Skip to content

Latest commit

 

History

History
64 lines (45 loc) · 3.27 KB

search.rst

File metadata and controls

64 lines (45 loc) · 3.27 KB

search

Table of contents

Using search command to retrieve document from the index. search command could be only used as the first command in the PPL query.

search source=[<remote-cluster>:]<index> [boolean-expression]

  • search: search keywords, which could be ignore.
  • index: mandatory. search command must specify which index to query from. The index name can be prefixed by "<cluster name>:" for cross-cluster search.
  • bool-expression: optional. any expression which could be evaluated to boolean value.

Cross-cluster search lets any node in a cluster execute search requests against other clusters. Refer to Cross-Cluster Search for configuration.

The example show fetch all the document from accounts index.

PPL query:

os> source=accounts;
fetched rows / total rows = 4/4
+----------------+-----------+----------------------+---------+--------+--------+----------+-------+-----+-----------------------+----------+
| account_number | firstname | address              | balance | gender | city   | employer | state | age | email                 | lastname |
|----------------+-----------+----------------------+---------+--------+--------+----------+-------+-----+-----------------------+----------|
| 1              | Amber     | 880 Holmes Lane      | 39225   | M      | Brogan | Pyrami   | IL    | 32  | amberduke@pyrami.com  | Duke     |
| 6              | Hattie    | 671 Bristol Street   | 5686    | M      | Dante  | Netagy   | TN    | 36  | hattiebond@netagy.com | Bond     |
| 13             | Nanette   | 789 Madison Street   | 32838   | F      | Nogal  | Quility  | VA    | 28  | null                  | Bates    |
| 18             | Dale      | 467 Hutchinson Court | 4180    | M      | Orick  | null     | MD    | 33  | daleadams@boink.com   | Adams    |
+----------------+-----------+----------------------+---------+--------+--------+----------+-------+-----+-----------------------+----------+

The example show fetch all the document from accounts index with .

PPL query:

os> source=accounts account_number=1 or gender="F";
fetched rows / total rows = 2/2
+----------------+-----------+--------------------+---------+--------+--------+----------+-------+-----+----------------------+----------+
| account_number | firstname | address            | balance | gender | city   | employer | state | age | email                | lastname |
|----------------+-----------+--------------------+---------+--------+--------+----------+-------+-----+----------------------+----------|
| 1              | Amber     | 880 Holmes Lane    | 39225   | M      | Brogan | Pyrami   | IL    | 32  | amberduke@pyrami.com | Duke     |
| 13             | Nanette   | 789 Madison Street | 32838   | F      | Nogal  | Quility  | VA    | 28  | null                 | Bates    |
+----------------+-----------+--------------------+---------+--------+--------+----------+-------+-----+----------------------+----------+