Elasticsearch查询-按@timestamp和其他字段排序？

Question

我可以搜索elasticsearch（2.3版），并且可以在搜索查询中按多个字段排序吗？现在，我按@timestamp排序，我也想按主机名排序。

谢谢，

Answer 1

{
    "query": {
        "range": {
            "@timestamp": {
                "gte": "@timestamp",
                "lte": "@timestamp"
            }
        }
    },
    "from": 0,
    "size": 1000,
    "_source": [
        "@timestamp",
    ],
    "sort": [{
            "@timestamp": {
                "order": "desc"
            }
        },
        {
            "age": "desc"
        }
    ]
}

Answer 2

正如文档所说，您可以在特定字段上添加一种或多种排序，如下所示：

"sort" : [{ "@timestamp" : "desc" },
        { "hostname " : "desc" }]