index - 日志服务

名称	类型	描述	示例值
	object	索引配置数据结构。场景 1 (只开启全文索引）: `{ "line": { "chn": false, "caseSensitive": false, "token":[","," ","'","\"",";","=","(",")","[","]","{","}","?","@","<","&","/",":","\n","\t","\r"] } }` 场景 2 （开启全文索引与字段索引）： `{ "keys": { "region": { "doc_value": true, "alias": "", "type": "text", "caseSensitive": false, "chn": false, "token": [","," ","'","\"",";","=","(",")","[","]","{","}","?","@","<","&","/",":","\n","\t","\r"] }, "end_time": { "doc_value": true, "alias": "", "type": "long" }, "request_time": { "doc_value": true, "alias": "", "type": "double" } }, "line": { "caseSensitive": false, "chn": true } }`
keys	object	字段索引配置，key 为字段名称，value 为字段索引配置。全文索引、字段索引、扫描索引至少需要存在一个。字段索引示例： `{ "region": { "doc_value": true, "alias": "", "type": "text", "caseSensitive": false, "chn": false, "token": [","," ","'","\"",";","=","(",")","[","]","{","}","?","@","<","&","/",":","\n","\t","\r"] }, "end_time": { "doc_value": true, "alias": "", "type": "long" }, "request_time": { "doc_value": true, "alias": "", "type": "double" } }`
		字段索引配置，key 为字段名称，value 为字段索引配置。
line	object	全文索引配置。全文索引、字段索引、扫描索引至少需要存在一个。全文索引示例： `{ "chn": false, "caseSensitive": false, "token":[","," ","'","\"",";","=","(",")","[","]","{","}","?","@","<","&","/",":","\n","\t","\r"] }`
auto_key_detect	boolean	是否开启索引自动发现功能。开启后会自动发现日志中未添加索引的字段，并添加到 auto_text_keys （自动发现的索引字段）内。自动发现的索引字段都是 text 文本类型，开启了统计分析能力，且其大小写敏感与分词配置继承全文索引的配置。	false
auto_text_keys	array	自动发现的索引字段。自动发现的索引字段都是 text 文本类型，开启了统计分析能力，且其大小写敏感与分词配置继承全文索引的配置。关闭自动发现索引后，原自动发现的索引将继续保留，除非显式清空此字段
	string	自动发现的索引字段。自动发现的索引字段都是 text 文本类型，开启了统计分析能力，且其大小写敏感与分词配置继承全文索引的配置。	host
caseSensitive	boolean	是否大小写敏感。默认值为 false。	true
chn	boolean	是否包含中文。默认值为 false，开启包含中文后，写入能力可能会有一定下降。	false
exclude_keys	array	排除的字段列表，不能与 include_keys 同时指定。
	string	排除字段列表。	excludeField
include_keys	array	包含的字段列表，不能与 exclude_keys 同时指定。
	string	包含字段列表。	includeField
token	array	分词符列表。可以设置一个分词参数，指定这个字段按照哪一种方式分词。
	string	分词符。例如 "," "." "\r" "\n" 等。	,
log_reduce	boolean	是否开启日志聚类。开启后白名单与黑名单至多生效其中一个。 true：开启日志聚类。 false（默认值）：不开启日志聚类。	true
log_reduce_black_list	array	日志聚类的聚类字段过滤黑名单，仅当日志聚类开启时有效。
	string	黑名单字段。	time
log_reduce_white_list	array	日志聚类的聚类字段过滤白名单，仅当日志聚类开启时有效。
	string	白名单字段。	name
max_text_len	integer	日志服务默认字段值的最大长度为 2048 字节，即 2 KB。如果您需要修改字段值的最大长度，可设置统计字段（text）最大长度，取值范围为 64~16384 字节。	2048
scan_index	boolean	是否开启扫描索引。全文索引、字段索引、扫描索引至少需要存在一个。	false

object

索引配置数据结构。

场景 1 (只开启全文索引）:

