[Solved] You need to reindex documents from logs_2023 to logs_archive but only include documents where the level field equals error. Which request correctly applies this filter? | Elasticsearch

Elasticsearch - Index Management

You need to reindex documents from logs_2023 to logs_archive but only include documents where the level field equals error. Which request correctly applies this filter?

A{ "source": { "index": "logs_2023", "query": { "term": { "level": "error" } } }, "dest": { "index": "logs_archive" } }

B{ "source": { "index": "logs_2023" }, "dest": { "index": "logs_archive" }, "query": { "term": { "level": "error" } } }

C{ "source": { "index": "logs_2023" }, "dest": { "index": "logs_archive" }, "filter": { "term": { "level": "error" } } }

D{ "source": { "index": "logs_2023" }, "dest": { "index": "logs_archive" }, "script": { "source": "if (ctx._source.level != 'error') { ctx.op = 'noop' }" } }

Step-by-Step Solution

Solution:

Step 1: Understand filtering in reindex
The query filter must be inside the source object to filter documents during reindex.
Step 2: Evaluate options
{ "source": { "index": "logs_2023", "query": { "term": { "level": "error" } } }, "dest": { "index": "logs_archive" } } correctly places the query inside source. { "source": { "index": "logs_2023" }, "dest": { "index": "logs_archive" }, "query": { "term": { "level": "error" } } } places query outside, which is invalid. { "source": { "index": "logs_2023" }, "dest": { "index": "logs_archive" }, "filter": { "term": { "level": "error" } } } uses filter which is not valid at this level. { "source": { "index": "logs_2023" }, "dest": { "index": "logs_archive" }, "script": { "source": "if (ctx._source.level != 'error') { ctx.op = 'noop' }" } } uses a script to skip docs but is less efficient.
Final Answer:
Option A -> Option A
Quick Check:
Query filter must be inside source [OK]

Quick Trick: Put query inside source to filter documents [OK]

Common Mistakes:

MISTAKES

Placing query outside source object
Using 'filter' instead of 'query'
Using scripts instead of query for filtering

Master "Index Management" in Elasticsearch

9 interactive learning modes - each teaches the same concept differently

Learn Why Deep Visual Try Challenge Project Recall Time

More Elasticsearch Quizzes

You need to reindex documents from logs_2023 to logs_archive but only include documents where the level field equals error. Which request correctly applies this filter?

Step 1: Understand filtering in reindex

Step 2: Evaluate options

Final Answer:

Quick Check:

Want More Practice?