可以使用help
use notify_3077;
show collections
统计cmdb,monitor等以系统分组
db.op_log_201812.aggregate( [ { $group : { _id : "$system", count: {$sum: 1} } } ] )
use notify_1888;
db.op_log_201905.aggregate( [ {$match: {"system": "cmdb"}}, { $group : { _id : "$ext_info.object_id", count: {$sum: 1} } }, { $sort : { count : -1} } ] )
统计大小
use cmdb_org_3077;
var collectionNames = db.getCollectionNames(), stats = [];
collectionNames.forEach(function (n) { stats.push(db[n].stats()); });
stats = stats.sort(function(a, b) { return b[\'size\'] - a[\'size\']; });
for (var c in stats) { print(stats[c][\'ns\'] + ": " + stats[c][\'size\'] + " (" + stats[c][\'storageSize\'] + ")"); }
通过查找一条，找具体字段,一个个往下找
db.op_log_201909.findOne()
db.op_log_201909.find({"system" : "cmdb"})
db.op_log_201909.find({"ext_info.object_name" : "虚拟机与工位机"})
db.op_log_201909.find({"ext_info.object_id":"HOST","system":"cmdb","ext_info.instance_id":"5c7cd381dedfa"})
db.log_instance201909.find({"_mac":"00:05:9A:3C:7A:00",_ts: {$gte: 1569554710,$lte: 1569557710}})
统计总量
db.op_log_201909.count()
db.op_log_201909.aggregate( [ {$match: {"event": "event.instance.modify","ext_info.object_id":"HOST"}}, { $group : { _id : "$ext_info._change_fields", count: {$sum: 1} } }, { $sort : { count : -1} } ] )
db.op_log_201909.count({ $and: [ { ctime: { $gte: 1568044800, $lte: 1568683149 } }, { system: "cmdb" }, { $or: [ { target_id: "HOST" }, { target_category: "HOST" } ] }, { parent_event_id: { $in: [ null, "" ] } } ] } )
统计CMDB 模型变更记录数
db.op_log_201909.aggregate( [ {$match: {"system": "cmdb"}}, { $group : { _id : "$ext_info.object_id", count: {$sum: 1} } }, { $sort : { count : -1} } ] )
统计上下线
db.op_log_201909.aggregate( [{$match: {"system":"monitor"}},{ $group : { _id : "$subject", count: {$sum: 1} } } ] )
统计mac 一个时间段hostname变更
db.log_instance201909.aggregate( [ {$match: {"_mac":"00:05:9A:3C:7A:00",_ts: {$gte: 1569554710}}}, { $group : { _id : "$hostname", count: {$sum: 1} } }, { $sort : { count : -1} } ] )
索引
db.op_log_201909.createIndex({"event_id":1,"system":1,"ctime":1,"target":1,"target_category":1})
db.op_log_201909.dropIndex("event_id_1_system_1_ctime_1_target_1_target_category_1")