How can i do a multiple search query within a single URI in ElasticSearch?

Question

I'm trying to get results of an index, by sending an GET http call from Postman for both date range and for a field ("log_type") which I added manually,

So for now I'm able to get the results, when i query it individually such as:

Date Range: http://localhost:9200/dialog_test/_search?q=timestamp:[2016-08-05+TO+2016-08-06]

log_type: http://localhost:9200/dialog_test/_search?q=log_type:GetProvisioning%20SUCCESS

In the url above (log_type), GetProvisioning Success is a log_type.

So what I wanted to know is, how can I combine both of them into a single query in order to identify, what're the results between a certain date range and with a specific log_type?

Any help could be appreciated

rchang · Accepted Answer · 2016-09-13 13:03:17Z

5

You can use AND and OR boolean conjunctions per query strings. In your case, you can do something like:

curl http://localhost:9200/dialog_test/_search?q=timestamp:[2016-08-05+TO+2016-08-06]+AND+log_type:GetProvisioning+SUCCESS

edited Sep 13, 2016 at 13:03

answered Sep 13, 2016 at 13:01

rchang

5,2461 gold badge17 silver badges26 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

Val Over a year ago

Be careful mixing %20 and + in the same URL, that can have undesired effects. Pick one and stick with it

Kulasangar Over a year ago

@rchang thank you it works. Just one clarification, is it better to encode the space or leave it with the + ?

rchang Over a year ago

@Kulasangar My personal habit is to default to %20, but that is more or less an arbitrary decision on my part. This SO question has more in-depth discussion on it.

Sab · Accepted Answer · 2017-10-17 14:30:33Z

1

Also, you could use the source query string parameter in order to pass the body directly in the URL. For example:

http://localhost:9200/my_index/_search?source={"query": {"match_all": {}},"size": "1","sort": [{"@timestamp": {"order": "desc"}}]}

answered Oct 17, 2017 at 14:30

Sab

711 silver badge3 bronze badges

1 Comment

YoniXw Over a year ago

you also need to include the type, for example: /_search?source_content_type=application/json&source=......

Collectives™ on Stack Overflow

How can i do a multiple search query within a single URI in ElasticSearch?

2 Answers 2

3 Comments

1 Comment

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

3 Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Linked

Related