elasticsearch 带有三重引号SQL查询的kibana控制台

Kibana建议根据文档使用三重引号进行查询：

我尝试此建议，并将其应用于kibana_示例数据_电子商务：

 GET _/sql
    {
      "query" : """SELECT "day_of_week", avg("taxful_total_price") 
                   FROM "kibana_sample_data_ecommerce" 
                   WHERE "customer_id" = '52'
                   GROUP BY "day_of_week"
                """
    }

不幸的是，我得到了：

    {
  "error": {
    "root_cause": [
      {
        "type": "invalid_index_name_exception",
        "reason": "Invalid index name [_], must not start with '_', '-', or '+'",
        "index_uuid": "_na_",
        "index": "_"
      }
    ],
    "type": "invalid_index_name_exception",
    "reason": "Invalid index name [_], must not start with '_', '-', or '+'",
    "index_uuid": "_na_",
    "index": "_"
  },
  "status": 400
}

但是，这种方法非常有效：

POST /_sql?format=txt
{
  "query": "SELECT day_of_week, avg(taxful_total_price) FROM kibana_sample_data_ecommerce WHERE customer_id = 52 GROUP BY day_of_week"
  }

因此，我得到：

   day_of_week  |avg(taxful_total_price)
---------------+-----------------------
Friday         |97.88760080645162      
Monday         |135.17824074074073     
Saturday       |66.778125              
Sunday         |88.71875               
Thursday       |101.74375              
Tuesday        |76.564453125           
Wednesday      |87.27793560606061 

---

如何正确使用三重引号？

幸运的是，您的问题在于

GET

调用本身。这里有

GET\uu/sql

，看起来像是打字错误。尝试使用

GET/\u sql