1. ECE考试介绍
ECE指elastic公司于2018年6月29号推出的elastic certified engineer认证考试。
报考方式及考试注意事项：
- 考试版本自2021年7月1日起，由7.2升级为7.13
- 官网注册报名 ，缴费
- PSI系统预约时间考试(注意选择时区),远程在线考试
- 提前15分钟进PSI系统配合监考官检查环境
- 和监考官打字聊天，需要共享桌面语音和摄像头
- 可以使用google翻译，和监考官商量，进去桌面直接浏览器输入谷歌翻译网址即可，也建议使用chrome自带的翻译工具
谷歌浏览器自带翻译插件
- 考试系统web界面上有一排按钮，需要全部点绿进行声音，摄像头，桌面分享，按监考人员指挥缓慢操作
- 有些题目只需要保存是环境即可，有些题目需要复制json到答题框，不要复制url(跨集群检索需要复制url)
- Youtube两期官方考试介绍研讨会的视频要看一下，是es官方人员对考试的两次介绍，非常有用
2. 官网英文考纲
2.1. Installation and Configuration
- Deploy and start an Elasticsearch cluster that satisfies a given set of requirements
- Configure the nodes of a cluster to satisfy a given set of requirements
- Secure a cluster using Elasticsearch Security
- Define role-based access control using Elasticsearch Security
2.2. Indexing Data
- Define an index that satisfies a given set of requirements
- Perform index, create, read, update, and delete operations on the documents of an index
- Define and use index aliases
- Define and use an index template for a given pattern that satisfies a given set of requirements
- Define and use a dynamic template that satisfies a given set of requirements
- Use the Reindex API and Update By Query API to reindex and/or update documents
- Define and use an ingest pipeline that satisfies a given set of requirements, including the use of Painless to modify documents
2.3. Queries
- Write and execute a search query for terms and/or phrases in one or more fields of an index
- Write and execute a search query that is a Boolean combination of multiple queries and filters
- Highlight the search terms in the response of a query
- Sort the results of a query by a given set of requirements
Implement pagination of the results of a search query - Apply fuzzy matching to a query
- Define and use a search template
- Write and execute a query that searches across multiple clusters
2.4. Aggregations
- Write and execute metric and bucket aggregations
- Write and execute aggregations that contain sub-aggregations
2.5. Mappings and Text Analysis
- Define a mapping that satisfies a given set of requirements
- Define and use a custom analyzer that satisfies a given set of requirements
- Define and use multi-fields with different data types and/or analyzers
- Configure an index so that it properly maintains the relationships of nested arrays of objects
2.6. Cluster Administration
- Allocate the shards of an index to specific nodes based on a given set of requirements
- Configure shard allocation awareness and forced awareness for an index
- Diagnose shard issues and repair a cluster's health
- Backup and restore a cluster and/or specific indices
- Configure a cluster for use with a hot/warm architecture
- Configure a cluster for cross cluster search
3. 对应中文考纲
3.1 安装与配置
- 部署启动集群满足给定的要求
- 配置集群的节点满足给定要求
- 使用security保护集群
- 使用基于role的security访问控制
可以参考以下知识点：
//节点属性
node.name: sinan04
node.master: true
node.data: true
node.ingest: true
node.ml: false
cluster.remote.connect: false
//allocate
node.attr.zone: zone2
node.attr.type: warm
//快照
path.repo: ["/home/caster/repo"]
//禁止内存交换/锁内存
swapoff -a
vim /etc/security/limits.conf
* hard memlock unlimited
* soft memlock unlimited
bootstrap.memory_lock: true
action.destructive_requires_name: true
//开启安全，考试集群有白金权限无需配置SSL
xpack.security.enabled: true
3.2 索引数据
- 定义满足需求的索引
- 在索引上操作index，create，read，update和delete
- 定义使用别名
- 定义并使用满足需求的索引模板
search template
- 定义并使用满足需求的动态模板
match_mapping_type: 匹配类型
match/unmatch：匹配字段名
match_pattern：正则匹配
- 使用reindex和update by query操作文档
- 定义并使用满足需求的ingest pipeline(包括用painless)修改文档
3.3 查询
- 一个或者多个字段进行terms/phrases检索
- bool检索
- 高亮
- 排序
- 分页(3种)
- fuzzy匹配检索。
- search template
- 跨集群检索
3.4 聚合
- 定义使用metric bucket聚合
- 定义使用子聚合
3.5 映射和文本分析
- 定义mapping
- 自定义分词器
参考以下分词器配置：
PUT myindex
{
"settings": {
"number_of_replicas": 1,
"analysis": {
"analyzer": {//分词器配置
"my_analyzer": {//自定义分词器名称，含有a，b，c三部分
"type": "custom",
"tokenizer": "standard",
"filter": [
"my_synonym",
"my_low",
"my_filter"
],
"char_filter": [
"my_char_filter"
]
}
},
"tokenizer": {},//a
"filter": {//b
"my_synonym": {//设置同义词
"type": "synonym",
"synonyms": [
"foo,bar"
]
},
"my_low": {//转小写
"type": "lowercase"
},
"my_filter": {//过滤长度5以下token
"type": "length",
"min": "5"
}
},
"char_filter": {//c
"my_char_filter": {//去掉单引号
"type": "mapping",
"mappings": [
"'=>"
]
}
}
}
},
"mappings": {
"properties": {
"text": {
"type": "text",
"analyzer": "my_analyzer"
}
}
}
}
- 多类型字段及不同分词器
- Nested arrays类型使用
3.6 集群管理
- 分配分片到指定节点
- 分片感知/强制感知
- 诊断解决分片问题
- 备份恢复集群索引
- 使用hot/warm架构
- 跨集群查询
