Percolate queries (reverse search) in Elasticsearch - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to define a percolator field in the mapping.

Elasticsearch

{
  "mappings": {
    "properties": {
      "query": {
        "type": "[1]"
      }
    }
  }
}

Drag options to blanks, or click blank then click option'

Apercolator

Btext

Ckeyword

Dnested

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'text' or 'keyword' instead of 'percolator' for the query field type.

The percolator field type is used to store queries for reverse search in Elasticsearch.

2fill in blank

medium

Complete the code to register a percolate query document.

Elasticsearch

{
  "query": {
    "match": {
      "message": "[1]"
    }
  }
}

Drag options to blanks, or click blank then click option'

Aerror

Bdebug

Cinfo

Dwarning

Attempts:

3 left

💡 Hint

Common Mistakes

Using a log level not matching the example or the intended query.

The example query matches documents where the 'message' field contains the word 'warning'.

3fill in blank

hard

Fix the error in the percolate query to match documents with 'error' in the 'message' field.

Elasticsearch

{
  "query": {
    "percolate": {
      "field": "query",
      "document": {
        "message": "[1]"
      }
    }
  }
}

Drag options to blanks, or click blank then click option'

Awarn

Berror

Cinfo

Ddebug

Attempts:

3 left

💡 Hint

Common Mistakes

Using a different log level word that does not match registered queries.

The document field 'message' should contain 'error' to match the percolate queries registered for that term.

4fill in blank

hard

Fill both blanks to create a percolate query that matches documents with 'timeout' in the 'message' field and uses the correct percolator field.

Elasticsearch

{
  "query": {
    "percolate": {
      "field": "[1]",
      "document": {
        "message": "[2]"
      }
    }
  }
}

Drag options to blanks, or click blank then click option'

Aquery

Bmessage

Ctimeout

Derror

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'message' as the percolator field name instead of 'query'.

Using the wrong keyword in the document message.

The percolate field is named 'query', and the document message contains 'timeout' to match relevant queries.

5fill in blank

hard

Fill all three blanks to create a percolate query that matches documents with 'failure' in the 'message' field, using the correct percolator field and query type.

Elasticsearch

{
  "query": {
    "[1]": {
      "field": "[2]",
      "document": {
        "message": "[3]"
      }
    }
  }
}

Drag options to blanks, or click blank then click option'

Apercolate

Bquery

Cfailure

Dmatch

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'match' instead of 'percolate' as the query type.

Using the wrong field name for the percolator.

Using a different keyword than 'failure' in the document message.

The query type is 'percolate', the field is 'query', and the document message contains 'failure' to match registered queries.