The lucene query type uses LUCENE query string syntax to find matching documents or events within Elasticsearch.
status
field contains active
status:active
title
field contains quick
or brown
title:(quick brown)
author
field contains the exact phrase "john smith"
author:"John Smith"
Wildcard searches can be run on individual terms, using ?
to replacea single character, and *
to replace zero or more characters:
qu?ck bro*
Numbers 1..5
count:[1 TO 5]
Tags between alpha
and omega
, excluding alpha
and omega
:
tag:{alpha TO omega}
Numbers from 10 upwards
count:[10 TO *]