{
    "line": {
        "chn": false,
        "caseSensitive": false,
        "token":[","," ","'","\"",";","=","(",")","[","]","{","}","?","@","<","&","/",":","\n","\t","\r"]
    }
}

场景 2 （开启全文索引与字段索引）：

{
  "keys": {
    "region": {
      "doc_value": true,
      "alias": "",
      "type": "text",
      "caseSensitive": false,
      "chn": false,
      "token": [","," ","'","\"",";","=","(",")","[","]","{","}","?","@","<","&","/",":","\n","\t","\r"]
    },
    "end_time": {
      "doc_value": true,
      "alias": "",
      "type": "long"
    },
    "request_time": {
      "doc_value": true,
      "alias": "",
      "type": "double"
    }
  },
  "line": {
    "caseSensitive": false,
    "chn": true
  }
}

keys

object

字段索引配置，key 为字段名称，value 为字段索引配置。全文索引、字段索引、扫描索引至少需要存在一个。字段索引示例：

{
    "region": {
      "doc_value": true,
      "alias": "",
      "type": "text",
      "caseSensitive": false,
      "chn": false,
      "token": [","," ","'","\"",";","=","(",")","[","]","{","}","?","@","<","&","/",":","\n","\t","\r"]
    },
    "end_time": {
      "doc_value": true,
      "alias": "",
      "type": "long"
    },
    "request_time": {
      "doc_value": true,
      "alias": "",
      "type": "double"
    }
  }

字段索引配置，key 为字段名称，value 为字段索引配置。

line

object

全文索引配置。全文索引、字段索引、扫描索引至少需要存在一个。全文索引示例：

{
    "chn": false,
    "caseSensitive": false,
    "token":[","," ","'","\"",";","=","(",")","[","]","{","}","?","@","<","&","/",":","\n","\t","\r"]
}

auto_key_detect

boolean

是否开启索引自动发现功能。开启后会自动发现日志中未添加索引的字段，并添加到 auto_text_keys （自动发现的索引字段）内。自动发现的索引字段都是 text 文本类型，开启了统计分析能力，且其大小写敏感与分词配置继承全文索引的配置。

false

auto_text_keys

array

自动发现的索引字段。自动发现的索引字段都是 text 文本类型，开启了统计分析能力，且其大小写敏感与分词配置继承全文索引的配置。关闭自动发现索引后，原自动发现的索引将继续保留，除非显式清空此字段

string

自动发现的索引字段。自动发现的索引字段都是 text 文本类型，开启了统计分析能力，且其大小写敏感与分词配置继承全文索引的配置。

host

caseSensitive

boolean

是否大小写敏感。默认值为 false。

true

chn

boolean

是否包含中文。默认值为 false，开启包含中文后，写入能力可能会有一定下降。

false

exclude_keys

array

排除的字段列表，不能与 include_keys 同时指定。

string

排除字段列表。

excludeField

include_keys

array

包含的字段列表，不能与 exclude_keys 同时指定。

string

包含字段列表。

includeField

token

array

分词符列表。可以设置一个分词参数，指定这个字段按照哪一种方式分词。

string

分词符。例如 "," "." "\r" "\n" 等。

,

log_reduce

boolean

是否开启日志聚类。开启后白名单与黑名单至多生效其中一个。

true：开启日志聚类。
false（默认值）：不开启日志聚类。

true

log_reduce_black_list

array

日志聚类的聚类字段过滤黑名单，仅当日志聚类开启时有效。

string

黑名单字段。

time

log_reduce_white_list

array

日志聚类的聚类字段过滤白名单，仅当日志聚类开启时有效。

string

白名单字段。

name

max_text_len

integer

日志服务默认字段值的最大长度为 2048 字节，即 2 KB。如果您需要修改字段值的最大长度，可设置统计字段（text）最大长度，取值范围为 64~16384 字节。

2048

scan_index

boolean

是否开启扫描索引。全文索引、字段索引、扫描索引至少需要存在一个。

false