0{
"bool": {
"must": [{"match": {"title": "apple"}}],
"should": [{"term": {"color": "red"}}],
"must_not": [{"term": {"status": "sold"}}],
"filter": [{"range": {"price": {"lte": 100}}}]
}
}| Step | Clause | Condition | Evaluation | Effect on Results |
|---|---|---|---|---|
| 1 | must | title contains 'apple' | Check if document title has 'apple' | Include only if true |
| 2 | should | color is 'red' | Check if document color is 'red' | Boost score if true, but not required |
| 3 | must_not | status is 'sold' | Check if document status is 'sold' | Exclude document if true |
| 4 | filter | price <= 100 | Check if price is less or equal 100 | Include only if true, no score change |
| 5 | final | Combine all clauses | Documents must pass must and filter, must_not excludes, should boosts score | Return matching documents |
| Variable | Start | After Step 1 | After Step 2 | After Step 3 | After Step 4 | Final |
|---|---|---|---|---|---|---|
| Documents | All documents | Only with title 'apple' | Same set, score boosted if color 'red' | Exclude those with status 'sold' | Only with price <= 100 | Final filtered and scored documents |
Bool query syntax:
{
"bool": {
"must": [...],
"should": [...],
"must_not": [...],
"filter": [...]
}
}
Behavior:
- must: required conditions
- should: optional, boosts score
- must_not: excludes matches
- filter: filters without scoring
Use to combine multiple query parts logically.must (required), should (optional), must_not (exclude), and filter (limit without scoring).must_not clause excludes documents that match its conditions from the results.must_not -> Option Bmust clause inside a bool query in Elasticsearch?must clause expects an array of query objects inside the bool query.match query object. The other options use incorrect types or missing brackets.{
"bool": {
"must": [{ "term": { "status": "active" }}],
"should": [{ "term": { "role": "admin" }}],
"must_not": [{ "term": { "banned": true }}]
}
}must clause requires documents to have status: active.should clause means documents with role: admin are preferred but not required. The must_not clause excludes documents where banned is true.{
"bool": {
"must": { "match": { "title": "Elasticsearch" } },
"filter": { "term": { "status": "published" } },
"must_not": [ { "term": { "archived": true } } ]
}
}must clause expects an array of query objects, but here it is given as a single object.filter and must_not clauses are correctly formatted as an object and an array respectively.category is 'books' and the price is less than 20, but exclude those that are out of stock. Which bool query correctly implements this?category: books and price < 20. Both are required, so they go in must as an array.stock: out must be excluded, so use must_not with an array of term queries.must array for required conditions and must_not array for exclusion. { "bool": { "filter": [ { "term": { "category": "books" } }, { "range": { "price": { "lt": 20 } } } ], "must_not": { "term": { "stock": "out" } } } } uses filter which is okay but must_not is an object, not array. { "bool": { "should": [ { "term": { "category": "books" } }, { "range": { "price": { "lt": 20 } } } ], "must_not": [ { "term": { "stock": "out" } } ] } } uses should which makes conditions optional, wrong here. { "bool": { "must": { "term": { "category": "books" } }, "filter": { "range": { "price": { "lt": 20 } } }, "must_not": [ { "term": { "stock": "out" } } ] } } uses must as object and filter as object, mixing styles incorrectly.Pass the test and this pattern moves unknown strong while earning +1 Grip toward your certificate.