原英文版地址: https://www.elastic.co/guide/en/elasticsearch/reference/7.7/enrich-policy-definition.html, 原文档版权归 www.elastic.co 所有
本地英文版地址: ../en/enrich-policy-definition.html
本地英文版地址: ../en/enrich-policy-definition.html
重要: 此版本不会发布额外的bug修复或文档更新。最新信息请参考 当前版本文档。
Enrich policy definitionedit
Enrich policies are defined as JSON objects like the following:
{
"<enrich_policy_type>": {
"indices": ["..."],
"match_field": "...",
"enrich_fields": ["..."],
"query": {...}
}
}
}
Parametersedit
-
<enrich_policy_type> -
(Required, enrich policy object) The enrich policy type determines how enrich data is matched to incoming documents.
Supported enrich policy types include:
-
geo_match -
Matches enrich data to incoming documents based on a geographic location using
a
geo_shapequery. For an example, see Example: Enrich your data based on geolocation. -
match -
Matches enrich data to incoming documents based on a precise value, such as an
email address or ID, using a
termquery. For an example, see Example: Enrich your data based on exact values.
-
-
indices -
(Required, String or array of strings) Source indices used to create the enrich index.
If multiple indices are provided, they must share a common
match_field, which the enrich processor can use to match incoming documents. -
match_field - (Required, string) Field in the source indices used to match incoming documents.
-
enrich_fields - (Required, Array of strings) Fields to add to matching incoming documents. These fields must be present in the source indices.
-
query -
(Optional, Query DSL query object)
Query used to filter documents in the enrich index for matching. Defaults to
a
match_allquery.