Saved searches and filters in Elasticsearch - Practice Problems & Coding Challenges

Challenge - 5 Problems

❓ Predict Output

intermediate

What is the output of this saved search query?

Given this Elasticsearch saved search query, what will be the total number of hits returned?

Elasticsearch

{
  "query": {
    "bool": {
      "filter": [
        { "term": { "status": "active" } },
        { "range": { "age": { "gte": 30 } } }
      ]
    }
  }
}

A Returns all documents with status 'active' and age greater or equal to 30

B Returns all documents with status 'active' or age greater or equal to 30

C Returns documents with status 'active' but ignores age filter

D Returns documents with age greater or equal to 30 but ignores status filter

💡 Hint

Remember that filters inside a bool query with filter act as AND conditions.

The bool query with filter applies all conditions as AND. So only documents matching both status: active and age >= 30 are returned.

🧠 Conceptual

intermediate

Which filter type is best for exact matches in saved searches?

When creating saved searches in Elasticsearch, which filter type should you use to match exact values efficiently?

A match filter

B term filter

C range filter

D exists filter

💡 Hint

Exact matches require filters that do not analyze the field.

The term filter matches exact values without analyzing the field, making it efficient for exact matches in saved searches.

🔧 Debug

advanced

Why does this saved search filter not work as expected?

Look at this saved search filter. It should return documents where category is either 'books' or 'electronics'. Why does it return no results?

Elasticsearch

{
  "query": {
    "bool": {
      "filter": {
        "term": { "category": ["books", "electronics"] }
      }
    }
  }
}

A The filter should be inside a must clause, not filter

B The category field is missing in the index mapping

C The term filter does not accept an array of values; it expects a single value

D The query syntax is correct; the problem is with the data

💡 Hint

Check the expected input type for the term filter.

The term filter expects a single value, not an array. To filter multiple values, use terms filter instead.

📝 Syntax

advanced

Identify the syntax error in this saved search filter

Which option contains the correct syntax for a saved search filter that matches documents with status 'pending' and priority greater than 5?

A { "bool": { "filter": [ { "term": { "status": "pending" } }, { "range": { "priority": { "gt": "5" } } } ] } }

B { "bool": { "filter": [ { "term": { "status": "pending" } }, { "range": { "priority": { "gte": 5 } } } ] } }

C { "bool": { "filter": [ { "term": { "status": "pending" } }, { "range": { "priority": { "greater_than": 5 } } } ] } }

D { "bool": { "filter": [ { "term": { "status": "pending" } }, { "range": { "priority": { "gt": 5 } } } ] } }

💡 Hint

Check the correct operator name and value types in range queries.

The correct operator for greater than is gt. Option D uses gt with a numeric value 5, which is correct. Option D uses gte (greater or equal), which is not what the prompt asks. Option D uses invalid operator greater_than. Option D uses a string "5" instead of a number.

🚀 Application

expert

How many filters are applied in this saved search?

Consider this saved search query. How many filters are effectively applied to the documents?

Elasticsearch

{
  "query": {
    "bool": {
      "must": [
        { "term": { "status": "active" } },
        { "range": { "age": { "gte": 25 } } }
      ],
      "filter": [
        { "term": { "verified": true } },
        { "range": { "score": { "gt": 50 } } }
      ]
    }
  }
}

A 4 filters

B 3 filters

C 2 filters

D 5 filters

💡 Hint

Count all conditions inside must and filter arrays.

The must array has 2 conditions and the filter array has 2 conditions, totaling 4 filters applied to the documents.