import datetimeimport dateutil.parserst_time = hit['_source']['start_time']re_time = hit['_source']['report_time']igmp_delay = hit['_source']['igmp_delay']live_delay = hit['_source']['live_delay']st = dateutil.parser.parse(st_time) #将2017-12-21T04:57:42.000Z 字符串转化为时间re = dateutil.parser.parse(re_time)start_time =(st+datetime.timedelta(hours=8)) #将#将utc时间2017-12-21T04:57:42.000Z 转化为时间本地时间2017-12-21 12:57:42+00:00report_time = (re+datetime.timedelta(hours=8))message = str(start_time)[0:19]+","+str(report_time)[0:19]+","+str(int(igmp_delay))+","+str(int(live_delay))+"/n"
import osimport datetimefrom elasticsearch import Elasticsearchimport dateutil.parseres = Elasticsearch(hosts="127.0.0.1",timeout=10000)write_file=open('C://Users//Administrator//Desktop//gather-005-201712210.csv',"a+",encoding="utf-8")rs = es.search( index = "gather-005-20171221", body={ "size":42, "query": { "term": { "itv_account": { "value": "38:FA:CA:D9:5F:2B" } } }, "sort": [ { "report_time": { "order": "desc" } } ], "_source": ["start_time","report_time","igmp_delay","live_delay"]})for hit in rs['hits']['hits']: st_time = hit['_source']['start_time'] re_time = hit['_source']['report_time'] igmp_delay = hit['_source']['igmp_delay'] live_delay = hit['_source']['live_delay'] st = dateutil.parser.parse(st_time) re = dateutil.parser.parse(re_time) start_time =(st+datetime.timedelta(hours=8)) report_time = (re+datetime.timedelta(hours=8)) message = str(start_time)[0:19]+","+str(report_time)[0:19]+","+str(int(igmp_delay))+","+str(int(live_delay))+"/n" write_file.write(message)write_file.close()