Elasticsearch on 黄文卓 | DevOps Engineerhttps://socake.github.io/tags/elasticsearch/Recent content in Elasticsearch on 黄文卓 | DevOps EngineerHugo -- gohugo.iozh-CN17691281867@163.com (Wenzhuo Huang)17691281867@163.com (Wenzhuo Huang)© 2026 Wenzhuo HuangTue, 04 Nov 2025 12:27:00 +0800Python 操作 Elasticsearch：从索引管理到复杂聚合查询https://socake.github.io/posts/python-elasticsearch-client/Tue, 04 Nov 2025 12:27:00 +080017691281867@163.com (Wenzhuo Huang)https://socake.github.io/posts/python-elasticsearch-client/从客户端初始化到批量操作、scroll 查询、聚合统计，一篇文章搞定 Python 操作 Elasticsearch 的高频场景。ELK 集群监控：用 Prometheus + Grafana 监控 Elasticsearch 健康https://socake.github.io/posts/elk-prometheus-monitoring/Wed, 08 Oct 2025 11:33:00 +080017691281867@163.com (Wenzhuo Huang)https://socake.github.io/posts/elk-prometheus-monitoring/Kibana 内置的 Stack Monitoring 免费功能有限，告警媒介也受商业授权约束。我们最终选择 Prometheus + Grafana 方案监控 ELK 集群，这篇文章记录完整的落地过程和踩坑。Elasticsearch 备份与恢复：快照管理与跨集群迁移实践https://socake.github.io/posts/elasticsearch-backup-restore/Fri, 03 Oct 2025 12:06:00 +080017691281867@163.com (Wenzhuo Huang)https://socake.github.io/posts/elasticsearch-backup-restore/Snapshot API 配置、S3 IRSA 认证、定时快照脚本，以及跨集群迁移三种方案的对比与实战踩坑。Elasticsearch 查询实战：从 URI Search 到 DSL 复杂聚合https://socake.github.io/posts/elasticsearch-dsl-query/Wed, 01 Oct 2025 09:17:00 +080017691281867@163.com (Wenzhuo Huang)https://socake.github.io/posts/elasticsearch-dsl-query/ES 查询是每个运维必须掌握的技能。这篇文章从 URI Search 快速上手，到 DSL bool 查询、聚合分析，再到运维常用的 _cat API，配合真实排障场景整理成一篇实战手册。Elasticsearch 索引策略：ILM 生命周期管理与写入性能优化https://socake.github.io/posts/elasticsearch-index-optimization/Wed, 24 Sep 2025 11:01:00 +080017691281867@163.com (Wenzhuo Huang)https://socake.github.io/posts/elasticsearch-index-optimization/ILM 四阶段配置、rollover 策略、bulk 写入调优，以及分片数规划和 mapping 爆炸的避坑指南。Elasticsearch 集群部署实战：ECK 在 K8s 上的生产级配置https://socake.github.io/posts/elasticsearch-cluster-deployment/Fri, 19 Sep 2025 13:03:00 +080017691281867@163.com (Wenzhuo Huang)https://socake.github.io/posts/elasticsearch-cluster-deployment/从集群角色规划到 ECK Operator 落地，结合生产环境踩坑经验，完整讲解 Elasticsearch 在 Kubernetes 上的生产级部署方案。EFK 日志系统实战：Fluent Bit + Fluentd + Elasticsearch 完整部署https://socake.github.io/posts/efk-logging-practice/Wed, 05 Mar 2025 12:44:00 +080017691281867@163.com (Wenzhuo Huang)https://socake.github.io/posts/efk-logging-practice/讲清楚为什么要 Fluent Bit + Fluentd 两层架构，给出可直接参考的完整 ConfigMap 配置和 ES 索引模板设计。