elasticsearch tips and tricks

ES.md

order:

index > type > documents

filter vs query

• filter: boolean, exactly value, no score, cached, faster
• query: relevent, full text, score, not cached, slower

term vs match

• term: analyzed
• match: not analyzed, date, integer

AND NAND OR

• bool > must: AND
• bool > must_not: NAND
• bool > should: OR
• filter > terms: mutil values

compare

• range > from
• range > to

demo:

GET index/type/_search
{
   "filter": {
      "and": {
         "filters": [
            {
               "term": {
                  "date": "8_7_2015"
               }
            },
            {
               "range": {
                  "count": {
                     "gt": 1
                  }
               }
            }
         ]
      }
   }
}

GET index/type/_search
{
   "aggs": {
      "by_pkg": {
         "terms": {
            "field": "bundleid_pkg"
         }
      }
   }
}