password = "123456"
    user_info_str = username + ":" + password
    user_info = base64.b64encode(user_info_str.encode())  # 这个得到是个字节类型的数据
    headers = {
        "Authorization": "Basic {0}".format(user_info.decode())  # 这个就是需要验证的信息
    }

    res = requests.get("http://192.168.0.1:9200/{0}".format(index),
                       headers=headers)
    print(res.status_code)
    jsonIndex = json.loads(res.content)
    print(jsonIndex[index])
    del jsonIndex[index]['settings']['index']['creation_date']
    del jsonIndex[index]['settings']['index']['provided_name']
    del jsonIndex[index]['settings']['index']['uuid']
    del jsonIndex[index]['settings']['index']['version']
    jsonIndex[index]['settings']['index']['number_of_shards'] = 1
    jsonIndex[index]['settings']['index']['number_of_replicas'] = 0
    return jsonIndex[index]

# 创建索引
def createIndex(index, dslJson):
    res = requests.put("http://192.168.0.2:9200/{0}".format(index), json=dslJson)
    print(res.status_code)
    print(res.content)

if __name__ == '__main__':
    # 需要创建的索引
    indexList = [
        "index1_v1", "index2_v1"
    ]
    for index in indexList:
        dslJson = getIndexDslJson(index) # 获取原索引的结构
        createIndex(index, dslJson) # 根据原索引结构，在新集群创建索引
        reindex(index) # 将原集群索引迁移到新集群