Elasticsearch - Kibana and Visualization
You want to find documents where the field 'status' is either 404 or 500, but only if the 'extension' field is 'png'. Which query achieves this in Discover?
You want to find documents where the field 'status' is either 404 or 500, but only if the 'extension' field is 'png'. Which query achieves this in Discover?
hard🚀 Application Q8 of Q15
Step-by-Step Solution
Solution:
Step 1: Group OR conditions for status
Use parentheses to group status:404 OR status:500 so either matches.Step 2: Combine with extension condition using AND
extension:png AND (status:404 OR status:500) ensures extension is png and status is one of the two.Final Answer:
extension:png AND (status:404 OR status:500) -> Option DQuick Check:
Use parentheses to group OR, AND combines groups [OK]
Quick Trick: Group OR conditions with parentheses before AND [OK]
Common Mistakes:
MISTAKES- Misplacing parentheses causing wrong logic
- Using OR without grouping
- Writing ambiguous queries without parentheses
Master "Kibana and Visualization" in Elasticsearch
Want More Practice?
15+ quiz questions · All difficulty levels · Free
Free Signup - Practice All QuestionsMore Elasticsearch Quizzes