🚀 DevOps & SRE Certification Program 📅 Starting: 1st of Every Month 🤝 +91 8409492687 🔍 Contact@DevOpsSchool.com

Upgrade & Secure Your Future with DevOps, SRE, DevSecOps, MLOps!

We spend hours on Instagram and YouTube and waste money on coffee and fast food, but won’t spend 30 minutes a day learning skills to boost our careers.
Master in DevOps, SRE, DevSecOps & MLOps!

Learn from Guru Rajesh Kumar and double your salary in just one year.


Get Started Now!

Elasticsearch QUERY Parameters Examples with Explanation

allow_no_indices (Optional, boolean) If true, the request does not return an error if a wildcard expression or _all value retrieves only missing or closed indices. This parameter also applies to index aliases that point to a missing or closed index. Defaults to true.

allow_partial_search_results (Optional, boolean) Indicates if an error should be returned if there is a partial search failure or timeout. Defaults to true.

analyzer (Optional, string) Defines the analyzer to use for the query string.

analyze_wildcard (Optional, boolean) If true, wildcard and prefix queries will also be analyzed. Defaults to false.

batched_reduce_size (Optional, integer) The number of shard results that should be reduced at once on the coordinating node. This value should be used as a protection mechanism to reduce the memory overhead per search request if the potential number of shards in the request can be large. Defaults to 512.

ccs_minimize_roundtrips (Optional, boolean) Indicates whether network round-trips should be minimized as part of cross-cluster search requests execution. Defaults to true.

default_operator (Optional, string) The default operator for query string query (AND or OR). Defaults to OR.

**df ** (Optional, string) Defines the field to use as default where no field prefix is given in the query string. docvalue_fields (Optional, string) A comma-separated list of fields to return as the docvalue representation of a field for each hit.

expand_wildcards (Optional, string) Controls what kind of indices that wildcard expressions can expand to. Valid values are: all Expand to open and closed indices. open Expand only to open indices. closed Expand only to closed indices. hidden Expansion of wildcards will include hidden indices. none Wildcard expressions are not accepted. Defaults to open.

explain (Optional, boolean) If true, returns detailed information about score computation as part of a hit. Defaults to false. Enables explanation for each hit on how its score was computed.

curl -XGET 'localhost:9200/customers/_search?q=state:kentucky&explain&pretty'

GET /_search
{
    "explain": true,
    "query" : {
        "term" : { "user" : "kimchy" }
    }
}

from (Optional, integer) Defines the starting offset. Defaults to 0. Pagination of results can be done by using the from and size parameters. The from parameter defines the offset from the first result you want to fetch. The size parameter allows you to configure the maximum amount of hits to be returned.

curl -XGET 'localhost:9200/customers/_search?q=state:kentucky&from=10&size=2&pretty'

GET /_search
{
    "from" : 10, "size" : 2,
    "query" : {
        "term" : { "state" : "kentucky" }
    }
}

ignore_throttled (Optional, boolean) If true, concrete, expanded or aliased indices will be ignored when throttled. Defaults to false.

ignore_unavailable (Optional, boolean) If true, missing or closed indices are not included in the response. Defaults to false.

lenient (Optional, boolean) If true, format-based query failures (such as providing text to a numeric field) will be ignored. Defaults to false.

max_concurrent_shard_requests (Optional, integer) Defines the number of concurrent shard requests per node this search executes concurrently. This value should be used to limit the impact of the search on the cluster in order to limit the number of concurrent shard requests. Defaults to 5.

pre_filter_shard_size (Optional, integer) Defines a threshold that enforces a pre-filter roundtrip to prefilter search shards based on query rewriting if the number of shards the search request expands to exceeds the threshold. This filter roundtrip can limit the number of shards significantly if for instance a shard can not match any documents based on its rewrite method ie. if date filters are mandatory to match but the shard bounds and the query are disjoint. When unspecified, the pre-filter phase is executed if any of these conditions is met:

The request targets more than 128 shards.
The request targets one or more read-only index.
The primary sort of the query targets an indexed field.

preference (Optional, string) Specifies the node or shard the operation should be performed on. Random by default.

q (Optional, string) Query in the Lucene query string syntax.

request_cache (Optional, boolean) If true, request cache will be used for this request. Defaults to index level settings.

rest_total_hits_as_int (Optional, boolean) Indicates whether hits.total should be rendered as an integer or an object in the rest search response. Defaults to false.

routing (Optional, time units) Specifies how long a consistent view of the index should be maintained for scrolled search.

search_type (Optional, string) Defines the type of the search operation. Available options: query_then_fetch dfs_query_then_fetch

seq_no_primary_term (Optional, boolean) If true, returns sequence number and primary term of the last modification of each hit.

size (Optional, integer) Defines the number of hits to return. Defaults to 10.

sort (Optional, string) A comma-separated list of : pairs.

curl -XGET 'localhost:9200/customers/_search?q=wyoming&sort=age:desc&pretty'
curl -XGET 'localhost:9200/customers/_search?q=wyoming&sort=age:asc&pretty'
curl -XGET 'localhost:9200/customers/_search?q=state:kentucky&sort=age:asc&pretty'

_source (Optional, string) True or false to return the _source field or not, or a list of fields to return.

_source_excludes (Optional, string) A list of fields to exclude from the returned _source field.

_source_includes (Optional, string) A list of fields to extract and return from the _source field.

stats (Optional, string) Specific tag of the request for logging and statistical purposes.

stored_fields (Optional, string) A comma-separated list of stored fields to return as part of a hit.

suggest_field (Optional, string) Specifies which field to use for suggestions.

suggest_mode (Optional, string) Specifies suggest mode. Defaults to missing. Available options:

always
missing
popular

suggest_size (Optional, integer) Defines how many suggestions to return in response.

suggest_text (Optional, string) The source text for which the suggestions should be returned.

terminate_after (Optional, integer) The maximum number of documents to collect for each shard, upon reaching which the query execution will terminate early.

master_timeout (Optional, time units) Specifies the period of time to wait for a connection to the master node. If no response is received before the timeout expires, the request fails and returns an error. Defaults to 30s.

timeout (Optional, time units) Specifies the period of time to wait for a response. If no response is received before the timeout expires, the request fails and returns an error. Defaults to 30s.

track_scores (Optional, boolean) If true, then calculates and returns scores even if they are not used for sorting.

track_total_hits (Optional, boolean) Indicates if the number of documents that match the query should be tracked.

typed_keys (Optional, boolean) Specifies whether aggregation and suggester names should be prefixed by their respective types in the response.

version (Optional, boolean) If true, returns document version as part of a hit.

Certification Courses

DevOpsSchool has introduced a series of professional certification courses designed to enhance your skills and expertise in cutting-edge technologies and methodologies. Whether you are aiming to excel in development, security, or operations, these certifications provide a comprehensive learning experience. Explore the following programs:

DevOps Certification, SRE Certification, and DevSecOps Certification by DevOpsSchool

Explore our DevOps Certification, SRE Certification, and DevSecOps Certification programs at DevOpsSchool. Gain the expertise needed to excel in your career with hands-on training and globally recognized certifications.