| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413 |
- import * as queryDef from './query_def';
- import { ElasticsearchAggregation } from './types';
- export class ElasticQueryBuilder {
- timeField: string;
- esVersion: number;
- constructor(options: any) {
- this.timeField = options.timeField;
- this.esVersion = options.esVersion;
- }
- getRangeFilter() {
- const filter: any = {};
- filter[this.timeField] = {
- gte: '$timeFrom',
- lte: '$timeTo',
- format: 'epoch_millis',
- };
- return filter;
- }
- buildTermsAgg(aggDef: ElasticsearchAggregation, queryNode: { terms?: any; aggs?: any }, target: { metrics: any[] }) {
- let metricRef, metric, y;
- queryNode.terms = { field: aggDef.field };
- if (!aggDef.settings) {
- return queryNode;
- }
- queryNode.terms.size = parseInt(aggDef.settings.size, 10) === 0 ? 500 : parseInt(aggDef.settings.size, 10);
- if (aggDef.settings.orderBy !== void 0) {
- queryNode.terms.order = {};
- if (aggDef.settings.orderBy === '_term' && this.esVersion >= 60) {
- queryNode.terms.order['_key'] = aggDef.settings.order;
- } else {
- queryNode.terms.order[aggDef.settings.orderBy] = aggDef.settings.order;
- }
- // if metric ref, look it up and add it to this agg level
- metricRef = parseInt(aggDef.settings.orderBy, 10);
- if (!isNaN(metricRef)) {
- for (y = 0; y < target.metrics.length; y++) {
- metric = target.metrics[y];
- if (metric.id === aggDef.settings.orderBy) {
- queryNode.aggs = {};
- queryNode.aggs[metric.id] = {};
- queryNode.aggs[metric.id][metric.type] = { field: metric.field };
- break;
- }
- }
- }
- }
- if (aggDef.settings.min_doc_count !== void 0) {
- queryNode.terms.min_doc_count = parseInt(aggDef.settings.min_doc_count, 10);
- }
- if (aggDef.settings.missing) {
- queryNode.terms.missing = aggDef.settings.missing;
- }
- return queryNode;
- }
- getDateHistogramAgg(aggDef: ElasticsearchAggregation) {
- const esAgg: any = {};
- const settings = aggDef.settings || {};
- esAgg.interval = settings.interval;
- esAgg.field = this.timeField;
- esAgg.min_doc_count = settings.min_doc_count || 0;
- esAgg.extended_bounds = { min: '$timeFrom', max: '$timeTo' };
- esAgg.format = 'epoch_millis';
- if (settings.offset !== '') {
- esAgg.offset = settings.offset;
- }
- if (esAgg.interval === 'auto') {
- esAgg.interval = '$__interval';
- }
- if (settings.missing) {
- esAgg.missing = settings.missing;
- }
- return esAgg;
- }
- getHistogramAgg(aggDef: ElasticsearchAggregation) {
- const esAgg: any = {};
- const settings = aggDef.settings || {};
- esAgg.interval = settings.interval;
- esAgg.field = aggDef.field;
- esAgg.min_doc_count = settings.min_doc_count || 0;
- if (settings.missing) {
- esAgg.missing = settings.missing;
- }
- return esAgg;
- }
- getFiltersAgg(aggDef: ElasticsearchAggregation) {
- const filterObj: any = {};
- for (let i = 0; i < aggDef.settings.filters.length; i++) {
- const query = aggDef.settings.filters[i].query;
- let label = aggDef.settings.filters[i].label;
- label = label === '' || label === undefined ? query : label;
- filterObj[label] = {
- query_string: {
- query: query,
- analyze_wildcard: true,
- },
- };
- }
- return filterObj;
- }
- documentQuery(query: any, size: number) {
- query.size = size;
- query.sort = {};
- query.sort[this.timeField] = { order: 'desc', unmapped_type: 'boolean' };
- // fields field not supported on ES 5.x
- if (this.esVersion < 5) {
- query.fields = ['*', '_source'];
- }
- query.script_fields = {};
- if (this.esVersion < 5) {
- query.fielddata_fields = [this.timeField];
- } else {
- query.docvalue_fields = [this.timeField];
- }
- return query;
- }
- addAdhocFilters(query: any, adhocFilters: any) {
- if (!adhocFilters) {
- return;
- }
- let i, filter, condition: any, queryCondition: any;
- for (i = 0; i < adhocFilters.length; i++) {
- filter = adhocFilters[i];
- condition = {};
- condition[filter.key] = filter.value;
- queryCondition = {};
- queryCondition[filter.key] = { query: filter.value };
- switch (filter.operator) {
- case '=':
- if (!query.query.bool.must) {
- query.query.bool.must = [];
- }
- query.query.bool.must.push({ match_phrase: queryCondition });
- break;
- case '!=':
- if (!query.query.bool.must_not) {
- query.query.bool.must_not = [];
- }
- query.query.bool.must_not.push({ match_phrase: queryCondition });
- break;
- case '<':
- condition[filter.key] = { lt: filter.value };
- query.query.bool.filter.push({ range: condition });
- break;
- case '>':
- condition[filter.key] = { gt: filter.value };
- query.query.bool.filter.push({ range: condition });
- break;
- case '=~':
- query.query.bool.filter.push({ regexp: condition });
- break;
- case '!~':
- query.query.bool.filter.push({
- bool: { must_not: { regexp: condition } },
- });
- break;
- }
- }
- }
