import datetimetimenow = (datetime.datetime.utcnow() + datetime.timedelta(hours=8)) #將utc時間轉化為本地時間timetext = timenow.strftime('%y%m%d')

import datetimeimport dateutil.parserst_time = hit['_source']['start_time']re_time = hit['_source']['report_time']igmp_delay = hit['_source']['igmp_delay']live_delay = hit['_source']['live_delay']st = dateutil.parser.parse(st_time) #將2017-12-21T04:57:42.000Z 字符串轉化為時間re = dateutil.parser.parse(re_time)start_time =(st+datetime.timedelta(hours=8)) #將#將utc時間2017-12-21T04:57:42.000Z 轉化為時間本地時間2017-12-21 12:57:42+00:00report_time = (re+datetime.timedelta(hours=8))message = str(start_time)[0:19]+","+str(report_time)[0:19]+","+str(int(igmp_delay))+","+str(int(live_delay))+"/n"

import osimport datetimefrom elasticsearch import Elasticsearchimport dateutil.parseres = Elasticsearch(hosts="127.0.0.1",timeout=10000)write_file=open('C://Users//Administrator//Desktop//gather-005-201712210.csv',"a+",encoding="utf-8")rs = es.search(  index = "gather-005-20171221",  body={  "size":42,  "query": {  "term": {   "itv_account": {    "value": "38:FA:CA:D9:5F:2B"   }  } },  "sort": [  {   "report_time": {    "order": "desc"   }  } ], "_source": ["start_time","report_time","igmp_delay","live_delay"]})for hit in rs['hits']['hits']:  st_time = hit['_source']['start_time']  re_time = hit['_source']['report_time']  igmp_delay = hit['_source']['igmp_delay']  live_delay = hit['_source']['live_delay']  st = dateutil.parser.parse(st_time)  re = dateutil.parser.parse(re_time)  start_time =(st+datetime.timedelta(hours=8))  report_time = (re+datetime.timedelta(hours=8))  message = str(start_time)[0:19]+","+str(report_time)[0:19]+","+str(int(igmp_delay))+","+str(int(live_delay))+"/n"  write_file.write(message)write_file.close()