Term query in Elasticsearch - Time & Space Complexity

Time Complexity: Term query

O(k)

Understanding Time Complexity

When using a term query in Elasticsearch, it's important to know how the search time changes as data grows.

We want to understand how the query's work increases when there are more documents or terms.

Scenario Under Consideration

Analyze the time complexity of the following term query.

GET /my_index/_search
{
  "query": {
    "term": {
      "status": {
        "value": "active"
      }
    }
  }
}
    

This query searches for documents where the field "status" exactly matches "active".

Identify Repeating Operations

Look at what repeats when the query runs.

• Primary operation: Checking the inverted index for the term "active" in the "status" field.
• How many times: Once per query, but the number of documents matching can vary.

How Execution Grows With Input

As the number of documents grows, the time to find the term's postings grows too.

Input Size (n)	Approx. Operations
10	Checking a small list of documents for "active"
100	Checking a larger list, more documents to scan
1000	Checking an even bigger list, more matches to process

Pattern observation: The work grows roughly in proportion to how many documents contain the term.

Final Time Complexity

Time Complexity: O(k)

This means the time depends on the number of documents that have the term, not the total documents in the index.

Common Mistake

[X] Wrong: "The term query checks every document in the index every time."

[OK] Correct: Elasticsearch uses an index that directly points to matching documents, so it only checks those with the term.

Interview Connect

Understanding how term queries scale helps you explain search efficiency clearly and confidently in real projects.

Self-Check

What if we changed the term query to a match query? How would the time complexity change?

Practice

1. What does a term query in Elasticsearch do?

easy

A. Analyzes and breaks the search term into tokens

B. Finds exact matches of the given term in the data

C. Finds documents with terms similar to the search term

D. Sorts documents based on the term frequency

Solution

1. Step 1: Understand the purpose of term query

   A term query searches for exact matches without analyzing the search term.

2. Step 2: Compare options with term query behavior

   Only Finds exact matches of the given term in the data describes exact matching, which is the core of term query.

3. Final Answer:

   Finds exact matches of the given term in the data -> Option B

4. Quick Check:

   Term query = exact match [OK]

Hint: Term query matches exactly, no analysis or tokenizing [OK]

Common Mistakes:

• Confusing term query with match query that analyzes text
• Thinking term query sorts results
• Assuming term query finds similar or partial matches

2. Which of the following is the correct syntax for a term query in Elasticsearch?

easy

A. { "terms": { "user": ["kimchy"] } }

B. { "match": { "user": "kimchy" } }

C. { "term_query": { "user": "kimchy" } }

D. { "term": { "user": "kimchy" } }

Solution

1. Step 1: Identify correct term query syntax

   The term query uses the key "term" with a field and exact value.

2. Step 2: Check each option

   { "term": { "user": "kimchy" } } matches the correct syntax. { "match": { "user": "kimchy" } } is a match query, C is invalid, D is a terms query (plural) for multiple values.

3. Final Answer:

   { "term": { "user": "kimchy" } } -> Option D

4. Quick Check:

   Term query syntax = { "term": { "user": "kimchy" } } [OK]

Hint: Term query uses "term" key with field and exact value [OK]

Common Mistakes:

• Using "match" instead of "term" for exact match
• Confusing "term" with "terms" for single value
• Adding extra keys like "term_query" which is invalid

3. Given this Elasticsearch query:

{ "query": { "term": { "status": "active" } } }

What documents will this query return?

medium

A. Documents where the status field exactly equals "active"

B. Documents where the status field contains the word "active" anywhere

C. Documents where the status field starts with "active"

D. Documents where the status field is analyzed and matches "active"

Solution

1. Step 1: Understand term query behavior on field

   The term query matches documents where the field value exactly equals the given term without analysis.

2. Step 2: Analyze each option

   Only Documents where the status field exactly equals "active" correctly describes exact equality. Others describe partial or analyzed matches which term query does not do.

3. Final Answer:

   Documents where the status field exactly equals "active" -> Option A

4. Quick Check:

   Term query = exact field value match [OK]

Hint: Term query matches exact field value only [OK]

Common Mistakes:

• Thinking term query matches partial or analyzed text
• Assuming term query matches prefixes or substrings
• Confusing term query with match query behavior

4. You wrote this term query but it returns no results:

{ "query": { "term": { "user": "Kimchy" } } }

Your data has the user field stored as lowercase "kimchy". What is the problem?

medium

A. Term query is case sensitive and "Kimchy" does not match "kimchy"

B. The term query syntax is incorrect

C. The user field is missing in the documents

D. Term query analyzes the term and changes case

Solution

1. Step 1: Understand term query case sensitivity

   Term query matches exact terms and is case sensitive, so "Kimchy" does not match "kimchy".

2. Step 2: Check other options

   Syntax is correct, field exists, and term query does not analyze or change case.

3. Final Answer:

   Term query is case sensitive and "Kimchy" does not match "kimchy" -> Option A

4. Quick Check:

   Term query = exact case match [OK]

Hint: Term query matches exact case; check letter casing [OK]

Common Mistakes:

• Assuming term query ignores case
• Thinking syntax error causes no results
• Believing term query analyzes or lowercases terms

5. You want to find documents where the tags field contains exactly the term urgent. The tags field is an array of keywords. Which query is best to use?

hard

A. { "match": { "tags": "urgent" } }

B. { "terms": { "tags": "urgent" } }

C. { "term": { "tags": "urgent" } }

D. { "term": { "tags.keyword": "urgent" } }

Solution

1. Step 1: Understand term query on array fields

   Term query matches exact terms in arrays, so it works directly on the tags field.

2. Step 2: Evaluate other options

   Match query analyzes text (not exact). Terms query expects multiple values to match any. Using tags.keyword is unnecessary if tags is keyword type.

3. Final Answer:

   { "term": { "tags": "urgent" } } -> Option C

4. Quick Check:

   Term query matches exact term in array [OK]

Hint: Use term query for exact keyword in array fields [OK]

Common Mistakes:

• Using match query which analyzes and may not match exactly
• Using terms query incorrectly for single term
• Confusing field type and using .keyword unnecessarily