- build(target: any, adhocFilters?: any, queryString?: string) {
- // make sure query has defaults;
- target.metrics = target.metrics || [queryDef.defaultMetricAgg()];
- target.bucketAggs = target.bucketAggs || [queryDef.defaultBucketAgg()];
- target.timeField = this.timeField;
- let i, j, pv, nestedAggs, metric;
- const query = {
- size: 0,
- query: {
- bool: {
- filter: [
- { range: this.getRangeFilter() },
- {
- query_string: {
- analyze_wildcard: true,
- query: queryString,
- },
- },
- ],
- },
- },
- };
- this.addAdhocFilters(query, adhocFilters);
- // handle document query
- if (target.bucketAggs.length === 0) {
- metric = target.metrics[0];
- if (!metric || metric.type !== 'raw_document') {
- throw { message: 'Invalid query' };
- }
- const size = (metric.settings && metric.settings.size) || 500;
- return this.documentQuery(query, size);
- }
- nestedAggs = query;
- for (i = 0; i < target.bucketAggs.length; i++) {
- const aggDef = target.bucketAggs[i];
- const esAgg: any = {};
- switch (aggDef.type) {
- case 'date_histogram': {
- esAgg['date_histogram'] = this.getDateHistogramAgg(aggDef);
- break;
- }
- case 'histogram': {
- esAgg['histogram'] = this.getHistogramAgg(aggDef);
- break;
- }
- case 'filters': {
- esAgg['filters'] = { filters: this.getFiltersAgg(aggDef) };
- break;
- }
- case 'terms': {
- this.buildTermsAgg(aggDef, esAgg, target);
- break;
- }
- case 'geohash_grid': {
- esAgg['geohash_grid'] = {
- field: aggDef.field,
- precision: aggDef.settings.precision,
- };
- break;
- }
- }
- nestedAggs.aggs = nestedAggs.aggs || {};
- nestedAggs.aggs[aggDef.id] = esAgg;
- nestedAggs = esAgg;
- }
- nestedAggs.aggs = {};
- for (i = 0; i < target.metrics.length; i++) {
- metric = target.metrics[i];
- if (metric.type === 'count') {
- continue;
- }
- const aggField: any = {};
- let metricAgg: any = null;
- if (queryDef.isPipelineAgg(metric.type)) {
- if (queryDef.isPipelineAggWithMultipleBucketPaths(metric.type)) {
- if (metric.pipelineVariables) {
- metricAgg = {
- buckets_path: {},
- };
- for (j = 0; j < metric.pipelineVariables.length; j++) {
- pv = metric.pipelineVariables[j];
- if (pv.name && pv.pipelineAgg && /^\d*$/.test(pv.pipelineAgg)) {
- const appliedAgg = queryDef.findMetricById(target.metrics, pv.pipelineAgg);
- if (appliedAgg) {
- if (appliedAgg.type === 'count') {
- metricAgg.buckets_path[pv.name] = '_count';
- } else {
- metricAgg.buckets_path[pv.name] = pv.pipelineAgg;
- }
- }
- }
- }
- } else {
- continue;
- }
- } else {
- if (metric.pipelineAgg && /^\d*$/.test(metric.pipelineAgg)) {
- const appliedAgg = queryDef.findMetricById(target.metrics, metric.pipelineAgg);
- if (appliedAgg) {
- if (appliedAgg.type === 'count') {
- metricAgg = { buckets_path: '_count' };
- } else {
- metricAgg = { buckets_path: metric.pipelineAgg };
- }
- }
- } else {
- continue;
- }
- }
- } else {
- metricAgg = { field: metric.field };
- }
- for (const prop in metric.settings) {
- if (metric.settings.hasOwnProperty(prop) && metric.settings[prop] !== null) {
- metricAgg[prop] = metric.settings[prop];
- }
- }
- aggField[metric.type] = metricAgg;
- nestedAggs.aggs[metric.id] = aggField;
- }
- return query;
- }
- getTermsQuery(queryDef: any) {
- const query: any = {
- size: 0,
- query: {
- bool: {
- filter: [{ range: this.getRangeFilter() }],
- },
- },
- };
- if (queryDef.query) {
- query.query.bool.filter.push({
- query_string: {
- analyze_wildcard: true,
- query: queryDef.query,
- },
- });
- }
- let size = 500;
- if (queryDef.size) {
- size = queryDef.size;
- }
- query.aggs = {
- '1': {
- terms: {
- field: queryDef.field,
- size: size,
- order: {},
- },
- },
- };
- // Default behaviour is to order results by { _key: asc }
- // queryDef.order allows selection of asc/desc
- // queryDef.orderBy allows selection of doc_count ordering (defaults desc)
- const { orderBy = 'key', order = orderBy === 'doc_count' ? 'desc' : 'asc' } = queryDef;
- if (['asc', 'desc'].indexOf(order) < 0) {
- throw { message: `Invalid query sort order ${order}` };
- }
- switch (orderBy) {
- case 'key':
- case 'term':
- const keyname = this.esVersion >= 60 ? '_key' : '_term';
- query.aggs['1'].terms.order[keyname] = order;
- break;
- case 'doc_count':
- query.aggs['1'].terms.order['_count'] = order;
- break;
- default:
- throw { message: `Invalid query sort type ${orderBy}` };
- }
- return query;
- }
- getLogsQuery(target: any, querystring: string) {
- let query: any = {
- size: 0,
- query: {
- bool: {
- filter: [{ range: this.getRangeFilter() }],
- },
- },
- };
- if (target.query) {
- query.query.bool.filter.push({
- query_string: {
- analyze_wildcard: true,
- query: target.query,
- },
- });
- }
- query = this.documentQuery(query, 500);
- return {
- ...query,
- aggs: this.build(target, null, querystring).aggs,
- };
- }
- }
|