Cross-cluster search in Elasticsearch - Mini Project: Build & Apply

Cross-cluster Search with Elasticsearch

📖 Scenario: You work in a company that has two Elasticsearch clusters: clusterA and clusterB. Each cluster stores product data for different regions. You want to search products across both clusters in one query.

🎯 Goal: Build a cross-cluster search query that searches the products index on both clusterA and clusterB clusters for products with the word "laptop" in their name field.

📋 What You'll Learn

Create a search query targeting the products index on clusterA and clusterB using cross-cluster search syntax.

Add a match query to find documents where the name field contains the word "laptop".

Limit the search results to 5 documents.

Print the final JSON query that can be sent to Elasticsearch.

💡 Why This Matters

🌍 Real World

Companies with data spread across multiple Elasticsearch clusters can search all data in one query using cross-cluster search.

💼 Career

Knowing cross-cluster search helps you build scalable search solutions and work with distributed Elasticsearch setups common in large organizations.

1

Setup the cross-cluster search index pattern

Create a variable called index_pattern and set it to the string "clusterA:products,clusterB:products" which specifies the indices to search across clusters.

Elasticsearch

# Create a variable called index_pattern with the value "clusterA:products,clusterB:products"
# Your code here

Need a hint?

Use the format cluster_name:index_name separated by commas for multiple clusters.

2

Create the match query for the product name

Create a variable called query_body and set it to a dictionary with a query key. The value should be a match query that searches for the word "laptop" in the name field.

Elasticsearch

index_pattern = "clusterA:products,clusterB:products"
# Create a variable called query_body with a match query for name containing "laptop"
# Your code here

Need a hint?

Use the match query inside the query key to find the word "laptop" in the name field.

3

Add a size limit to the query

Add a size key to the query_body dictionary and set its value to 5 to limit the number of results returned.

Elasticsearch

index_pattern = "clusterA:products,clusterB:products"
query_body = {
    "query": {
        "match": {
            "name": "laptop"
        }
    }
}
# Add size: 5 to query_body
# Your code here

Need a hint?

The size key controls how many results Elasticsearch returns.

4

Print the final search query

Print the index_pattern and the query_body variables to show the full cross-cluster search query.

Elasticsearch

index_pattern = "clusterA:products,clusterB:products"
query_body = {
    "query": {
        "match": {
            "name": "laptop"
        }
    },
    "size": 5
}
# Print index_pattern and query_body
# Your code here

Need a hint?

Use print() to display both variables clearly.