First search query in Elasticsearch - Step-by-Step Execution

Concept Flow - First search query

Start

↓

Build Query JSON

↓

Send Query to Elasticsearch

↓

Elasticsearch Processes Query

↓

Receive Search Results

↓

Display Results

↓

End

This flow shows how a search query is created, sent to Elasticsearch, processed, and results are returned.

Execution Sample

Elasticsearch

{
  "query": {
    "match": { "message": "error" }
  }
}

This JSON query searches for documents where the 'message' field contains the word 'error'.

Execution Table

Step	Action	Input/Condition	Output/Result
1	Build Query JSON	Create match query for 'message' with 'error'	{"query":{"match":{"message":"error"}}}
2	Send Query	Send JSON to Elasticsearch search API	Request sent to Elasticsearch cluster
3	Process Query	Elasticsearch parses and executes query	Search executed on index
4	Return Results	Elasticsearch returns matching documents	List of documents with 'error' in 'message'
5	Display Results	Client receives and shows documents	User sees search results
6	End	No more steps	Search complete

💡 Search completes after results are returned and displayed.

Variable Tracker

Variable	Start	After Step 1	After Step 2	After Step 4	Final
query_json	empty	{"query":{"match":{"message":"error"}}}	{"query":{"match":{"message":"error"}}}	{"query":{"match":{"message":"error"}}}	{"query":{"match":{"message":"error"}}}
response	none	none	pending	{"hits":{"total":{"value":3,"relation":"eq"},"hits":[...documents...]}}	{"hits":{"total":{"value":3,"relation":"eq"},"hits":[...documents...]}}

Key Moments - 3 Insights

Why do we need to build the query JSON before sending it?

The execution_table row 1 shows that the query must be in JSON format so Elasticsearch understands what to search for.

What happens if the query JSON is malformed?

At step 3, Elasticsearch will fail to process the query and return an error instead of results.

How do we know when the search is complete?

Step 6 marks the end after results are received and displayed, meaning the search cycle is finished.

Visual Quiz - 3 Questions

Look at the execution_table, what is the output after Step 1?

A A JSON query matching 'message' with 'error'

B A list of documents

C An error message

D Empty query

💡 Hint

Check the Output/Result column in row 1 of execution_table

At which step does Elasticsearch actually search the index?

A Step 2

B Step 3

C Step 4

D Step 5

💡 Hint

Look at the Action and Output columns in execution_table row 3

If the query JSON was empty, what would change in the execution_table?

A Step 5 would not display anything

B Step 4 would return documents anyway

C Step 1 output would be empty or invalid JSON

D Step 3 would be skipped

💡 Hint

Refer to Step 1 output in execution_table and how query_json variable changes

Concept Snapshot

First search query in Elasticsearch:
- Build a JSON query with 'query' key
- Use 'match' to find text in a field
- Send query JSON to Elasticsearch search API
- Elasticsearch processes and returns matching documents
- Display results to user
- Search ends after results are shown

Full Transcript

This visual execution shows how to perform a first search query in Elasticsearch. We start by building a JSON query that matches the word 'error' in the 'message' field. Then we send this query to Elasticsearch's search API. Elasticsearch processes the query and searches the index for matching documents. It returns the results, which the client displays to the user. The search completes after displaying results. Key moments include understanding why the query must be JSON, what happens if the query is malformed, and how to know when the search finishes.