Nested queries for nested objects in Elasticsearch - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is a nested query in Elasticsearch?

A nested query allows you to search within nested objects inside a document. It treats nested objects as separate documents for accurate matching.

beginner

Why do we need nested queries instead of normal queries for nested objects?

Normal queries treat nested objects as flat fields, which can cause incorrect matches. Nested queries keep nested objects separate to avoid wrong results.

intermediate

Example of a simple nested query structure?

A nested query includes the path to the nested object and a query inside it. For example:

{ "nested": { "path": "comments", "query": { "match": { "comments.message": "great" } } } }

beginner

What does the 'path' field specify in a nested query?

The 'path' field tells Elasticsearch which nested object to search inside. It points to the nested field name in the document.

intermediate

How does Elasticsearch index nested objects?

Elasticsearch indexes nested objects as separate hidden documents linked to the parent. This allows nested queries to search them independently.

What is the main purpose of a nested query in Elasticsearch?

A To flatten nested objects into strings

B To search inside nested objects separately

C To update nested objects

D To delete nested objects

Nested queries allow searching inside nested objects as if they were separate documents.

Which field is required in a nested query to specify the nested object path?

A path

B field

C nested_path

D object

The 'path' field specifies the nested object to search inside.

What happens if you use a normal query on nested objects without a nested query?

A It may return incorrect matches

B It returns no results

C It deletes nested objects

D It updates nested objects

Normal queries treat nested objects as flat fields, causing wrong matches.

How does Elasticsearch store nested objects internally?

A It does not store nested objects

B As plain text inside the parent document

C As arrays of strings

D As separate hidden documents linked to the parent

Nested objects are indexed as separate hidden documents linked to the parent document.

Which Elasticsearch query type is used inside a nested query to find matches?

A Only term queries

B Only match queries

C Any valid query like match or term

D Only range queries

You can use any valid query inside the nested query to find matches.

Explain how nested queries work in Elasticsearch and why they are important.

Think about how nested objects differ from flat fields and how Elasticsearch handles them.

Describe the structure of a nested query with an example.

Remember the JSON format and how the path points to the nested object.

Practice

1. What is the main purpose of a nested query in Elasticsearch?

easy

A. To aggregate numeric values across documents

B. To search inside objects stored within other objects

C. To perform full-text search on string fields

D. To update documents in bulk

Solution

1. Step 1: Understand nested objects

   Nested objects are objects stored inside other objects in Elasticsearch documents.

2. Step 2: Purpose of nested query

   The nested query lets you search inside these nested objects specifically.

3. Final Answer:

   To search inside objects stored within other objects -> Option B

4. Quick Check:

   Nested query = search inside nested objects [OK]

Hint: Nested queries search inside nested objects only [OK]

Common Mistakes:

• Confusing nested query with full-text search
• Using nested query on non-nested fields
• Thinking nested query updates documents

2. Which of the following is the correct syntax to specify the path in a nested query?

easy

A. "nested": { "path": "comments", "query": { ... } }

B. "nested": { "field": "comments", "query": { ... } }

C. "nested": { "location": "comments", "query": { ... } }

D. "nested": { "object": "comments", "query": { ... } }

Solution

1. Step 1: Identify the correct key for nested path

   The nested query requires the key path to specify the nested object location.

2. Step 2: Match syntax with options

   Only "nested": { "path": "comments", "query": { ... } } uses "path": "comments" correctly.

3. Final Answer:

   "nested": { "path": "comments", "query": { ... } } -> Option A

4. Quick Check:

   Nested query uses "path" key [OK]

Hint: Use "path" key to specify nested object location [OK]

Common Mistakes:

• Using "field" instead of "path"
• Using incorrect keys like "location" or "object"
• Omitting the "path" key entirely

3. Given this nested mapping for comments and this query:

{
  "query": {
    "nested": {
      "path": "comments",
      "query": {
        "match": { "comments.message": "great" }
      }
    }
  }
}

What documents will this query return?

medium

A. Documents without any comments

B. Documents where all comments contain the word "great"

C. Documents with the word "great" anywhere in the document

D. Documents with at least one comment containing the word "great"

Solution

1. Step 1: Understand nested query behavior

   The nested query matches documents where at least one nested object matches the query condition.

2. Step 2: Analyze the match condition

   The query matches if any comment's message contains "great".

3. Final Answer:

   Documents with at least one comment containing the word "great" -> Option D

4. Quick Check:

   Nested query matches any nested object meeting condition [OK]

Hint: Nested query matches if any nested object matches [OK]

Common Mistakes:

• Thinking all nested objects must match
• Confusing nested query with top-level match
• Ignoring the nested path requirement

4. Identify the error in this nested query:

{
  "query": {
    "nested": {
      "path": "comments",
      "query": {
        "match": { "message": "great" }
      }
    }
  }
}

medium

A. The field "message" should be prefixed with the nested path "comments.message"

B. The "path" key is missing

C. The nested query cannot use match queries

D. The query should be inside a bool query

Solution

1. Step 1: Check field names in nested query

   Fields inside nested queries must be fully qualified with the nested path prefix.

2. Step 2: Identify the missing prefix

   The query uses "message" instead of "comments.message" which is incorrect.

3. Final Answer:

   The field "message" should be prefixed with the nested path "comments.message" -> Option A

4. Quick Check:

   Nested query fields need full path prefix [OK]

Hint: Prefix nested fields with path in queries [OK]

Common Mistakes:

• Omitting nested path prefix in field names
• Assuming nested query disallows match queries
• Forgetting to include the "path" key

5. You have documents with a nested field reviews containing rating and comment. You want to find documents with at least one review having rating >= 4 and comment containing "excellent". Which nested query correctly achieves this?

hard

A. { "bool": { "must": [ { "range": { "reviews.rating": { "gte": 4 } } }, { "match": { "reviews.comment": "excellent" } } ] } }

B. { "nested": { "path": "reviews", "query": { "match": { "reviews.comment": "excellent" } } } }

C. { "nested": { "path": "reviews", "query": { "bool": { "must": [ { "range": { "reviews.rating": { "gte": 4 } } }, { "match": { "reviews.comment": "excellent" } } ] } } } }

D. { "nested": { "path": "reviews", "query": { "range": { "reviews.rating": { "gte": 4 } } } } }

Solution

1. Step 1: Combine conditions inside nested query

   Both rating and comment conditions must be inside the nested query to match the same nested object.

2. Step 2: Use bool must to combine conditions

   Use a bool query with must array to require both conditions.

3. Step 3: Verify field names and structure

   { "nested": { "path": "reviews", "query": { "bool": { "must": [ { "range": { "reviews.rating": { "gte": 4 } } }, { "match": { "reviews.comment": "excellent" } } ] } } } } correctly uses "reviews.rating" and "reviews.comment" inside nested query with bool must.

4. Final Answer:

   { "nested": { "path": "reviews", "query": { "bool": { "must": [ { "range": { "reviews.rating": { "gte": 4 } } }, { "match": { "reviews.comment": "excellent" } } ] } } } } -> Option C

5. Quick Check:

   Combine conditions inside nested bool query [OK]

Hint: Use bool must inside nested query to combine conditions [OK]

Common Mistakes:

• Putting conditions outside nested query
• Using only one condition inside nested query
• Not prefixing fields with nested path