Why Term query in Elasticsearch? - Purpose & Use Cases

The Big Idea

Discover how a simple query can save you hours of searching through data!

The Scenario

Imagine you have a huge list of documents and you want to find all documents that exactly match a specific word or value, like finding all emails from a certain sender.

The Problem

Manually scanning each document to check if it contains the exact word is slow and tiring. It's easy to miss matches or get wrong results if you don't check carefully.

The Solution

The term query lets Elasticsearch quickly find documents that contain the exact word or value you want. It's like having a super-fast librarian who knows exactly where every word is.

Before vs After

✗ Before

{ "query": { "match": { "sender": "[e-mail]" } } }

✓ After

{ "query": { "term": { "sender": "[e-mail]" } } }

What It Enables

It enables lightning-fast, precise searches for exact values in huge collections of data.

Real Life Example

Finding all customer orders where the status is exactly "shipped" without mixing in orders with similar words like "shipping" or "ship".

Key Takeaways

Manually searching exact matches is slow and error-prone.

Term query finds exact values quickly and accurately.

It makes searching large datasets efficient and reliable.

Practice

1. What does a term query in Elasticsearch do?

easy

A. Analyzes and breaks the search term into tokens

B. Finds exact matches of the given term in the data

C. Finds documents with terms similar to the search term

D. Sorts documents based on the term frequency

Solution

1. Step 1: Understand the purpose of term query

   A term query searches for exact matches without analyzing the search term.

2. Step 2: Compare options with term query behavior

   Only Finds exact matches of the given term in the data describes exact matching, which is the core of term query.

3. Final Answer:

   Finds exact matches of the given term in the data -> Option B

4. Quick Check:

   Term query = exact match [OK]

Hint: Term query matches exactly, no analysis or tokenizing [OK]

Common Mistakes:

• Confusing term query with match query that analyzes text
• Thinking term query sorts results
• Assuming term query finds similar or partial matches

2. Which of the following is the correct syntax for a term query in Elasticsearch?

easy

A. { "terms": { "user": ["kimchy"] } }

B. { "match": { "user": "kimchy" } }

C. { "term_query": { "user": "kimchy" } }

D. { "term": { "user": "kimchy" } }

Solution

1. Step 1: Identify correct term query syntax

   The term query uses the key "term" with a field and exact value.

2. Step 2: Check each option

   { "term": { "user": "kimchy" } } matches the correct syntax. { "match": { "user": "kimchy" } } is a match query, C is invalid, D is a terms query (plural) for multiple values.

3. Final Answer:

   { "term": { "user": "kimchy" } } -> Option D

4. Quick Check:

   Term query syntax = { "term": { "user": "kimchy" } } [OK]

Hint: Term query uses "term" key with field and exact value [OK]

Common Mistakes:

• Using "match" instead of "term" for exact match
• Confusing "term" with "terms" for single value
• Adding extra keys like "term_query" which is invalid

3. Given this Elasticsearch query:

{ "query": { "term": { "status": "active" } } }

What documents will this query return?

medium

A. Documents where the status field exactly equals "active"

B. Documents where the status field contains the word "active" anywhere

C. Documents where the status field starts with "active"

D. Documents where the status field is analyzed and matches "active"

Solution

1. Step 1: Understand term query behavior on field

   The term query matches documents where the field value exactly equals the given term without analysis.

2. Step 2: Analyze each option

   Only Documents where the status field exactly equals "active" correctly describes exact equality. Others describe partial or analyzed matches which term query does not do.

3. Final Answer:

   Documents where the status field exactly equals "active" -> Option A

4. Quick Check:

   Term query = exact field value match [OK]

Hint: Term query matches exact field value only [OK]

Common Mistakes:

• Thinking term query matches partial or analyzed text
• Assuming term query matches prefixes or substrings
• Confusing term query with match query behavior

4. You wrote this term query but it returns no results:

{ "query": { "term": { "user": "Kimchy" } } }

Your data has the user field stored as lowercase "kimchy". What is the problem?

medium

A. Term query is case sensitive and "Kimchy" does not match "kimchy"

B. The term query syntax is incorrect

C. The user field is missing in the documents

D. Term query analyzes the term and changes case

Solution

1. Step 1: Understand term query case sensitivity

   Term query matches exact terms and is case sensitive, so "Kimchy" does not match "kimchy".

2. Step 2: Check other options

   Syntax is correct, field exists, and term query does not analyze or change case.

3. Final Answer:

   Term query is case sensitive and "Kimchy" does not match "kimchy" -> Option A

4. Quick Check:

   Term query = exact case match [OK]

Hint: Term query matches exact case; check letter casing [OK]

Common Mistakes:

• Assuming term query ignores case
• Thinking syntax error causes no results
• Believing term query analyzes or lowercases terms

5. You want to find documents where the tags field contains exactly the term urgent. The tags field is an array of keywords. Which query is best to use?

hard

A. { "match": { "tags": "urgent" } }

B. { "terms": { "tags": "urgent" } }

C. { "term": { "tags": "urgent" } }

D. { "term": { "tags.keyword": "urgent" } }

Solution

1. Step 1: Understand term query on array fields

   Term query matches exact terms in arrays, so it works directly on the tags field.

2. Step 2: Evaluate other options

   Match query analyzes text (not exact). Terms query expects multiple values to match any. Using tags.keyword is unnecessary if tags is keyword type.

3. Final Answer:

   { "term": { "tags": "urgent" } } -> Option C

4. Quick Check:

   Term query matches exact term in array [OK]

Hint: Use term query for exact keyword in array fields [OK]

Common Mistakes:

• Using match query which analyzes and may not match exactly
• Using terms query incorrectly for single term
• Confusing field type and using .keyword unnecessarily