2016-08-17 53 views
2

我用Serilog和ElasticSearch水槽AutoRegisterTemplate =真彈性搜索映射到強類型的.NET

存儲在ElasticSearch

{ 
 
"@timestamp": "2016-08-17T08:57:37.3487446+02:00", 
 
"level": "Information", 
 
"messageTemplate": "User login {UserId}", 
 
"message": "User login ..., 
 
"fields": { 
 
    "UserId": "...", 
 
    "ProcessId": 15568, 
 
    "ThreadId": 14, 
 
    "MachineName": "...", 
 
    "EnvironmentUserName": "...", 
 
    "HttpRequestId": "...", 
 
    "HttpRequestClientHostIP": "::1", 
 
    "HttpRequestType": "POST", 
 
    "Version": "1.0.0.0" 
 
    } 
 
}

以下我可以使用DynamicResponse查詢索引

  var searchResponse = client.Search<DynamicResponse>(s => s 
      .Index("logstash-*") 
      .AllTypes() 
      .Size(50) 
      .Query(q => q.Bool(b => b.Must(bs => bs.Term(p => p.Field("fields.UserId.raw").Value("...")))) 
      ) 
     ); 

但我想使用強類型的結果。

我已經嘗試過以下課程。

 public class LogResponse 
    { 
     public string Message { get; set; } 
     [Date(Name = "@timestamp")] 
     public DateTime Timestamp { get; set; } 
     public LogResponseFields Fields { get; set; } 

     public class LogResponseFields 
     { 
      public Guid UserId { get; set; } 
     } 
    } 

但未設置時間戳,它默認爲DateTime.Min,Message和UserId都正確映射。

如何映射@timestamp字段?

+0

Elasticsearch中的映射是什麼樣的? –

回答

0

時間戳字段映射工作正常;這裏有一個完整的例子來演示

void Main() 
{ 
    var pool = new SingleNodeConnectionPool(new Uri("http://localhost:9200")); 
    var defaultIndex = "logstash-" + DateTime.UtcNow.ToString("yyyy-MM-dd"); 
    var connectionSettings = new ConnectionSettings(pool) 
      .DefaultIndex(defaultIndex) 
      .InferMappingFor<LogResponse>(m => m 
       .TypeName("log") 
      ); 

    var client = new ElasticClient(connectionSettings); 

    // delete the index if it exists. Useful for demo purposes 
    if (client.IndexExists(defaultIndex).Exists) 
    { 
     client.DeleteIndex(defaultIndex); 
    } 

    // use the lowlevel client to send the exact json as 
    // it would be sent from the source 
    var createResponse = client.LowLevel.Index<string>(
     defaultIndex, 
     "log", 
     @"{ 
      ""@timestamp"": ""2016-08-17T08:57:37.3487446+02:00"", 
      ""level"": ""Information"", 
      ""messageTemplate"": ""User login {UserId}"", 
      ""message"": ""User login .."", 
      ""fields"": { 
       ""UserId"": ""29a35806-15d2-4eed-a3bf-707760e426b8"", 
       ""ProcessId"": 15568, 
       ""ThreadId"": 14, 
       ""MachineName"": ""..."", 
       ""EnvironmentUserName"": ""..."", 
       ""HttpRequestId"": ""..."", 
       ""HttpRequestClientHostIP"": ""::1"", 
       ""HttpRequestType"": ""POST"", 
       ""Version"": ""1.0.0.0"" 
      } 
     }"); 

    if (!createResponse.SuccessOrKnownError) 
    { 
     Console.WriteLine("Error indexing document"); 
    } 

    // Refresh the index after indexing. Useful for demo purposes. 
    client.Refresh(defaultIndex); 

    var searchResponse = client.Search<LogResponse>(s => s 
     .AllTypes() 
     .Size(50) 
     .Query(q => q 
      .MatchAll() 
     ) 
    ); 

    foreach (var document in searchResponse.Documents) 
    { 
     Console.WriteLine(document.Timestamp); 
    } 
} 

public class LogResponse 
{ 
    public string Message { get; set; } 
    [Date(Name = "@timestamp")] 
    public DateTime Timestamp { get; set; } 
    public LogResponseFields Fields { get; set; } 

    public class LogResponseFields 
    { 
     public Guid UserId { get; set; } 
    } 
} 

此輸出

17/08/2016 4:57:37 PM 

,我(已反序列化爲我的本地DateTime)。

0

嘗試DateTimeOffset似乎是嵌入時區信息的時間戳。 (具體爲+02:00

0

感謝您的意見。

當我將示例發佈到SO時,問題得到解決。

我真正的代碼是:

public class LogResponse : DynamicResponse 

所以通過去除DynamicResponse的傳承

public class LogResponse 

每一件事情是工作。